$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft File: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft (raw, json) Hash identifier: SqrprwVMA+tjanwqvm304b2S8QbI0tM9Dkk3pw0Lu2U= Subject key identifier: FD:7D:C0:72:44:ED:FD:B1:1B:CE:FD:D7:CA:7D:88:1F:05:D3:FC:6C Authority key identifier: C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 Certificate issuer: /CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Certificate serial: 017C05A8034361DC0246249543B7BD8B8B8B0525 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft Manifest number: BD Signing time: Fri 28 Aug 2026 06:48:21 +0000 Manifest this update: Fri 28 Aug 2026 06:43:21 +0000 Manifest next update: Mon 31 Aug 2026 16:05:21 +0000 Files and hashes: 1: 3130332e3133352e3139362e302f32322d3232203d3e20313337373435.roa (hash: nQ1f3FMKWA1GCdf1PRfEoceld3pBu9R9MjWCiBeIYHo=) 2: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl (hash: /z8ZdarvlkBNIsmAxudhWsfhr0C2x9Lf/ipju6VQjE4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:7c:05:a8:03:43:61:dc:02:46:24:95:43:b7:bd:8b:8b:8b:05:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Validity Not Before: Aug 28 06:43:21 2026 GMT Not After : Aug 31 16:05:21 2026 GMT Subject: CN=FD7DC07244EDFDB11BCEFDD7CA7D881F05D3FC6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:80:f8:25:30:40:b7:d0:39:3d:c6:aa:e9:de: a0:d5:ff:45:d3:a0:71:2a:58:4c:b1:79:f7:bc:9a: 72:9b:de:43:db:41:66:bb:6f:c2:d6:ba:d7:fa:1c: ef:37:42:40:dd:e6:c3:48:fb:22:eb:ce:84:ee:a6: 55:54:81:a7:a5:4f:0d:bd:fe:eb:7f:72:1d:c3:e1: f8:fa:f2:9d:89:67:d2:d0:b9:c4:3e:0e:a9:c0:26: 94:13:dd:8e:88:98:b2:2e:a4:43:f5:ee:c5:5d:43: 29:1d:5a:09:33:34:88:1a:53:8f:6c:09:7a:ce:60: 3c:a0:53:6c:9b:e1:19:5d:b8:6f:c4:9c:98:de:d1: c4:bd:aa:31:fc:73:a6:32:f8:e4:fe:4d:ad:a3:a7: 95:b6:64:4d:27:99:c6:2c:d0:d9:66:f0:86:8f:fc: b1:3f:8f:27:da:a9:76:12:15:16:ec:dd:b1:17:24: bd:23:08:e5:72:da:84:d9:2e:e3:1c:a9:d6:6e:d5: 58:0e:a9:9c:ef:fb:88:24:8c:91:19:99:78:9f:59: e6:8c:4d:b8:31:07:39:37:d5:03:2f:45:02:5c:a9: 9a:fe:77:db:b7:9a:12:f3:a3:90:b1:1e:9a:39:4c: 3c:b4:31:f8:d2:a2:c6:bf:30:89:15:a3:02:15:03: fa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7D:C0:72:44:ED:FD:B1:1B:CE:FD:D7:CA:7D:88:1F:05:D3:FC:6C X509v3 Authority Key Identifier: keyid:C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a9:3e:15:fd:e7:5d:e1:6e:64:d2:d8:7c:93:7b:cf:82:d1: d6:d8:58:bd:d3:29:d8:ff:c7:24:89:1f:c7:f4:be:3f:13:60: 7e:a1:88:80:fd:2f:76:ab:b2:1c:03:e4:60:4f:34:65:c8:04: 66:13:0e:0c:24:0d:f5:8e:e3:ba:09:9e:cb:02:29:43:31:72: e3:dc:89:de:fa:33:ce:1b:71:65:70:95:14:68:87:ed:90:2f: 56:96:e2:67:0a:05:af:91:74:75:60:9d:3d:0a:51:6c:a6:cb: 7c:a6:b1:33:c1:ce:2f:27:56:4c:0d:db:b2:78:49:04:e1:42: 1b:09:cb:ed:13:5e:45:d4:6c:18:4d:d8:1c:dd:fc:0f:6c:e7: 73:70:ca:4c:1a:35:63:c1:dc:3a:a2:83:36:bd:c2:24:c0:45: ba:b2:53:c6:8e:66:8d:7f:51:10:24:a2:62:9c:3e:2a:4d:63: 92:b6:18:3b:48:a8:92:c6:2a:48:4f:d0:eb:59:cb:57:b0:9c: f4:18:84:2c:7b:73:58:8e:a8:aa:a5:ee:48:30:c1:41:97:40: e3:23:3d:43:79:5e:75:cb:c6:46:49:44:54:35:aa:d0:86:ae: 6b:1c:da:22:6a:9c:0e:81:9a:0f:7e:ab:5c:eb:37:b6:6c:d4: ce:f7:e0:c9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAXwFqANDYdwCRiSVQ7e9i4uLBSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYw MUI1RTFCMjAeFw0yNjA4MjgwNjQzMjFaFw0yNjA4MzExNjA1MjFaMDMxMTAvBgNV BAMTKEZEN0RDMDcyNDRFREZEQjExQkNFRkREN0NBN0Q4ODFGMDVEM0ZDNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRgPglMEC30Dk9xqrp3qDV/0XT oHEqWEyxefe8mnKb3kPbQWa7b8LWutf6HO83QkDd5sNI+yLrzoTuplVUgaelTw29 /ut/ch3D4fj68p2JZ9LQucQ+DqnAJpQT3Y6ImLIupEP17sVdQykdWgkzNIgaU49s CXrOYDygU2yb4RlduG/EnJje0cS9qjH8c6Yy+OT+Ta2jp5W2ZE0nmcYs0Nlm8IaP /LE/jyfaqXYSFRbs3bEXJL0jCOVy2oTZLuMcqdZu1VgOqZzv+4gkjJEZmXifWeaM TbgxBzk31QMvRQJcqZr+d9u3mhLzo5CxHpo5TDy0MfjSosa/MIkVowIVA/rhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/X3AckTt/bEbzv3Xyn2IHwXT/GwwHwYDVR0j BBgwFoAUxFIkP6HPtPlz4rOMlVAlvwG14bIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5MDI0NzAxNzIwMTY2NS8wL0M0NTIyNDNGQTFDRkI0Rjk3M0UyQjM4Qzk1NTAy NUJGMDFCNUUxQjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYwMUI1RTFCMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTAyNDcwMTcyMDE2NjUvMC9DNDUyMjQzRkExQ0ZC NEY5NzNFMkIzOEM5NTUwMjVCRjAxQjVFMUIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKk+Ff3nXeFu ZNLYfJN7z4LR1thYvdMp2P/HJIkfx/S+PxNgfqGIgP0vdquyHAPkYE80ZcgEZhMO DCQN9Y7jugmeywIpQzFy49yJ3vozzhtxZXCVFGiH7ZAvVpbiZwoFr5F0dWCdPQpR bKbLfKaxM8HOLydWTA3bsnhJBOFCGwnL7RNeRdRsGE3YHN38D2znc3DKTBo1Y8Hc OqKDNr3CJMBFurJTxo5mjX9RECSiYpw+Kk1jkrYYO0ioksYqSE/Q61nLV7Cc9BiE LHtzWI6oqqXuSDDBQZdA4yM9Q3ledcvGRklEVDWq0IauaxzaImqcDoGaD36rXOs3 tmzUzvfgyQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:06:54 2026 by rpki-client