$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft File: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft (raw, json) Hash identifier: oSz9rD7I5cveHsae7k9TxprLC+jL8X5CQZZTIuZXmMU= Subject key identifier: 8B:36:21:4D:17:7B:C6:01:52:43:07:BE:C2:54:3D:AA:35:8A:88:DC Authority key identifier: C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 Certificate issuer: /CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Certificate serial: 4F89622B9E66C9B45BDE072E9C591C7D7FD8D77C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft Manifest number: 81 Signing time: Tue 14 Jul 2026 12:31:16 +0000 Manifest this update: Tue 14 Jul 2026 12:26:16 +0000 Manifest next update: Wed 15 Jul 2026 15:48:16 +0000 Files and hashes: 1: 3130332e3133352e3139362e302f32322d3232203d3e20313337373435.roa (hash: nQ1f3FMKWA1GCdf1PRfEoceld3pBu9R9MjWCiBeIYHo=) 2: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl (hash: pDdITAyLJlxJ7w+vdtwRLekbs7ZHaS10k7g1nK6dsxY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 15:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:89:62:2b:9e:66:c9:b4:5b:de:07:2e:9c:59:1c:7d:7f:d8:d7:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Validity Not Before: Jul 14 12:26:16 2026 GMT Not After : Jul 15 15:48:16 2026 GMT Subject: CN=8B36214D177BC601524307BEC2543DAA358A88DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:d2:1b:eb:00:68:f7:90:ce:1f:ca:bd:43: bc:05:3d:3c:5e:8e:de:05:1c:3d:78:2d:da:4b:f3: 09:08:d3:86:88:98:69:c6:72:0f:ec:7e:34:54:59: 8b:63:43:e2:19:6e:92:e2:57:0a:ca:52:c4:5f:4f: c0:9e:58:be:97:f0:77:ef:18:47:dc:a2:74:2b:f6: 96:48:10:47:c2:1f:48:b6:b8:d4:33:b5:22:38:e3: 59:b5:41:af:1f:ea:b2:98:8d:2d:35:26:a8:4e:04: 8c:57:51:ca:78:8b:70:7e:ee:8c:8e:e8:5f:5e:8a: bf:40:cb:94:63:98:4b:04:80:ec:f6:07:36:ed:6a: de:c9:0e:8c:00:b3:f2:6f:fd:b8:ed:98:0d:7b:64: e6:2e:f0:48:7d:50:0a:56:15:43:8d:59:ca:ca:ae: 18:37:2e:a6:ed:de:f2:5b:ba:3b:a4:6f:d6:f2:bd: 72:93:c1:4f:52:8c:ea:44:3e:40:ab:6d:1c:4e:53: 8f:06:8f:24:2e:2e:a9:b2:79:e8:c5:d7:94:70:93: ac:f1:84:d1:e2:3b:72:02:db:45:de:e4:9a:68:b1: 4e:cd:77:cd:77:3c:d9:2c:c1:be:94:25:6a:17:5d: 67:cc:d3:d0:75:77:3c:78:4a:8a:c6:3d:94:45:da: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:36:21:4D:17:7B:C6:01:52:43:07:BE:C2:54:3D:AA:35:8A:88:DC X509v3 Authority Key Identifier: keyid:C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:9e:37:2a:1b:8c:a7:73:d1:5b:fe:ca:47:10:ed:d3:75:b1: 2d:54:37:85:53:bf:ed:51:2a:38:32:c0:a7:cb:9e:3c:4f:fb: f6:ec:ea:ef:7c:4a:28:fb:70:04:05:4a:64:0e:2c:74:3b:9e: 0d:ae:fb:73:2a:b8:94:ab:d7:46:d2:08:0a:ab:9b:3c:44:9d: 43:04:77:6b:d3:bd:5a:73:08:7c:c5:ef:df:58:9b:dd:33:a0: ae:fc:34:6c:19:dc:b6:3f:63:3e:ac:a0:82:ac:b0:4d:5c:ee: a8:29:5a:3f:37:d6:3e:63:f6:cd:17:16:b5:c6:12:39:b2:a4: 48:3e:78:5c:72:32:96:c1:a9:0c:b0:08:d6:12:e2:2e:0d:a7: 54:3b:09:f8:a5:8c:1c:b6:a3:3e:83:2f:9c:a3:7e:f1:81:21: b0:66:e5:62:e4:6d:98:f3:6d:01:a3:d0:70:3e:62:5b:6e:cd: 24:ba:83:44:7a:4d:6a:94:9d:32:e6:da:6c:9b:b7:72:e5:5c: 75:32:24:4d:82:8d:d2:1f:d1:5d:d3:23:7a:76:6d:5b:e0:bd: 05:77:79:70:e6:90:57:eb:45:fe:e7:1c:a7:ff:0f:64:f1:00: 82:75:9e:01:99:ac:35:59:f6:72:4f:0d:7e:b9:78:c0:2d:ae: 54:c1:dd:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT4liK55mybRb3gcunFkcfX/Y13wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYw MUI1RTFCMjAeFw0yNjA3MTQxMjI2MTZaFw0yNjA3MTUxNTQ4MTZaMDMxMTAvBgNV BAMTKDhCMzYyMTREMTc3QkM2MDE1MjQzMDdCRUMyNTQzREFBMzU4QTg4REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xNIb6wBo95DOH8q9Q7wFPTxe jt4FHD14LdpL8wkI04aImGnGcg/sfjRUWYtjQ+IZbpLiVwrKUsRfT8CeWL6X8Hfv GEfconQr9pZIEEfCH0i2uNQztSI441m1Qa8f6rKYjS01JqhOBIxXUcp4i3B+7oyO 6F9eir9Ay5RjmEsEgOz2Bzbtat7JDowAs/Jv/bjtmA17ZOYu8Eh9UApWFUONWcrK rhg3Lqbt3vJbujukb9byvXKTwU9SjOpEPkCrbRxOU48GjyQuLqmyeejF15Rwk6zx hNHiO3IC20Xe5JposU7Nd813PNkswb6UJWoXXWfM09B1dzx4SorGPZRF2uTDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUizYhTRd7xgFSQwe+wlQ9qjWKiNwwHwYDVR0j BBgwFoAUxFIkP6HPtPlz4rOMlVAlvwG14bIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5MDI0NzAxNzIwMTY2NS8wL0M0NTIyNDNGQTFDRkI0Rjk3M0UyQjM4Qzk1NTAy NUJGMDFCNUUxQjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYwMUI1RTFCMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTAyNDcwMTcyMDE2NjUvMC9DNDUyMjQzRkExQ0ZC NEY5NzNFMkIzOEM5NTUwMjVCRjAxQjVFMUIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJ43KhuMp3PR W/7KRxDt03WxLVQ3hVO/7VEqODLAp8uePE/79uzq73xKKPtwBAVKZA4sdDueDa77 cyq4lKvXRtIICqubPESdQwR3a9O9WnMIfMXv31ib3TOgrvw0bBnctj9jPqyggqyw TVzuqClaPzfWPmP2zRcWtcYSObKkSD54XHIylsGpDLAI1hLiLg2nVDsJ+KWMHLaj PoMvnKN+8YEhsGblYuRtmPNtAaPQcD5iW27NJLqDRHpNapSdMubabJu3cuVcdTIk TYKN0h/RXdMjenZtW+C9BXd5cOaQV+tF/uccp/8PZPEAgnWeAZmsNVn2ck8Nfrl4 wC2uVMHdMQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:08:00 2026 by rpki-client