$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft File: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft (raw, json) Hash identifier: 92RSZr3OCTKxYwCqvAkGrlWoJ8hbsDK/oa47mzNjLyk= Subject key identifier: 97:27:A3:E5:FC:58:9B:F9:7A:ED:F4:03:76:6B:8F:B6:9E:53:BA:2F Authority key identifier: C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 Certificate issuer: /CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Certificate serial: 418B3FABDA4231D1573F5C466CCC0B2A55BCAB85 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft Manifest number: 05 Signing time: Sun 12 Apr 2026 16:09:16 +0000 Manifest this update: Sun 12 Apr 2026 16:04:16 +0000 Manifest next update: Mon 13 Apr 2026 20:04:16 +0000 Files and hashes: 1: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl (hash: XXSMVICrqNK6wQR03S1oUZICliEoAxg+irbyQBjBeQY=) 2: 3130332e3133352e3139362e302f32322d3232203d3e20313337373435.roa (hash: nQ1f3FMKWA1GCdf1PRfEoceld3pBu9R9MjWCiBeIYHo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 20:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8b:3f:ab:da:42:31:d1:57:3f:5c:46:6c:cc:0b:2a:55:bc:ab:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Validity Not Before: Apr 12 16:04:16 2026 GMT Not After : Apr 13 20:04:16 2026 GMT Subject: CN=9727A3E5FC589BF97AEDF403766B8FB69E53BA2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:b9:89:27:b9:7c:4b:79:1a:61:40:b2:d1: 35:30:24:7b:7c:4f:6a:bf:1c:25:20:9a:db:c9:3d: cc:3a:80:70:d8:f5:31:4d:06:b6:90:74:dc:65:bc: cf:2a:a8:a6:dc:a5:bc:b0:53:0a:71:4e:5e:e8:e8: 57:9f:f0:82:67:da:26:5e:93:03:91:55:25:62:54: 92:9c:3a:eb:02:77:20:7a:41:5c:61:02:c2:0f:2e: 1b:e4:55:fe:50:33:e6:34:80:e8:3d:5e:59:ca:ec: 12:06:00:c5:bf:ed:1a:fe:ec:69:2b:86:46:a8:62: 0f:25:a6:e8:eb:c7:0e:0f:c2:79:bd:80:d1:7a:c8: fe:93:d7:83:5d:39:5e:88:55:8b:71:be:e0:1b:82: db:86:56:bf:c0:28:32:ae:44:e8:2b:65:dc:2d:78: 93:af:5f:e3:9d:26:47:fb:cc:82:94:0c:fe:1e:8e: 4a:78:87:bc:c5:57:b9:1b:81:3d:11:9c:f6:56:74: 97:c4:3f:38:07:d0:c0:25:05:d7:cc:21:40:33:64: 05:41:a9:18:fe:83:da:d0:10:6d:62:19:b5:ab:c6: ff:db:57:e4:ec:5d:26:62:d2:b7:a2:ad:6e:a5:0f: c4:f8:57:e4:51:63:f3:76:bb:9d:98:1e:dd:9e:ee: 0a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:27:A3:E5:FC:58:9B:F9:7A:ED:F4:03:76:6B:8F:B6:9E:53:BA:2F X509v3 Authority Key Identifier: keyid:C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:4d:c8:8f:24:91:66:0d:7e:f4:b5:95:5a:15:64:26:f7:19: 93:8d:78:62:1e:46:76:92:a1:dc:80:0e:98:2b:9c:76:76:29: 0e:78:22:41:82:f6:e0:51:d2:fe:b2:25:f9:9a:bc:c7:1d:40: ae:43:b2:52:69:54:5e:44:8f:5c:a4:92:53:20:cd:5d:a9:e7: 25:3e:d0:4f:5e:69:da:26:5d:27:bc:81:ed:9a:66:c9:f0:48: 5b:b2:38:aa:7e:c3:aa:14:af:e0:3c:1f:3f:85:cf:c3:c8:6b: eb:66:09:a1:a7:21:fe:77:db:2f:dd:22:74:84:5e:b4:4d:73: 31:68:3d:b7:76:68:29:86:c1:8d:d3:55:06:48:b5:ca:55:c4: 81:b6:65:ec:cf:5c:d0:de:13:d0:6a:8e:2b:3e:27:b7:5f:2f: 2b:5d:ee:7f:41:10:dd:4a:3e:cb:f9:61:47:84:48:ee:ae:ba: c3:4d:87:1c:d6:b8:59:e6:c1:d6:65:f6:52:4e:4a:96:63:c5: 5a:76:70:25:cd:8c:b5:86:2e:8f:0f:2e:2a:c3:58:09:af:ab: 52:8c:76:0d:70:b8:b0:fa:42:ad:be:23:cb:11:ab:f1:b6:1e: 16:a2:a2:83:ed:46:eb:bc:71:d1:51:ba:f3:1d:2b:42:e2:07: 96:fd:88:22 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQYs/q9pCMdFXP1xGbMwLKlW8q4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYw MUI1RTFCMjAeFw0yNjA0MTIxNjA0MTZaFw0yNjA0MTMyMDA0MTZaMDMxMTAvBgNV BAMTKDk3MjdBM0U1RkM1ODlCRjk3QUVERjQwMzc2NkI4RkI2OUU1M0JBMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1s7mJJ7l8S3kaYUCy0TUwJHt8 T2q/HCUgmtvJPcw6gHDY9TFNBraQdNxlvM8qqKbcpbywUwpxTl7o6Fef8IJn2iZe kwORVSViVJKcOusCdyB6QVxhAsIPLhvkVf5QM+Y0gOg9XlnK7BIGAMW/7Rr+7Gkr hkaoYg8lpujrxw4Pwnm9gNF6yP6T14NdOV6IVYtxvuAbgtuGVr/AKDKuROgrZdwt eJOvX+OdJkf7zIKUDP4ejkp4h7zFV7kbgT0RnPZWdJfEPzgH0MAlBdfMIUAzZAVB qRj+g9rQEG1iGbWrxv/bV+TsXSZi0reirW6lD8T4V+RRY/N2u52YHt2e7gppAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlyej5fxYm/l67fQDdmuPtp5Tui8wHwYDVR0j BBgwFoAUxFIkP6HPtPlz4rOMlVAlvwG14bIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5MDI0NzAxNzIwMTY2NS8wL0M0NTIyNDNGQTFDRkI0Rjk3M0UyQjM4Qzk1NTAy NUJGMDFCNUUxQjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYwMUI1RTFCMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTAyNDcwMTcyMDE2NjUvMC9DNDUyMjQzRkExQ0ZC NEY5NzNFMkIzOEM5NTUwMjVCRjAxQjVFMUIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlk3IjySRZg1+ 9LWVWhVkJvcZk414Yh5GdpKh3IAOmCucdnYpDngiQYL24FHS/rIl+Zq8xx1ArkOy UmlUXkSPXKSSUyDNXannJT7QT15p2iZdJ7yB7ZpmyfBIW7I4qn7DqhSv4DwfP4XP w8hr62YJoach/nfbL90idIRetE1zMWg9t3ZoKYbBjdNVBki1ylXEgbZl7M9c0N4T 0GqOKz4nt18vK13uf0EQ3Uo+y/lhR4RI7q66w02HHNa4WebB1mX2Uk5KlmPFWnZw Jc2MtYYujw8uKsNYCa+rUox2DXC4sPpCrb4jyxGr8bYeFqKig+1G67xx0VG68x0r QuIHlv2IIg== -----END CERTIFICATE-----Generated at Mon Apr 13 11:00:40 2026 by rpki-client