$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft File: 450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft (raw, json) Hash identifier: asMRPx4vPnufSDJCqJ4/Gtxd5xkBPB2bHXMYn16TiE8= Subject key identifier: 82:9D:75:7D:EE:1C:4E:AF:EA:AA:7B:79:BF:9A:99:96:B2:5E:05:63 Authority key identifier: 45:0A:C0:E4:CD:E3:18:16:82:FF:27:C2:52:1C:C4:BF:72:90:C0:D7 Certificate issuer: /CN=450AC0E4CDE3181682FF27C2521CC4BF7290C0D7 Certificate serial: 6D0205A7E8EBBDB3F6CB32888751CAB5F5A74BCA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft Manifest number: 9F Signing time: Fri 28 Aug 2026 06:48:17 +0000 Manifest this update: Fri 28 Aug 2026 06:43:17 +0000 Manifest next update: Mon 31 Aug 2026 11:53:17 +0000 Files and hashes: 1: 3130332e3232382e3230342e302f32332d3233203d3e2034383038.roa (hash: 0Mhtj21hVbeX9XUR/Q2Gx0H8h7HJJx0VMMT+V2reTHc=) 2: 450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl (hash: i1oODM+M+LW93Tcxgf2kR+QjSsBx6cOPP4xvp4rID4A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:02:05:a7:e8:eb:bd:b3:f6:cb:32:88:87:51:ca:b5:f5:a7:4b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=450AC0E4CDE3181682FF27C2521CC4BF7290C0D7 Validity Not Before: Aug 28 06:43:17 2026 GMT Not After : Aug 31 11:53:17 2026 GMT Subject: CN=829D757DEE1C4EAFEAAA7B79BF9A9996B25E0563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7b:ab:9e:31:6b:3c:f6:eb:35:71:6e:3f:f5: 30:c3:b9:65:a1:6d:5f:84:9f:25:8f:74:c1:f9:81: d6:58:ec:fc:f9:70:30:04:ef:d2:b3:45:f9:83:71: c7:f1:d4:c6:c5:e0:51:6c:71:36:e1:e2:e7:aa:64: 4a:01:60:64:d9:dd:01:ba:a2:df:ef:b5:43:2e:87: f5:af:39:3e:c0:2d:91:46:91:dc:a4:1b:dd:b0:19: 3c:be:28:2a:61:41:7b:16:17:9d:db:41:ba:2c:25: 0e:6d:fd:a2:f3:70:c6:6d:42:72:ce:ca:d7:80:a3: 0b:86:77:2e:87:e7:10:bd:84:16:23:2d:08:44:e7: f2:c0:43:1d:02:e0:af:f9:bb:0b:48:2e:60:e7:cd: 43:4b:a8:e1:36:ff:19:2c:1a:32:16:2d:14:36:72: 0a:c4:03:2b:f8:d8:4f:12:25:08:ff:81:35:65:d8: a3:db:d0:51:bc:c9:c8:79:d2:22:49:d2:85:c1:18: cc:c6:b8:ab:d7:f3:da:af:83:48:8e:80:97:3a:1d: 52:f3:ff:e5:38:66:13:f3:a7:23:f8:b8:c1:f3:8e: 30:f1:65:96:34:6e:b8:88:8b:7d:9d:88:50:4a:c4: 61:e8:3f:f6:90:ae:a2:d7:34:c2:8a:0c:e0:c9:31: 8f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9D:75:7D:EE:1C:4E:AF:EA:AA:7B:79:BF:9A:99:96:B2:5E:05:63 X509v3 Authority Key Identifier: keyid:45:0A:C0:E4:CD:E3:18:16:82:FF:27:C2:52:1C:C4:BF:72:90:C0:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:30:33:02:ad:36:57:91:d2:f4:5e:f6:25:f6:8f:45:b7:3c: 38:6a:7b:b8:09:5e:11:0d:e8:e8:eb:bd:97:df:63:9f:a1:7e: b6:61:1f:63:9f:f5:f9:9d:d9:71:d3:7b:ad:b7:22:2b:b4:36: 44:9a:f7:7a:9e:20:95:65:ac:1b:e2:f3:ec:80:0f:66:a8:ef: 05:26:ee:f1:d4:33:da:2b:bf:6b:84:a0:94:ec:22:b9:d9:0f: ce:85:f8:70:f1:fc:0a:bd:8f:21:f3:ad:50:0b:48:a0:8e:f1: 9c:30:68:9d:7f:e5:26:fa:c9:a3:f8:23:65:3a:5c:80:69:35: 03:58:fd:d6:1d:7c:09:39:69:75:59:00:cd:90:15:21:8d:dd: 78:25:6a:87:29:af:5b:e4:d4:c4:17:07:3c:4d:d1:53:71:f6: 13:20:d8:55:af:32:50:5c:e6:95:7d:b8:17:7b:a1:8e:e0:03: ea:64:08:37:8f:20:62:0c:e9:7a:27:02:1f:be:29:5f:86:86: bf:97:15:28:51:dc:6e:ef:64:9e:be:aa:fc:66:8b:40:97:1e: f4:36:49:f8:84:92:21:43:2c:a9:b8:3c:a8:c7:f7:b0:47:25: 52:65:10:93:db:93:69:fb:2c:87:9d:a0:3d:61:f5:2f:60:29: f9:b8:cc:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbQIFp+jrvbP2yzKIh1HKtfWnS8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwQUMwRTRDREUzMTgxNjgyRkYyN0MyNTIxQ0M0QkY3 MjkwQzBENzAeFw0yNjA4MjgwNjQzMTdaFw0yNjA4MzExMTUzMTdaMDMxMTAvBgNV BAMTKDgyOUQ3NTdERUUxQzRFQUZFQUFBN0I3OUJGOUE5OTk2QjI1RTA1NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9e6ueMWs89us1cW4/9TDDuWWh bV+EnyWPdMH5gdZY7Pz5cDAE79KzRfmDccfx1MbF4FFscTbh4ueqZEoBYGTZ3QG6 ot/vtUMuh/WvOT7ALZFGkdykG92wGTy+KCphQXsWF53bQbosJQ5t/aLzcMZtQnLO yteAowuGdy6H5xC9hBYjLQhE5/LAQx0C4K/5uwtILmDnzUNLqOE2/xksGjIWLRQ2 cgrEAyv42E8SJQj/gTVl2KPb0FG8ych50iJJ0oXBGMzGuKvX89qvg0iOgJc6HVLz /+U4ZhPzpyP4uMHzjjDxZZY0briIi32diFBKxGHoP/aQrqLXNMKKDODJMY9fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgp11fe4cTq/qqnt5v5qZlrJeBWMwHwYDVR0j BBgwFoAURQrA5M3jGBaC/yfCUhzEv3KQwNcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Mjk5MTY5NzU4MDY1NDYwMS8wLzQ1MEFDMEU0Q0RFMzE4MTY4MkZGMjdDMjUyMUND NEJGNzI5MEMwRDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDUwQUMwRTRDREUzMTgxNjgyRkYyN0MyNTIxQ0M0QkY3MjkwQzBENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDI5OTE2OTc1ODA2NTQ2MDEvMC80NTBBQzBFNENERTMx ODE2ODJGRjI3QzI1MjFDQzRCRjcyOTBDMEQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjAzAq02V5HS 9F72JfaPRbc8OGp7uAleEQ3o6Ou9l99jn6F+tmEfY5/1+Z3ZcdN7rbciK7Q2RJr3 ep4glWWsG+Lz7IAPZqjvBSbu8dQz2iu/a4SglOwiudkPzoX4cPH8Cr2PIfOtUAtI oI7xnDBonX/lJvrJo/gjZTpcgGk1A1j91h18CTlpdVkAzZAVIY3deCVqhymvW+TU xBcHPE3RU3H2EyDYVa8yUFzmlX24F3uhjuAD6mQIN48gYgzpeicCH74pX4aGv5cV KFHcbu9knr6q/GaLQJce9DZJ+ISSIUMsqbg8qMf3sEclUmUQk9uTafssh52gPWH1 L2Ap+bjM/w== -----END CERTIFICATE-----Generated at Sat Aug 29 06:07:25 2026 by rpki-client