$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft File: 45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft (raw, json) Hash identifier: kTOh+6Ca9nJwSAywOa+wkCdcX41osF6fPMb5I3CrG3Q= Subject key identifier: 70:21:76:6C:6F:54:5D:E6:F1:25:1D:8D:54:BB:F7:D8:28:7D:1A:14 Authority key identifier: 45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6 Certificate issuer: /CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6 Certificate serial: 1C2B967EC6E62870E0657461A602866C5FA2262B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 11:58:28 +0000 Manifest this update: Thu 26 Mar 2026 11:53:28 +0000 Manifest next update: Fri 27 Mar 2026 14:19:28 +0000 Files and hashes: 1: 45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl (hash: z7BPOzumFbLbKBVzpNWCeTfmDDc7Xc1t2JpB/BcVoHQ=) 2: 323430323a663863303a3a2f34382d3438203d3e20313337373938.roa (hash: cIxqlfd0QethhWMdV0g5VZkMAaNT0U3dpU5si9dWPEw=) 3: 3130332e3131362e39322e302f32342d3234203d3e20313337373938.roa (hash: GxDjwoGwXNDMqifO5LMnh9aEKS7YfWtIczricIBrf7c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:2b:96:7e:c6:e6:28:70:e0:65:74:61:a6:02:86:6c:5f:a2:26:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6 Validity Not Before: Mar 26 11:53:28 2026 GMT Not After : Mar 27 14:19:28 2026 GMT Subject: CN=7021766C6F545DE6F1251D8D54BBF7D8287D1A14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:83:04:75:a0:20:6f:64:da:bc:dc:14:93:d9: 5d:f1:be:72:04:e9:66:0e:5e:3a:aa:36:a5:aa:1e: 33:89:61:ec:b7:a0:98:5a:2f:9f:24:21:46:ee:af: 91:23:c3:e0:13:8d:01:42:89:26:56:f0:2e:3a:29: 08:38:0e:9b:af:c5:0b:88:20:44:ad:c1:14:a7:fb: 45:14:e6:fd:7b:5e:3d:50:de:c4:43:79:7d:a6:7a: c7:b5:ee:06:e6:cb:2e:bc:c2:a2:25:e8:f3:13:06: 54:f0:a6:80:23:d6:cb:c6:5a:3f:90:a8:fd:9c:06: bc:14:de:8f:9d:b5:6e:d6:4d:2c:87:7b:8c:49:d3: 25:4c:4f:b4:6c:09:01:5e:01:5c:8f:2d:3a:70:5a: 0a:e9:78:e0:5e:e1:52:83:fe:4f:96:8f:76:63:73: 8b:1e:4e:d9:f7:36:9f:e8:eb:d0:79:25:f2:f5:da: cc:4c:6e:a7:46:89:45:d5:9e:5d:17:bf:50:f4:02: fb:c4:b6:58:5c:c6:55:8d:1d:02:07:10:da:a0:bd: 39:a7:24:ef:77:0b:55:5f:b9:01:b1:9a:dc:df:4e: cb:ff:81:94:3d:50:de:ff:c9:5d:4d:9f:17:7b:d5: ec:7f:84:5c:c4:3d:66:11:95:50:d2:fe:4f:a5:0d: c4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:21:76:6C:6F:54:5D:E6:F1:25:1D:8D:54:BB:F7:D8:28:7D:1A:14 X509v3 Authority Key Identifier: keyid:45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:13:d1:37:d6:31:43:e3:58:aa:ac:13:77:f9:e9:27:26:9d: 33:1f:bd:eb:4e:4f:ea:96:d2:93:9b:28:53:11:4e:3b:6f:32: dd:e1:f8:a6:5f:a3:e8:03:8f:54:ec:34:1a:6b:42:c8:c2:3b: 8e:92:4b:0c:1b:a6:d0:74:0a:4b:7c:5e:0f:f6:ce:1c:7a:f4: 7a:63:da:2c:6a:f8:c3:2a:4b:52:ea:55:02:77:0f:f5:e2:5f: 87:4e:bb:2c:40:54:ac:d5:5a:48:a8:9c:3a:59:86:f6:d0:3e: 94:c7:13:48:cb:cf:74:e7:20:b2:7c:72:b1:71:a9:79:8c:de: 11:00:78:1f:ee:19:fc:23:ed:2d:75:9c:72:65:35:02:00:d7: 44:42:3c:5d:59:6f:4a:34:df:52:c4:cd:8d:4a:d0:7e:0d:d5: 46:55:53:dc:27:42:56:4c:e4:bc:1a:4c:ed:c2:81:ef:7a:5c: 30:07:35:20:46:ec:d4:38:1a:61:52:7d:01:89:6d:7c:b9:e2: 87:73:a3:aa:25:87:08:f3:0b:d5:7e:c2:c0:c7:15:3a:88:fc: 5d:74:1d:c7:45:12:23:f1:98:30:fc:c1:f4:ef:ff:9b:6c:94: 2b:fd:6b:5e:30:b9:f0:8b:4d:12:cb:b1:94:18:69:81:c4:04: e7:42:fa:46 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHCuWfsbmKHDgZXRhpgKGbF+iJiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVBRTUxRjMxOEQzNTUzMkJFQjZGRkZDNjIyQTJBQURF RjRDMkNFNjAeFw0yNjAzMjYxMTUzMjhaFw0yNjAzMjcxNDE5MjhaMDMxMTAvBgNV BAMTKDcwMjE3NjZDNkY1NDVERTZGMTI1MUQ4RDU0QkJGN0Q4Mjg3RDFBMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsgwR1oCBvZNq83BST2V3xvnIE 6WYOXjqqNqWqHjOJYey3oJhaL58kIUbur5Ejw+ATjQFCiSZW8C46KQg4DpuvxQuI IEStwRSn+0UU5v17Xj1Q3sRDeX2mese17gbmyy68wqIl6PMTBlTwpoAj1svGWj+Q qP2cBrwU3o+dtW7WTSyHe4xJ0yVMT7RsCQFeAVyPLTpwWgrpeOBe4VKD/k+Wj3Zj c4seTtn3Np/o69B5JfL12sxMbqdGiUXVnl0Xv1D0AvvEtlhcxlWNHQIHENqgvTmn JO93C1VfuQGxmtzfTsv/gZQ9UN7/yV1Nnxd71ex/hFzEPWYRlVDS/k+lDcShAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcCF2bG9UXebxJR2NVLv32Ch9GhQwHwYDVR0j BBgwFoAURa5R8xjTVTK+tv/8Yioqre9MLOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzA2MTI0OS8wLzQ1QUU1MUYzMThEMzU1MzJCRUI2RkZGQzYyMkEy QUFERUY0QzJDRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDVBRTUxRjMxOEQzNTUzMkJFQjZGRkZDNjIyQTJBQURFRjRDMkNFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcwNjEyNDkvMC80NUFFNTFGMzE4RDM1 NTMyQkVCNkZGRkM2MjJBMkFBREVGNEMyQ0U2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxPRN9YxQ+NY qqwTd/npJyadMx+9605P6pbSk5soUxFOO28y3eH4pl+j6AOPVOw0GmtCyMI7jpJL DBum0HQKS3xeD/bOHHr0emPaLGr4wypLUupVAncP9eJfh067LEBUrNVaSKicOlmG 9tA+lMcTSMvPdOcgsnxysXGpeYzeEQB4H+4Z/CPtLXWccmU1AgDXREI8XVlvSjTf UsTNjUrQfg3VRlVT3CdCVkzkvBpM7cKB73pcMAc1IEbs1DgaYVJ9AYltfLnih3Oj qiWHCPML1X7CwMcVOoj8XXQdx0USI/GYMPzB9O//m2yUK/1rXjC58ItNEsuxlBhp gcQE50L6Rg== -----END CERTIFICATE-----Generated at Fri Mar 27 04:59:59 2026 by rpki-client