$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft File: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft (raw, json) Hash identifier: iTbTiWJGu3rnUjFsV8VxGDTWB6TowYAqS65rQav08tA= Subject key identifier: 44:AC:0B:46:51:CD:CD:AC:98:55:2A:1A:F9:B7:EB:49:9F:D6:E7:6D Authority key identifier: 45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 Certificate issuer: /CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Certificate serial: 34EB91805104130712D64894F5978F3BD58CB0C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft Manifest number: F8 Signing time: Fri 24 Jul 2026 09:00:50 +0000 Manifest this update: Fri 24 Jul 2026 08:55:50 +0000 Manifest next update: Sat 25 Jul 2026 12:06:50 +0000 Files and hashes: 1: 3136332e36312e36322e302f32342d3234203d3e203138343634.roa (hash: Y/GbqiSHk47nm9kfLmWEQmvyAU1qdTdaRuJrF/5i1gE=) 2: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl (hash: 0xtbiOy8mowEB9/4BhYMEBuHHfZ47dCgmyAdEUx3xZs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:eb:91:80:51:04:13:07:12:d6:48:94:f5:97:8f:3b:d5:8c:b0:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Validity Not Before: Jul 24 08:55:50 2026 GMT Not After : Jul 25 12:06:50 2026 GMT Subject: CN=44AC0B4651CDCDAC98552A1AF9B7EB499FD6E76D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c8:b7:45:88:35:06:64:a3:f4:9b:28:41:1e: 6e:09:26:bb:b4:73:cc:07:ed:8e:ef:80:90:bc:c1: 2b:eb:cf:c7:20:1d:2c:cc:c9:a0:09:69:72:f1:3f: f2:2c:e9:39:96:f9:9f:2f:c6:67:15:1b:4d:7b:c6: 7d:0b:eb:6b:d8:03:41:67:d3:c2:24:3f:ec:65:7f: 7c:bc:f8:e8:d3:23:92:36:61:38:42:7a:07:d4:43: 2e:7c:91:81:2e:4a:e2:a0:00:84:a9:4c:7d:8d:08: 17:7b:ef:5a:75:ba:eb:8c:cb:8d:67:fb:17:e6:32: f8:df:e7:90:21:14:fb:46:66:28:02:a6:7f:06:38: 83:d8:52:13:c4:f1:83:53:fa:13:af:44:f4:64:4b: 21:e7:a1:73:56:f0:43:f3:d7:63:f4:52:f9:67:fc: ac:13:52:c3:7e:9c:9d:3b:2a:44:52:d3:bc:4d:ba: 58:03:49:34:51:41:b6:2d:85:87:20:ee:e5:11:57: e6:5a:e4:06:4d:ab:ad:36:08:f5:1c:50:35:4f:40: da:a4:9a:34:2c:51:bc:dc:eb:0b:77:0e:6b:e2:3b: 3a:1c:4c:80:72:04:4b:6a:c6:05:e3:93:55:e5:97: ac:81:90:a9:05:4c:8d:83:a1:38:ee:36:c3:e2:ad: 83:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AC:0B:46:51:CD:CD:AC:98:55:2A:1A:F9:B7:EB:49:9F:D6:E7:6D X509v3 Authority Key Identifier: keyid:45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f1:7b:a0:3c:e3:56:e4:19:91:62:2f:34:9d:2b:3d:ea:43: 14:ef:30:f7:18:33:fd:3e:3c:b6:7e:de:ad:33:e1:4e:e9:5d: 2b:9c:16:e6:07:11:18:a5:f0:4d:cb:0b:cc:e0:35:b1:2e:29: fd:aa:94:27:11:1f:79:84:3c:31:d1:95:50:d8:11:df:6c:d0: 71:f5:dd:05:0b:2b:9e:f4:d1:c5:d9:09:68:63:17:4a:fe:42: 98:90:14:a2:ca:66:14:d9:49:f8:d8:fd:e9:61:eb:12:2d:fc: 24:d8:90:3d:dc:74:43:02:b6:42:5d:bc:1c:05:92:76:c7:17: 22:2a:01:c4:1e:e8:81:aa:9d:ec:14:c7:6c:a6:54:9f:d8:be: 14:71:9c:69:ec:f8:77:47:d7:d1:82:0d:1d:10:46:6a:4e:b8: fa:93:86:ae:a4:cc:ba:3f:5c:78:49:ba:fa:5d:da:9d:44:fe: f5:6c:20:5d:f9:2e:fd:e8:45:63:e1:5c:16:1a:b0:bc:ba:53: f9:90:94:56:50:30:50:8d:08:30:60:fa:ff:af:2b:68:82:63: 51:d3:7d:06:a6:1a:22:bc:1a:c1:c4:82:d0:84:03:c5:1e:6d: 7d:8a:6d:67:1f:86:df:63:e9:31:14:5e:77:f6:79:d6:2b:85: bb:6e:48:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNOuRgFEEEwcS1kiU9ZePO9WMsMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1 RUE3NkUxMDAeFw0yNjA3MjQwODU1NTBaFw0yNjA3MjUxMjA2NTBaMDMxMTAvBgNV BAMTKDQ0QUMwQjQ2NTFDRENEQUM5ODU1MkExQUY5QjdFQjQ5OUZENkU3NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKyLdFiDUGZKP0myhBHm4JJru0 c8wH7Y7vgJC8wSvrz8cgHSzMyaAJaXLxP/Is6TmW+Z8vxmcVG017xn0L62vYA0Fn 08IkP+xlf3y8+OjTI5I2YThCegfUQy58kYEuSuKgAISpTH2NCBd771p1uuuMy41n +xfmMvjf55AhFPtGZigCpn8GOIPYUhPE8YNT+hOvRPRkSyHnoXNW8EPz12P0Uvln /KwTUsN+nJ07KkRS07xNulgDSTRRQbYthYcg7uURV+Za5AZNq602CPUcUDVPQNqk mjQsUbzc6wt3DmviOzocTIByBEtqxgXjk1Xll6yBkKkFTI2DoTjuNsPirYOPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURKwLRlHNzayYVSoa+bfrSZ/W520wHwYDVR0j BBgwFoAURS5e8Uc4+3aQzDveqYmtCF6nbhAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1Nzc0MzEwNy8wLzQ1MkU1RUYxNDczOEZCNzY5MENDM0JERUE5ODlB RDA4NUVBNzZFMTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1RUE3NkUxMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc3NDMxMDcvMC80NTJFNUVGMTQ3MzhG Qjc2OTBDQzNCREVBOTg5QUQwODVFQTc2RTEwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/F7oDzjVuQZ kWIvNJ0rPepDFO8w9xgz/T48tn7erTPhTuldK5wW5gcRGKXwTcsLzOA1sS4p/aqU JxEfeYQ8MdGVUNgR32zQcfXdBQsrnvTRxdkJaGMXSv5CmJAUospmFNlJ+Nj96WHr Ei38JNiQPdx0QwK2Ql28HAWSdscXIioBxB7ogaqd7BTHbKZUn9i+FHGcaez4d0fX 0YINHRBGak64+pOGrqTMuj9ceEm6+l3anUT+9WwgXfku/ehFY+FcFhqwvLpT+ZCU VlAwUI0IMGD6/68raIJjUdN9BqYaIrwawcSC0IQDxR5tfYptZx+G32PpMRRed/Z5 1iuFu25IMQ== -----END CERTIFICATE-----Generated at Fri Jul 24 14:48:44 2026 by rpki-client