$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft File: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft (raw, json) Hash identifier: zH8nPG+17cg9FnQZs4xuivXPeY2Gr7sQ54grVwve9qA= Subject key identifier: 27:10:BA:EC:DB:20:55:67:66:22:51:CC:64:7E:27:44:0A:64:3E:0F Authority key identifier: 45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 Certificate issuer: /CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Certificate serial: 76EF53FB42EB5AFA78BBA3F89874D4B7671471F8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 22:43:28 +0000 Manifest this update: Thu 26 Mar 2026 22:38:28 +0000 Manifest next update: Fri 27 Mar 2026 23:39:28 +0000 Files and hashes: 1: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl (hash: BIPXv6W/vUu5Cst72rzxDtBTI2EanSzRa5WIXTcUfM8=) 2: 3136332e36312e36322e302f32342d3234203d3e203138343634.roa (hash: Y/GbqiSHk47nm9kfLmWEQmvyAU1qdTdaRuJrF/5i1gE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ef:53:fb:42:eb:5a:fa:78:bb:a3:f8:98:74:d4:b7:67:14:71:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Validity Not Before: Mar 26 22:38:28 2026 GMT Not After : Mar 27 23:39:28 2026 GMT Subject: CN=2710BAECDB205567662251CC647E27440A643E0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:34:57:ed:b6:9c:92:e8:88:6f:b2:84:c0:a1: e2:35:68:f6:f2:23:b8:45:1e:67:43:70:7b:80:6c: 8b:6f:8e:90:34:7a:8e:79:77:5e:eb:4b:bd:3e:9e: ac:2d:fc:96:fc:9b:76:06:40:a8:3f:3b:47:a4:7d: f4:c6:b0:e3:6a:df:7f:2f:b8:99:f2:7d:f1:45:97: 1f:8a:88:e4:95:84:7a:a2:f3:ce:b7:45:99:68:c1: 73:45:66:4e:25:f2:2f:00:00:69:7c:03:aa:21:bb: b2:4a:36:6e:72:d4:92:2b:35:f1:f0:79:b5:9c:3d: d4:ef:ef:94:09:ca:2e:f0:e3:4a:2e:06:c5:62:d7: b7:cb:7d:e1:89:24:f2:0d:7d:68:a0:dd:e9:4c:a9: c5:50:25:86:80:84:e7:5d:3d:26:88:71:78:ab:4d: 0d:8e:9e:5e:1f:95:7e:32:a4:18:f8:07:df:61:b6: 35:c8:d9:ec:b3:e6:e2:35:3a:ea:a4:3e:0d:0c:4d: 89:2c:c2:ac:36:e2:9d:2e:e7:1a:d4:2d:5b:75:80: 0d:67:7d:44:a3:16:60:51:f0:9b:4c:75:1d:ee:7b: 0e:28:0f:69:ca:45:70:11:51:a6:66:e8:a9:32:3b: d5:f6:a9:91:0e:88:d8:28:c2:f2:0c:3a:e6:02:4f: cc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:10:BA:EC:DB:20:55:67:66:22:51:CC:64:7E:27:44:0A:64:3E:0F X509v3 Authority Key Identifier: keyid:45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ef:4d:a9:82:71:62:d6:3e:c0:c7:f0:b7:64:37:76:6b:dd: 79:93:71:76:ca:e2:4c:a8:41:3b:d9:e6:4e:85:46:68:d9:40: fe:34:e4:e1:d3:9e:9a:f5:26:04:13:aa:d8:82:94:68:40:ba: f7:7c:e5:b3:35:9a:a1:8b:8a:e0:bf:f3:63:ac:20:e0:8a:03: 4c:b2:c7:4d:f7:58:eb:43:bb:71:d8:88:b2:e1:97:95:5b:8b: e0:cf:75:82:14:8d:25:60:da:55:79:f4:d1:91:57:9b:26:4c: d4:2b:8a:1b:88:ad:6d:da:04:3f:5f:8a:1a:67:c1:49:7d:80: 6d:f3:c3:fa:fa:c3:1e:c1:07:20:d7:f8:18:7d:c9:39:c4:b8: 46:77:fb:a7:36:c2:3b:f8:86:c6:4e:cd:72:2f:2a:53:93:2f: 91:20:3e:e1:40:da:17:8d:5e:b0:b3:13:3f:5e:b9:7d:2c:6a: 57:2f:61:d0:e2:91:0e:22:b5:63:92:b1:07:5e:c9:2f:5b:d4: 00:48:0b:e4:39:89:f1:1c:0f:a2:73:be:7e:7e:d7:ad:89:8c: 96:bc:56:7b:1b:44:90:45:41:b4:81:d5:5d:c3:2e:7a:f7:e1: 84:34:65:4a:60:c6:a3:d2:31:c9:5a:bd:00:78:7d:e9:7d:83: 31:54:32:36 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdu9T+0LrWvp4u6P4mHTUt2cUcfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1 RUE3NkUxMDAeFw0yNjAzMjYyMjM4MjhaFw0yNjAzMjcyMzM5MjhaMDMxMTAvBgNV BAMTKDI3MTBCQUVDREIyMDU1Njc2NjIyNTFDQzY0N0UyNzQ0MEE2NDNFMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcNFfttpyS6IhvsoTAoeI1aPby I7hFHmdDcHuAbItvjpA0eo55d17rS70+nqwt/Jb8m3YGQKg/O0ekffTGsONq338v uJnyffFFlx+KiOSVhHqi8863RZlowXNFZk4l8i8AAGl8A6ohu7JKNm5y1JIrNfHw ebWcPdTv75QJyi7w40ouBsVi17fLfeGJJPINfWig3elMqcVQJYaAhOddPSaIcXir TQ2Onl4flX4ypBj4B99htjXI2eyz5uI1OuqkPg0MTYkswqw24p0u5xrULVt1gA1n fUSjFmBR8JtMdR3uew4oD2nKRXARUaZm6KkyO9X2qZEOiNgowvIMOuYCT8zDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJxC67NsgVWdmIlHMZH4nRApkPg8wHwYDVR0j BBgwFoAURS5e8Uc4+3aQzDveqYmtCF6nbhAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1Nzc0MzEwNy8wLzQ1MkU1RUYxNDczOEZCNzY5MENDM0JERUE5ODlB RDA4NUVBNzZFMTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1RUE3NkUxMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc3NDMxMDcvMC80NTJFNUVGMTQ3MzhG Qjc2OTBDQzNCREVBOTg5QUQwODVFQTc2RTEwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+9NqYJxYtY+ wMfwt2Q3dmvdeZNxdsriTKhBO9nmToVGaNlA/jTk4dOemvUmBBOq2IKUaEC693zl szWaoYuK4L/zY6wg4IoDTLLHTfdY60O7cdiIsuGXlVuL4M91ghSNJWDaVXn00ZFX myZM1CuKG4itbdoEP1+KGmfBSX2AbfPD+vrDHsEHINf4GH3JOcS4Rnf7pzbCO/iG xk7Nci8qU5MvkSA+4UDaF41esLMTP165fSxqVy9h0OKRDiK1Y5KxB17JL1vUAEgL 5DmJ8RwPonO+fn7XrYmMlrxWextEkEVBtIHVXcMuevfhhDRlSmDGo9IxyVq9AHh9 6X2DMVQyNg== -----END CERTIFICATE-----Generated at Fri Mar 27 02:03:50 2026 by rpki-client