$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft File: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft (raw, json) Hash identifier: ErWljLhZOgMUXTeYScshxypUpj93myrvcJEDNMN3TMk= Subject key identifier: 3E:66:4F:6D:53:9F:1D:5E:82:5F:6A:D4:84:B5:95:CF:0C:4D:60:7C Authority key identifier: 45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 Certificate issuer: /CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Certificate serial: 4C12FAC6F9F1E394A085673ED3BD7586CC784AEF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft Manifest number: 013B Signing time: Sun 11 Oct 2026 02:30:11 +0000 Manifest this update: Sun 11 Oct 2026 02:25:11 +0000 Manifest next update: Wed 14 Oct 2026 07:33:11 +0000 Files and hashes: 1: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl (hash: I7l/v17xtLddJuw42upfU1ojG8MLW6vftvkP09KwbEU=) 2: 3136332e36312e36322e302f32342d3234203d3e203138343634.roa (hash: Y/GbqiSHk47nm9kfLmWEQmvyAU1qdTdaRuJrF/5i1gE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:12:fa:c6:f9:f1:e3:94:a0:85:67:3e:d3:bd:75:86:cc:78:4a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Validity Not Before: Oct 11 02:25:11 2026 GMT Not After : Oct 14 07:33:11 2026 GMT Subject: CN=3E664F6D539F1D5E825F6AD484B595CF0C4D607C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:77:54:2a:2e:82:43:4b:4e:e5:64:41:7d:2c: 5a:8e:0c:84:f4:a8:7a:dc:d6:c8:75:dc:03:8d:53: 6e:29:7b:9b:81:cf:07:a8:4f:af:80:cf:8e:44:dc: 61:0a:dc:4a:3f:c7:ce:07:df:70:a4:44:27:11:11: 35:c2:7b:0f:5b:93:7c:37:56:e0:33:91:fa:76:33: 0f:82:ec:40:da:17:3b:2a:cf:d7:5a:cd:47:e0:24: 57:2c:17:be:d3:b0:5d:5d:fd:e5:b5:bd:a4:1b:cd: b0:c4:ba:72:65:7c:a9:94:7c:b2:c2:3c:1c:86:bf: f3:a2:e1:2c:67:a1:29:08:44:3f:e5:25:d5:33:fe: 0f:7e:d7:58:cc:18:4a:2b:7e:cc:75:74:a2:3b:b0: 1c:f4:69:4b:a9:2f:e1:26:47:1f:57:9e:f2:a0:33: 79:29:b4:98:23:a6:14:21:db:0a:db:b3:ef:ab:1e: dd:56:eb:6a:ee:2f:5e:a3:ae:f2:96:8f:b7:3d:7c: 44:1d:9b:06:e1:3f:85:f9:18:e5:fd:48:95:e8:e3: 54:69:09:6f:74:f8:1e:fb:4b:c4:2c:6f:53:3d:2a: cf:db:4d:e3:40:06:fb:c6:7b:e1:df:50:08:c0:fc: 00:c9:f3:dd:75:1c:12:fd:21:33:86:f1:4f:ad:7e: 72:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:66:4F:6D:53:9F:1D:5E:82:5F:6A:D4:84:B5:95:CF:0C:4D:60:7C X509v3 Authority Key Identifier: keyid:45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:90:8d:aa:f6:2b:73:ef:2e:df:be:9f:9b:02:b7:f7:b3:7a: 16:41:8e:73:5f:77:82:6f:b7:0b:cc:2d:a6:05:88:4c:64:67: f8:bf:3d:dd:9d:aa:07:e5:ce:ce:94:75:02:08:d4:d2:c0:ca: e9:48:a4:ca:ae:b2:c0:fa:30:65:89:3b:2f:2d:aa:83:1c:de: eb:7f:9d:47:41:34:08:8a:e0:83:51:e1:63:e6:d6:5d:68:52: 9a:aa:cd:e5:ed:97:86:30:3f:44:1e:5d:43:14:a8:b1:d5:4b: 35:36:de:47:c9:8f:fe:eb:28:ff:53:ca:0f:4a:d9:d3:f2:e6: 0b:42:d0:b7:0d:41:c2:96:ef:38:24:16:ae:98:60:2c:33:c0: 25:d7:ec:d7:97:97:1b:60:ac:b4:ef:e1:2a:69:86:68:31:0c: ee:32:83:1f:9d:0e:bf:fd:92:73:91:fe:03:89:e1:72:b7:0e: 95:f1:28:ac:15:7d:58:13:66:36:02:a0:82:03:57:74:9c:c7: 91:d7:10:b4:bb:8b:5f:1e:30:b2:e4:85:64:40:a9:51:d6:64: 4a:82:33:da:8a:29:3e:1f:2b:72:a0:ba:1d:fe:8b:ea:67:4d: 4e:48:96:d5:d4:9e:81:2a:04:13:db:82:f6:90:55:f8:c4:75: d4:4a:f6:de -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTBL6xvnx45SghWc+0711hsx4Su8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1 RUE3NkUxMDAeFw0yNjEwMTEwMjI1MTFaFw0yNjEwMTQwNzMzMTFaMDMxMTAvBgNV BAMTKDNFNjY0RjZENTM5RjFENUU4MjVGNkFENDg0QjU5NUNGMEM0RDYwN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWd1QqLoJDS07lZEF9LFqODIT0 qHrc1sh13AONU24pe5uBzweoT6+Az45E3GEK3Eo/x84H33CkRCcRETXCew9bk3w3 VuAzkfp2Mw+C7EDaFzsqz9dazUfgJFcsF77TsF1d/eW1vaQbzbDEunJlfKmUfLLC PByGv/Oi4SxnoSkIRD/lJdUz/g9+11jMGEorfsx1dKI7sBz0aUupL+EmRx9XnvKg M3kptJgjphQh2wrbs++rHt1W62ruL16jrvKWj7c9fEQdmwbhP4X5GOX9SJXo41Rp CW90+B77S8Qsb1M9Ks/bTeNABvvGe+HfUAjA/ADJ8911HBL9ITOG8U+tfnKTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPmZPbVOfHV6CX2rUhLWVzwxNYHwwHwYDVR0j BBgwFoAURS5e8Uc4+3aQzDveqYmtCF6nbhAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1Nzc0MzEwNy8wLzQ1MkU1RUYxNDczOEZCNzY5MENDM0JERUE5ODlB RDA4NUVBNzZFMTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1RUE3NkUxMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc3NDMxMDcvMC80NTJFNUVGMTQ3MzhG Qjc2OTBDQzNCREVBOTg5QUQwODVFQTc2RTEwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5CNqvYrc+8u 376fmwK397N6FkGOc193gm+3C8wtpgWITGRn+L893Z2qB+XOzpR1AgjU0sDK6Uik yq6ywPowZYk7Ly2qgxze63+dR0E0CIrgg1HhY+bWXWhSmqrN5e2XhjA/RB5dQxSo sdVLNTbeR8mP/uso/1PKD0rZ0/LmC0LQtw1BwpbvOCQWrphgLDPAJdfs15eXG2Cs tO/hKmmGaDEM7jKDH50Ov/2Sc5H+A4nhcrcOlfEorBV9WBNmNgKgggNXdJzHkdcQ tLuLXx4wsuSFZECpUdZkSoIz2oopPh8rcqC6Hf6L6mdNTkiW1dSegSoEE9uC9pBV +MR11Er23g== -----END CERTIFICATE-----Generated at Sun Oct 11 18:40:05 2026 by rpki-client