$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft File: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft (raw, json) Hash identifier: 99H3pqTWmwqmE2mv0pEKUxkxgVMT39/w8O57pez+gqg= Subject key identifier: 18:6F:86:92:50:4A:3E:67:19:1A:47:82:34:C7:9F:E5:85:3F:37:B3 Authority key identifier: C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 Certificate issuer: /CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Certificate serial: 53EB91414D55DB69D2A7C069744333AA66BEB368 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft Manifest number: D1 Signing time: Mon 12 Oct 2026 08:01:47 +0000 Manifest this update: Mon 12 Oct 2026 07:56:47 +0000 Manifest next update: Thu 15 Oct 2026 18:00:47 +0000 Files and hashes: 1: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl (hash: Ak9eMGAUPw+QLvGdWXnwwWQ8K+rDxVOFT4j7ok788T8=) 2: 3130332e3133352e3139362e302f32322d3232203d3e20313337373435.roa (hash: nQ1f3FMKWA1GCdf1PRfEoceld3pBu9R9MjWCiBeIYHo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:eb:91:41:4d:55:db:69:d2:a7:c0:69:74:43:33:aa:66:be:b3:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Validity Not Before: Oct 12 07:56:47 2026 GMT Not After : Oct 15 18:00:47 2026 GMT Subject: CN=186F8692504A3E67191A478234C79FE5853F37B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fe:2e:d2:74:14:f2:69:cb:4f:67:26:85:66: 95:77:73:70:61:63:cf:d7:54:d1:69:c1:5c:10:06: a4:88:6c:46:fa:b4:ce:31:2d:49:f1:dc:14:8f:94: b2:26:e8:48:bf:f0:6b:b5:d6:e1:7b:56:2e:2d:87: 8f:39:72:37:14:21:08:ec:ae:c4:07:73:2d:63:88: a1:60:3a:d6:7c:c0:57:59:ca:29:d1:e3:db:18:cd: 4f:d0:a9:ff:28:fa:e8:9a:37:d2:2a:fe:74:16:46: ec:87:a9:c4:5d:c7:fe:7a:a8:a2:b5:9f:81:96:d9: 64:e8:bd:8b:2a:62:08:e0:23:0c:79:c8:dc:39:26: 57:8f:f6:1d:87:4a:78:88:6f:df:46:b4:b0:b5:7f: 65:10:b6:06:a4:cb:37:66:16:73:e9:f9:8b:31:8a: 3c:33:3f:be:bb:df:37:6c:53:9a:57:2d:5e:36:37: f5:1d:11:1b:3d:ec:f9:17:29:50:71:ec:0b:b6:35: 75:f3:2d:d7:17:9a:3f:2e:96:4d:97:c4:f1:1f:26: d7:6c:07:f0:32:68:62:56:a8:0e:58:3b:ae:9b:90: 54:ea:48:a1:ad:cd:77:a4:93:81:0b:b9:68:21:03: b9:88:83:fa:e5:d8:7f:a7:98:fb:b2:21:81:b6:aa: 50:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6F:86:92:50:4A:3E:67:19:1A:47:82:34:C7:9F:E5:85:3F:37:B3 X509v3 Authority Key Identifier: keyid:C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:96:1b:9e:75:c4:fc:11:f8:35:63:69:47:69:56:d4:57:4d: 5e:b2:e3:e7:30:34:63:03:d1:17:f2:80:ac:71:5c:b3:24:51: b6:a9:0d:f0:f6:33:77:9d:62:ba:3f:e8:fa:e5:31:6e:b2:0c: d2:5d:41:92:5e:30:d3:34:73:73:bd:ef:fa:8c:28:61:fd:5d: 66:b6:b8:72:7d:29:ca:56:1b:5b:c7:14:fa:1d:3c:3e:d9:0a: 19:64:cd:ed:c5:01:5e:9b:33:db:d2:81:e8:d4:8d:ea:b1:93: c4:c7:87:22:03:a3:07:7b:6a:d5:e0:8e:73:48:d6:6c:29:f3: b8:dc:bb:ab:c1:95:62:5b:43:05:08:58:f1:77:a7:13:b7:87: e3:b0:65:fa:73:d6:f4:46:78:6e:9f:d8:51:e0:39:63:d4:53: 1b:74:15:27:ff:9f:07:0e:f5:49:42:32:5e:98:71:09:00:0d: f0:0d:78:54:e2:59:55:62:c3:86:22:b2:27:be:61:f0:3d:49: 40:bc:ab:f9:71:9e:41:61:08:05:df:3e:af:d3:3f:32:c9:a6: 97:ea:c3:ab:08:e1:37:d1:52:49:41:14:7a:18:92:b7:a3:1b: da:de:58:8b:2e:3c:fb:5b:df:c7:c7:d9:99:f2:fa:88:4c:21: 05:26:75:4f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUU+uRQU1V22nSp8BpdEMzqma+s2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYw MUI1RTFCMjAeFw0yNjEwMTIwNzU2NDdaFw0yNjEwMTUxODAwNDdaMDMxMTAvBgNV BAMTKDE4NkY4NjkyNTA0QTNFNjcxOTFBNDc4MjM0Qzc5RkU1ODUzRjM3QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/i7SdBTyactPZyaFZpV3c3Bh Y8/XVNFpwVwQBqSIbEb6tM4xLUnx3BSPlLIm6Ei/8Gu11uF7Vi4th485cjcUIQjs rsQHcy1jiKFgOtZ8wFdZyinR49sYzU/Qqf8o+uiaN9Iq/nQWRuyHqcRdx/56qKK1 n4GW2WTovYsqYgjgIwx5yNw5JleP9h2HSniIb99GtLC1f2UQtgakyzdmFnPp+Ysx ijwzP7673zdsU5pXLV42N/UdERs97PkXKVBx7Au2NXXzLdcXmj8ulk2XxPEfJtds B/AyaGJWqA5YO66bkFTqSKGtzXekk4ELuWghA7mIg/rl2H+nmPuyIYG2qlBBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGG+GklBKPmcZGkeCNMef5YU/N7MwHwYDVR0j BBgwFoAUxFIkP6HPtPlz4rOMlVAlvwG14bIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5MDI0NzAxNzIwMTY2NS8wL0M0NTIyNDNGQTFDRkI0Rjk3M0UyQjM4Qzk1NTAy NUJGMDFCNUUxQjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYwMUI1RTFCMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTAyNDcwMTcyMDE2NjUvMC9DNDUyMjQzRkExQ0ZC NEY5NzNFMkIzOEM5NTUwMjVCRjAxQjVFMUIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpYbnnXE/BH4 NWNpR2lW1FdNXrLj5zA0YwPRF/KArHFcsyRRtqkN8PYzd51iuj/o+uUxbrIM0l1B kl4w0zRzc73v+owoYf1dZra4cn0pylYbW8cU+h08PtkKGWTN7cUBXpsz29KB6NSN 6rGTxMeHIgOjB3tq1eCOc0jWbCnzuNy7q8GVYltDBQhY8XenE7eH47Bl+nPW9EZ4 bp/YUeA5Y9RTG3QVJ/+fBw71SUIyXphxCQAN8A14VOJZVWLDhiKyJ75h8D1JQLyr +XGeQWEIBd8+r9M/Msmml+rDqwjhN9FSSUEUehiSt6Mb2t5Yiy48+1vfx8fZmfL6 iEwhBSZ1Tw== -----END CERTIFICATE-----Generated at Tue Oct 13 20:57:54 2026 by rpki-client