$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft File: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft (raw, json) Hash identifier: gjFRkDGqxtrUY9ALTCQ9n+IBKSC1y/gtCUYnWDCww1s= Subject key identifier: 08:BC:D6:37:5A:5A:1B:41:CA:43:B4:BB:AB:06:41:CB:62:E3:79:83 Authority key identifier: C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 Certificate issuer: /CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Certificate serial: 5E05D156D2AE7D6B7F147F2905A38CD0EBFDE319 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft Manifest number: 2E Signing time: Wed 13 May 2026 12:46:04 +0000 Manifest this update: Wed 13 May 2026 12:41:04 +0000 Manifest next update: Thu 14 May 2026 12:47:04 +0000 Files and hashes: 1: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl (hash: dZmzWx4+qb1P0HV81+hZpJS5AtN9EPPdb6b9/8xjyA8=) 2: 3130332e3133352e3139362e302f32322d3232203d3e20313337373435.roa (hash: nQ1f3FMKWA1GCdf1PRfEoceld3pBu9R9MjWCiBeIYHo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:05:d1:56:d2:ae:7d:6b:7f:14:7f:29:05:a3:8c:d0:eb:fd:e3:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Validity Not Before: May 13 12:41:04 2026 GMT Not After : May 14 12:47:04 2026 GMT Subject: CN=08BCD6375A5A1B41CA43B4BBAB0641CB62E37983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:86:17:fb:33:02:1e:53:9e:ef:eb:a5:ea:67: 08:60:9b:4f:5e:90:28:93:d4:ac:1e:62:b2:fb:54: 0c:a3:ee:d7:0b:42:90:f6:6d:bf:ae:58:17:82:72: 74:de:75:b1:91:21:89:77:58:c5:64:94:ca:d2:4d: 7c:ea:a9:2a:5b:6c:ee:68:43:59:4c:18:0a:4e:05: 7e:82:a9:c0:a5:e7:46:60:a6:3b:5c:89:a6:23:79: 90:2b:ba:f7:2d:88:93:7d:6c:1b:28:11:59:61:06: be:c2:6b:01:f5:c4:56:81:dd:d6:f0:ef:84:0e:b8: c5:c5:bb:88:dd:e3:3a:5a:65:78:49:8f:e5:6e:68: 89:f9:fa:de:db:e3:79:46:df:78:e5:7d:b5:40:99: 64:aa:7a:74:f7:c7:3a:a4:75:74:18:fd:a9:e3:0a: 32:a8:4b:b7:5a:20:f5:da:6f:94:0a:ff:0d:72:29: c8:49:31:75:5b:e2:f8:1d:1d:63:46:a7:fb:67:8b: fe:d0:cb:2f:16:67:69:ae:8b:eb:c5:d7:9f:91:67: 50:5d:7c:d3:8c:7f:7b:6b:31:13:e6:0f:f9:a4:54: b2:13:7d:6e:d9:e8:6c:b7:3b:7c:4e:9e:cb:19:2d: 9e:62:42:1d:75:f6:4a:f7:7a:f5:f6:c3:72:f8:4a: d0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BC:D6:37:5A:5A:1B:41:CA:43:B4:BB:AB:06:41:CB:62:E3:79:83 X509v3 Authority Key Identifier: keyid:C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:16:98:e0:96:96:14:ee:b7:27:e1:38:8a:71:f1:62:89:73: 30:06:17:80:7a:43:68:d1:df:1f:7e:59:c6:41:be:c5:85:2a: 2c:2f:34:5a:60:83:87:84:91:0a:b2:e2:e5:a7:31:ca:09:13: d2:95:06:c8:32:b6:93:55:d5:19:b9:0e:0c:7f:82:a2:77:91: 40:7f:99:58:2f:35:5c:40:bf:c8:30:5a:f4:cb:15:65:be:7d: 84:cf:43:24:c2:d0:db:e9:89:ee:c5:5d:f9:5d:f0:1b:94:f7: 5e:e0:83:b2:76:fe:70:42:96:ae:9e:33:28:74:30:28:20:3a: 78:a4:9b:1c:0a:fa:c7:c0:49:02:9f:07:15:de:1e:02:61:3e: c4:7d:ec:3e:88:ec:ea:01:bb:aa:1d:29:eb:e7:47:7e:e7:6a: 53:49:dd:67:70:1d:6b:d7:1f:ab:ad:42:62:59:c9:f7:68:1b: 05:e2:d9:5f:5d:bd:29:ba:0c:a9:e1:9e:86:49:35:23:68:2d: a7:e5:ae:65:96:10:16:89:27:04:0f:88:6e:1b:bf:36:e6:2b: 40:d1:48:b1:7e:a8:c8:c3:04:a7:52:a7:ae:35:19:8c:71:e9: 53:cf:d8:37:b0:02:87:d5:f9:79:55:a8:32:69:b1:c1:b7:15: ca:02:ea:ba -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXgXRVtKufWt/FH8pBaOM0Ov94xkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYw MUI1RTFCMjAeFw0yNjA1MTMxMjQxMDRaFw0yNjA1MTQxMjQ3MDRaMDMxMTAvBgNV BAMTKDA4QkNENjM3NUE1QTFCNDFDQTQzQjRCQkFCMDY0MUNCNjJFMzc5ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNhhf7MwIeU57v66XqZwhgm09e kCiT1KweYrL7VAyj7tcLQpD2bb+uWBeCcnTedbGRIYl3WMVklMrSTXzqqSpbbO5o Q1lMGApOBX6CqcCl50ZgpjtciaYjeZAruvctiJN9bBsoEVlhBr7CawH1xFaB3dbw 74QOuMXFu4jd4zpaZXhJj+VuaIn5+t7b43lG33jlfbVAmWSqenT3xzqkdXQY/anj CjKoS7daIPXab5QK/w1yKchJMXVb4vgdHWNGp/tni/7Qyy8WZ2mui+vF15+RZ1Bd fNOMf3trMRPmD/mkVLITfW7Z6Gy3O3xOnssZLZ5iQh119kr3evX2w3L4StCJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCLzWN1paG0HKQ7S7qwZBy2LjeYMwHwYDVR0j BBgwFoAUxFIkP6HPtPlz4rOMlVAlvwG14bIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5MDI0NzAxNzIwMTY2NS8wL0M0NTIyNDNGQTFDRkI0Rjk3M0UyQjM4Qzk1NTAy NUJGMDFCNUUxQjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYwMUI1RTFCMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTAyNDcwMTcyMDE2NjUvMC9DNDUyMjQzRkExQ0ZC NEY5NzNFMkIzOEM5NTUwMjVCRjAxQjVFMUIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBaY4JaWFO63 J+E4inHxYolzMAYXgHpDaNHfH35ZxkG+xYUqLC80WmCDh4SRCrLi5acxygkT0pUG yDK2k1XVGbkODH+ConeRQH+ZWC81XEC/yDBa9MsVZb59hM9DJMLQ2+mJ7sVd+V3w G5T3XuCDsnb+cEKWrp4zKHQwKCA6eKSbHAr6x8BJAp8HFd4eAmE+xH3sPojs6gG7 qh0p6+dHfudqU0ndZ3Ada9cfq61CYlnJ92gbBeLZX129KboMqeGehkk1I2gtp+Wu ZZYQFoknBA+Ibhu/NuYrQNFIsX6oyMMEp1KnrjUZjHHpU8/YN7ACh9X5eVWoMmmx wbcVygLqug== -----END CERTIFICATE-----Generated at Wed May 13 20:54:59 2026 by rpki-client