$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft File: 450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft (raw, json) Hash identifier: AvyAgJcJXCWIFaynKqD9uzkknnTx4L7BeskGKWTJQUw= Subject key identifier: 45:D9:AA:EA:B4:EC:E2:7A:DE:16:33:41:0F:F0:1A:39:85:DE:F9:02 Authority key identifier: 45:0A:C0:E4:CD:E3:18:16:82:FF:27:C2:52:1C:C4:BF:72:90:C0:D7 Certificate issuer: /CN=450AC0E4CDE3181682FF27C2521CC4BF7290C0D7 Certificate serial: 0F6C2D9669B2BEF3FE723421D5F9E617638F2B4A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 08:35:47 +0000 Manifest this update: Fri 24 Jul 2026 08:30:47 +0000 Manifest next update: Sat 25 Jul 2026 11:09:47 +0000 Files and hashes: 1: 3130332e3232382e3230342e302f32332d3233203d3e2034383038.roa (hash: 0Mhtj21hVbeX9XUR/Q2Gx0H8h7HJJx0VMMT+V2reTHc=) 2: 450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl (hash: r1J/ZoMI9+icKmV4d/zy4ItSO/aTnP6wiy82oHmZ0RA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:6c:2d:96:69:b2:be:f3:fe:72:34:21:d5:f9:e6:17:63:8f:2b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=450AC0E4CDE3181682FF27C2521CC4BF7290C0D7 Validity Not Before: Jul 24 08:30:47 2026 GMT Not After : Jul 25 11:09:47 2026 GMT Subject: CN=45D9AAEAB4ECE27ADE1633410FF01A3985DEF902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a8:22:4b:36:01:ab:e5:87:2e:c4:21:7d:8c: b7:a4:e9:e1:8a:52:10:7f:c9:17:2c:1d:50:19:c9: e5:97:06:13:3b:28:ff:95:29:8a:5a:7f:3b:73:e4: 7a:82:4d:a8:80:dc:ec:5f:a4:e3:e1:d8:b3:5b:35: 38:85:45:7d:0d:ca:b5:05:10:9e:0a:7a:66:94:f5: bc:a3:e3:a6:48:ea:10:e2:1d:90:93:1d:41:ce:35: 32:ee:4f:c3:dc:ef:42:0c:df:78:53:b0:b1:f8:39: 57:2c:4e:4a:d2:b5:a6:1a:c2:b0:ff:c6:d7:0f:cc: 30:41:9e:e1:b5:e7:56:0d:9a:bf:90:f7:f2:28:fe: 52:db:7a:89:4b:4f:92:0a:ec:e7:ab:bc:d7:15:5a: a8:fe:7f:51:9c:a7:af:73:af:c0:02:23:9b:9f:de: 67:52:c9:9f:3e:d4:2a:0d:ff:ad:e6:d0:cb:6f:a3: 6f:d9:67:0b:71:f3:b6:f2:ca:e3:4d:76:64:b4:40: 37:fd:61:dc:b3:ac:78:fe:1e:5f:ec:62:1e:8c:c7: b3:45:06:b4:f0:b5:f5:1e:47:1d:f9:85:41:d2:68: 36:c0:bb:19:ed:7c:1d:05:d8:cf:4c:ec:fc:34:f6: 59:bf:d3:07:82:0a:c3:fd:43:0f:16:3c:58:94:f4: 93:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D9:AA:EA:B4:EC:E2:7A:DE:16:33:41:0F:F0:1A:39:85:DE:F9:02 X509v3 Authority Key Identifier: keyid:45:0A:C0:E4:CD:E3:18:16:82:FF:27:C2:52:1C:C4:BF:72:90:C0:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:98:e4:d2:e8:30:4b:df:b9:e2:db:b2:a4:49:05:91:05:98: 9c:75:6c:61:63:b1:85:8b:7a:f7:63:cc:87:2b:5c:91:1c:cc: dc:33:69:04:a2:9f:5b:fa:27:ad:b4:46:74:4b:2d:b4:aa:e0: a8:61:5b:06:a6:95:67:de:04:e9:3d:a7:5f:c7:4c:1d:34:fb: c2:de:34:e5:73:79:69:1d:a8:be:68:4e:fa:c2:f4:58:f2:c4: 47:7d:35:72:ef:b4:50:13:97:4b:25:bd:52:dc:c9:11:76:b8: ac:66:19:52:20:92:2a:a0:f2:6a:a9:82:63:45:9e:4f:18:8b: 8a:cf:d6:c8:22:e1:62:28:7c:dc:17:7a:de:ae:58:73:bf:b6: 7b:28:3e:4f:39:55:fe:51:c7:ea:8f:26:ec:05:4a:e9:32:59: 2b:2e:5d:83:60:f5:98:84:61:70:b9:c5:e3:c7:f4:a8:6b:68: 53:59:fb:d3:a4:96:ee:1c:5a:ed:cb:3f:df:a4:78:e4:53:c1: 80:b9:27:98:2b:01:0b:eb:4e:85:0b:38:3c:a3:af:d0:3d:a6: 40:c6:80:eb:90:0a:f9:5a:61:63:fe:83:fa:d8:46:b8:c1:05: 95:35:cb:56:56:ae:78:bd:4b:83:08:65:67:23:5b:74:1e:60: 28:0a:93:c5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUD2wtlmmyvvP+cjQh1fnmF2OPK0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwQUMwRTRDREUzMTgxNjgyRkYyN0MyNTIxQ0M0QkY3 MjkwQzBENzAeFw0yNjA3MjQwODMwNDdaFw0yNjA3MjUxMTA5NDdaMDMxMTAvBgNV BAMTKDQ1RDlBQUVBQjRFQ0UyN0FERTE2MzM0MTBGRjAxQTM5ODVERUY5MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgqCJLNgGr5YcuxCF9jLek6eGK UhB/yRcsHVAZyeWXBhM7KP+VKYpafztz5HqCTaiA3OxfpOPh2LNbNTiFRX0NyrUF EJ4KemaU9byj46ZI6hDiHZCTHUHONTLuT8Pc70IM33hTsLH4OVcsTkrStaYawrD/ xtcPzDBBnuG151YNmr+Q9/Io/lLbeolLT5IK7OervNcVWqj+f1Gcp69zr8ACI5uf 3mdSyZ8+1CoN/63m0Mtvo2/ZZwtx87byyuNNdmS0QDf9YdyzrHj+Hl/sYh6Mx7NF BrTwtfUeRx35hUHSaDbAuxntfB0F2M9M7Pw09lm/0weCCsP9Qw8WPFiU9JNJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURdmq6rTs4nreFjNBD/AaOYXe+QIwHwYDVR0j BBgwFoAURQrA5M3jGBaC/yfCUhzEv3KQwNcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Mjk5MTY5NzU4MDY1NDYwMS8wLzQ1MEFDMEU0Q0RFMzE4MTY4MkZGMjdDMjUyMUND NEJGNzI5MEMwRDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDUwQUMwRTRDREUzMTgxNjgyRkYyN0MyNTIxQ0M0QkY3MjkwQzBENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDI5OTE2OTc1ODA2NTQ2MDEvMC80NTBBQzBFNENERTMx ODE2ODJGRjI3QzI1MjFDQzRCRjcyOTBDMEQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5jk0ugwS9+5 4tuypEkFkQWYnHVsYWOxhYt692PMhytckRzM3DNpBKKfW/onrbRGdEsttKrgqGFb BqaVZ94E6T2nX8dMHTT7wt405XN5aR2ovmhO+sL0WPLER301cu+0UBOXSyW9UtzJ EXa4rGYZUiCSKqDyaqmCY0WeTxiLis/WyCLhYih83Bd63q5Yc7+2eyg+TzlV/lHH 6o8m7AVK6TJZKy5dg2D1mIRhcLnF48f0qGtoU1n706SW7hxa7cs/36R45FPBgLkn mCsBC+tOhQs4PKOv0D2mQMaA65AK+VphY/6D+thGuMEFlTXLVlaueL1LgwhlZyNb dB5gKAqTxQ== -----END CERTIFICATE-----Generated at Fri Jul 24 14:11:10 2026 by rpki-client