$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft File: 450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft (raw, json) Hash identifier: MP9Np3qtF2MQXT/cExK+fYEFpTezaYFRmPNUDFtMUqg= Subject key identifier: DC:A9:01:03:3E:69:A8:0D:ED:90:57:0E:1F:F6:85:7F:62:FF:A4:94 Authority key identifier: 45:0A:C0:E4:CD:E3:18:16:82:FF:27:C2:52:1C:C4:BF:72:90:C0:D7 Certificate issuer: /CN=450AC0E4CDE3181682FF27C2521CC4BF7290C0D7 Certificate serial: 4343C82355813BF809DC3CC6166D0DAEAB0474E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft Manifest number: 10 Signing time: Wed 13 May 2026 04:00:55 +0000 Manifest this update: Wed 13 May 2026 03:55:55 +0000 Manifest next update: Thu 14 May 2026 05:53:55 +0000 Files and hashes: 1: 450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl (hash: ZSkieD1vjKjU5U/oTS0ByonFaq+XhsZB/HFQXCDtH/o=) 2: 3130332e3232382e3230342e302f32332d3233203d3e2034383038.roa (hash: 0Mhtj21hVbeX9XUR/Q2Gx0H8h7HJJx0VMMT+V2reTHc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:43:c8:23:55:81:3b:f8:09:dc:3c:c6:16:6d:0d:ae:ab:04:74:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=450AC0E4CDE3181682FF27C2521CC4BF7290C0D7 Validity Not Before: May 13 03:55:55 2026 GMT Not After : May 14 05:53:55 2026 GMT Subject: CN=DCA901033E69A80DED90570E1FF6857F62FFA494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9b:76:f6:c5:6e:cd:c4:3d:da:5a:e5:7b:69: a1:ca:87:86:ed:19:d5:86:6c:88:79:69:0a:3c:31: 70:0a:4e:5e:41:af:1b:af:f1:ac:ad:1c:33:76:f1: fd:b1:ea:4b:94:35:6d:f3:c0:81:76:54:3b:35:a7: ed:b5:b4:e0:b0:b1:f0:d8:8b:af:5c:b7:17:4f:2e: f9:e5:dd:ce:3f:08:51:d6:3d:22:60:bc:c2:78:d0: 2c:32:8c:95:b0:eb:fd:46:32:f1:ff:0e:a2:b7:e5: a3:0d:0a:b5:a0:17:fa:9b:4a:7a:e3:0a:87:55:eb: 2a:b0:90:8e:77:d9:1e:16:89:dd:0d:25:74:89:e6: c7:bd:24:11:0d:04:93:b7:52:f3:7a:d5:42:9a:e9: d3:a8:c6:04:39:17:c9:1d:34:6c:43:ba:4a:b6:53: f2:9a:3d:7f:9b:d8:49:52:3b:d5:af:a9:47:72:25: 65:79:fd:11:fd:13:b1:1b:1b:ac:7b:7a:65:49:28: 9b:f4:74:13:8f:63:f0:5b:40:92:7b:41:ff:10:94: 4b:1b:64:53:3e:d3:8a:5c:de:38:2d:55:bb:bc:ae: 58:6d:a7:57:9c:b9:29:21:eb:df:5a:81:f5:11:4a: 80:6f:2f:17:f5:70:3d:07:de:5b:f2:c4:1b:a3:c0: d6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A9:01:03:3E:69:A8:0D:ED:90:57:0E:1F:F6:85:7F:62:FF:A4:94 X509v3 Authority Key Identifier: keyid:45:0A:C0:E4:CD:E3:18:16:82:FF:27:C2:52:1C:C4:BF:72:90:C0:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c5:4e:45:4a:42:15:11:87:57:da:c6:59:c1:58:08:12:f9: f1:e6:4a:02:32:92:44:22:42:7d:ad:64:fe:8a:ea:c3:5a:4b: bb:a9:58:ab:e8:b2:ea:04:8e:b2:08:80:52:fa:16:ab:32:8e: 90:65:63:bf:72:9a:3c:4b:de:14:b4:09:49:b0:ae:8e:be:eb: 19:c3:36:fc:c5:68:e6:5b:49:9b:cc:9c:a8:21:44:41:4a:72: 8f:0e:e7:1a:17:1b:e4:86:50:33:40:89:3d:2b:08:6e:b2:3a: ec:b5:72:b4:b6:eb:fd:3c:2a:ff:a4:f1:4e:51:fa:66:10:94: 66:92:b6:e8:ea:00:43:03:cf:1c:71:ff:e7:e3:29:39:da:1e: 35:ea:98:4c:60:7f:44:84:bd:43:85:4b:70:a1:b6:24:4f:89: 3c:cd:54:c1:d8:b9:9b:34:3f:bb:5d:05:41:16:c6:d0:48:2c: 14:a4:59:af:39:da:fd:78:5b:b1:22:be:77:15:33:e3:51:40: 6b:af:1c:b6:86:ab:82:c8:fb:fd:53:8f:e1:98:d9:03:90:f2: b7:a4:53:1d:41:b0:25:21:b2:35:d3:49:c6:c9:25:cc:e4:f2: 3a:e3:ed:f3:a5:49:09:c6:83:1d:5b:e0:8b:cb:5c:2c:26:39: bf:68:46:ef -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ0PII1WBO/gJ3DzGFm0NrqsEdOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwQUMwRTRDREUzMTgxNjgyRkYyN0MyNTIxQ0M0QkY3 MjkwQzBENzAeFw0yNjA1MTMwMzU1NTVaFw0yNjA1MTQwNTUzNTVaMDMxMTAvBgNV BAMTKERDQTkwMTAzM0U2OUE4MERFRDkwNTcwRTFGRjY4NTdGNjJGRkE0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCom3b2xW7NxD3aWuV7aaHKh4bt GdWGbIh5aQo8MXAKTl5Brxuv8aytHDN28f2x6kuUNW3zwIF2VDs1p+21tOCwsfDY i69ctxdPLvnl3c4/CFHWPSJgvMJ40CwyjJWw6/1GMvH/DqK35aMNCrWgF/qbSnrj CodV6yqwkI532R4Wid0NJXSJ5se9JBENBJO3UvN61UKa6dOoxgQ5F8kdNGxDukq2 U/KaPX+b2ElSO9WvqUdyJWV5/RH9E7EbG6x7emVJKJv0dBOPY/BbQJJ7Qf8QlEsb ZFM+04pc3jgtVbu8rlhtp1ecuSkh699agfURSoBvLxf1cD0H3lvyxBujwNZDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3KkBAz5pqA3tkFcOH/aFf2L/pJQwHwYDVR0j BBgwFoAURQrA5M3jGBaC/yfCUhzEv3KQwNcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Mjk5MTY5NzU4MDY1NDYwMS8wLzQ1MEFDMEU0Q0RFMzE4MTY4MkZGMjdDMjUyMUND NEJGNzI5MEMwRDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDUwQUMwRTRDREUzMTgxNjgyRkYyN0MyNTIxQ0M0QkY3MjkwQzBENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDI5OTE2OTc1ODA2NTQ2MDEvMC80NTBBQzBFNENERTMx ODE2ODJGRjI3QzI1MjFDQzRCRjcyOTBDMEQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsVORUpCFRGH V9rGWcFYCBL58eZKAjKSRCJCfa1k/orqw1pLu6lYq+iy6gSOsgiAUvoWqzKOkGVj v3KaPEveFLQJSbCujr7rGcM2/MVo5ltJm8ycqCFEQUpyjw7nGhcb5IZQM0CJPSsI brI67LVytLbr/Twq/6TxTlH6ZhCUZpK26OoAQwPPHHH/5+MpOdoeNeqYTGB/RIS9 Q4VLcKG2JE+JPM1Uwdi5mzQ/u10FQRbG0EgsFKRZrzna/XhbsSK+dxUz41FAa68c toargsj7/VOP4ZjZA5Dyt6RTHUGwJSGyNdNJxsklzOTyOuPt86VJCcaDHVvgi8tc LCY5v2hG7w== -----END CERTIFICATE-----Generated at Wed May 13 14:11:19 2026 by rpki-client