$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft File: 45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft (raw, json) Hash identifier: j29q5/2B1dMvXDbYoelFmYE2xOQYsPX/nJHWy6Gsaaw= Subject key identifier: 5F:B8:09:28:06:2D:41:44:61:71:8A:28:C3:6F:88:7E:45:0B:87:8F Authority key identifier: 45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6 Certificate issuer: /CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6 Certificate serial: 11FF331DB6FE2BD1870ED24707E3705A7113BF46 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 19:48:16 +0000 Manifest this update: Sun 01 Mar 2026 19:43:16 +0000 Manifest next update: Mon 02 Mar 2026 21:41:16 +0000 Files and hashes: 1: 323430323a663863303a3a2f34382d3438203d3e20313337373938.roa (hash: cIxqlfd0QethhWMdV0g5VZkMAaNT0U3dpU5si9dWPEw=) 2: 45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl (hash: ekWAR81m7hfqHSHofeQv7nBJI51TyO/HFINtx9A5rwc=) 3: 3130332e3131362e39322e302f32342d3234203d3e20313337373938.roa (hash: GxDjwoGwXNDMqifO5LMnh9aEKS7YfWtIczricIBrf7c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 09:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ff:33:1d:b6:fe:2b:d1:87:0e:d2:47:07:e3:70:5a:71:13:bf:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6 Validity Not Before: Mar 1 19:43:16 2026 GMT Not After : Mar 2 21:41:16 2026 GMT Subject: CN=5FB80928062D414461718A28C36F887E450B878F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:3a:b2:76:0d:8f:f2:c7:7c:51:49:ea:b9:4a: e5:16:2d:80:27:0c:f5:cc:4b:bd:a5:54:4e:ca:90: 21:9a:1b:6e:35:98:f8:a5:c6:24:d9:38:d3:a6:55: 26:d8:48:37:99:cb:98:30:e7:1f:65:fa:91:d5:28: 89:3d:33:e3:71:2b:49:51:2b:57:32:c2:7b:29:fa: 04:f4:f9:4a:bd:5e:94:37:e6:82:2b:28:39:b2:51: d7:21:9f:23:e4:bd:30:18:69:17:53:3c:c8:a8:45: 9e:ad:cb:2c:a9:09:78:d6:ef:8e:f9:30:06:6e:2f: 31:41:82:95:2b:f0:fc:87:6c:07:f7:bf:4e:ab:f5: 5e:14:fe:3d:ad:eb:4a:e3:74:80:b4:dc:f3:e5:ed: 0f:e8:97:66:bc:29:87:b9:bd:a5:22:25:7a:86:67: 9a:21:34:83:2d:86:99:cb:cc:7b:1f:72:3d:f8:96: 9d:19:83:c6:19:b0:e1:e3:18:2c:83:5d:20:a6:f6: 69:06:18:ed:68:a3:d3:c6:b7:03:77:26:71:fa:34: a4:5f:a9:92:d8:ef:74:d9:0c:c7:d1:f7:67:e2:ce: 93:7e:7a:d2:0b:61:d9:55:95:e7:84:16:80:04:03: d6:ef:73:a5:3a:f6:94:71:aa:e5:b7:c5:e9:8b:6c: 6e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B8:09:28:06:2D:41:44:61:71:8A:28:C3:6F:88:7E:45:0B:87:8F X509v3 Authority Key Identifier: keyid:45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:33:23:35:f6:7e:34:c5:ab:1c:cc:4a:d1:1c:2a:f9:d6:d0: f9:66:0a:58:cb:09:0f:c6:5c:47:56:fe:14:9d:1e:92:9c:46: c5:29:84:39:34:f4:b6:33:11:7d:8c:68:3c:0e:c1:9d:d9:35: 5d:cd:a3:7d:88:86:fa:01:74:3b:7b:a6:35:a5:27:cb:9f:02: 0b:d4:42:dc:67:57:e4:ca:f6:f3:54:ef:ed:d9:f8:25:07:82: fe:2f:c5:6e:bf:2f:83:62:c7:02:76:d1:35:af:23:17:23:1b: 79:49:f9:2d:56:bd:09:c2:ed:35:f6:9d:17:88:fb:db:5c:9b: 07:c7:9d:f6:ad:ac:3c:e0:26:e0:5f:9e:6b:fe:55:aa:a5:35: 64:e2:34:82:b5:1c:75:e9:39:5a:a6:65:e8:a4:c2:a0:3a:af: aa:bf:26:62:e5:a9:80:26:24:26:1c:3a:af:85:bc:1d:f6:cd: a0:21:38:8a:2d:79:ba:a7:49:e6:c0:77:83:67:b6:ce:9e:cf: ae:a3:22:95:a6:81:38:ba:9e:52:c7:f6:24:17:94:c6:af:97: d2:c2:b5:75:d3:ec:00:1c:7a:44:85:c2:58:5d:2e:05:b8:64: 53:f3:ae:57:6f:5a:ff:ad:c8:b4:57:44:71:31:ae:d1:23:b5: 93:16:31:bb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEf8zHbb+K9GHDtJHB+NwWnETv0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVBRTUxRjMxOEQzNTUzMkJFQjZGRkZDNjIyQTJBQURF RjRDMkNFNjAeFw0yNjAzMDExOTQzMTZaFw0yNjAzMDIyMTQxMTZaMDMxMTAvBgNV BAMTKDVGQjgwOTI4MDYyRDQxNDQ2MTcxOEEyOEMzNkY4ODdFNDUwQjg3OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpOrJ2DY/yx3xRSeq5SuUWLYAn DPXMS72lVE7KkCGaG241mPilxiTZONOmVSbYSDeZy5gw5x9l+pHVKIk9M+NxK0lR K1cywnsp+gT0+Uq9XpQ35oIrKDmyUdchnyPkvTAYaRdTPMioRZ6tyyypCXjW7475 MAZuLzFBgpUr8PyHbAf3v06r9V4U/j2t60rjdIC03PPl7Q/ol2a8KYe5vaUiJXqG Z5ohNIMthpnLzHsfcj34lp0Zg8YZsOHjGCyDXSCm9mkGGO1oo9PGtwN3JnH6NKRf qZLY73TZDMfR92fizpN+etILYdlVleeEFoAEA9bvc6U69pRxquW3xemLbG45AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUX7gJKAYtQURhcYoow2+IfkULh48wHwYDVR0j BBgwFoAURa5R8xjTVTK+tv/8Yioqre9MLOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzA2MTI0OS8wLzQ1QUU1MUYzMThEMzU1MzJCRUI2RkZGQzYyMkEy QUFERUY0QzJDRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDVBRTUxRjMxOEQzNTUzMkJFQjZGRkZDNjIyQTJBQURFRjRDMkNFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcwNjEyNDkvMC80NUFFNTFGMzE4RDM1 NTMyQkVCNkZGRkM2MjJBMkFBREVGNEMyQ0U2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjMjNfZ+NMWr HMxK0Rwq+dbQ+WYKWMsJD8ZcR1b+FJ0ekpxGxSmEOTT0tjMRfYxoPA7Bndk1Xc2j fYiG+gF0O3umNaUny58CC9RC3GdX5Mr281Tv7dn4JQeC/i/Fbr8vg2LHAnbRNa8j FyMbeUn5LVa9CcLtNfadF4j721ybB8ed9q2sPOAm4F+ea/5VqqU1ZOI0grUcdek5 WqZl6KTCoDqvqr8mYuWpgCYkJhw6r4W8HfbNoCE4ii15uqdJ5sB3g2e2zp7PrqMi laaBOLqeUsf2JBeUxq+X0sK1ddPsABx6RIXCWF0uBbhkU/OuV29a/63ItFdEcTGu 0SO1kxYxuw== -----END CERTIFICATE-----Generated at Mon Mar 2 02:42:28 2026 by rpki-client