$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft File: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft (raw, json) Hash identifier: EQnH2LhJ65+OmQU4EoHXfS5vXwcwpU+GlV0NCaDcqWc= Subject key identifier: 50:88:D8:04:77:6F:23:6B:B9:C4:14:C4:87:3A:05:AC:FC:E5:E8:0F Authority key identifier: 45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 Certificate issuer: /CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Certificate serial: 158D89DA18201670508B72AF9DD278DDE0FF0205 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft Manifest number: 75 Signing time: Fri 17 Apr 2026 05:49:40 +0000 Manifest this update: Fri 17 Apr 2026 05:44:40 +0000 Manifest next update: Sat 18 Apr 2026 07:48:40 +0000 Files and hashes: 1: 3136332e36312e36322e302f32342d3234203d3e203138343634.roa (hash: Y/GbqiSHk47nm9kfLmWEQmvyAU1qdTdaRuJrF/5i1gE=) 2: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl (hash: rALbI0ztUhTt631SQdzXxSCYZv5Gwms8v6b0bHD2zeY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 07:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:8d:89:da:18:20:16:70:50:8b:72:af:9d:d2:78:dd:e0:ff:02:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Validity Not Before: Apr 17 05:44:40 2026 GMT Not After : Apr 18 07:48:40 2026 GMT Subject: CN=5088D804776F236BB9C414C4873A05ACFCE5E80F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:44:91:5f:f0:c2:a7:e2:71:58:f1:e6:7d:fb: 6a:8f:ce:fe:e3:93:fe:ec:ad:6c:fb:ea:7d:2c:dd: 8b:5f:53:7e:87:66:f3:b1:f2:50:67:ba:7b:ad:22: bb:80:08:2a:24:df:9b:fd:14:8a:ca:e1:1f:c3:cc: 16:e8:5f:c6:45:2d:36:ac:ff:6a:ab:48:e2:42:e7: 5a:53:26:a1:d1:d5:09:70:76:9e:84:33:67:27:67: d8:fd:2e:01:d4:29:45:1f:47:98:c1:10:c2:29:b4: f4:ce:28:c2:82:07:94:42:08:85:39:c8:44:02:59: 66:6b:fb:dd:16:68:59:72:b9:54:b4:75:19:1a:19: 01:e8:86:0d:10:d3:fe:d4:21:56:c8:41:52:71:db: 24:a0:49:e6:54:25:08:fc:75:33:20:9b:fd:4f:8a: c0:b4:d9:da:4b:d5:b1:38:06:bb:e5:58:94:ca:db: 24:b4:73:56:9a:7a:e7:76:3f:cb:b9:f1:94:d8:8a: b1:3b:e1:f3:5f:08:cf:6d:da:44:f1:03:f0:fc:6f: 10:75:b0:2b:94:0d:27:14:18:8e:f4:b0:6a:46:39: 00:d5:53:f6:0f:4f:61:81:72:fe:b6:84:24:75:c2: fd:da:07:ec:b9:2c:b3:64:d4:36:a2:55:c3:26:1a: 24:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:88:D8:04:77:6F:23:6B:B9:C4:14:C4:87:3A:05:AC:FC:E5:E8:0F X509v3 Authority Key Identifier: keyid:45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:de:73:73:dd:6a:6f:d0:66:7a:8a:b5:cb:20:f9:6a:32:11: c9:ef:39:76:d3:f4:cb:4e:1d:a0:0d:2d:38:ec:aa:fe:88:d8: 48:94:1a:89:62:1d:81:56:63:4a:3a:49:08:4c:24:35:ff:4e: 70:83:c2:11:8e:52:88:32:df:8e:53:d7:15:30:9b:09:4c:92: ab:8e:48:f6:76:eb:fc:9c:40:21:03:a2:7e:3a:50:02:60:76: 8f:a1:21:19:1e:77:69:4b:2c:20:2c:b8:fc:7d:bf:cb:b2:54: 27:09:bc:9f:a6:d1:a7:b3:8b:4a:c5:d5:f7:e3:1c:b6:32:7a: 71:5d:64:ad:45:c9:f7:11:69:01:b5:44:55:b5:c2:4e:23:b6: 78:64:52:33:e0:b0:7f:03:99:74:0d:ee:3c:09:41:16:c5:82: 54:91:c9:9d:e0:aa:b9:57:d6:78:3f:ce:61:c1:14:04:fd:98: b3:3c:5b:43:c5:7a:e1:f3:78:5f:9f:3d:b4:b5:aa:66:35:67: 79:28:34:bc:9f:61:d8:23:2b:1f:78:36:f4:ec:02:4b:7d:8e: 12:f4:81:46:9f:a7:1d:cf:63:92:14:d6:e4:53:1b:67:88:81: 19:e4:e1:f3:c6:71:c5:56:8a:8f:f3:b6:e6:6f:7e:ef:23:09: e6:14:fd:4d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFY2J2hggFnBQi3KvndJ43eD/AgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1 RUE3NkUxMDAeFw0yNjA0MTcwNTQ0NDBaFw0yNjA0MTgwNzQ4NDBaMDMxMTAvBgNV BAMTKDUwODhEODA0Nzc2RjIzNkJCOUM0MTRDNDg3M0EwNUFDRkNFNUU4MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDERJFf8MKn4nFY8eZ9+2qPzv7j k/7srWz76n0s3YtfU36HZvOx8lBnunutIruACCok35v9FIrK4R/DzBboX8ZFLTas /2qrSOJC51pTJqHR1Qlwdp6EM2cnZ9j9LgHUKUUfR5jBEMIptPTOKMKCB5RCCIU5 yEQCWWZr+90WaFlyuVS0dRkaGQHohg0Q0/7UIVbIQVJx2ySgSeZUJQj8dTMgm/1P isC02dpL1bE4BrvlWJTK2yS0c1aaeud2P8u58ZTYirE74fNfCM9t2kTxA/D8bxB1 sCuUDScUGI70sGpGOQDVU/YPT2GBcv62hCR1wv3aB+y5LLNk1DaiVcMmGiQHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUIjYBHdvI2u5xBTEhzoFrPzl6A8wHwYDVR0j BBgwFoAURS5e8Uc4+3aQzDveqYmtCF6nbhAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1Nzc0MzEwNy8wLzQ1MkU1RUYxNDczOEZCNzY5MENDM0JERUE5ODlB RDA4NUVBNzZFMTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1RUE3NkUxMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc3NDMxMDcvMC80NTJFNUVGMTQ3MzhG Qjc2OTBDQzNCREVBOTg5QUQwODVFQTc2RTEwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAat5zc91qb9Bm eoq1yyD5ajIRye85dtP0y04doA0tOOyq/ojYSJQaiWIdgVZjSjpJCEwkNf9OcIPC EY5SiDLfjlPXFTCbCUySq45I9nbr/JxAIQOifjpQAmB2j6EhGR53aUssICy4/H2/ y7JUJwm8n6bRp7OLSsXV9+MctjJ6cV1krUXJ9xFpAbVEVbXCTiO2eGRSM+CwfwOZ dA3uPAlBFsWCVJHJneCquVfWeD/OYcEUBP2YszxbQ8V64fN4X589tLWqZjVneSg0 vJ9h2CMrH3g29OwCS32OEvSBRp+nHc9jkhTW5FMbZ4iBGeTh88ZxxVaKj/O25m9+ 7yMJ5hT9TQ== -----END CERTIFICATE-----Generated at Sat Apr 18 00:41:50 2026 by rpki-client