$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft File: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft (raw, json) Hash identifier: Kc11Pr0MJKfXCbexvha86TpWJ+94b7M/zxTDxaemOGU= Subject key identifier: 25:47:4F:E1:97:DB:8E:E6:1B:10:96:DF:1E:F7:44:C9:04:B1:C8:25 Authority key identifier: 45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 Certificate issuer: /CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Certificate serial: 25254AF7C87CE4E4C33CBE3EEEA39BE7C132799E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft Manifest number: 013C Signing time: Tue 13 Oct 2026 07:37:51 +0000 Manifest this update: Tue 13 Oct 2026 07:32:51 +0000 Manifest next update: Fri 16 Oct 2026 16:20:51 +0000 Files and hashes: 1: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl (hash: GBwBBh6JGbDSSaBMxbN2TJx93LXRt/ePIs83VgUvU8g=) 2: 3136332e36312e36322e302f32342d3234203d3e203138343634.roa (hash: Y/GbqiSHk47nm9kfLmWEQmvyAU1qdTdaRuJrF/5i1gE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 16:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:25:4a:f7:c8:7c:e4:e4:c3:3c:be:3e:ee:a3:9b:e7:c1:32:79:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Validity Not Before: Oct 13 07:32:51 2026 GMT Not After : Oct 16 16:20:51 2026 GMT Subject: CN=25474FE197DB8EE61B1096DF1EF744C904B1C825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:7b:fb:cc:c3:39:59:0b:ed:31:45:af:65: 4a:2b:f3:5f:61:be:c2:ab:e5:1d:0c:09:95:00:28: 26:eb:59:4d:12:9d:f4:16:ec:33:95:a2:12:72:0d: a5:cb:51:3c:67:4f:90:cf:da:8a:09:49:e4:4b:fb: 05:85:8c:45:b5:b4:d8:f3:1d:da:90:05:b5:dd:be: 94:a0:f0:b3:8d:4a:c6:0e:fa:6c:1e:c7:ee:49:80: 5c:c5:db:39:da:1b:cd:81:d3:8d:5b:20:c5:3e:06: a8:0c:9d:e7:18:6d:fb:3c:5d:90:fb:12:f2:6a:01: 77:42:ea:3f:e8:7b:97:12:cc:d1:f4:67:7b:08:fb: a4:44:d0:09:c8:5f:98:72:c7:4a:af:02:51:09:1a: fb:ed:72:f5:53:e1:03:97:f2:75:d1:74:73:24:75: d7:00:a6:b0:96:42:4f:28:2e:97:46:26:76:d6:24: 25:53:ee:92:9e:ba:5f:35:ab:1c:1f:74:ab:7c:33: 54:41:61:66:53:20:c3:32:c2:97:c2:a6:30:23:7c: a2:fb:93:a3:bd:fd:45:02:d2:86:3e:9c:13:ff:58: 31:49:1c:46:96:02:6e:7a:9b:da:ac:19:2f:92:06: f4:2a:5a:a8:0f:5f:24:78:e6:88:68:c4:33:78:5d: f2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:47:4F:E1:97:DB:8E:E6:1B:10:96:DF:1E:F7:44:C9:04:B1:C8:25 X509v3 Authority Key Identifier: keyid:45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:e5:3c:19:fe:52:1c:56:ab:cd:60:6a:8e:9b:7f:08:6d:e5: a3:87:6b:70:ec:59:e6:72:7f:7a:9a:c2:11:03:b5:04:fb:83: 06:4d:09:69:83:27:24:82:2b:cb:fb:84:4d:16:2e:46:71:25: 9e:aa:c1:ab:ee:fa:c4:1a:fc:f5:48:17:15:7a:1e:01:d6:73: 7e:dd:62:bc:23:3d:66:d0:5e:a7:93:f3:34:3a:75:d9:5d:ec: 78:87:18:22:f5:2b:35:0a:3e:4e:6e:cb:c9:36:5d:49:ee:60: d1:44:cf:f8:a8:09:bf:c2:d2:96:2d:69:58:49:de:23:bd:b2: f3:28:b8:2d:5a:2e:2a:44:c4:33:77:c9:7e:6b:27:ed:86:7d: b7:f9:71:13:9a:8b:c0:4c:49:f6:1c:a1:f0:d9:13:f5:26:83: 8c:9e:81:a8:61:d1:af:5c:93:80:25:67:6d:8c:67:81:c6:b8: e5:b4:9e:7c:79:ae:b7:da:29:aa:a2:29:b9:96:82:37:5d:db: c2:5b:1b:ff:42:f9:73:f9:6c:dd:20:be:96:e0:fd:50:a6:8d: d6:3f:ab:57:66:54:0f:c6:84:95:be:15:63:6d:a1:31:a2:4d: 78:d6:2e:d8:9b:40:2a:44:73:93:d0:23:d8:2a:26:0f:c4:cd: 96:8a:b8:02 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJSVK98h85OTDPL4+7qOb58EyeZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1 RUE3NkUxMDAeFw0yNjEwMTMwNzMyNTFaFw0yNjEwMTYxNjIwNTFaMDMxMTAvBgNV BAMTKDI1NDc0RkUxOTdEQjhFRTYxQjEwOTZERjFFRjc0NEM5MDRCMUM4MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJD3v7zMM5WQvtMUWvZUor819h vsKr5R0MCZUAKCbrWU0SnfQW7DOVohJyDaXLUTxnT5DP2ooJSeRL+wWFjEW1tNjz HdqQBbXdvpSg8LONSsYO+mwex+5JgFzF2znaG82B041bIMU+BqgMnecYbfs8XZD7 EvJqAXdC6j/oe5cSzNH0Z3sI+6RE0AnIX5hyx0qvAlEJGvvtcvVT4QOX8nXRdHMk ddcAprCWQk8oLpdGJnbWJCVT7pKeul81qxwfdKt8M1RBYWZTIMMywpfCpjAjfKL7 k6O9/UUC0oY+nBP/WDFJHEaWAm56m9qsGS+SBvQqWqgPXyR45ohoxDN4XfIVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJUdP4ZfbjuYbEJbfHvdEyQSxyCUwHwYDVR0j BBgwFoAURS5e8Uc4+3aQzDveqYmtCF6nbhAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1Nzc0MzEwNy8wLzQ1MkU1RUYxNDczOEZCNzY5MENDM0JERUE5ODlB RDA4NUVBNzZFMTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1RUE3NkUxMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc3NDMxMDcvMC80NTJFNUVGMTQ3MzhG Qjc2OTBDQzNCREVBOTg5QUQwODVFQTc2RTEwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGeU8Gf5SHFar zWBqjpt/CG3lo4drcOxZ5nJ/eprCEQO1BPuDBk0JaYMnJIIry/uETRYuRnElnqrB q+76xBr89UgXFXoeAdZzft1ivCM9ZtBep5PzNDp12V3seIcYIvUrNQo+Tm7LyTZd Se5g0UTP+KgJv8LSli1pWEneI72y8yi4LVouKkTEM3fJfmsn7YZ9t/lxE5qLwExJ 9hyh8NkT9SaDjJ6BqGHRr1yTgCVnbYxngca45bSefHmut9opqqIpuZaCN13bwlsb /0L5c/ls3SC+luD9UKaN1j+rV2ZUD8aElb4VY22hMaJNeNYu2JtAKkRzk9Aj2Com D8TNloq4Ag== -----END CERTIFICATE-----Generated at Thu Oct 15 12:30:01 2026 by rpki-client