$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft File: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft (raw, json) Hash identifier: RDAtl3hLOcCHrh8DNDMQOjCvzZZYBkA22+AGZTbWT5c= Subject key identifier: 6B:2F:F8:09:F8:A1:58:57:86:CB:EB:B5:31:71:95:E5:D9:59:47:DF Authority key identifier: 45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 Certificate issuer: /CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Certificate serial: 1C042C320EC12DF31B54DC756F08B907AF69CD82 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft Manifest number: FE Signing time: Tue 28 Jul 2026 22:47:53 +0000 Manifest this update: Tue 28 Jul 2026 22:42:53 +0000 Manifest next update: Thu 30 Jul 2026 01:11:53 +0000 Files and hashes: 1: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl (hash: DwRtfD6pNHRfBatYlLZyQbj8Ka0s5rmdgesmHjLs1Bg=) 2: 3136332e36312e36322e302f32342d3234203d3e203138343634.roa (hash: Y/GbqiSHk47nm9kfLmWEQmvyAU1qdTdaRuJrF/5i1gE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:04:2c:32:0e:c1:2d:f3:1b:54:dc:75:6f:08:b9:07:af:69:cd:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Validity Not Before: Jul 28 22:42:53 2026 GMT Not After : Jul 30 01:11:53 2026 GMT Subject: CN=6B2FF809F8A1585786CBEBB5317195E5D95947DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a7:5a:d5:43:35:fb:16:fe:59:0c:8b:6e:d0: 4d:da:8c:d8:be:78:f8:51:36:34:a7:5c:6d:76:9b: cc:2d:9f:bf:1b:f0:62:1c:ec:dd:fd:4d:7e:e5:00: 70:4b:2d:ff:ee:b8:23:66:70:b9:c9:54:60:38:75: 15:b9:8a:3a:c4:f0:fe:a1:be:22:9f:50:09:f5:26: f4:18:3b:be:5f:0b:ed:16:b0:9c:60:e2:34:f2:b0: b6:60:6b:11:d7:9e:d7:68:77:5e:14:02:29:1f:a9: 81:aa:32:a1:8c:35:15:65:4d:16:38:2c:c4:ff:4c: 13:28:b8:7c:ff:77:f7:87:b3:99:8c:7b:05:f9:a2: 1e:96:80:c7:d9:90:ef:e0:f0:60:a6:c4:bb:9d:18: c4:c3:ba:72:48:88:b6:65:3d:f0:bd:82:c1:08:86: 54:93:6e:44:b0:73:86:3d:84:1b:be:e2:cc:8b:42: a3:94:97:83:61:8d:2a:14:1e:8a:36:32:24:b6:86: f5:41:dc:51:9e:80:a6:ab:92:75:97:18:47:06:44: 0a:96:04:fd:41:86:ad:a7:f6:2b:57:3f:20:a9:ab: 24:40:1b:08:c6:2f:38:26:81:70:e1:81:75:26:5a: 9b:2e:53:08:bd:14:a8:18:8c:b2:df:77:09:6e:45: 5d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2F:F8:09:F8:A1:58:57:86:CB:EB:B5:31:71:95:E5:D9:59:47:DF X509v3 Authority Key Identifier: keyid:45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ab:c9:6d:55:d3:be:c4:4f:59:8a:0c:17:fb:f6:c4:f5:99: 87:6c:d6:2b:e8:9d:14:44:e9:5c:75:ab:46:cb:7f:8e:ef:5d: 24:bb:b4:be:b0:30:64:6d:12:40:83:c7:80:2f:d5:55:28:05: b6:44:fa:8e:c6:c6:e3:a6:27:37:ec:27:ec:52:d4:6a:92:b4: cf:82:e0:cb:a9:e4:f1:92:39:e9:21:40:f5:31:a6:ca:3d:07: 3f:21:43:44:33:dc:53:ec:e2:cc:e7:7c:bb:a3:5d:8a:e4:0a: 12:ae:17:14:64:44:45:54:d3:f2:1c:5a:2f:96:4c:18:ad:60: c7:f2:86:d3:06:9d:34:b9:f0:9b:42:db:33:6c:9c:4c:4e:96: 7e:d7:54:e4:3b:8d:49:52:d8:af:89:ee:8b:12:1d:15:ce:e6: 38:05:b7:0b:fb:f4:0f:6a:4e:5b:1b:42:46:4a:df:64:17:c9: b6:cb:ce:9f:cb:96:f4:58:05:8b:f4:1f:50:6a:7b:06:5d:8b: fe:07:09:f4:8d:fe:65:bd:2c:6b:ac:78:40:e5:a1:c6:9b:c9: 1c:87:52:c9:b7:52:0d:2c:2f:6e:25:4d:4f:fc:aa:13:f9:71: 46:8f:73:f8:2c:51:ff:22:c4:ee:63:96:50:21:ee:0b:30:62: ff:ae:f5:06 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHAQsMg7BLfMbVNx1bwi5B69pzYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1 RUE3NkUxMDAeFw0yNjA3MjgyMjQyNTNaFw0yNjA3MzAwMTExNTNaMDMxMTAvBgNV BAMTKDZCMkZGODA5RjhBMTU4NTc4NkNCRUJCNTMxNzE5NUU1RDk1OTQ3REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUp1rVQzX7Fv5ZDItu0E3ajNi+ ePhRNjSnXG12m8wtn78b8GIc7N39TX7lAHBLLf/uuCNmcLnJVGA4dRW5ijrE8P6h viKfUAn1JvQYO75fC+0WsJxg4jTysLZgaxHXntdod14UAikfqYGqMqGMNRVlTRY4 LMT/TBMouHz/d/eHs5mMewX5oh6WgMfZkO/g8GCmxLudGMTDunJIiLZlPfC9gsEI hlSTbkSwc4Y9hBu+4syLQqOUl4NhjSoUHoo2MiS2hvVB3FGegKarknWXGEcGRAqW BP1Bhq2n9itXPyCpqyRAGwjGLzgmgXDhgXUmWpsuUwi9FKgYjLLfdwluRV13AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUay/4CfihWFeGy+u1MXGV5dlZR98wHwYDVR0j BBgwFoAURS5e8Uc4+3aQzDveqYmtCF6nbhAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1Nzc0MzEwNy8wLzQ1MkU1RUYxNDczOEZCNzY5MENDM0JERUE5ODlB RDA4NUVBNzZFMTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1RUE3NkUxMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc3NDMxMDcvMC80NTJFNUVGMTQ3MzhG Qjc2OTBDQzNCREVBOTg5QUQwODVFQTc2RTEwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWavJbVXTvsRP WYoMF/v2xPWZh2zWK+idFETpXHWrRst/ju9dJLu0vrAwZG0SQIPHgC/VVSgFtkT6 jsbG46YnN+wn7FLUapK0z4Lgy6nk8ZI56SFA9TGmyj0HPyFDRDPcU+zizOd8u6Nd iuQKEq4XFGRERVTT8hxaL5ZMGK1gx/KG0wadNLnwm0LbM2ycTE6WftdU5DuNSVLY r4nuixIdFc7mOAW3C/v0D2pOWxtCRkrfZBfJtsvOn8uW9FgFi/QfUGp7Bl2L/gcJ 9I3+Zb0sa6x4QOWhxpvJHIdSybdSDSwvbiVNT/yqE/lxRo9z+CxR/yLE7mOWUCHu CzBi/671Bg== -----END CERTIFICATE-----Generated at Wed Jul 29 14:21:32 2026 by rpki-client