$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft File: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft (raw, json) Hash identifier: lq4FX+ZFshpe458o0EFUs9djRLLrT6bkr6blMp508bk= Subject key identifier: DA:90:20:FC:05:12:E3:B1:DA:F4:30:87:94:54:34:46:45:A1:68:F4 Authority key identifier: C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 Certificate issuer: /CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Certificate serial: 7F1BE50CD168CF4CB5CB26F4360470B0824D9846 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft Manifest number: D2 Signing time: Wed 14 Oct 2026 18:04:24 +0000 Manifest this update: Wed 14 Oct 2026 17:59:24 +0000 Manifest next update: Sun 18 Oct 2026 02:45:24 +0000 Files and hashes: 1: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl (hash: 71311wRxFv4ESR/1bRiRpSg1OnmZshSkyJ1s+ShWfeM=) 2: 3130332e3133352e3139362e302f32322d3232203d3e20313337373435.roa (hash: nQ1f3FMKWA1GCdf1PRfEoceld3pBu9R9MjWCiBeIYHo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 02:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1b:e5:0c:d1:68:cf:4c:b5:cb:26:f4:36:04:70:b0:82:4d:98:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Validity Not Before: Oct 14 17:59:24 2026 GMT Not After : Oct 18 02:45:24 2026 GMT Subject: CN=DA9020FC0512E3B1DAF430879454344645A168F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cd:8f:73:ce:82:42:29:36:22:30:6a:d5:b7: 16:4c:db:0a:08:ab:6b:c0:18:47:99:93:ab:26:34: 17:cd:d6:08:76:7e:a6:be:b5:67:10:54:19:1f:20: 5c:0b:da:cd:e5:d7:69:38:22:fb:b6:71:09:fc:50: ea:9f:a7:ca:8c:16:80:e7:29:fd:6a:b8:df:ff:0c: 00:26:67:f8:bd:6c:86:d6:29:bd:d0:79:74:03:e7: 93:e3:88:22:e3:71:19:3b:51:22:f8:51:20:b5:68: 82:03:4b:86:4c:65:36:0e:2a:f1:96:10:c5:b7:60: 28:7c:8b:57:eb:10:6a:22:9f:40:67:2a:e5:34:6b: 63:1f:29:80:fb:c7:73:44:36:ab:3a:27:31:c6:5f: 60:0f:3a:06:de:15:fa:ad:3d:6a:81:9b:5b:ec:80: 42:e5:17:2e:6f:5d:a5:3d:49:02:0d:af:4f:9e:38: 11:26:2e:54:96:b2:55:41:31:1e:df:cb:cc:9b:d3: 9e:70:e6:bc:ba:56:51:9b:a8:29:21:24:00:8d:2d: 8e:4d:bf:91:ef:a7:37:52:4c:6b:56:28:74:a5:c6: d7:58:65:ef:b0:83:b7:2f:42:76:88:b6:5c:88:bf: f6:41:88:dc:b1:71:82:a6:ce:04:42:25:4b:85:cf: 6f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:90:20:FC:05:12:E3:B1:DA:F4:30:87:94:54:34:46:45:A1:68:F4 X509v3 Authority Key Identifier: keyid:C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:9b:0b:b8:ba:6f:f7:60:71:1b:e7:ab:51:6a:37:18:28:28: ce:ff:cc:32:8a:9a:a6:f9:6d:01:00:2c:29:48:b8:46:3c:f8: 04:7c:09:43:60:f7:70:59:5e:3f:65:dc:5d:3a:9d:09:28:08: 85:54:f9:9c:bb:b9:bc:60:84:0b:f1:b9:e7:41:87:7c:b2:cc: c6:dd:7d:1e:a1:7d:79:99:2e:66:c3:9e:48:7d:a2:dd:4e:8e: 14:cd:58:38:f5:38:0f:a4:a5:23:b1:0c:c1:34:af:8c:8d:3f: 1b:13:7b:21:2e:cb:af:2a:db:e1:7f:64:e6:50:98:9d:b1:03: b0:6a:b3:33:94:fe:7d:1c:05:77:8a:9a:41:dc:b1:a4:9f:60: ec:2e:23:92:a7:49:ac:7e:4e:bf:e0:03:da:c1:60:b0:07:1f: a8:c2:8d:ef:c0:7a:99:c0:e2:b2:f5:84:74:cc:67:b0:ba:53: 5b:b0:04:04:9b:90:14:33:89:16:9d:e6:2c:92:bf:cb:00:fc: 0d:d2:35:c9:77:76:da:9b:cb:19:e9:8e:7b:b5:3b:58:d1:03: e3:db:f9:1b:23:76:41:37:53:f7:a1:0b:a0:cf:bd:99:82:9e: d4:cf:ab:76:a1:8d:c0:3b:96:01:77:c3:0e:7a:66:f7:35:df: e4:8b:8a:e0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfxvlDNFoz0y1yyb0NgRwsIJNmEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYw MUI1RTFCMjAeFw0yNjEwMTQxNzU5MjRaFw0yNjEwMTgwMjQ1MjRaMDMxMTAvBgNV BAMTKERBOTAyMEZDMDUxMkUzQjFEQUY0MzA4Nzk0NTQzNDQ2NDVBMTY4RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUzY9zzoJCKTYiMGrVtxZM2woI q2vAGEeZk6smNBfN1gh2fqa+tWcQVBkfIFwL2s3l12k4Ivu2cQn8UOqfp8qMFoDn Kf1quN//DAAmZ/i9bIbWKb3QeXQD55PjiCLjcRk7USL4USC1aIIDS4ZMZTYOKvGW EMW3YCh8i1frEGoin0BnKuU0a2MfKYD7x3NENqs6JzHGX2APOgbeFfqtPWqBm1vs gELlFy5vXaU9SQINr0+eOBEmLlSWslVBMR7fy8yb055w5ry6VlGbqCkhJACNLY5N v5HvpzdSTGtWKHSlxtdYZe+wg7cvQnaItlyIv/ZBiNyxcYKmzgRCJUuFz28NAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2pAg/AUS47Ha9DCHlFQ0RkWhaPQwHwYDVR0j BBgwFoAUxFIkP6HPtPlz4rOMlVAlvwG14bIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5MDI0NzAxNzIwMTY2NS8wL0M0NTIyNDNGQTFDRkI0Rjk3M0UyQjM4Qzk1NTAy NUJGMDFCNUUxQjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYwMUI1RTFCMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTAyNDcwMTcyMDE2NjUvMC9DNDUyMjQzRkExQ0ZC NEY5NzNFMkIzOEM5NTUwMjVCRjAxQjVFMUIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZsLuLpv92Bx G+erUWo3GCgozv/MMoqapvltAQAsKUi4Rjz4BHwJQ2D3cFleP2XcXTqdCSgIhVT5 nLu5vGCEC/G550GHfLLMxt19HqF9eZkuZsOeSH2i3U6OFM1YOPU4D6SlI7EMwTSv jI0/GxN7IS7Lryrb4X9k5lCYnbEDsGqzM5T+fRwFd4qaQdyxpJ9g7C4jkqdJrH5O v+AD2sFgsAcfqMKN78B6mcDisvWEdMxnsLpTW7AEBJuQFDOJFp3mLJK/ywD8DdI1 yXd22pvLGemOe7U7WNED49v5GyN2QTdT96ELoM+9mYKe1M+rdqGNwDuWAXfDDnpm 9zXf5IuK4A== -----END CERTIFICATE-----Generated at Thu Oct 15 19:25:24 2026 by rpki-client