$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft File: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft (raw, json) Hash identifier: JIpqdO/HKf6g/X/0XsR7VETa50fUcGKmEFjSTZHNztA= Subject key identifier: 31:C7:56:83:AF:ED:D5:EA:E6:B2:58:C2:28:56:F9:9B:1B:5B:CD:F6 Authority key identifier: C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 Certificate issuer: /CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Certificate serial: 122BB29FBD806921EF0E2B9E4C39DBFB3777B2CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft Manifest number: 58 Signing time: Sat 13 Jun 2026 17:56:59 +0000 Manifest this update: Sat 13 Jun 2026 17:51:59 +0000 Manifest next update: Sun 14 Jun 2026 19:46:59 +0000 Files and hashes: 1: 3130332e3133352e3139362e302f32322d3232203d3e20313337373435.roa (hash: nQ1f3FMKWA1GCdf1PRfEoceld3pBu9R9MjWCiBeIYHo=) 2: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl (hash: 7jJJNbaKVwo+BKkMANnGE0hSuNovdAhDuun6N2nf3vA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:2b:b2:9f:bd:80:69:21:ef:0e:2b:9e:4c:39:db:fb:37:77:b2:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Validity Not Before: Jun 13 17:51:59 2026 GMT Not After : Jun 14 19:46:59 2026 GMT Subject: CN=31C75683AFEDD5EAE6B258C22856F99B1B5BCDF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:13:3d:70:51:13:6a:cd:a4:c3:60:a0:02:a3: 64:43:a8:49:85:1f:c3:f9:cc:21:6f:37:4e:57:61: a0:f2:55:40:cd:24:6d:6d:cf:fd:05:1f:7b:d6:62: cd:06:c3:8a:41:cc:00:c8:ed:4c:63:04:a2:0e:d2: ee:d0:0f:84:12:70:15:4f:c5:ea:aa:75:4c:69:1d: 50:1a:a5:16:5b:82:d4:7d:bd:fe:f2:9f:e1:50:f3: fb:9d:a6:85:e6:90:bb:c4:40:cf:9c:4a:a7:33:fc: cf:0f:4a:41:e5:99:44:a9:ef:40:08:43:b2:9a:7e: 74:8c:17:4f:11:5b:1d:f1:84:a4:6d:5a:d0:77:82: 92:99:f7:e3:a5:5e:f3:75:19:5d:49:c3:ac:e6:10: 39:05:f1:d2:38:6a:33:a3:bf:69:80:47:de:ce:75: 70:f5:7d:a3:e1:5c:35:66:ae:5f:7a:f0:19:73:83: cc:6b:bd:34:16:c1:6d:d4:20:be:9d:41:17:0e:c0: bb:30:14:78:0c:4e:73:c2:79:15:51:38:fd:7f:28: 5b:02:75:9b:a1:b9:c7:99:63:a8:ba:36:54:8d:ac: cd:8d:2c:bd:03:fb:85:25:ec:2e:50:6c:50:a2:ff: 26:9a:fc:b4:3f:73:51:e5:66:90:4e:43:85:76:e0: 4b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C7:56:83:AF:ED:D5:EA:E6:B2:58:C2:28:56:F9:9B:1B:5B:CD:F6 X509v3 Authority Key Identifier: keyid:C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:43:e0:a4:c7:cd:54:91:18:4c:b9:5a:6e:54:51:61:70:a2: 68:56:60:46:d3:94:4e:84:3d:b4:23:7b:ec:ad:b3:eb:b9:44: 5c:c1:82:27:73:88:94:de:8d:55:ee:dc:24:f0:3e:2b:ed:93: 20:b6:23:37:9c:24:a0:6c:10:dc:94:55:a2:af:6f:50:39:b9: b2:0d:92:62:43:1f:91:f7:a5:af:27:25:eb:e0:07:c9:80:fc: ac:9c:ec:f6:b9:d2:89:8f:70:2c:63:22:26:c8:b0:94:ae:e7: eb:f9:2f:26:79:15:5c:01:ed:f8:8e:6d:7b:ff:a6:ce:e3:74: 14:fa:a9:3e:4a:a0:26:72:ba:b1:09:cb:53:90:aa:03:55:57: c1:a8:54:bd:41:c7:81:fc:d7:e3:2b:e9:53:9d:dc:9f:88:a3: 23:9d:fc:4b:c1:97:1f:b2:b8:36:0b:0b:ef:45:ef:e2:c8:2d: 6d:63:fc:f8:cb:2d:34:a0:7c:57:41:a2:17:0f:0a:ae:ef:e2: d3:b8:b9:e9:d0:44:32:04:b6:da:72:30:d1:91:ac:24:7c:bb: 9e:83:7c:72:0b:e1:ee:c8:2e:8a:33:20:b7:99:58:e3:82:ee: c8:8d:b6:f1:d7:fc:2b:63:20:ef:56:d3:c0:4a:7d:bb:80:18: 44:4a:ab:87 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEiuyn72AaSHvDiueTDnb+zd3ss4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYw MUI1RTFCMjAeFw0yNjA2MTMxNzUxNTlaFw0yNjA2MTQxOTQ2NTlaMDMxMTAvBgNV BAMTKDMxQzc1NjgzQUZFREQ1RUFFNkIyNThDMjI4NTZGOTlCMUI1QkNERjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Ez1wURNqzaTDYKACo2RDqEmF H8P5zCFvN05XYaDyVUDNJG1tz/0FH3vWYs0Gw4pBzADI7UxjBKIO0u7QD4QScBVP xeqqdUxpHVAapRZbgtR9vf7yn+FQ8/udpoXmkLvEQM+cSqcz/M8PSkHlmUSp70AI Q7KafnSMF08RWx3xhKRtWtB3gpKZ9+OlXvN1GV1Jw6zmEDkF8dI4ajOjv2mAR97O dXD1faPhXDVmrl968Blzg8xrvTQWwW3UIL6dQRcOwLswFHgMTnPCeRVROP1/KFsC dZuhuceZY6i6NlSNrM2NLL0D+4Ul7C5QbFCi/yaa/LQ/c1HlZpBOQ4V24EsbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMcdWg6/t1ermsljCKFb5mxtbzfYwHwYDVR0j BBgwFoAUxFIkP6HPtPlz4rOMlVAlvwG14bIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5MDI0NzAxNzIwMTY2NS8wL0M0NTIyNDNGQTFDRkI0Rjk3M0UyQjM4Qzk1NTAy NUJGMDFCNUUxQjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYwMUI1RTFCMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTAyNDcwMTcyMDE2NjUvMC9DNDUyMjQzRkExQ0ZC NEY5NzNFMkIzOEM5NTUwMjVCRjAxQjVFMUIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEPgpMfNVJEY TLlablRRYXCiaFZgRtOUToQ9tCN77K2z67lEXMGCJ3OIlN6NVe7cJPA+K+2TILYj N5wkoGwQ3JRVoq9vUDm5sg2SYkMfkfelrycl6+AHyYD8rJzs9rnSiY9wLGMiJsiw lK7n6/kvJnkVXAHt+I5te/+mzuN0FPqpPkqgJnK6sQnLU5CqA1VXwahUvUHHgfzX 4yvpU53cn4ijI538S8GXH7K4NgsL70Xv4sgtbWP8+MstNKB8V0GiFw8Kru/i07i5 6dBEMgS22nIw0ZGsJHy7noN8cgvh7sguijMgt5lY44LuyI228df8K2Mg71bTwEp9 u4AYREqrhw== -----END CERTIFICATE-----Generated at Sun Jun 14 08:37:34 2026 by rpki-client