$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft File: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft (raw, json) Hash identifier: ABrWDfSbh4nP2DoUTXlJie2b60vcQhAG9s4WLacN11I= Subject key identifier: E6:B8:A1:11:19:45:83:09:B0:0F:C6:F5:5A:2C:AE:CD:73:97:23:A1 Authority key identifier: C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 Certificate issuer: /CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Certificate serial: 541532E308C53A7D0A44E64C5B2175CF79E5BBE9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft Manifest number: 0B Signing time: Fri 17 Apr 2026 05:09:40 +0000 Manifest this update: Fri 17 Apr 2026 05:04:40 +0000 Manifest next update: Sat 18 Apr 2026 08:26:40 +0000 Files and hashes: 1: 3130332e3133352e3139362e302f32322d3232203d3e20313337373435.roa (hash: nQ1f3FMKWA1GCdf1PRfEoceld3pBu9R9MjWCiBeIYHo=) 2: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl (hash: 9akHLZjnqF7hsKcTsXPmG40M3h5qwGcSKpoiHcfrIwY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:15:32:e3:08:c5:3a:7d:0a:44:e6:4c:5b:21:75:cf:79:e5:bb:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Validity Not Before: Apr 17 05:04:40 2026 GMT Not After : Apr 18 08:26:40 2026 GMT Subject: CN=E6B8A11119458309B00FC6F55A2CAECD739723A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f7:66:f3:61:a6:a1:6c:18:60:cd:a7:0e:56: 3f:5d:80:2c:63:c6:0b:a1:51:8a:4c:94:66:68:6e: 21:bb:7f:af:3e:99:9d:0c:ae:d8:6e:61:d4:78:72: 0c:76:06:06:a1:1b:a9:5d:b2:3e:51:2e:da:fe:2c: 6a:44:d2:e1:df:b3:ee:4a:a7:dd:2d:13:f6:7c:38: 6d:57:86:76:c9:51:8c:ad:87:5d:e9:7d:7c:ac:3c: 6f:55:b3:44:95:cc:8b:c7:f2:46:03:05:25:2a:03: e5:09:2a:dc:e0:37:a5:58:79:80:db:e6:07:b6:27: d5:19:d2:b4:7b:f9:f2:31:cb:f0:04:54:da:27:19: 6b:0d:a0:37:cd:7b:ff:ef:5e:ca:5c:a4:47:d8:fd: fa:4d:fd:1b:3d:14:6f:d3:6a:eb:f7:5f:01:a2:05: db:c0:1e:79:5d:ba:c1:21:58:79:17:1d:5f:25:ba: 4a:85:0f:62:05:15:08:9b:5d:89:10:6f:95:39:de: c1:78:a2:e0:42:d1:34:f3:90:8d:c6:32:2b:e7:a0: 16:b7:ee:d8:6b:fe:8e:8f:96:a9:b8:ae:5c:e3:7b: 53:89:46:41:c5:fd:df:30:0b:9b:d4:08:03:b6:a8: fc:eb:32:dc:85:b1:ae:7c:d6:72:6a:58:95:7d:e6: e6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B8:A1:11:19:45:83:09:B0:0F:C6:F5:5A:2C:AE:CD:73:97:23:A1 X509v3 Authority Key Identifier: keyid:C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:5d:79:48:97:dc:d2:1c:ae:73:ba:35:ff:69:6e:09:ca:a1: 2c:50:ff:6c:92:21:98:d6:28:ae:29:13:67:0a:31:61:f1:9c: 81:9e:5f:5c:95:c6:cf:e4:7a:81:f7:6c:7c:13:44:eb:8a:50: c2:72:1d:90:2c:40:be:46:e5:51:e2:b9:f6:0e:14:71:bf:0b: a0:46:b7:c7:d2:c5:cf:a7:f2:bc:20:f7:56:1a:51:79:19:0e: b0:96:2c:a5:59:56:ab:46:c3:cf:4a:86:1b:b0:44:27:60:99: 47:36:fa:74:3f:04:5a:1d:37:c4:35:92:3e:c6:82:d5:43:fb: 00:ab:94:92:7d:27:90:24:17:a9:66:35:63:81:a9:5e:fe:63: c5:38:42:e3:98:29:8b:80:e2:5d:00:f5:02:e3:c1:97:4f:99: 8f:b2:50:d5:b6:51:fc:b5:1d:2b:ad:c7:59:e0:f6:9e:cb:9f: ff:5c:bc:1e:d5:94:cd:03:6d:63:1f:eb:56:a9:32:de:fb:b8: 35:e3:4a:88:09:27:f8:69:02:47:7a:4c:30:4d:75:e4:ef:a6: c0:f8:be:d3:ee:b2:f6:0d:3e:19:cf:2c:73:fa:11:4e:85:d7: bf:cf:01:8f:ac:f0:58:9b:3b:01:a8:af:e4:5a:3e:ac:ce:8a: 30:3f:6b:0b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVBUy4wjFOn0KROZMWyF1z3nlu+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYw MUI1RTFCMjAeFw0yNjA0MTcwNTA0NDBaFw0yNjA0MTgwODI2NDBaMDMxMTAvBgNV BAMTKEU2QjhBMTExMTk0NTgzMDlCMDBGQzZGNTVBMkNBRUNENzM5NzIzQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT92bzYaahbBhgzacOVj9dgCxj xguhUYpMlGZobiG7f68+mZ0MrthuYdR4cgx2BgahG6ldsj5RLtr+LGpE0uHfs+5K p90tE/Z8OG1XhnbJUYyth13pfXysPG9Vs0SVzIvH8kYDBSUqA+UJKtzgN6VYeYDb 5ge2J9UZ0rR7+fIxy/AEVNonGWsNoDfNe//vXspcpEfY/fpN/Rs9FG/Tauv3XwGi BdvAHnldusEhWHkXHV8lukqFD2IFFQibXYkQb5U53sF4ouBC0TTzkI3GMivnoBa3 7thr/o6Plqm4rlzje1OJRkHF/d8wC5vUCAO2qPzrMtyFsa581nJqWJV95uYLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5rihERlFgwmwD8b1WiyuzXOXI6EwHwYDVR0j BBgwFoAUxFIkP6HPtPlz4rOMlVAlvwG14bIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5MDI0NzAxNzIwMTY2NS8wL0M0NTIyNDNGQTFDRkI0Rjk3M0UyQjM4Qzk1NTAy NUJGMDFCNUUxQjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYwMUI1RTFCMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTAyNDcwMTcyMDE2NjUvMC9DNDUyMjQzRkExQ0ZC NEY5NzNFMkIzOEM5NTUwMjVCRjAxQjVFMUIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJV15SJfc0hyu c7o1/2luCcqhLFD/bJIhmNYorikTZwoxYfGcgZ5fXJXGz+R6gfdsfBNE64pQwnId kCxAvkblUeK59g4Ucb8LoEa3x9LFz6fyvCD3VhpReRkOsJYspVlWq0bDz0qGG7BE J2CZRzb6dD8EWh03xDWSPsaC1UP7AKuUkn0nkCQXqWY1Y4GpXv5jxThC45gpi4Di XQD1AuPBl0+Zj7JQ1bZR/LUdK63HWeD2nsuf/1y8HtWUzQNtYx/rVqky3vu4NeNK iAkn+GkCR3pMME115O+mwPi+0+6y9g0+Gc8sc/oRToXXv88Bj6zwWJs7Aaiv5Fo+ rM6KMD9rCw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:25:09 2026 by rpki-client