$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft File: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft (raw, json) Hash identifier: qb+Ka3T7F2USOF2ZKi41Q1HoC43UG3579/gkHqTui8w= Subject key identifier: A1:73:6E:C2:B8:1C:CF:06:ED:44:DA:9D:97:65:00:B5:38:07:3D:63 Authority key identifier: C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 Certificate issuer: /CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Certificate serial: 4E5D5314967829881E51FE040BADEEF4D14713F4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft Manifest number: 95 Signing time: Wed 29 Jul 2026 08:53:55 +0000 Manifest this update: Wed 29 Jul 2026 08:48:55 +0000 Manifest next update: Thu 30 Jul 2026 09:30:55 +0000 Files and hashes: 1: 3130332e3133352e3139362e302f32322d3232203d3e20313337373435.roa (hash: nQ1f3FMKWA1GCdf1PRfEoceld3pBu9R9MjWCiBeIYHo=) 2: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl (hash: yCFmOwXzMp+6/kk9rQ3xx0THhNm1T9j2q/WwXuiSDwM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5d:53:14:96:78:29:88:1e:51:fe:04:0b:ad:ee:f4:d1:47:13:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Validity Not Before: Jul 29 08:48:55 2026 GMT Not After : Jul 30 09:30:55 2026 GMT Subject: CN=A1736EC2B81CCF06ED44DA9D976500B538073D63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:ff:bd:7d:32:f5:d6:8d:bc:82:ac:e7:7a: 0c:8b:9b:e3:58:fd:3f:5e:79:b0:94:f9:e7:f4:7d: 1e:a0:e6:f9:9d:bc:f7:67:42:05:00:ec:ea:98:c9: 2b:38:0c:95:0a:cd:14:19:f5:32:97:53:23:08:6d: 27:23:d1:65:2a:bd:90:52:12:f9:62:04:d5:a6:d9: 9e:13:25:34:56:69:43:5a:2e:b9:4e:9f:90:1f:dc: 53:0d:a1:af:84:2c:a3:bb:ac:25:21:62:69:4e:a6: 22:1d:b0:3c:0f:7b:66:8d:1a:5f:6f:8a:68:de:9a: 18:dd:79:c8:d2:b1:7c:ee:91:fe:24:b1:a8:86:30: ed:6d:c1:2c:5d:f0:a4:ae:f4:3c:15:19:8e:42:71: 57:b2:12:0e:15:9f:5e:31:f1:b1:3c:be:32:0c:a0: 5f:b9:ca:21:03:e6:3d:95:2d:39:11:a3:0b:0f:6f: 87:ee:7b:0e:ec:ff:c8:9b:46:ad:c9:60:d4:91:6f: f4:2e:41:d7:e0:99:d3:9c:4b:8b:ce:c9:73:e8:43: 07:61:73:e5:1a:78:12:7a:f5:36:af:3d:9b:a6:91: fb:f2:d1:36:7e:67:ad:b1:20:f6:70:ad:d9:a3:bc: ec:95:4a:76:55:50:d5:e6:84:14:5e:9e:83:bf:79: a2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:73:6E:C2:B8:1C:CF:06:ED:44:DA:9D:97:65:00:B5:38:07:3D:63 X509v3 Authority Key Identifier: keyid:C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:3f:52:3e:bd:c0:4b:05:c1:10:8c:9e:98:7a:a3:7b:63:dd: e3:74:aa:8a:22:1c:d3:89:79:56:69:9f:47:17:78:81:a4:2e: ac:a5:3a:15:b5:42:65:1d:fb:8a:76:30:48:bb:5d:b4:58:e9: 82:0a:67:cf:e9:82:85:61:d2:44:19:5c:5f:6c:4e:e5:10:97: fb:3b:d7:8a:12:96:cc:25:af:16:ff:0e:63:3e:73:71:39:5b: f5:98:42:e2:16:0e:82:3a:79:b2:d0:76:fc:01:9a:16:28:ff: 83:ea:1d:37:71:b2:ac:84:7c:f5:f0:24:04:99:3f:3c:c8:ac: 96:b6:33:05:6b:c5:ee:61:8b:e8:5d:10:2e:fb:c5:bf:82:24: 7e:58:85:51:0d:62:32:95:0b:23:a8:19:d7:e4:22:43:c0:3e: ec:49:d1:bb:87:1c:15:c9:8c:2e:ab:1c:7b:b8:cf:65:9d:7d: 8a:12:c9:54:90:33:5a:54:7e:df:07:4a:e1:3c:cb:b2:5f:5a: 6f:2c:f0:bf:78:56:9d:70:4f:7f:56:22:f7:34:84:9c:6c:1d: 42:e9:f5:5a:a0:07:9b:0d:1a:b6:77:a3:a0:80:a4:09:a4:f5: 68:cb:ab:be:66:d7:f2:b7:fd:e0:7a:80:6b:63:24:39:8b:63: e8:1d:14:aa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTl1TFJZ4KYgeUf4EC63u9NFHE/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYw MUI1RTFCMjAeFw0yNjA3MjkwODQ4NTVaFw0yNjA3MzAwOTMwNTVaMDMxMTAvBgNV BAMTKEExNzM2RUMyQjgxQ0NGMDZFRDQ0REE5RDk3NjUwMEI1MzgwNzNENjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVf+9fTL11o28gqznegyLm+NY /T9eebCU+ef0fR6g5vmdvPdnQgUA7OqYySs4DJUKzRQZ9TKXUyMIbScj0WUqvZBS EvliBNWm2Z4TJTRWaUNaLrlOn5Af3FMNoa+ELKO7rCUhYmlOpiIdsDwPe2aNGl9v imjemhjdecjSsXzukf4ksaiGMO1twSxd8KSu9DwVGY5CcVeyEg4Vn14x8bE8vjIM oF+5yiED5j2VLTkRowsPb4fuew7s/8ibRq3JYNSRb/QuQdfgmdOcS4vOyXPoQwdh c+UaeBJ69TavPZumkfvy0TZ+Z62xIPZwrdmjvOyVSnZVUNXmhBRenoO/eaK1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoXNuwrgczwbtRNqdl2UAtTgHPWMwHwYDVR0j BBgwFoAUxFIkP6HPtPlz4rOMlVAlvwG14bIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5MDI0NzAxNzIwMTY2NS8wL0M0NTIyNDNGQTFDRkI0Rjk3M0UyQjM4Qzk1NTAy NUJGMDFCNUUxQjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYwMUI1RTFCMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTAyNDcwMTcyMDE2NjUvMC9DNDUyMjQzRkExQ0ZC NEY5NzNFMkIzOEM5NTUwMjVCRjAxQjVFMUIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOT9SPr3ASwXB EIyemHqje2Pd43SqiiIc04l5VmmfRxd4gaQurKU6FbVCZR37inYwSLtdtFjpggpn z+mChWHSRBlcX2xO5RCX+zvXihKWzCWvFv8OYz5zcTlb9ZhC4hYOgjp5stB2/AGa Fij/g+odN3GyrIR89fAkBJk/PMislrYzBWvF7mGL6F0QLvvFv4IkfliFUQ1iMpUL I6gZ1+QiQ8A+7EnRu4ccFcmMLqsce7jPZZ19ihLJVJAzWlR+3wdK4TzLsl9abyzw v3hWnXBPf1Yi9zSEnGwdQun1WqAHmw0atnejoICkCaT1aMurvmbX8rf94HqAa2Mk OYtj6B0Uqg== -----END CERTIFICATE-----Generated at Wed Jul 29 23:08:19 2026 by rpki-client