$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft File: 450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft (raw, json) Hash identifier: IC3s0XBbfxPwhU16jDj4WxuK34k2hsXWoPLox3d53uI= Subject key identifier: A9:DB:8F:2C:19:6F:7C:C7:22:37:E7:96:67:C1:5C:86:40:1B:8F:2C Authority key identifier: 45:0A:C0:E4:CD:E3:18:16:82:FF:27:C2:52:1C:C4:BF:72:90:C0:D7 Certificate issuer: /CN=450AC0E4CDE3181682FF27C2521CC4BF7290C0D7 Certificate serial: 7A471EC8C7D1BE9DA985980AEA386E8AEA301D19 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft Manifest number: B4 Signing time: Wed 14 Oct 2026 06:23:37 +0000 Manifest this update: Wed 14 Oct 2026 06:18:37 +0000 Manifest next update: Sat 17 Oct 2026 16:11:37 +0000 Files and hashes: 1: 3130332e3232382e3230342e302f32332d3233203d3e2034383038.roa (hash: 0Mhtj21hVbeX9XUR/Q2Gx0H8h7HJJx0VMMT+V2reTHc=) 2: 450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl (hash: d+imwLUPlNdRdx7+aYjIQKLfAr/aecl1wuN+7Q2D8cI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 16:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:47:1e:c8:c7:d1:be:9d:a9:85:98:0a:ea:38:6e:8a:ea:30:1d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=450AC0E4CDE3181682FF27C2521CC4BF7290C0D7 Validity Not Before: Oct 14 06:18:37 2026 GMT Not After : Oct 17 16:11:37 2026 GMT Subject: CN=A9DB8F2C196F7CC72237E79667C15C86401B8F2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1d:56:5d:a7:8c:bc:93:fa:46:bf:22:dd:f8: 85:30:84:12:a0:ed:f3:42:fa:91:b8:68:4b:a8:30: 86:d0:ef:8b:bb:75:2e:ef:3f:aa:23:aa:a8:0b:f6: ea:c1:7f:25:97:28:c6:84:34:8d:2f:70:d4:51:af: 4c:c7:cd:50:17:fc:03:2c:59:ed:63:16:d0:89:75: f8:67:d3:2e:2e:71:b2:51:14:7c:a2:8e:14:5d:ab: 55:96:81:0f:4a:35:e2:d1:8b:64:47:ee:d0:33:12: 62:a8:57:6e:be:05:67:1f:48:e4:66:1f:66:48:27: db:5c:54:6f:a3:c9:63:7d:52:a5:03:29:63:37:41: 49:fa:f6:14:b1:44:17:48:55:aa:ef:5b:07:50:f4: 99:e7:de:0d:43:97:bb:8b:15:a3:86:b2:00:bc:99: c3:32:6f:07:40:4b:d0:75:a6:65:0e:a5:ad:5b:af: 61:b6:da:8d:1c:af:c6:2d:1d:cc:8e:77:7a:83:10: 0c:3e:16:28:6f:79:4f:c0:15:dd:aa:86:99:5f:71: 7c:93:9b:11:56:cc:5c:1c:e0:45:8c:7e:a9:a2:bb: d0:4a:ca:d4:23:ea:1b:c2:9f:4e:01:ea:46:e5:fd: b9:2b:40:85:91:95:77:8d:db:d0:9b:3e:d7:eb:3f: 9f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DB:8F:2C:19:6F:7C:C7:22:37:E7:96:67:C1:5C:86:40:1B:8F:2C X509v3 Authority Key Identifier: keyid:45:0A:C0:E4:CD:E3:18:16:82:FF:27:C2:52:1C:C4:BF:72:90:C0:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:88:e6:98:5c:b0:87:f6:ff:91:ac:93:07:f0:c5:67:81:1d: e9:39:41:69:47:60:f2:bb:b1:9a:c3:c5:9a:39:5b:e1:2b:d8: 8b:e3:40:d5:86:3a:c6:0a:98:da:a0:83:42:1a:7f:ba:12:cf: 9e:a2:fd:59:90:4d:34:b8:c2:67:84:d8:78:3e:72:01:2a:22: 9d:38:a8:58:1a:b9:ab:d4:83:95:fd:d0:98:ec:53:70:74:07: fb:53:c7:bd:8a:94:d7:07:69:13:3c:d3:4d:45:ac:2e:6e:df: 02:2c:96:d7:69:d5:da:4a:4c:8a:1c:5b:e9:fe:cb:7c:f5:2b: 8c:ee:dc:d0:5b:06:75:7c:ad:5e:6a:27:7d:3e:1e:1f:1a:61: 1d:d7:29:b9:d8:6d:23:ef:5d:cc:f0:6f:39:dd:aa:28:f2:81: cd:83:66:1d:49:20:b5:6f:a1:50:00:93:ae:dc:e0:05:ff:eb: 32:e5:95:e8:f3:18:cf:ef:47:79:d6:8b:14:74:3d:e8:7a:9c: 6b:dc:03:6e:8f:19:c5:c2:1a:ba:42:8d:49:fe:ed:4c:6d:57: 5f:b3:a6:24:26:90:78:3d:36:e7:93:af:45:c5:74:f4:94:21: 56:50:dc:37:3c:a6:66:4d:d1:f4:5d:a4:ba:70:8b:eb:ba:17: 59:c5:0f:23 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUekceyMfRvp2phZgK6jhuiuowHRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwQUMwRTRDREUzMTgxNjgyRkYyN0MyNTIxQ0M0QkY3 MjkwQzBENzAeFw0yNjEwMTQwNjE4MzdaFw0yNjEwMTcxNjExMzdaMDMxMTAvBgNV BAMTKEE5REI4RjJDMTk2RjdDQzcyMjM3RTc5NjY3QzE1Qzg2NDAxQjhGMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTHVZdp4y8k/pGvyLd+IUwhBKg 7fNC+pG4aEuoMIbQ74u7dS7vP6ojqqgL9urBfyWXKMaENI0vcNRRr0zHzVAX/AMs We1jFtCJdfhn0y4ucbJRFHyijhRdq1WWgQ9KNeLRi2RH7tAzEmKoV26+BWcfSORm H2ZIJ9tcVG+jyWN9UqUDKWM3QUn69hSxRBdIVarvWwdQ9Jnn3g1Dl7uLFaOGsgC8 mcMybwdAS9B1pmUOpa1br2G22o0cr8YtHcyOd3qDEAw+FihveU/AFd2qhplfcXyT mxFWzFwc4EWMfqmiu9BKytQj6hvCn04B6kbl/bkrQIWRlXeN29CbPtfrP5+pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqduPLBlvfMciN+eWZ8FchkAbjywwHwYDVR0j BBgwFoAURQrA5M3jGBaC/yfCUhzEv3KQwNcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Mjk5MTY5NzU4MDY1NDYwMS8wLzQ1MEFDMEU0Q0RFMzE4MTY4MkZGMjdDMjUyMUND NEJGNzI5MEMwRDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDUwQUMwRTRDREUzMTgxNjgyRkYyN0MyNTIxQ0M0QkY3MjkwQzBENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDI5OTE2OTc1ODA2NTQ2MDEvMC80NTBBQzBFNENERTMx ODE2ODJGRjI3QzI1MjFDQzRCRjcyOTBDMEQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYjmmFywh/b/ kayTB/DFZ4Ed6TlBaUdg8ruxmsPFmjlb4SvYi+NA1YY6xgqY2qCDQhp/uhLPnqL9 WZBNNLjCZ4TYeD5yASoinTioWBq5q9SDlf3QmOxTcHQH+1PHvYqU1wdpEzzTTUWs Lm7fAiyW12nV2kpMihxb6f7LfPUrjO7c0FsGdXytXmonfT4eHxphHdcpudhtI+9d zPBvOd2qKPKBzYNmHUkgtW+hUACTrtzgBf/rMuWV6PMYz+9HedaLFHQ96Hqca9wD bo8ZxcIaukKNSf7tTG1XX7OmJCaQeD0255OvRcV09JQhVlDcNzymZk3R9F2kunCL 67oXWcUPIw== -----END CERTIFICATE-----Generated at Thu Oct 15 13:40:33 2026 by rpki-client