$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft File: 1E52A9C4B7583314611765C8F6A599F283954B3C.mft (raw, json) Hash identifier: +2+gJOh9Uwj+pOyS6XgXK3QAFfZOES0ZfrMOp5WaSzY= Subject key identifier: B3:02:D3:E6:52:CD:07:02:B4:39:CC:3A:E1:D0:5B:31:92:5D:66:03 Authority key identifier: 1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C Certificate issuer: /CN=1E52A9C4B7583314611765C8F6A599F283954B3C Certificate serial: 5A02B6006C4393C124A9FE8BC1B91FD71FC00230 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft Manifest number: A9 Signing time: Wed 13 May 2026 07:16:02 +0000 Manifest this update: Wed 13 May 2026 07:11:02 +0000 Manifest next update: Thu 14 May 2026 08:56:02 +0000 Files and hashes: 1: 1E52A9C4B7583314611765C8F6A599F283954B3C.crl (hash: DEcT0/tip5Ej94JP/wx/Gugsk06NR72RuxFS9jAp6tY=) 2: 3133392e3134382e302e302f31362d3136203d3e203233373731.roa (hash: 9pwvUfLeRWTosXHUrLsGjnfPfMD5+GLs5n8xIfzPO5g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:02:b6:00:6c:43:93:c1:24:a9:fe:8b:c1:b9:1f:d7:1f:c0:02:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E52A9C4B7583314611765C8F6A599F283954B3C Validity Not Before: May 13 07:11:02 2026 GMT Not After : May 14 08:56:02 2026 GMT Subject: CN=B302D3E652CD0702B439CC3AE1D05B31925D6603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0b:17:17:c6:6e:3b:fb:87:6f:b4:2d:57:80: 01:c9:c5:e7:bd:fc:5e:a6:2a:d2:e7:9d:07:23:20: a0:d4:52:e2:f5:a4:b0:c1:49:bd:b8:31:d7:ba:93: cf:1e:43:96:36:5e:20:2b:ce:66:4c:02:df:06:ef: 46:92:72:44:84:ff:92:d6:93:f0:b3:d0:d2:94:6d: 6c:d4:a7:a5:bf:61:9c:6e:d3:1b:2e:5c:c6:6b:c5: 9f:3e:a6:84:c3:26:70:a1:dc:fd:0c:be:9e:d6:e3: b5:57:c2:aa:8f:ae:48:23:eb:86:1c:79:d3:53:13: f1:b4:24:50:4c:5f:fd:79:65:19:c9:63:f1:f5:74: f4:07:32:14:55:c1:b5:99:b9:95:0d:96:8a:9a:90: 54:c1:48:20:58:78:97:bc:c5:32:2a:5b:6b:6d:07: db:e2:ce:8e:67:ce:27:87:d3:18:52:0e:b9:c4:00: 58:19:e5:a2:7c:f8:65:52:f5:61:58:f0:61:7f:7e: 56:77:95:fb:42:2d:d0:27:df:6a:1b:3f:66:97:b5: db:38:2a:5c:ae:91:b5:5a:84:75:ba:23:be:b3:fd: 1a:d3:a0:f5:c7:15:7e:3f:1e:90:60:da:6e:e0:21: 0e:1c:b0:b0:55:12:27:d4:e6:bb:71:7f:7d:88:3c: d0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:02:D3:E6:52:CD:07:02:B4:39:CC:3A:E1:D0:5B:31:92:5D:66:03 X509v3 Authority Key Identifier: keyid:1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:fd:f7:e1:9c:02:6a:8f:1b:28:1d:13:0d:24:dc:ee:01:2e: 79:9b:11:c8:1d:8b:7c:17:37:4f:4f:40:1f:2d:90:6c:d3:34: 02:f9:3e:c6:c4:c1:4d:21:7d:81:aa:b7:6c:a0:37:7b:dd:1c: 3e:1c:8e:c9:21:7d:76:ae:48:4d:82:91:f3:12:86:67:9c:3d: c8:c1:ab:de:2a:36:12:86:12:f0:40:bc:fb:1d:90:16:4a:6c: e1:c8:15:65:18:18:c2:03:65:95:bf:f5:b7:80:23:ef:e7:ec: 12:7d:38:f4:56:c2:6d:d3:39:98:5d:3f:22:08:57:65:20:15: 39:f9:0b:7c:91:73:1d:cf:d5:46:1b:cc:52:e2:69:51:d6:fb: 6d:99:27:c0:df:cb:4d:5a:f0:6b:94:22:5d:b7:10:cb:bd:9c: fa:e1:29:96:ff:ea:04:6b:53:3f:ff:80:d8:85:c1:06:e0:28: 4f:38:8b:2b:fc:6e:12:70:5a:d7:2a:dc:ec:f1:22:c8:8b:5d: 75:82:79:68:84:f5:7f:87:fa:d2:e6:8a:cc:29:c4:c8:25:06: ba:d1:03:ed:68:39:2b:b8:d0:d1:0e:02:23:80:ad:89:6b:d4: b7:ed:9c:a9:be:22:91:e7:c9:70:a3:7f:f7:8e:f0:97:6a:0a: a9:6d:9a:9e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWgK2AGxDk8Ekqf6Lwbkf1x/AAjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4 Mzk1NEIzQzAeFw0yNjA1MTMwNzExMDJaFw0yNjA1MTQwODU2MDJaMDMxMTAvBgNV BAMTKEIzMDJEM0U2NTJDRDA3MDJCNDM5Q0MzQUUxRDA1QjMxOTI1RDY2MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiCxcXxm47+4dvtC1XgAHJxee9 /F6mKtLnnQcjIKDUUuL1pLDBSb24Mde6k88eQ5Y2XiArzmZMAt8G70aSckSE/5LW k/Cz0NKUbWzUp6W/YZxu0xsuXMZrxZ8+poTDJnCh3P0Mvp7W47VXwqqPrkgj64Yc edNTE/G0JFBMX/15ZRnJY/H1dPQHMhRVwbWZuZUNloqakFTBSCBYeJe8xTIqW2tt B9vizo5nzieH0xhSDrnEAFgZ5aJ8+GVS9WFY8GF/flZ3lftCLdAn32obP2aXtds4 KlyukbVahHW6I76z/RrToPXHFX4/HpBg2m7gIQ4csLBVEifU5rtxf32IPNDJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUswLT5lLNBwK0Ocw64dBbMZJdZgMwHwYDVR0j BBgwFoAUHlKpxLdYMxRhF2XI9qWZ8oOVSzwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8xLzFFNTJBOUM0Qjc1ODMzMTQ2MTE3NjVDOEY2QTU5 OUYyODM5NTRCM0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4Mzk1NEIzQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIwNDgzODYvMS8xRTUyQTlDNEI3NTgz MzE0NjExNzY1QzhGNkE1OTlGMjgzOTU0QjNDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhP334ZwCao8b KB0TDSTc7gEueZsRyB2LfBc3T09AHy2QbNM0Avk+xsTBTSF9gaq3bKA3e90cPhyO ySF9dq5ITYKR8xKGZ5w9yMGr3io2EoYS8EC8+x2QFkps4cgVZRgYwgNllb/1t4Aj 7+fsEn049FbCbdM5mF0/IghXZSAVOfkLfJFzHc/VRhvMUuJpUdb7bZknwN/LTVrw a5QiXbcQy72c+uEplv/qBGtTP/+A2IXBBuAoTziLK/xuEnBa1yrc7PEiyItddYJ5 aIT1f4f60uaKzCnEyCUGutED7Wg5K7jQ0Q4CI4CtiWvUt+2cqb4ikefJcKN/947w l2oKqW2ang== -----END CERTIFICATE-----Generated at Wed May 13 17:34:57 2026 by rpki-client