
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
File: 1E52A9C4B7583314611765C8F6A599F283954B3C.mft (raw, json)
Hash identifier: fMFaIIBAG9x5JsCQvniIqBKvKNUGxBP9/fDy0QHc1sc=
Subject key identifier: 35:62:0A:F1:F4:33:5D:22:91:F4:BB:B0:1A:FA:BF:41:27:84:31:9E
Authority key identifier: 1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C
Certificate issuer: /CN=1E52A9C4B7583314611765C8F6A599F283954B3C
Certificate serial: 6ED1CAF7B944853D6DCB5D98099FBC4BC0FB6484
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
Manifest number: 014F
Signing time: Mon 12 Oct 2026 21:07:21 +0000
Manifest this update: Mon 12 Oct 2026 21:02:21 +0000
Manifest next update: Fri 16 Oct 2026 00:50:21 +0000
Files and hashes: 1: 1E52A9C4B7583314611765C8F6A599F283954B3C.crl (hash: yUyZgcpSiHezwtMLcSGuDFVUWJ0LfP9bdI09nbRlyg8=)
2: 3133392e3134382e302e302f31362d3136203d3e203233373731.roa (hash: 9pwvUfLeRWTosXHUrLsGjnfPfMD5+GLs5n8xIfzPO5g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 10:58:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d1:ca:f7:b9:44:85:3d:6d:cb:5d:98:09:9f:bc:4b:c0:fb:64:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E52A9C4B7583314611765C8F6A599F283954B3C
Validity
Not Before: Oct 12 21:02:21 2026 GMT
Not After : Oct 16 00:50:21 2026 GMT
Subject: CN=35620AF1F4335D2291F4BBB01AFABF412784319E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:21:de:1f:97:d2:4d:c5:8f:79:f4:b8:00:
bd:36:04:42:65:f7:09:d1:d3:47:6b:e4:5f:bf:aa:
3d:d4:2e:e4:24:f7:a0:0c:ae:d8:91:d9:06:4a:a1:
c6:e4:52:a7:7a:c5:6f:94:fa:3f:bc:87:00:e9:be:
82:fe:26:c7:13:c0:3e:d9:87:ea:bf:2e:fc:5c:56:
08:6b:ce:f8:0a:8c:d6:fe:9d:20:78:9a:5b:90:d1:
0a:51:f5:82:15:bc:ea:90:3a:23:8f:46:b2:75:5d:
aa:fa:9c:f1:01:5a:30:e8:a3:85:a0:95:6f:04:b4:
e8:6a:22:ae:a1:fa:dd:b8:9c:6e:d5:24:d5:1a:4b:
69:ff:24:56:7a:85:36:de:b2:fa:54:30:e4:ac:21:
1d:07:44:38:f8:c4:9d:06:f5:11:db:ed:72:b1:e0:
ee:3e:f4:1f:13:0b:02:21:75:5e:27:bd:d8:46:a5:
d7:78:6b:00:d5:92:e6:ca:74:ee:a2:f0:09:8f:e0:
3d:95:7c:47:52:ca:c0:be:48:32:d4:7a:45:77:9f:
70:e9:59:2a:20:9f:00:00:41:9f:8a:4d:4f:d9:8c:
19:17:b7:2f:9f:79:f5:cc:01:ea:95:ed:3d:65:07:
66:51:9a:9e:6e:1e:66:2a:3e:7b:fa:2c:64:92:1f:
f8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:62:0A:F1:F4:33:5D:22:91:F4:BB:B0:1A:FA:BF:41:27:84:31:9E
X509v3 Authority Key Identifier:
keyid:1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a0:b0:e4:0c:53:a7:3a:90:39:31:7c:36:f9:20:ee:ae:f0:
d8:9e:33:27:d0:98:ab:a4:bb:ad:b8:05:e2:81:bc:c7:f6:da:
8b:73:01:85:de:2f:04:31:92:db:a9:06:39:89:56:16:b8:c1:
4f:09:d3:db:cc:cb:cc:48:cf:ba:03:a8:a4:9d:e4:e5:c6:bf:
5f:b1:2a:4c:5a:5c:42:1f:1b:ae:ca:a1:2e:4d:68:c9:2d:1d:
1e:43:6a:ad:b5:e5:4a:ac:80:15:33:6b:d3:22:13:3f:bd:cf:
d2:1b:2c:36:c3:0b:a1:a6:28:30:6f:ab:8f:f8:05:20:75:9a:
bf:df:64:b5:99:95:5a:40:ab:5b:14:bc:58:82:92:42:44:61:
45:d3:2d:c2:3e:10:7b:e9:90:a4:39:24:46:02:41:2c:31:90:
4a:c0:63:51:1e:02:0f:cd:4e:ec:4d:fd:02:5c:7d:7b:76:06:
79:b3:ec:24:3a:21:1e:17:82:34:ac:e7:72:00:85:44:0d:5e:
26:19:ea:9c:fd:b3:fa:cb:17:0f:50:63:47:a5:e9:8e:22:5f:
68:01:23:2d:a8:88:f2:09:4a:1f:b4:8d:1c:30:cc:46:78:9c:
94:1f:a1:41:9c:c0:b6:39:d7:85:d7:7a:cc:ca:1d:73:75:51:
df:e1:33:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:31:18 2026 by rpki-client