$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft File: 1E52A9C4B7583314611765C8F6A599F283954B3C.mft (raw, json) Hash identifier: 08/eSKTbj/62t2KZWSFq/DmG4OwGzXPTOF8UOf2eDFo= Subject key identifier: CB:90:8D:4E:64:9B:E0:5E:49:9E:78:F4:80:CE:E1:7E:F4:B9:AD:3C Authority key identifier: 1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C Certificate issuer: /CN=1E52A9C4B7583314611765C8F6A599F283954B3C Certificate serial: 41DC4FC6D2EBC12F242B7E8EFB5D5CBAEC85F2C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft Manifest number: 010C Signing time: Fri 24 Jul 2026 12:31:10 +0000 Manifest this update: Fri 24 Jul 2026 12:26:10 +0000 Manifest next update: Sat 25 Jul 2026 13:38:10 +0000 Files and hashes: 1: 1E52A9C4B7583314611765C8F6A599F283954B3C.crl (hash: PHwfItq+FsfH8+L6pPbCMDZGZykrX0jlG7/q6WdzDa0=) 2: 3133392e3134382e302e302f31362d3136203d3e203233373731.roa (hash: 9pwvUfLeRWTosXHUrLsGjnfPfMD5+GLs5n8xIfzPO5g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 13:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:dc:4f:c6:d2:eb:c1:2f:24:2b:7e:8e:fb:5d:5c:ba:ec:85:f2:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E52A9C4B7583314611765C8F6A599F283954B3C Validity Not Before: Jul 24 12:26:10 2026 GMT Not After : Jul 25 13:38:10 2026 GMT Subject: CN=CB908D4E649BE05E499E78F480CEE17EF4B9AD3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d3:22:16:30:d1:28:67:90:23:56:cc:49:14: f3:f8:2a:0b:ac:6d:f9:94:b5:17:6f:3f:76:97:ce: 65:a7:d6:a8:ae:1f:15:8d:bf:80:a4:1c:ca:39:4b: 17:6d:14:58:fa:81:83:4b:de:3b:a4:ed:92:1a:ca: 4c:24:cc:af:26:f3:58:72:29:6e:4f:c4:d1:e9:bb: 59:e5:42:a3:25:4f:00:47:04:37:e8:b4:56:69:0d: 44:d8:07:63:be:68:0d:37:1d:3e:37:37:11:d8:4d: 2c:38:3f:5f:40:39:93:4d:a0:fe:6a:40:4b:51:79: 54:20:c3:ba:7c:63:0e:7f:16:3c:43:94:82:a2:8c: 66:66:eb:ec:69:f5:9c:59:51:d8:95:85:27:f5:89: 3f:00:44:ff:12:86:77:84:22:68:af:ff:c7:0f:b0: 1f:cf:ca:7f:0e:11:d7:b7:85:86:b0:69:a5:17:ab: a5:cf:29:83:d7:8c:ba:97:80:1c:2d:39:ee:a8:4a: b8:3e:9e:d1:28:12:c2:a5:45:14:a5:65:97:90:fc: 36:8c:dc:1f:b1:fc:37:25:e6:71:66:27:91:74:e7: 76:2f:f3:40:81:2f:39:38:ac:5c:40:38:9b:2e:c5: 0d:6e:d7:6d:a3:07:d8:07:74:07:96:d0:63:22:f5: 0d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:90:8D:4E:64:9B:E0:5E:49:9E:78:F4:80:CE:E1:7E:F4:B9:AD:3C X509v3 Authority Key Identifier: keyid:1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:de:53:a5:bf:58:39:01:67:d2:7b:7d:76:aa:94:b8:0c:21: 69:61:d9:99:7f:c5:3c:4d:cc:36:b8:7f:a1:ac:4f:3b:4e:cd: c2:9c:7d:0d:97:39:5b:30:45:32:fe:ee:6f:05:79:ee:82:24: d3:7d:47:9d:b7:7d:a7:d6:e5:76:74:c5:69:cd:5b:a3:7c:a2: 28:d7:b7:bc:6f:af:e7:18:b2:76:79:19:f2:d0:32:78:28:be: a8:59:43:24:9b:62:6a:e6:fe:da:90:1a:88:12:9b:0e:31:0a: 76:4e:7b:b4:da:07:62:2a:2b:fa:15:16:51:c0:e0:4f:1a:9c: 09:7d:cd:96:61:75:e8:dc:c9:8c:be:74:19:56:f2:1b:70:8a: 86:ff:15:ee:01:e0:0b:1f:ee:d0:0b:7d:15:f5:73:2c:88:62: d5:48:0d:bf:d5:80:98:ff:73:18:74:fb:ee:5c:fd:8c:b2:a8: 83:04:b7:43:f8:b9:ad:45:7b:7b:f0:0c:74:77:4d:fb:9b:e8: cd:26:57:a5:e8:a0:10:30:fd:5a:ce:fc:bf:9f:93:78:0e:63: f0:5c:cf:7b:90:7e:ef:5c:36:43:b6:35:15:92:55:b7:95:01: 7a:03:9e:8b:d3:27:a9:bc:34:dc:11:23:38:be:8f:85:33:88: 3a:92:a4:3e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQdxPxtLrwS8kK36O+11cuuyF8sYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4 Mzk1NEIzQzAeFw0yNjA3MjQxMjI2MTBaFw0yNjA3MjUxMzM4MTBaMDMxMTAvBgNV BAMTKENCOTA4RDRFNjQ5QkUwNUU0OTlFNzhGNDgwQ0VFMTdFRjRCOUFEM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo0yIWMNEoZ5AjVsxJFPP4Kgus bfmUtRdvP3aXzmWn1qiuHxWNv4CkHMo5SxdtFFj6gYNL3juk7ZIaykwkzK8m81hy KW5PxNHpu1nlQqMlTwBHBDfotFZpDUTYB2O+aA03HT43NxHYTSw4P19AOZNNoP5q QEtReVQgw7p8Yw5/FjxDlIKijGZm6+xp9ZxZUdiVhSf1iT8ARP8ShneEImiv/8cP sB/Pyn8OEde3hYawaaUXq6XPKYPXjLqXgBwtOe6oSrg+ntEoEsKlRRSlZZeQ/DaM 3B+x/Dcl5nFmJ5F053Yv80CBLzk4rFxAOJsuxQ1u122jB9gHdAeW0GMi9Q0XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUy5CNTmSb4F5Jnnj0gM7hfvS5rTwwHwYDVR0j BBgwFoAUHlKpxLdYMxRhF2XI9qWZ8oOVSzwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8xLzFFNTJBOUM0Qjc1ODMzMTQ2MTE3NjVDOEY2QTU5 OUYyODM5NTRCM0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4Mzk1NEIzQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIwNDgzODYvMS8xRTUyQTlDNEI3NTgz MzE0NjExNzY1QzhGNkE1OTlGMjgzOTU0QjNDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEt5Tpb9YOQFn 0nt9dqqUuAwhaWHZmX/FPE3MNrh/oaxPO07Nwpx9DZc5WzBFMv7ubwV57oIk031H nbd9p9bldnTFac1bo3yiKNe3vG+v5xiydnkZ8tAyeCi+qFlDJJtiaub+2pAaiBKb DjEKdk57tNoHYior+hUWUcDgTxqcCX3NlmF16NzJjL50GVbyG3CKhv8V7gHgCx/u 0At9FfVzLIhi1UgNv9WAmP9zGHT77lz9jLKogwS3Q/i5rUV7e/AMdHdN+5vozSZX peigEDD9Ws78v5+TeA5j8FzPe5B+71w2Q7Y1FZJVt5UBegOei9Mnqbw03BEjOL6P hTOIOpKkPg== -----END CERTIFICATE-----Generated at Fri Jul 24 19:57:07 2026 by rpki-client