$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft File: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft (raw, json) Hash identifier: CyFDLKvBSrG00uN2IUuxQjFpFuAJp0F33qYPCAQyLQY= Subject key identifier: A7:FA:1E:03:99:FE:41:26:1E:6C:58:3C:AC:91:14:5D:7F:73:7E:35 Authority key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A Certificate issuer: /CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Certificate serial: 5D0331B7DBDD7BEDA879DE67DE4512159E9D95CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft Manifest number: 0139 Signing time: Sat 26 Sep 2026 11:28:44 +0000 Manifest this update: Sat 26 Sep 2026 11:23:44 +0000 Manifest next update: Tue 29 Sep 2026 22:11:44 +0000 Files and hashes: 1: 3130332e3132362e3130312e302f32342d3234203d3e20313337353731.roa (hash: TEds4zJ1NZLjwghU1L5mKASsDNpUM5UBLSvVg/x2bfA=) 2: 3130332e3132362e3130322e302f32342d3234203d3e20313337353731.roa (hash: B6hXCa2VtbAaS/QVk3JPWGAK3CXMEjwkn7BnYRAi5e0=) 3: 3130332e3132362e3130302e302f32342d3234203d3e20313337353731.roa (hash: Tulzy2loSZQGgT5vI6JjBZGNxAzzMdSArmk0OaZXJyI=) 4: 3130332e3132362e3130332e302f32342d3234203d3e20313337353731.roa (hash: gikIIcEznKxvcaUTGyQMeSzv2o9au6QP6HSnaj/W9jY=) 5: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl (hash: m3LPA7mTJgj/y6pHR5zejFBckmwNnfuSvEYmTTp+4ME=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:03:31:b7:db:dd:7b:ed:a8:79:de:67:de:45:12:15:9e:9d:95:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Validity Not Before: Sep 26 11:23:44 2026 GMT Not After : Sep 29 22:11:44 2026 GMT Subject: CN=A7FA1E0399FE41261E6C583CAC91145D7F737E35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5a:00:e4:1a:50:38:29:33:27:e0:62:07:8e: 83:a2:bc:35:60:ab:b5:cf:44:3b:02:ab:29:10:f0: 2c:e7:b1:5b:dd:bc:de:79:c7:50:db:62:26:81:e8: 50:af:9d:4f:b7:44:e9:92:4d:02:ac:9d:8e:cd:0f: 6d:5d:ff:b9:a0:90:56:05:7a:ba:16:17:ec:bd:2f: 7c:59:bb:20:5e:2e:e7:dd:18:3d:ff:0d:82:d1:32: 05:52:ac:1f:7d:0a:d1:21:cb:eb:83:a7:ad:5d:d6: 0f:a2:e2:33:11:15:3e:eb:10:5a:9f:c2:80:92:c3: ae:48:1e:1b:68:62:66:76:3a:b3:69:02:10:30:b7: 20:77:e1:75:0a:06:28:53:5b:38:f9:bb:b9:df:7c: 80:53:ea:18:34:b2:69:4b:dc:6a:42:f9:36:7c:d9: 88:62:21:af:81:02:79:22:b0:bc:ce:61:75:17:57: 3e:93:1b:1f:15:19:76:5c:f9:9b:c3:86:2b:47:ac: bf:68:bd:60:7d:c3:ad:4b:d7:57:40:ad:fd:c0:f3: a7:68:40:3e:5d:05:5c:04:ee:65:75:c3:20:c5:c6: 68:fb:1a:76:0d:e8:72:a8:9f:bb:5e:ef:95:bb:d1: 86:0b:8c:ce:d5:63:36:b9:26:bb:02:ca:86:c6:c5: 09:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FA:1E:03:99:FE:41:26:1E:6C:58:3C:AC:91:14:5D:7F:73:7E:35 X509v3 Authority Key Identifier: keyid:52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:20:bd:18:b9:13:e8:22:a8:99:8f:0e:1e:25:8e:d3:1e:1e: 1a:97:fa:2d:f0:d1:f9:ca:99:88:a8:12:f5:7e:a1:6c:e0:b1: a4:66:3c:a8:48:bd:6c:93:dd:83:54:26:46:aa:aa:37:3b:33: 7c:00:7c:33:57:de:c5:9b:f8:dd:7e:2a:89:76:aa:c7:72:16: 90:26:ad:21:30:9d:d0:1c:b8:0b:4a:00:e2:d1:6d:fa:9f:39: c8:c6:7e:8a:1a:03:84:89:9a:25:81:74:e2:01:e1:10:02:79: c1:f1:4b:d4:12:71:b9:99:7e:a0:d9:41:4e:79:d9:dc:9d:bc: 63:df:7d:0a:00:a5:0c:cd:44:75:d2:82:19:bb:22:93:8d:70: 82:5b:94:77:4a:b9:ab:b2:76:5e:7c:ea:70:63:e3:42:16:61: 21:bd:b9:c0:7b:5d:90:a6:a6:fe:5d:1b:62:15:5a:93:d1:d2: 6c:b1:a4:8d:11:28:82:ae:53:dd:9e:b1:d0:57:f4:28:06:af: b2:cf:e9:cf:23:ee:60:73:58:c8:b1:fa:bf:50:35:27:51:4b: f2:18:de:ba:a0:9d:3e:d4:f0:72:3c:87:72:9e:89:cf:57:45: 31:a2:30:29:2c:f8:45:23:6a:75:18:19:ae:b7:89:d9:0c:5f: 7c:68:bd:58 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXQMxt9vde+2oed5n3kUSFZ6dlcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0 Q0UwN0QyQTAeFw0yNjA5MjYxMTIzNDRaFw0yNjA5MjkyMjExNDRaMDMxMTAvBgNV BAMTKEE3RkExRTAzOTlGRTQxMjYxRTZDNTgzQ0FDOTExNDVEN0Y3MzdFMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkWgDkGlA4KTMn4GIHjoOivDVg q7XPRDsCqykQ8CznsVvdvN55x1DbYiaB6FCvnU+3ROmSTQKsnY7ND21d/7mgkFYF eroWF+y9L3xZuyBeLufdGD3/DYLRMgVSrB99CtEhy+uDp61d1g+i4jMRFT7rEFqf woCSw65IHhtoYmZ2OrNpAhAwtyB34XUKBihTWzj5u7nffIBT6hg0smlL3GpC+TZ8 2YhiIa+BAnkisLzOYXUXVz6TGx8VGXZc+ZvDhitHrL9ovWB9w61L11dArf3A86do QD5dBVwE7mV1wyDFxmj7GnYN6HKon7te75W70YYLjM7VYza5JrsCyobGxQktAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUp/oeA5n+QSYebFg8rJEUXX9zfjUwHwYDVR0j BBgwFoAUUvvsYyMaqt8VOryY5IsqY0zgfSowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTMzNDc4NS8wLzUyRkJFQzYzMjMxQUFBREYxNTNBQkM5OEU0OEIy QTYzNENFMDdEMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0Q0UwN0QyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEzMzQ3ODUvMC81MkZCRUM2MzIzMUFB QURGMTUzQUJDOThFNDhCMkE2MzRDRTA3RDJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPiC9GLkT6CKo mY8OHiWO0x4eGpf6LfDR+cqZiKgS9X6hbOCxpGY8qEi9bJPdg1QmRqqqNzszfAB8 M1fexZv43X4qiXaqx3IWkCatITCd0By4C0oA4tFt+p85yMZ+ihoDhImaJYF04gHh EAJ5wfFL1BJxuZl+oNlBTnnZ3J28Y999CgClDM1EddKCGbsik41wgluUd0q5q7J2 XnzqcGPjQhZhIb25wHtdkKam/l0bYhVak9HSbLGkjREogq5T3Z6x0Ff0KAavss/p zyPuYHNYyLH6v1A1J1FL8hjeuqCdPtTwcjyHcp6Jz1dFMaIwKSz4RSNqdRgZrreJ 2QxffGi9WA== -----END CERTIFICATE-----Generated at Mon Sep 28 11:39:54 2026 by rpki-client