$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft File: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft (raw, json) Hash identifier: rfsE1r6ovDRQs39DV5UCdWkyWN17QxIEUxzoGGmE/CA= Subject key identifier: FC:D7:FB:D0:3B:F0:51:91:28:72:F4:34:01:63:54:D5:B4:2C:32:7F Authority key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A Certificate issuer: /CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Certificate serial: 72BE534666CBE7F13C1F509439239A9DC6AE0E00 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft Manifest number: 5B Signing time: Thu 26 Mar 2026 05:13:28 +0000 Manifest this update: Thu 26 Mar 2026 05:08:28 +0000 Manifest next update: Fri 27 Mar 2026 08:55:28 +0000 Files and hashes: 1: 3130332e3132362e3130332e302f32342d3234203d3e20313337353731.roa (hash: gikIIcEznKxvcaUTGyQMeSzv2o9au6QP6HSnaj/W9jY=) 2: 3130332e3132362e3130322e302f32342d3234203d3e20313337353731.roa (hash: B6hXCa2VtbAaS/QVk3JPWGAK3CXMEjwkn7BnYRAi5e0=) 3: 3130332e3132362e3130302e302f32342d3234203d3e203430363736.roa (hash: hs8AdJG/Xf3CnIDVOmA2dlMGNeRgBfrPEXdipO6KhtE=) 4: 3130332e3132362e3130312e302f32342d3234203d3e20313337353731.roa (hash: TEds4zJ1NZLjwghU1L5mKASsDNpUM5UBLSvVg/x2bfA=) 5: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl (hash: p4x30OHmjEdN7Iw0jN8sQFc2zoAT5yNhg+qM3lwLWbI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:be:53:46:66:cb:e7:f1:3c:1f:50:94:39:23:9a:9d:c6:ae:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Validity Not Before: Mar 26 05:08:28 2026 GMT Not After : Mar 27 08:55:28 2026 GMT Subject: CN=FCD7FBD03BF051912872F434016354D5B42C327F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:18:7a:7b:7c:8d:ce:ab:cf:46:43:50:7a:3c: de:ca:20:d8:a9:cf:4e:ee:10:90:02:99:c7:bf:d0: ba:7c:03:0b:84:2b:ce:15:a6:97:2d:5d:83:7b:77: 60:2a:e0:5b:e8:cf:58:92:c7:69:7f:41:2c:22:5a: a2:db:52:e7:2e:92:cc:76:22:d4:7b:f1:67:fa:ba: cc:1b:22:e5:ed:85:33:a7:1c:84:13:0f:b1:6d:1e: b9:59:76:5d:2f:d5:ce:03:c3:bc:c0:c0:4d:37:f3: 8f:7a:25:d3:27:e0:43:df:03:ff:7d:71:7e:94:57: 0d:2f:cb:60:0e:96:01:91:d0:b4:82:50:61:82:6a: c4:7f:9a:c5:b7:0b:ff:c7:43:13:77:69:a0:4b:fc: 9d:63:9d:f3:da:cf:e9:64:e2:77:0d:8c:1d:60:6c: 63:6e:e3:d2:35:14:da:9f:17:2c:8e:ef:00:e4:fb: ba:3a:73:2f:1d:f4:d8:60:eb:0c:97:34:e6:29:16: 8c:76:63:ac:9b:e8:7d:a9:82:9d:13:50:55:36:76: f0:25:5a:b2:49:3a:91:27:17:d7:f3:46:03:49:df: b8:cb:84:12:07:fa:a4:ec:ce:df:f8:0a:3c:95:4e: db:69:2c:cc:e9:df:71:09:03:4c:a7:7c:e0:e7:39: a1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D7:FB:D0:3B:F0:51:91:28:72:F4:34:01:63:54:D5:B4:2C:32:7F X509v3 Authority Key Identifier: keyid:52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:92:62:17:6d:89:39:ba:89:10:ab:0b:1f:b2:86:1e:17:85: 5a:21:81:2b:c9:61:31:7e:e8:f1:91:10:d8:9b:68:c1:5a:8e: 9f:63:60:37:cf:9b:95:30:7e:61:e2:97:20:d0:7f:0e:51:fb: d9:7a:ad:85:fa:ed:d2:d7:1d:9e:1c:98:65:99:d6:cc:97:e9: a0:7d:8b:1e:b7:d8:5b:2a:2f:42:20:f3:f4:63:d8:5b:9d:d1: 54:aa:dc:ca:b0:c6:07:72:6a:9c:d6:a8:56:23:c4:90:57:68: 10:6e:ac:74:fd:02:30:68:9a:ae:f1:11:9c:7a:32:9d:90:6f: 6c:24:44:f0:92:0e:26:ab:89:de:5f:6a:44:97:6b:3c:d9:84: 4b:04:dc:f0:2a:55:39:82:71:bf:6f:a7:72:57:de:89:38:53: 0c:b8:49:aa:89:21:58:f7:75:66:80:23:02:18:b8:5c:d4:88: 47:25:39:4c:f2:9b:ae:30:33:4f:04:65:96:36:b7:00:5e:08: 82:b0:a0:79:2a:c0:2f:97:a0:d5:95:ba:59:5f:fb:b2:a3:f2: 27:ac:31:3a:30:95:1e:fa:82:7d:e5:36:bb:af:27:42:d9:b5: c8:aa:91:97:61:bb:69:db:cc:d4:45:da:80:1d:c8:16:96:d5: 27:ec:c3:45 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcr5TRmbL5/E8H1CUOSOancauDgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0 Q0UwN0QyQTAeFw0yNjAzMjYwNTA4MjhaFw0yNjAzMjcwODU1MjhaMDMxMTAvBgNV BAMTKEZDRDdGQkQwM0JGMDUxOTEyODcyRjQzNDAxNjM1NEQ1QjQyQzMyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQGHp7fI3Oq89GQ1B6PN7KINip z07uEJACmce/0Lp8AwuEK84VppctXYN7d2Aq4Fvoz1iSx2l/QSwiWqLbUucuksx2 ItR78Wf6uswbIuXthTOnHIQTD7FtHrlZdl0v1c4Dw7zAwE038496JdMn4EPfA/99 cX6UVw0vy2AOlgGR0LSCUGGCasR/msW3C//HQxN3aaBL/J1jnfPaz+lk4ncNjB1g bGNu49I1FNqfFyyO7wDk+7o6cy8d9Nhg6wyXNOYpFox2Y6yb6H2pgp0TUFU2dvAl WrJJOpEnF9fzRgNJ37jLhBIH+qTszt/4CjyVTttpLMzp33EJA0ynfODnOaEXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/Nf70DvwUZEocvQ0AWNU1bQsMn8wHwYDVR0j BBgwFoAUUvvsYyMaqt8VOryY5IsqY0zgfSowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTMzNDc4NS8wLzUyRkJFQzYzMjMxQUFBREYxNTNBQkM5OEU0OEIy QTYzNENFMDdEMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0Q0UwN0QyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEzMzQ3ODUvMC81MkZCRUM2MzIzMUFB QURGMTUzQUJDOThFNDhCMkE2MzRDRTA3RDJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZJiF22JObqJ EKsLH7KGHheFWiGBK8lhMX7o8ZEQ2JtowVqOn2NgN8+blTB+YeKXINB/DlH72Xqt hfrt0tcdnhyYZZnWzJfpoH2LHrfYWyovQiDz9GPYW53RVKrcyrDGB3JqnNaoViPE kFdoEG6sdP0CMGiarvERnHoynZBvbCRE8JIOJquJ3l9qRJdrPNmESwTc8CpVOYJx v2+nclfeiThTDLhJqokhWPd1ZoAjAhi4XNSIRyU5TPKbrjAzTwRllja3AF4IgrCg eSrAL5eg1ZW6WV/7sqPyJ6wxOjCVHvqCfeU2u68nQtm1yKqRl2G7advM1EXagB3I FpbVJ+zDRQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:48:50 2026 by rpki-client