$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft File: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft (raw, json) Hash identifier: pfF0Tc7DGTTyEPwv4ZqUHDNHCKQm2HfhySA266hqElU= Subject key identifier: BE:E0:DC:D9:C1:A7:09:E0:10:59:5A:59:56:48:AE:2F:96:5B:51:3B Authority key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A Certificate issuer: /CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Certificate serial: 02587A9627C35FC49E4BF7C2B20969E2B489A578 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft Manifest number: FB Signing time: Thu 23 Jul 2026 19:24:23 +0000 Manifest this update: Thu 23 Jul 2026 19:19:23 +0000 Manifest next update: Fri 24 Jul 2026 21:36:23 +0000 Files and hashes: 1: 3130332e3132362e3130332e302f32342d3234203d3e20313337353731.roa (hash: gikIIcEznKxvcaUTGyQMeSzv2o9au6QP6HSnaj/W9jY=) 2: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl (hash: BlvQjLXi493FsWZmynRhd8qvxg2QXjjqyBR0SuQnYgc=) 3: 3130332e3132362e3130312e302f32342d3234203d3e20313337353731.roa (hash: TEds4zJ1NZLjwghU1L5mKASsDNpUM5UBLSvVg/x2bfA=) 4: 3130332e3132362e3130322e302f32342d3234203d3e20313337353731.roa (hash: B6hXCa2VtbAaS/QVk3JPWGAK3CXMEjwkn7BnYRAi5e0=) 5: 3130332e3132362e3130302e302f32342d3234203d3e203430363736.roa (hash: hs8AdJG/Xf3CnIDVOmA2dlMGNeRgBfrPEXdipO6KhtE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:58:7a:96:27:c3:5f:c4:9e:4b:f7:c2:b2:09:69:e2:b4:89:a5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Validity Not Before: Jul 23 19:19:23 2026 GMT Not After : Jul 24 21:36:23 2026 GMT Subject: CN=BEE0DCD9C1A709E010595A595648AE2F965B513B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d5:42:75:e3:6b:3b:46:22:17:21:fe:ab:3c: 91:82:28:b1:4c:b0:57:6b:f8:73:4c:30:33:79:4d: b7:9d:1c:79:5b:25:4b:e5:9c:91:05:c5:7f:2d:68: f9:88:27:27:82:8f:9a:a9:f6:d9:bc:82:1f:3b:be: 61:f9:7c:47:92:fe:bd:0f:a9:72:ab:b6:b6:f5:df: d2:9d:a5:db:29:a2:c9:d5:14:b9:01:9a:b9:d1:18: ca:aa:d0:47:b4:99:0e:16:7b:64:3c:6d:53:d0:5f: 12:d3:8f:e9:0d:9a:64:5f:6d:d4:e8:8d:43:ba:11: eb:d1:25:0e:32:85:13:70:83:52:5c:03:6e:a8:1e: cb:f7:c9:9f:27:f2:14:fb:87:02:ba:16:b5:af:ce: 12:6d:48:e0:68:3b:b8:1e:f7:b3:7a:3e:f4:cc:97: ed:e6:6c:88:2c:48:2b:07:3f:7d:d3:b9:1b:bb:73: 98:00:47:9c:07:0e:88:8d:00:a4:55:cd:6b:36:81: 6f:ec:bf:77:e8:88:fa:62:de:a2:65:c7:17:74:8a: 83:42:c9:89:1e:08:0d:83:f4:f7:63:6d:ea:1f:3b: d4:5b:74:3b:d9:c9:b4:bf:ab:ea:92:90:7f:ce:61: 1e:b0:19:16:e2:cd:02:15:b5:5f:35:1c:c1:68:93: 9b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E0:DC:D9:C1:A7:09:E0:10:59:5A:59:56:48:AE:2F:96:5B:51:3B X509v3 Authority Key Identifier: keyid:52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:5a:06:85:54:9d:5f:39:41:1d:69:bf:36:0f:31:ea:ef:78: 06:54:01:4b:53:74:74:1e:87:57:2e:cd:f6:78:cd:b5:44:67: 3b:cb:08:4e:25:78:ab:dd:03:24:8c:b7:75:8e:da:1d:2d:fb: 8f:ad:1b:f1:81:83:94:ff:0b:ab:b4:4d:d0:50:84:72:46:d4: be:d6:e8:b6:43:16:45:89:6c:fd:28:5c:03:eb:a9:be:a6:a7: c8:4a:e8:b8:d1:bd:a7:73:2c:77:b7:f6:f2:58:fc:b0:73:f0: 26:dd:dd:6b:ad:f5:fa:6f:fd:8b:00:6a:76:69:5b:89:cf:60: 67:da:26:bc:4f:c8:99:1e:b2:9f:b7:5b:b7:6c:50:fe:dd:14: 54:86:d1:48:b6:fe:15:11:01:90:ea:c7:18:d1:c0:62:a9:cd: ed:c9:28:f2:49:fa:b9:63:9a:6e:93:cd:08:7d:5d:c1:6f:8f: d0:a5:dc:f5:9d:14:f2:e3:30:85:d8:b1:c4:b4:4a:ee:08:d0: 42:9f:0a:9d:39:a0:c7:55:79:42:58:d5:6e:1e:33:a5:3b:27: fa:0c:4d:45:5a:73:c1:fa:78:64:b5:8f:59:01:f6:cc:f5:dd: d5:e3:9c:f8:2d:c1:e8:5f:eb:e0:99:08:54:40:fc:9b:23:b9: 43:1d:6b:43 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAlh6lifDX8SeS/fCsglp4rSJpXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0 Q0UwN0QyQTAeFw0yNjA3MjMxOTE5MjNaFw0yNjA3MjQyMTM2MjNaMDMxMTAvBgNV BAMTKEJFRTBEQ0Q5QzFBNzA5RTAxMDU5NUE1OTU2NDhBRTJGOTY1QjUxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS1UJ142s7RiIXIf6rPJGCKLFM sFdr+HNMMDN5TbedHHlbJUvlnJEFxX8taPmIJyeCj5qp9tm8gh87vmH5fEeS/r0P qXKrtrb139KdpdsposnVFLkBmrnRGMqq0Ee0mQ4We2Q8bVPQXxLTj+kNmmRfbdTo jUO6EevRJQ4yhRNwg1JcA26oHsv3yZ8n8hT7hwK6FrWvzhJtSOBoO7ge97N6PvTM l+3mbIgsSCsHP33TuRu7c5gAR5wHDoiNAKRVzWs2gW/sv3foiPpi3qJlxxd0ioNC yYkeCA2D9PdjbeofO9RbdDvZybS/q+qSkH/OYR6wGRbizQIVtV81HMFok5spAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvuDc2cGnCeAQWVpZVkiuL5ZbUTswHwYDVR0j BBgwFoAUUvvsYyMaqt8VOryY5IsqY0zgfSowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTMzNDc4NS8wLzUyRkJFQzYzMjMxQUFBREYxNTNBQkM5OEU0OEIy QTYzNENFMDdEMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0Q0UwN0QyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEzMzQ3ODUvMC81MkZCRUM2MzIzMUFB QURGMTUzQUJDOThFNDhCMkE2MzRDRTA3RDJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaloGhVSdXzlB HWm/Ng8x6u94BlQBS1N0dB6HVy7N9njNtURnO8sITiV4q90DJIy3dY7aHS37j60b 8YGDlP8Lq7RN0FCEckbUvtbotkMWRYls/ShcA+upvqanyErouNG9p3Msd7f28lj8 sHPwJt3da631+m/9iwBqdmlbic9gZ9omvE/ImR6yn7dbt2xQ/t0UVIbRSLb+FREB kOrHGNHAYqnN7cko8kn6uWOabpPNCH1dwW+P0KXc9Z0U8uMwhdixxLRK7gjQQp8K nTmgx1V5QljVbh4zpTsn+gxNRVpzwfp4ZLWPWQH2zPXd1eOc+C3B6F/r4JkIVED8 myO5Qx1rQw== -----END CERTIFICATE-----Generated at Fri Jul 24 08:55:48 2026 by rpki-client