$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft File: 1E52A9C4B7583314611765C8F6A599F283954B3C.mft (raw, json) Hash identifier: UkVvfgfXME2UaLE3wxLP2bWudOvtlE5cPOgaaPnAI3Y= Subject key identifier: DF:94:0B:57:00:62:5C:FE:E8:2A:72:0E:6D:F7:F7:E3:09:EC:92:D3 Authority key identifier: 1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C Certificate issuer: /CN=1E52A9C4B7583314611765C8F6A599F283954B3C Certificate serial: 334D7D0F15BB36CB1AD60FD1A5E3F14CAB17FC1D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft Manifest number: C9 Signing time: Thu 04 Jun 2026 12:39:34 +0000 Manifest this update: Thu 04 Jun 2026 12:34:34 +0000 Manifest next update: Fri 05 Jun 2026 16:03:34 +0000 Files and hashes: 1: 1E52A9C4B7583314611765C8F6A599F283954B3C.crl (hash: walE4QXufMG393JPCuQEX8OEXywzoWrFRCowh6v22FU=) 2: 3133392e3134382e302e302f31362d3136203d3e203233373731.roa (hash: 9pwvUfLeRWTosXHUrLsGjnfPfMD5+GLs5n8xIfzPO5g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:4d:7d:0f:15:bb:36:cb:1a:d6:0f:d1:a5:e3:f1:4c:ab:17:fc:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E52A9C4B7583314611765C8F6A599F283954B3C Validity Not Before: Jun 4 12:34:34 2026 GMT Not After : Jun 5 16:03:34 2026 GMT Subject: CN=DF940B5700625CFEE82A720E6DF7F7E309EC92D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6b:1e:f9:4f:d7:6d:8c:27:37:82:1f:0e:48: 59:93:c7:16:54:33:aa:de:dd:49:ca:6b:8f:63:df: 5d:c2:83:d2:01:de:00:da:9a:a8:2b:27:74:63:81: 6b:39:06:fa:15:59:4e:12:fe:c2:29:3b:fa:40:91: 4b:75:76:6f:b4:8a:a1:7d:02:c6:1e:1e:b5:de:b5: 96:43:23:15:c3:e6:1f:f8:9e:04:d2:24:39:b1:9d: ec:9d:db:2e:cf:81:ce:cd:f1:60:10:ed:60:85:9c: 98:4d:42:2d:f0:fd:a2:66:a2:13:cb:08:7f:60:80: 31:25:6f:cc:b5:64:b7:ec:49:66:5a:7f:20:92:d9: 77:d3:c7:72:99:19:0b:c3:5e:66:8b:70:6c:89:8c: 0d:39:45:51:b8:f0:1b:15:f0:e6:c7:1f:55:61:f6: 27:ce:8a:06:ff:a2:c8:d6:e9:a7:f1:25:6a:5d:f4: f5:5b:dc:0a:99:d8:c3:7b:91:b7:a7:f8:bc:1d:b5: 1a:db:0e:55:df:8e:3f:fe:d9:d4:89:34:73:37:63: 6f:da:b9:8b:2e:a1:4c:9b:46:8a:fa:06:2c:da:b8: 96:2c:4c:ad:6e:66:ab:93:b4:32:55:57:60:fb:a9: 3d:6b:28:84:a3:9d:d2:ae:c2:59:2e:48:fe:d8:ca: e7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:94:0B:57:00:62:5C:FE:E8:2A:72:0E:6D:F7:F7:E3:09:EC:92:D3 X509v3 Authority Key Identifier: keyid:1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ff:2e:a4:12:e6:bc:96:22:1f:9c:55:bd:75:92:17:15:56: 04:f9:67:7a:54:bd:a2:f5:42:18:8d:7f:9e:ae:c6:5c:21:7b: 95:8a:9d:38:13:e6:66:92:3a:47:94:0d:f9:02:24:be:59:bf: ba:27:14:56:aa:f7:c5:9d:e0:3e:a2:dc:01:a0:a0:df:35:45: 6d:f6:97:9a:c2:b5:e9:3a:ec:12:19:6c:65:24:4c:9f:a7:d7: 09:45:c4:a6:78:25:98:9c:0e:9a:fc:40:4a:12:c0:33:a6:d3: 3b:fa:4b:5a:f4:81:ba:2e:fc:97:8c:95:b6:22:7e:fe:9a:15: 3c:d2:b9:b4:06:0f:3f:a7:1e:7b:3a:44:4b:5a:f7:21:77:ab: a2:5e:e6:fa:d5:21:b5:b1:f9:6b:60:cb:c0:cb:08:40:4f:47: 93:f7:9a:81:4e:85:d2:2b:bc:4a:fa:56:30:8f:c8:19:c5:75: 22:54:0b:37:9e:64:b1:db:4e:95:c1:b8:98:7b:01:98:37:68: 22:9e:5a:aa:5b:28:71:af:c5:fe:0c:18:99:0b:fe:04:c4:f5: 7e:d0:ff:91:a7:fa:f1:00:1f:c6:f9:6f:60:1c:2f:b5:1e:c8: d8:b3:06:54:ea:a3:31:e7:61:74:5e:de:84:4c:10:d8:07:89: b9:1e:96:9a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM019DxW7Nssa1g/RpePxTKsX/B0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4 Mzk1NEIzQzAeFw0yNjA2MDQxMjM0MzRaFw0yNjA2MDUxNjAzMzRaMDMxMTAvBgNV BAMTKERGOTQwQjU3MDA2MjVDRkVFODJBNzIwRTZERjdGN0UzMDlFQzkyRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGax75T9dtjCc3gh8OSFmTxxZU M6re3UnKa49j313Cg9IB3gDamqgrJ3RjgWs5BvoVWU4S/sIpO/pAkUt1dm+0iqF9 AsYeHrXetZZDIxXD5h/4ngTSJDmxneyd2y7Pgc7N8WAQ7WCFnJhNQi3w/aJmohPL CH9ggDElb8y1ZLfsSWZafyCS2XfTx3KZGQvDXmaLcGyJjA05RVG48BsV8ObHH1Vh 9ifOigb/osjW6afxJWpd9PVb3AqZ2MN7kben+LwdtRrbDlXfjj/+2dSJNHM3Y2/a uYsuoUybRor6BizauJYsTK1uZquTtDJVV2D7qT1rKISjndKuwlkuSP7YyudxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU35QLVwBiXP7oKnIObff34wnsktMwHwYDVR0j BBgwFoAUHlKpxLdYMxRhF2XI9qWZ8oOVSzwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8xLzFFNTJBOUM0Qjc1ODMzMTQ2MTE3NjVDOEY2QTU5 OUYyODM5NTRCM0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4Mzk1NEIzQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIwNDgzODYvMS8xRTUyQTlDNEI3NTgz MzE0NjExNzY1QzhGNkE1OTlGMjgzOTU0QjNDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/8upBLmvJYi H5xVvXWSFxVWBPlnelS9ovVCGI1/nq7GXCF7lYqdOBPmZpI6R5QN+QIkvlm/uicU Vqr3xZ3gPqLcAaCg3zVFbfaXmsK16TrsEhlsZSRMn6fXCUXEpnglmJwOmvxAShLA M6bTO/pLWvSBui78l4yVtiJ+/poVPNK5tAYPP6ceezpES1r3IXerol7m+tUhtbH5 a2DLwMsIQE9Hk/eagU6F0iu8SvpWMI/IGcV1IlQLN55ksdtOlcG4mHsBmDdoIp5a qlsoca/F/gwYmQv+BMT1ftD/kaf68QAfxvlvYBwvtR7I2LMGVOqjMedhdF7ehEwQ 2AeJuR6Wmg== -----END CERTIFICATE-----Generated at Thu Jun 4 15:18:31 2026 by rpki-client