$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft File: 1E52A9C4B7583314611765C8F6A599F283954B3C.mft (raw, json) Hash identifier: 4W4HRyvsRNFHAqY56VtvbjLy5AOs3TWKGXcJUtIXPCE= Subject key identifier: CF:E8:52:E9:9A:A1:09:E0:EC:F3:B8:F6:38:6B:BE:F2:39:27:E2:5F Authority key identifier: 1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C Certificate issuer: /CN=1E52A9C4B7583314611765C8F6A599F283954B3C Certificate serial: 1537625C0738E083CB7A998FF0B43BAEA8C341EE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft Manifest number: 013E Signing time: Fri 04 Sep 2026 04:39:56 +0000 Manifest this update: Fri 04 Sep 2026 04:34:56 +0000 Manifest next update: Mon 07 Sep 2026 13:30:56 +0000 Files and hashes: 1: 1E52A9C4B7583314611765C8F6A599F283954B3C.crl (hash: v+JOotyOmVskJGGnUrtugUqZ+2oh5JPfivIAvk9IobA=) 2: 3133392e3134382e302e302f31362d3136203d3e203233373731.roa (hash: 9pwvUfLeRWTosXHUrLsGjnfPfMD5+GLs5n8xIfzPO5g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 10:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:37:62:5c:07:38:e0:83:cb:7a:99:8f:f0:b4:3b:ae:a8:c3:41:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E52A9C4B7583314611765C8F6A599F283954B3C Validity Not Before: Sep 4 04:34:56 2026 GMT Not After : Sep 7 13:30:56 2026 GMT Subject: CN=CFE852E99AA109E0ECF3B8F6386BBEF23927E25F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:67:f5:36:67:95:aa:91:12:0a:1e:10:0c:5f: 33:c8:3f:1e:f6:75:1f:f6:e4:e5:10:57:84:fc:a1: b5:be:ed:b3:f8:3f:b4:ae:cb:fd:fc:ba:47:9d:46: d1:be:cc:9f:ef:29:e8:35:12:28:4c:bb:74:80:14: 10:d8:e9:33:16:88:cf:4d:bf:71:a4:bd:bb:ca:d7: ae:25:30:ab:1b:40:ad:49:6c:62:0c:e6:10:3f:25: fd:90:20:b8:e5:18:f3:9a:b8:69:30:e9:6e:73:d0: 21:c4:ad:7e:19:3c:a7:c7:f4:2c:11:cd:80:ed:98: fe:92:70:d1:39:c1:d5:6c:00:d2:79:5b:80:24:dd: 6d:62:fb:59:5e:c6:8d:24:5d:59:38:96:49:5f:70: c2:84:bc:94:3b:3b:c6:c8:46:53:0b:a5:0b:04:bd: de:04:a6:15:e9:7e:ae:80:a7:91:9d:52:74:e9:8a: d9:c3:06:2d:55:24:ce:74:89:1a:9b:34:48:69:b6: e7:a7:39:f3:79:ac:d5:bb:a5:1c:e8:d0:70:86:d3: 62:65:fd:f1:05:7f:af:ca:8a:ae:e0:35:dc:57:17: b4:58:ee:9b:ff:c8:2b:ac:d8:e7:38:1b:82:6c:bb: b3:d8:de:33:ad:58:e9:47:9c:3e:1e:8a:4c:af:c3: a0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E8:52:E9:9A:A1:09:E0:EC:F3:B8:F6:38:6B:BE:F2:39:27:E2:5F X509v3 Authority Key Identifier: keyid:1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e6:ba:24:85:ba:dc:88:ec:b6:73:22:46:34:eb:b3:50:d4: a4:5b:80:a1:01:ba:c7:5f:2e:84:79:75:5c:07:39:a0:92:90: 0f:cc:6e:88:22:6e:70:a5:39:17:e3:71:25:6f:0c:15:d5:a4: 52:9a:54:dc:44:39:bc:6f:17:12:11:e6:35:87:b3:51:6e:47: 67:ed:31:aa:1a:70:80:35:2c:a2:85:75:b3:a4:db:25:b5:8b: 49:f5:20:5e:f9:6d:35:e6:7f:84:e4:2c:f4:53:48:2b:d4:5c: 4e:ad:0b:f2:c0:9c:b5:78:7a:d3:d2:26:b6:da:7e:43:ae:cf: 76:3c:78:8c:3a:98:cc:28:d3:bb:c3:ab:11:fb:63:2b:3e:74: 3c:cc:8d:ce:c4:f4:7c:a5:77:1d:1c:10:09:28:96:6c:15:a3: 5d:c3:32:11:94:19:98:dc:24:25:59:b2:45:e1:d6:04:75:c3: 46:f9:84:5b:20:f2:60:be:93:06:ed:8e:4c:f1:0c:cc:0d:ae: 95:ef:36:d8:9b:2f:19:8c:4d:c3:1a:4f:80:80:fb:5b:a1:77: 94:13:f9:2c:c2:5f:68:72:34:6d:72:82:a7:9e:10:af:00:cb: c3:db:a8:6f:9d:49:19:c5:f1:a0:71:1d:71:d8:41:49:e4:0f: 43:83:14:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFTdiXAc44IPLepmP8LQ7rqjDQe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4 Mzk1NEIzQzAeFw0yNjA5MDQwNDM0NTZaFw0yNjA5MDcxMzMwNTZaMDMxMTAvBgNV BAMTKENGRTg1MkU5OUFBMTA5RTBFQ0YzQjhGNjM4NkJCRUYyMzkyN0UyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtZ/U2Z5WqkRIKHhAMXzPIPx72 dR/25OUQV4T8obW+7bP4P7Suy/38ukedRtG+zJ/vKeg1EihMu3SAFBDY6TMWiM9N v3GkvbvK164lMKsbQK1JbGIM5hA/Jf2QILjlGPOauGkw6W5z0CHErX4ZPKfH9CwR zYDtmP6ScNE5wdVsANJ5W4Ak3W1i+1lexo0kXVk4lklfcMKEvJQ7O8bIRlMLpQsE vd4EphXpfq6Ap5GdUnTpitnDBi1VJM50iRqbNEhptuenOfN5rNW7pRzo0HCG02Jl /fEFf6/Kiq7gNdxXF7RY7pv/yCus2Oc4G4Jsu7PY3jOtWOlHnD4eikyvw6DDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUz+hS6ZqhCeDs87j2OGu+8jkn4l8wHwYDVR0j BBgwFoAUHlKpxLdYMxRhF2XI9qWZ8oOVSzwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8xLzFFNTJBOUM0Qjc1ODMzMTQ2MTE3NjVDOEY2QTU5 OUYyODM5NTRCM0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4Mzk1NEIzQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIwNDgzODYvMS8xRTUyQTlDNEI3NTgz MzE0NjExNzY1QzhGNkE1OTlGMjgzOTU0QjNDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOa6JIW63Ijs tnMiRjTrs1DUpFuAoQG6x18uhHl1XAc5oJKQD8xuiCJucKU5F+NxJW8MFdWkUppU 3EQ5vG8XEhHmNYezUW5HZ+0xqhpwgDUsooV1s6TbJbWLSfUgXvltNeZ/hOQs9FNI K9RcTq0L8sCctXh609Imttp+Q67Pdjx4jDqYzCjTu8OrEftjKz50PMyNzsT0fKV3 HRwQCSiWbBWjXcMyEZQZmNwkJVmyReHWBHXDRvmEWyDyYL6TBu2OTPEMzA2ule82 2JsvGYxNwxpPgID7W6F3lBP5LMJfaHI0bXKCp54QrwDLw9uob51JGcXxoHEdcdhB SeQPQ4MUGA== -----END CERTIFICATE-----Generated at Sat Sep 5 09:41:56 2026 by rpki-client