$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft File: 1E52A9C4B7583314611765C8F6A599F283954B3C.mft (raw, json) Hash identifier: UQauWA3iaVzRepkrDUv/sTb663Hj2oUxhykx3VhFPjE= Subject key identifier: 8C:68:3C:8C:99:D7:2A:13:A5:57:88:D4:D2:C7:85:B4:CF:8F:18:7F Authority key identifier: 1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C Certificate issuer: /CN=1E52A9C4B7583314611765C8F6A599F283954B3C Certificate serial: 5F38362A394D53F176F77F73F16DACB647F823F3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft Manifest number: 0157 Signing time: Fri 30 Oct 2026 07:17:57 +0000 Manifest this update: Fri 30 Oct 2026 07:12:57 +0000 Manifest next update: Mon 02 Nov 2026 15:25:57 +0000 Files and hashes: 1: 1E52A9C4B7583314611765C8F6A599F283954B3C.crl (hash: x+HF21uYI6Roi0NxaspGxaaBYjUWGlUOh77WYIItb1M=) 2: 3133392e3134382e302e302f31362d3136203d3e203233373731.roa (hash: 9pwvUfLeRWTosXHUrLsGjnfPfMD5+GLs5n8xIfzPO5g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 15:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:38:36:2a:39:4d:53:f1:76:f7:7f:73:f1:6d:ac:b6:47:f8:23:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E52A9C4B7583314611765C8F6A599F283954B3C Validity Not Before: Oct 30 07:12:57 2026 GMT Not After : Nov 2 15:25:57 2026 GMT Subject: CN=8C683C8C99D72A13A55788D4D2C785B4CF8F187F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:39:fa:34:7a:7c:0e:bb:af:8e:b2:2e:2a:34: 93:c7:e3:93:68:05:63:52:e6:e0:78:b2:38:a6:3a: 07:a0:b6:49:57:e4:ca:59:43:1a:c7:1f:82:16:e6: 43:a8:f8:19:da:e7:1d:3b:bd:c4:10:c7:74:b2:05: 23:0d:32:16:96:e2:c1:39:12:c1:6f:c6:be:6b:6f: 3a:32:cf:20:eb:ae:51:11:bb:cc:0e:c6:35:fd:05: 9a:e0:4f:06:a9:a7:6a:8b:1e:0c:81:b1:41:70:37: c9:5e:0f:32:b2:a0:53:ea:f7:6d:ce:c7:11:e2:24: af:37:e3:53:df:9c:3d:6d:10:42:2f:a7:dc:76:b0: 7a:b3:8a:37:45:d9:12:cf:95:72:61:96:93:49:31: 02:d4:54:55:f2:9a:f4:a2:b5:db:7a:7f:ee:8a:56: 32:0a:b1:bc:be:57:4a:ee:21:b9:cf:84:92:3c:05: 0e:ab:03:0c:30:e8:4a:81:be:9c:0b:7a:35:b1:81: 27:dd:d5:28:ca:0e:57:dd:4d:de:99:ef:c4:9c:bf: f0:a3:59:67:95:a6:6f:10:a0:8e:6a:8e:df:05:c3: 01:9b:a8:03:79:9e:e9:1e:0d:4a:aa:c1:ff:bd:10: c3:de:34:30:e7:9a:72:d7:6f:ed:ce:b9:46:63:a9: 8e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:68:3C:8C:99:D7:2A:13:A5:57:88:D4:D2:C7:85:B4:CF:8F:18:7F X509v3 Authority Key Identifier: keyid:1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:15:5c:8e:85:fd:8d:8a:16:53:3c:13:c6:76:69:50:e3:ad: fc:a7:4c:fe:67:91:c4:ee:42:e3:46:07:ec:84:3c:fb:87:74: d0:bf:52:2f:31:b1:fc:e7:15:fb:9e:16:13:87:4d:56:07:ed: da:a6:59:86:d2:19:63:6f:1b:cf:f1:14:19:b0:3a:0d:b0:ac: 3a:5f:29:88:2f:5d:bf:c3:5d:97:32:09:33:13:ee:6f:ad:bd: 25:0b:3f:72:34:3c:04:d6:f2:e0:be:5b:ce:8e:17:f8:06:d1: 50:42:3a:51:3d:62:56:98:8f:6a:19:79:3e:ee:dd:71:bd:4c: 48:b5:0e:0a:c2:29:b8:09:82:7d:39:1d:23:06:c6:67:8b:3a: 12:b0:ac:0f:fa:41:31:7a:0c:fc:f7:74:48:04:d5:1b:28:16: 32:68:7b:64:19:31:6c:eb:b2:48:52:19:6d:f1:5f:9c:67:13: d8:6c:e3:b4:84:9c:01:eb:83:fd:30:38:5e:af:fe:fb:94:4d: 7e:4c:38:64:31:bf:93:35:be:5d:99:db:e1:17:13:f5:7b:1a: ad:41:11:f7:c7:b9:66:7d:16:e2:53:a3:5c:d4:d6:23:9c:86: c2:97:d3:40:6f:de:7a:61:08:ac:c1:97:f6:72:12:0b:f3:61: f4:4b:a8:ac -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXzg2KjlNU/F2939z8W2stkf4I/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4 Mzk1NEIzQzAeFw0yNjEwMzAwNzEyNTdaFw0yNjExMDIxNTI1NTdaMDMxMTAvBgNV BAMTKDhDNjgzQzhDOTlENzJBMTNBNTU3ODhENEQyQzc4NUI0Q0Y4RjE4N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHOfo0enwOu6+Osi4qNJPH45No BWNS5uB4sjimOgegtklX5MpZQxrHH4IW5kOo+Bna5x07vcQQx3SyBSMNMhaW4sE5 EsFvxr5rbzoyzyDrrlERu8wOxjX9BZrgTwapp2qLHgyBsUFwN8leDzKyoFPq923O xxHiJK8341PfnD1tEEIvp9x2sHqzijdF2RLPlXJhlpNJMQLUVFXymvSitdt6f+6K VjIKsby+V0ruIbnPhJI8BQ6rAwww6EqBvpwLejWxgSfd1SjKDlfdTd6Z78Scv/Cj WWeVpm8QoI5qjt8FwwGbqAN5nukeDUqqwf+9EMPeNDDnmnLXb+3OuUZjqY59AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjGg8jJnXKhOlV4jU0seFtM+PGH8wHwYDVR0j BBgwFoAUHlKpxLdYMxRhF2XI9qWZ8oOVSzwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8xLzFFNTJBOUM0Qjc1ODMzMTQ2MTE3NjVDOEY2QTU5 OUYyODM5NTRCM0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4Mzk1NEIzQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIwNDgzODYvMS8xRTUyQTlDNEI3NTgz MzE0NjExNzY1QzhGNkE1OTlGMjgzOTU0QjNDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRVcjoX9jYoW UzwTxnZpUOOt/KdM/meRxO5C40YH7IQ8+4d00L9SLzGx/OcV+54WE4dNVgft2qZZ htIZY28bz/EUGbA6DbCsOl8piC9dv8NdlzIJMxPub629JQs/cjQ8BNby4L5bzo4X +AbRUEI6UT1iVpiPahl5Pu7dcb1MSLUOCsIpuAmCfTkdIwbGZ4s6ErCsD/pBMXoM /Pd0SATVGygWMmh7ZBkxbOuySFIZbfFfnGcT2GzjtIScAeuD/TA4Xq/++5RNfkw4 ZDG/kzW+XZnb4RcT9XsarUER98e5Zn0W4lOjXNTWI5yGwpfTQG/eemEIrMGX9nIS C/Nh9EuorA== -----END CERTIFICATE-----Generated at Fri Oct 30 14:11:50 2026 by rpki-client