
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
File: 1E52A9C4B7583314611765C8F6A599F283954B3C.mft (raw, json)
Hash identifier: upNaVdg56Ym50Yp+bRRMWJQt3m3QTeeC+jeTa3nS5UE=
Subject key identifier: 1C:89:2E:CE:0F:10:68:D2:DF:0C:A1:37:69:E7:12:EE:B5:F6:52:20
Authority key identifier: 1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C
Certificate issuer: /CN=1E52A9C4B7583314611765C8F6A599F283954B3C
Certificate serial: 057314B4809E918FD10EC2B846602F61933C4CFC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
Manifest number: 7B
Signing time: Sat 18 Apr 2026 10:19:53 +0000
Manifest this update: Sat 18 Apr 2026 10:14:53 +0000
Manifest next update: Sun 19 Apr 2026 14:10:53 +0000
Files and hashes: 1: 1E52A9C4B7583314611765C8F6A599F283954B3C.crl (hash: OSnLalQhiL9HhNbXslaVtx+lWAClR5OJzpU7SasMrWU=)
2: 3133392e3134382e302e302f31362d3136203d3e203233373731.roa (hash: 9pwvUfLeRWTosXHUrLsGjnfPfMD5+GLs5n8xIfzPO5g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 10:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:73:14:b4:80:9e:91:8f:d1:0e:c2:b8:46:60:2f:61:93:3c:4c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E52A9C4B7583314611765C8F6A599F283954B3C
Validity
Not Before: Apr 18 10:14:53 2026 GMT
Not After : Apr 19 14:10:53 2026 GMT
Subject: CN=1C892ECE0F1068D2DF0CA13769E712EEB5F65220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:11:e9:c5:09:f1:9e:4a:e6:a6:16:4f:6a:d7:
ca:c9:a1:24:c7:58:fc:bd:39:74:81:92:f9:a0:44:
25:ce:2f:ee:a5:01:5c:f1:28:58:43:00:b5:0a:c5:
2e:9e:7d:77:b9:9c:6d:10:c8:d4:51:30:65:95:34:
ad:05:d5:23:f2:28:20:e0:da:76:83:68:37:97:92:
c8:cd:2e:82:3f:1a:04:90:50:61:a1:85:0e:d7:8c:
b8:be:f6:d8:a8:8f:c7:cd:46:af:53:56:93:13:60:
c2:b1:2a:a6:e6:9b:db:b9:4a:73:f9:f8:99:8d:29:
80:52:e9:d5:5d:63:74:c8:44:bc:70:65:c6:2d:67:
24:1e:7b:27:47:d5:4f:6d:bc:96:a7:2c:f5:b8:04:
da:d7:fa:bf:b9:18:f7:99:63:e7:93:25:2e:0a:a8:
1b:ea:f3:c7:21:84:8a:97:82:1a:47:c7:02:fc:2c:
f9:14:6d:3a:b1:6d:1b:54:a9:53:6c:22:c9:fe:c2:
16:08:9e:e5:77:fa:d4:7a:87:75:31:76:ea:86:1b:
34:ff:e6:9a:48:f1:45:be:ee:c1:f9:0e:4f:e2:43:
88:2f:2d:95:4c:f8:a9:81:71:7e:53:4e:e5:e6:65:
dc:0e:3e:5e:9c:12:29:6a:92:4d:a9:56:60:c0:d4:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:89:2E:CE:0F:10:68:D2:DF:0C:A1:37:69:E7:12:EE:B5:F6:52:20
X509v3 Authority Key Identifier:
keyid:1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:82:e0:c1:33:50:7c:51:eb:9b:ea:a5:fd:61:02:a5:55:73:
6b:0c:2a:6a:f1:32:fe:5e:78:c8:8b:b1:9f:bd:19:3c:7b:b4:
96:ca:28:20:df:dc:1f:f5:e7:4f:7c:1c:d1:e6:a8:87:e6:b7:
c5:c8:50:5c:4c:8e:4e:37:48:5d:fe:f2:70:df:8f:b9:51:ba:
45:10:ff:de:1c:9c:ac:03:18:51:a3:fe:c8:f0:71:96:44:76:
a2:a2:db:3f:e4:e3:c1:69:0c:dc:14:1d:c0:a9:ab:55:7c:23:
08:fa:11:ea:e4:76:13:7e:f2:d3:49:d5:89:71:53:ac:5c:82:
4e:2f:22:ff:03:98:e5:6c:34:c9:86:59:eb:7a:50:2a:46:97:
2e:45:43:78:8d:52:1b:50:7e:7e:fc:e4:dc:fb:29:e8:52:e8:
a2:af:31:21:d7:de:6a:1b:74:34:17:a2:ea:b5:d0:0e:43:0e:
55:ce:f8:f5:af:e4:92:63:c2:d1:4c:ab:49:90:cd:f6:26:30:
dd:87:50:80:6b:04:b5:64:fe:9e:01:2b:df:58:83:bb:0f:eb:
84:47:06:3b:34:76:8d:95:60:28:43:dc:b8:d9:42:d9:0c:c9:
88:aa:24:fb:9c:20:3f:4a:ae:91:d4:ea:16:f1:59:fb:e3:21:
ee:b1:18:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 01:18:13 2026 by rpki-client