$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft File: 1E52A9C4B7583314611765C8F6A599F283954B3C.mft (raw, json) Hash identifier: u9nVwYmWtVlaTWEXIwjVLq+RmHB9mR15+ceBxY/eCq4= Subject key identifier: 17:74:C5:CE:C8:8E:CE:3B:B9:5E:2C:CD:C9:D5:DB:54:3F:5B:06:9C Authority key identifier: 1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C Certificate issuer: /CN=1E52A9C4B7583314611765C8F6A599F283954B3C Certificate serial: 5F1381A333A21F43830E3B3426855763B97A867B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft Manifest number: 3C Signing time: Wed 04 Mar 2026 08:48:20 +0000 Manifest this update: Wed 04 Mar 2026 08:43:20 +0000 Manifest next update: Thu 05 Mar 2026 10:15:20 +0000 Files and hashes: 1: 1E52A9C4B7583314611765C8F6A599F283954B3C.crl (hash: +x2+xDQRgB0S0wJHDYD4h7/ezIoUup8PTcUt70kAiqI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:13:81:a3:33:a2:1f:43:83:0e:3b:34:26:85:57:63:b9:7a:86:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E52A9C4B7583314611765C8F6A599F283954B3C Validity Not Before: Mar 4 08:43:20 2026 GMT Not After : Mar 5 10:15:20 2026 GMT Subject: CN=1774C5CEC88ECE3BB95E2CCDC9D5DB543F5B069C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e9:94:7e:bc:f4:d0:b3:9c:4d:33:59:72:b5: b0:4d:45:45:86:2c:9b:17:04:be:45:d7:8b:49:5c: 0f:81:17:68:eb:2e:61:c0:04:8f:3a:5f:8b:81:7e: 5d:b8:0e:87:05:1e:ca:ce:f7:06:72:ed:e3:80:a4: f5:66:d6:3c:17:c3:d4:0b:44:f1:b1:6f:22:fb:c0: 62:55:6c:44:a2:7b:9a:89:a2:fb:db:4e:2c:bb:d8: de:e5:82:08:b9:33:7e:d9:9f:d4:62:2f:36:47:1d: 29:73:03:d8:8d:40:c6:bc:2b:20:1c:c4:d4:7f:cd: a3:77:2d:b9:45:e3:c8:82:88:7e:b5:8d:2e:ba:bf: 57:33:d5:20:c3:25:fa:09:c0:89:97:31:1a:d2:2d: ce:35:fc:ad:47:35:93:d2:5f:98:cc:94:54:10:e8: 75:05:b8:5d:20:31:15:40:e5:cb:fc:01:2f:3b:39: 5c:a3:f9:4a:b0:9e:c5:23:20:48:96:14:91:6e:81: 06:af:35:78:17:12:dd:a0:5b:3a:23:86:e0:28:34: 85:3a:24:ac:c5:ff:60:0c:90:32:5f:8e:b7:ee:8a: 10:5d:1f:5c:88:53:d1:af:15:74:6f:e7:cc:84:72: 96:12:99:c2:dd:5a:b7:7e:c1:d7:45:c6:85:69:b1: 58:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:74:C5:CE:C8:8E:CE:3B:B9:5E:2C:CD:C9:D5:DB:54:3F:5B:06:9C X509v3 Authority Key Identifier: keyid:1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:f7:bd:82:a5:f3:f6:e0:e2:ac:c1:61:4b:8a:32:4d:c1:69: 9c:28:b4:ad:15:68:69:da:2c:22:e7:c7:8b:80:57:b5:64:a6: d7:aa:bb:60:38:d3:5a:bd:1c:09:49:7f:24:61:9c:7e:0b:a0: 4d:93:ed:20:e5:8e:51:7c:72:56:bd:a5:3c:08:e6:ed:f4:bd: 82:ee:98:cd:14:f4:ec:02:83:4c:97:49:fd:fc:e3:6d:b1:d1: 03:90:81:1f:b9:c1:30:e8:c4:a0:82:5a:08:ee:e1:43:24:6e: 25:e4:fa:ae:75:87:b4:f2:9d:0c:cd:49:ea:cc:86:ea:0a:d5: 8e:34:f7:68:20:39:50:68:34:f1:e7:71:61:a8:f6:bd:ed:0f: 60:6d:ff:26:f2:a9:95:cd:b2:3a:5a:9b:da:c7:80:a9:4a:1a: 62:85:51:e2:1b:9a:e4:bc:d2:86:d4:d3:a3:19:94:1e:87:ab: 9d:42:98:4b:6d:c0:24:98:e7:15:36:b1:ee:a6:2c:5b:7f:92: 5f:53:09:47:17:5d:e1:cc:fb:8d:cb:7c:bf:e3:f1:4b:cd:b7: 1e:11:44:1c:1e:97:9f:4e:d2:38:f8:eb:55:1b:90:44:8a:99: a5:a3:e4:82:28:21:be:05:7f:40:9e:75:5a:3a:e5:dc:42:16: fd:a7:6d:1c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXxOBozOiH0ODDjs0JoVXY7l6hnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4 Mzk1NEIzQzAeFw0yNjAzMDQwODQzMjBaFw0yNjAzMDUxMDE1MjBaMDMxMTAvBgNV BAMTKDE3NzRDNUNFQzg4RUNFM0JCOTVFMkNDREM5RDVEQjU0M0Y1QjA2OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6ZR+vPTQs5xNM1lytbBNRUWG LJsXBL5F14tJXA+BF2jrLmHABI86X4uBfl24DocFHsrO9wZy7eOApPVm1jwXw9QL RPGxbyL7wGJVbESie5qJovvbTiy72N7lggi5M37Zn9RiLzZHHSlzA9iNQMa8KyAc xNR/zaN3LblF48iCiH61jS66v1cz1SDDJfoJwImXMRrSLc41/K1HNZPSX5jMlFQQ 6HUFuF0gMRVA5cv8AS87OVyj+UqwnsUjIEiWFJFugQavNXgXEt2gWzojhuAoNIU6 JKzF/2AMkDJfjrfuihBdH1yIU9GvFXRv58yEcpYSmcLdWrd+wddFxoVpsVgjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUF3TFzsiOzju5XizNydXbVD9bBpwwHwYDVR0j BBgwFoAUHlKpxLdYMxRhF2XI9qWZ8oOVSzwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8xLzFFNTJBOUM0Qjc1ODMzMTQ2MTE3NjVDOEY2QTU5 OUYyODM5NTRCM0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4Mzk1NEIzQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIwNDgzODYvMS8xRTUyQTlDNEI3NTgz MzE0NjExNzY1QzhGNkE1OTlGMjgzOTU0QjNDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfe9gqXz9uDi rMFhS4oyTcFpnCi0rRVoadosIufHi4BXtWSm16q7YDjTWr0cCUl/JGGcfgugTZPt IOWOUXxyVr2lPAjm7fS9gu6YzRT07AKDTJdJ/fzjbbHRA5CBH7nBMOjEoIJaCO7h QyRuJeT6rnWHtPKdDM1J6syG6grVjjT3aCA5UGg08edxYaj2ve0PYG3/JvKplc2y Olqb2seAqUoaYoVR4hua5LzShtTToxmUHoernUKYS23AJJjnFTax7qYsW3+SX1MJ Rxdd4cz7jct8v+PxS823HhFEHB6Xn07SOPjrVRuQRIqZpaPkgighvgV/QJ51Wjrl 3EIW/adtHA== -----END CERTIFICATE-----Generated at Wed Mar 4 13:10:33 2026 by rpki-client