$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft File: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft (raw, json) Hash identifier: hW1uKYeeoAXTYzExbd1qxFQk00KJnzF5kg7Ln1PStPI= Subject key identifier: D7:6E:66:07:B1:AB:6E:7A:D7:70:43:EE:2C:D4:FD:4B:94:0C:00:36 Authority key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A Certificate issuer: /CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Certificate serial: 1833D878AF13C32A37AF9E85EA72978691163029 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft Manifest number: 72 Signing time: Sun 12 Apr 2026 17:24:16 +0000 Manifest this update: Sun 12 Apr 2026 17:19:16 +0000 Manifest next update: Mon 13 Apr 2026 19:02:16 +0000 Files and hashes: 1: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl (hash: Ci6Bp+gsKShNfsc5wwkeHtXjuuA6KKogbcvvJhTH9Jg=) 2: 3130332e3132362e3130312e302f32342d3234203d3e20313337353731.roa (hash: TEds4zJ1NZLjwghU1L5mKASsDNpUM5UBLSvVg/x2bfA=) 3: 3130332e3132362e3130322e302f32342d3234203d3e20313337353731.roa (hash: B6hXCa2VtbAaS/QVk3JPWGAK3CXMEjwkn7BnYRAi5e0=) 4: 3130332e3132362e3130302e302f32342d3234203d3e203430363736.roa (hash: hs8AdJG/Xf3CnIDVOmA2dlMGNeRgBfrPEXdipO6KhtE=) 5: 3130332e3132362e3130332e302f32342d3234203d3e20313337353731.roa (hash: gikIIcEznKxvcaUTGyQMeSzv2o9au6QP6HSnaj/W9jY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 19:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:33:d8:78:af:13:c3:2a:37:af:9e:85:ea:72:97:86:91:16:30:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Validity Not Before: Apr 12 17:19:16 2026 GMT Not After : Apr 13 19:02:16 2026 GMT Subject: CN=D76E6607B1AB6E7AD77043EE2CD4FD4B940C0036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:97:5b:3c:73:14:4f:3d:69:e9:31:a5:1f:c4: 50:26:1c:0e:8f:f3:92:7f:4c:43:31:48:d9:59:c9: 2a:a8:a0:6e:2a:fb:1e:3a:9c:16:62:e3:b6:f3:39: 5d:1e:ee:78:b7:ea:52:50:ce:e4:7b:3f:fb:80:da: 59:a0:5c:82:36:eb:33:3b:51:02:86:61:9b:e2:56: f3:60:06:d9:79:53:32:0a:e0:7e:86:06:cf:ef:91: 00:c1:e7:81:99:e7:35:17:aa:dc:49:7e:6d:a0:a3: d5:47:c5:dd:73:39:56:e1:af:b9:69:1f:3b:2c:1b: f7:e8:75:18:cf:54:be:04:d7:74:23:0c:ca:c9:0f: 96:30:13:48:9a:36:31:9f:93:1f:b9:ab:6e:5a:af: dd:9d:40:ee:00:28:09:e0:a9:31:69:89:4f:d2:a4: 98:5b:6d:a3:d3:c1:8e:3a:16:c5:d6:ce:f0:5c:50: 08:3f:7a:fa:7e:14:dc:94:8b:e6:bd:78:a3:a6:ad: 0f:6e:07:f4:5e:90:e7:92:27:7d:2d:46:2f:bf:f3: 56:c2:28:f5:6f:10:14:ea:5a:4a:fe:d3:cb:11:06: d0:55:13:39:da:5e:dd:68:19:ff:64:b7:b2:b7:89: a5:c1:a7:4e:ac:41:c0:10:04:42:11:7f:51:28:e9: d6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6E:66:07:B1:AB:6E:7A:D7:70:43:EE:2C:D4:FD:4B:94:0C:00:36 X509v3 Authority Key Identifier: keyid:52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:46:33:43:a0:d1:84:c1:90:40:08:eb:da:6b:52:d3:73:1b: e9:fe:8c:68:6c:89:7a:5a:c3:83:ff:dd:c9:3b:d6:d8:06:b3: e3:3d:7b:9b:34:af:54:6e:93:4b:31:8a:32:68:d1:65:1b:91: b7:b1:4a:82:4c:b3:ba:2a:d9:9d:f6:04:10:ca:25:eb:83:11: 1b:6b:4c:69:84:6d:12:65:81:15:51:a8:3e:57:da:70:3b:54: b3:83:fd:c4:56:64:c5:39:45:0c:5c:74:03:56:ef:3b:09:2f: f9:70:79:27:4a:33:cb:6f:3c:15:18:38:b7:00:f8:60:83:a8: 72:4f:e9:02:5f:75:2c:71:e3:fa:3f:76:18:16:80:3d:df:53: c4:cd:4f:99:6c:7d:3d:0c:bd:3b:c9:c3:b8:69:d1:ea:0d:f3: aa:a7:95:d9:e0:cd:5b:56:a1:31:54:3e:8a:77:ad:40:d9:4c: fd:5b:9a:12:14:c0:d0:fa:ce:42:97:4f:1c:1e:70:95:76:5c: 1c:e1:ce:0e:1b:99:fd:50:7e:8d:34:52:8b:32:46:50:f2:fc: 52:d0:62:3f:dc:57:e5:7d:30:a7:3b:e6:a1:5c:6d:91:9e:5c: bc:bf:d8:db:4c:63:fb:9f:98:6d:92:fb:f5:23:0e:ca:92:9a: 37:4c:78:7a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGDPYeK8Twyo3r56F6nKXhpEWMCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0 Q0UwN0QyQTAeFw0yNjA0MTIxNzE5MTZaFw0yNjA0MTMxOTAyMTZaMDMxMTAvBgNV BAMTKEQ3NkU2NjA3QjFBQjZFN0FENzcwNDNFRTJDRDRGRDRCOTQwQzAwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCml1s8cxRPPWnpMaUfxFAmHA6P 85J/TEMxSNlZySqooG4q+x46nBZi47bzOV0e7ni36lJQzuR7P/uA2lmgXII26zM7 UQKGYZviVvNgBtl5UzIK4H6GBs/vkQDB54GZ5zUXqtxJfm2go9VHxd1zOVbhr7lp HzssG/fodRjPVL4E13QjDMrJD5YwE0iaNjGfkx+5q25ar92dQO4AKAngqTFpiU/S pJhbbaPTwY46FsXWzvBcUAg/evp+FNyUi+a9eKOmrQ9uB/RekOeSJ30tRi+/81bC KPVvEBTqWkr+08sRBtBVEznaXt1oGf9kt7K3iaXBp06sQcAQBEIRf1Eo6dZFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU125mB7GrbnrXcEPuLNT9S5QMADYwHwYDVR0j BBgwFoAUUvvsYyMaqt8VOryY5IsqY0zgfSowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTMzNDc4NS8wLzUyRkJFQzYzMjMxQUFBREYxNTNBQkM5OEU0OEIy QTYzNENFMDdEMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0Q0UwN0QyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEzMzQ3ODUvMC81MkZCRUM2MzIzMUFB QURGMTUzQUJDOThFNDhCMkE2MzRDRTA3RDJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0YzQ6DRhMGQ QAjr2mtS03Mb6f6MaGyJelrDg//dyTvW2Aaz4z17mzSvVG6TSzGKMmjRZRuRt7FK gkyzuirZnfYEEMol64MRG2tMaYRtEmWBFVGoPlfacDtUs4P9xFZkxTlFDFx0A1bv Owkv+XB5J0ozy288FRg4twD4YIOock/pAl91LHHj+j92GBaAPd9TxM1PmWx9PQy9 O8nDuGnR6g3zqqeV2eDNW1ahMVQ+inetQNlM/VuaEhTA0PrOQpdPHB5wlXZcHOHO DhuZ/VB+jTRSizJGUPL8UtBiP9xX5X0wpzvmoVxtkZ5cvL/Y20xj+5+YbZL79SMO ypKaN0x4eg== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:41 2026 by rpki-client