
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft
File: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft (raw, json)
Hash identifier: Dkvk+xYvYn8sjgR63KpvDNd5D4Fe15xmPDQwnjCnoRo=
Subject key identifier: D5:C2:57:EB:94:E0:9C:41:9D:95:57:ED:80:B7:F3:35:6B:C0:EA:4B
Authority key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A
Certificate issuer: /CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A
Certificate serial: 37D1627D9F12DEE8CE4971E5B6EE2A1DF0BC195E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft
Manifest number: EF
Signing time: Tue 14 Jul 2026 12:21:14 +0000
Manifest this update: Tue 14 Jul 2026 12:16:14 +0000
Manifest next update: Wed 15 Jul 2026 15:25:14 +0000
Files and hashes: 1: 3130332e3132362e3130332e302f32342d3234203d3e20313337353731.roa (hash: gikIIcEznKxvcaUTGyQMeSzv2o9au6QP6HSnaj/W9jY=)
2: 3130332e3132362e3130302e302f32342d3234203d3e203430363736.roa (hash: hs8AdJG/Xf3CnIDVOmA2dlMGNeRgBfrPEXdipO6KhtE=)
3: 3130332e3132362e3130312e302f32342d3234203d3e20313337353731.roa (hash: TEds4zJ1NZLjwghU1L5mKASsDNpUM5UBLSvVg/x2bfA=)
4: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl (hash: yYbb9NBuJMKfVPB7QRilmaCUt3i8NFLNosPSZXBkDQc=)
5: 3130332e3132362e3130322e302f32342d3234203d3e20313337353731.roa (hash: B6hXCa2VtbAaS/QVk3JPWGAK3CXMEjwkn7BnYRAi5e0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:d1:62:7d:9f:12:de:e8:ce:49:71:e5:b6:ee:2a:1d:f0:bc:19:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A
Validity
Not Before: Jul 14 12:16:14 2026 GMT
Not After : Jul 15 15:25:14 2026 GMT
Subject: CN=D5C257EB94E09C419D9557ED80B7F3356BC0EA4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6b:0e:f7:44:33:79:49:31:88:49:07:97:57:
a4:2c:84:f8:1e:a0:eb:3e:d2:7b:d0:fe:82:e9:bc:
96:ba:f2:a2:5a:10:bc:17:40:3b:b1:d1:77:66:07:
2b:b0:f0:5f:b0:97:26:16:2d:d0:e1:95:34:f1:af:
ee:d0:42:a5:32:b2:fe:6e:c0:66:b7:3d:9b:a5:c8:
39:e7:48:42:05:8d:1b:81:8e:d2:80:56:6d:a6:7c:
23:a5:b4:b7:3a:03:01:2e:10:29:82:c0:ba:48:e6:
56:32:18:91:69:1e:f0:2c:05:ac:e0:b9:a6:17:e6:
b4:08:7c:a4:1d:20:b2:8f:8b:5b:6e:0c:6a:d8:a5:
00:9c:e3:7e:90:c3:b8:34:e6:31:41:1f:8a:93:9c:
8d:2e:5b:a1:a6:22:db:b9:89:4d:33:b0:84:7a:d8:
d7:9f:f5:64:52:df:9c:49:df:94:20:80:c7:03:58:
f1:61:1a:ee:de:d0:2b:f0:75:0f:0f:f3:ae:b3:c6:
6f:b8:1f:77:85:11:1e:1c:51:df:5c:f6:ab:ec:0c:
27:f3:1e:e7:da:cd:e2:88:6b:a2:a4:eb:86:1c:ee:
db:5f:d9:dc:43:3d:7f:31:cc:5b:5d:37:67:94:c6:
19:85:c7:49:5e:e2:7e:6a:31:2b:03:6f:3f:39:3a:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C2:57:EB:94:E0:9C:41:9D:95:57:ED:80:B7:F3:35:6B:C0:EA:4B
X509v3 Authority Key Identifier:
keyid:52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:36:d0:9c:06:c7:91:93:56:61:8b:72:8b:63:fa:77:d7:42:
01:90:29:59:66:b0:61:50:6d:e5:b3:a5:61:b1:f4:7b:45:5c:
0f:e3:93:35:39:8d:86:85:92:eb:27:e4:39:84:bb:7d:f3:62:
23:8c:51:87:58:fa:8b:3f:eb:54:b2:18:e9:a9:c7:c9:81:36:
ee:b3:ec:ee:ff:9a:1a:d8:d0:cd:c5:05:93:f3:7c:47:26:35:
64:2e:5f:3e:08:4c:de:50:3c:90:1a:0f:eb:16:99:18:28:7d:
82:5e:57:63:e3:5a:d9:ba:af:83:47:a7:26:24:66:76:b5:d2:
e1:16:a5:79:50:74:86:8a:f9:8d:83:34:79:fa:e3:02:c4:3a:
7d:41:50:7d:87:96:66:2d:3e:4c:d8:0a:84:18:3d:bd:e8:f1:
dc:96:7c:98:a2:b8:66:00:46:58:cd:c4:d2:7b:70:04:b4:93:
b6:3b:3e:7a:b9:62:69:8d:89:a5:3c:00:58:9b:66:79:c0:29:
33:8a:6b:21:cf:85:ac:74:b8:77:d8:43:e8:d8:f8:b5:38:14:
fb:64:0a:c5:88:49:6f:b9:7a:aa:7a:f2:3d:47:97:4a:0f:10:
62:a2:d8:b4:70:4d:54:43:03:70:7f:47:78:00:93:21:67:a5:
3d:d9:62:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:00:05 2026 by rpki-client