$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft File: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft (raw, json) Hash identifier: S1fJP5FxQbxZ0hJemWaMxiZYOZv/PevRBOptqEA1fOY= Subject key identifier: 7D:38:FC:F0:61:15:92:65:A1:30:93:31:88:8A:BE:55:79:88:29:52 Authority key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A Certificate issuer: /CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Certificate serial: 1F762BCBF8837274C746F8297D6783B6E1CB1816 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft Manifest number: 012C Signing time: Fri 28 Aug 2026 06:47:35 +0000 Manifest this update: Fri 28 Aug 2026 06:42:35 +0000 Manifest next update: Mon 31 Aug 2026 12:34:35 +0000 Files and hashes: 1: 3130332e3132362e3130322e302f32342d3234203d3e20313337353731.roa (hash: B6hXCa2VtbAaS/QVk3JPWGAK3CXMEjwkn7BnYRAi5e0=) 2: 3130332e3132362e3130312e302f32342d3234203d3e20313337353731.roa (hash: TEds4zJ1NZLjwghU1L5mKASsDNpUM5UBLSvVg/x2bfA=) 3: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl (hash: DWaAAjNeOZr+FEII2cTP/gTSOx9DhVsKtJnOanROeNE=) 4: 3130332e3132362e3130302e302f32342d3234203d3e20313337353731.roa (hash: Tulzy2loSZQGgT5vI6JjBZGNxAzzMdSArmk0OaZXJyI=) 5: 3130332e3132362e3130332e302f32342d3234203d3e20313337353731.roa (hash: gikIIcEznKxvcaUTGyQMeSzv2o9au6QP6HSnaj/W9jY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 12:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:76:2b:cb:f8:83:72:74:c7:46:f8:29:7d:67:83:b6:e1:cb:18:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Validity Not Before: Aug 28 06:42:35 2026 GMT Not After : Aug 31 12:34:35 2026 GMT Subject: CN=7D38FCF061159265A1309331888ABE5579882952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:35:d9:49:16:a2:bb:ed:ec:15:14:2f:51: ec:e8:20:fc:46:1b:9b:26:a8:17:fa:be:81:62:ac: 7c:94:4b:fe:9c:7d:4f:6a:a9:7d:1b:bb:17:ce:b6: f7:41:9a:2f:cd:9c:c4:3d:42:65:35:ed:ca:b2:55: bd:ab:ed:e1:9b:45:10:2a:7b:34:31:21:32:bf:37: 6f:77:24:c4:46:ed:0b:7c:ee:6e:c4:16:c0:f6:4e: 42:a9:87:39:5f:55:af:69:43:a4:88:7f:d9:00:b3: c6:85:bb:e8:17:c2:ae:2d:00:9a:af:85:a8:56:7a: 77:0d:17:86:d1:1c:45:9a:2d:aa:34:d4:28:4a:ac: 56:d4:c6:f2:49:6b:5e:c3:74:88:c0:ad:9a:bd:eb: 6b:ea:3d:cc:2a:f8:af:f9:fb:b3:ee:e0:27:db:4d: d3:e7:69:38:a1:b3:ec:95:50:81:3e:d1:02:89:14: d0:97:ec:d9:4f:2b:85:11:4b:d7:3a:64:08:04:4a: be:5c:fb:16:18:7f:74:af:ac:52:40:df:07:d5:6f: d9:10:28:4d:3c:6f:32:c8:92:18:ec:f3:6f:51:a6: 69:d8:bc:da:97:08:bd:06:a0:78:54:c0:aa:cb:75: 93:47:4c:da:78:a3:bf:5d:e3:50:99:2f:eb:c6:dc: cc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:38:FC:F0:61:15:92:65:A1:30:93:31:88:8A:BE:55:79:88:29:52 X509v3 Authority Key Identifier: keyid:52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:39:9c:5a:f7:e0:ab:f9:c9:1c:4d:c7:8f:a8:ce:a7:00:76: f6:2a:59:c1:6e:32:44:f1:97:90:00:1f:50:0d:2f:8f:df:e0: c8:93:32:21:01:2d:aa:49:45:f4:e3:d1:c9:67:b2:73:21:43: a5:7b:f8:e9:58:ea:5b:d0:69:d6:9a:a0:d0:12:c0:7d:ab:de: 73:21:81:27:cc:bb:cc:8a:07:b8:5e:28:53:80:dd:a0:91:fc: cb:ad:b5:6f:14:5c:4e:ee:a0:50:35:a2:bc:1e:d3:08:4e:a6: fa:52:a3:82:a6:e2:c9:41:aa:cf:66:37:2d:a7:b1:46:ef:1c: a3:0e:a6:ac:aa:20:e1:fb:a1:91:b5:13:29:c5:25:8a:96:d9: 71:26:d4:c1:1a:88:10:61:90:4d:73:38:f2:6a:bd:11:f3:f5: 4d:b4:f2:e6:78:81:20:ea:53:e1:1c:b4:7d:5b:7f:de:d1:14: e2:db:51:87:8d:97:5c:9d:42:81:1d:1c:a8:63:f5:93:f5:e8: a3:4f:34:e6:65:c5:0b:db:af:8c:4d:7c:0b:95:f3:5d:72:d1: d3:07:98:f3:5c:42:5d:20:dc:ed:55:4d:e9:e2:dd:b7:14:f9: 8e:fe:30:9c:93:2d:2e:83:e2:9a:89:66:9e:47:2c:7f:ae:7a: 72:42:86:a8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUH3Yry/iDcnTHRvgpfWeDtuHLGBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0 Q0UwN0QyQTAeFw0yNjA4MjgwNjQyMzVaFw0yNjA4MzExMjM0MzVaMDMxMTAvBgNV BAMTKDdEMzhGQ0YwNjExNTkyNjVBMTMwOTMzMTg4OEFCRTU1Nzk4ODI5NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEjXZSRaiu+3sFRQvUezoIPxG G5smqBf6voFirHyUS/6cfU9qqX0buxfOtvdBmi/NnMQ9QmU17cqyVb2r7eGbRRAq ezQxITK/N293JMRG7Qt87m7EFsD2TkKphzlfVa9pQ6SIf9kAs8aFu+gXwq4tAJqv hahWencNF4bRHEWaLao01ChKrFbUxvJJa17DdIjArZq962vqPcwq+K/5+7Pu4Cfb TdPnaTihs+yVUIE+0QKJFNCX7NlPK4URS9c6ZAgESr5c+xYYf3SvrFJA3wfVb9kQ KE08bzLIkhjs829RpmnYvNqXCL0GoHhUwKrLdZNHTNp4o79d41CZL+vG3MynAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfTj88GEVkmWhMJMxiIq+VXmIKVIwHwYDVR0j BBgwFoAUUvvsYyMaqt8VOryY5IsqY0zgfSowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTMzNDc4NS8wLzUyRkJFQzYzMjMxQUFBREYxNTNBQkM5OEU0OEIy QTYzNENFMDdEMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0Q0UwN0QyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEzMzQ3ODUvMC81MkZCRUM2MzIzMUFB QURGMTUzQUJDOThFNDhCMkE2MzRDRTA3RDJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDmcWvfgq/nJ HE3Hj6jOpwB29ipZwW4yRPGXkAAfUA0vj9/gyJMyIQEtqklF9OPRyWeycyFDpXv4 6VjqW9Bp1pqg0BLAfavecyGBJ8y7zIoHuF4oU4DdoJH8y621bxRcTu6gUDWivB7T CE6m+lKjgqbiyUGqz2Y3LaexRu8cow6mrKog4fuhkbUTKcUlipbZcSbUwRqIEGGQ TXM48mq9EfP1TbTy5niBIOpT4Ry0fVt/3tEU4ttRh42XXJ1CgR0cqGP1k/Xoo080 5mXFC9uvjE18C5XzXXLR0weY81xCXSDc7VVN6eLdtxT5jv4wnJMtLoPimolmnkcs f656ckKGqA== -----END CERTIFICATE-----Generated at Sat Aug 29 07:06:08 2026 by rpki-client