$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft File: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft (raw, json) Hash identifier: 3M3+qkJbd2WEH+ZBGpgerBb65iwhw/oLayNvM+k/Hwo= Subject key identifier: DD:04:77:F1:D1:B6:AA:18:E4:8A:80:9A:8F:E4:B1:A0:19:C6:D3:37 Authority key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A Certificate issuer: /CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Certificate serial: 7476121918F53A75B575706FD375600A0ECEBA6A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft Manifest number: B1 Signing time: Fri 29 May 2026 04:42:35 +0000 Manifest this update: Fri 29 May 2026 04:37:35 +0000 Manifest next update: Sat 30 May 2026 05:09:35 +0000 Files and hashes: 1: 3130332e3132362e3130312e302f32342d3234203d3e20313337353731.roa (hash: TEds4zJ1NZLjwghU1L5mKASsDNpUM5UBLSvVg/x2bfA=) 2: 3130332e3132362e3130322e302f32342d3234203d3e20313337353731.roa (hash: B6hXCa2VtbAaS/QVk3JPWGAK3CXMEjwkn7BnYRAi5e0=) 3: 3130332e3132362e3130332e302f32342d3234203d3e20313337353731.roa (hash: gikIIcEznKxvcaUTGyQMeSzv2o9au6QP6HSnaj/W9jY=) 4: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl (hash: InpkAyLtm1aKDxeD/X/s7rRnEhNKBhf1Hzx1aV16hmQ=) 5: 3130332e3132362e3130302e302f32342d3234203d3e203430363736.roa (hash: hs8AdJG/Xf3CnIDVOmA2dlMGNeRgBfrPEXdipO6KhtE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 05:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:76:12:19:18:f5:3a:75:b5:75:70:6f:d3:75:60:0a:0e:ce:ba:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Validity Not Before: May 29 04:37:35 2026 GMT Not After : May 30 05:09:35 2026 GMT Subject: CN=DD0477F1D1B6AA18E48A809A8FE4B1A019C6D337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:85:3c:f6:d8:4b:a0:6a:63:38:bd:95:e9:1c: 50:8d:de:e0:f4:1a:68:f4:28:f7:98:c4:59:10:e5: f6:ba:e7:4f:eb:86:78:8b:c2:51:df:a0:d5:ee:92: 53:99:35:f5:67:39:b5:22:73:c6:78:e1:38:77:1c: 8b:87:3c:5f:bf:8b:2b:00:64:23:16:45:03:75:91: 3a:64:3d:55:ec:3e:2a:c2:f8:0b:d7:2b:b0:76:b7: b5:44:72:cd:f7:66:79:4a:f8:5f:d5:c3:7d:6e:9a: 5b:34:7f:19:6c:d9:b2:39:cf:ce:47:74:4b:9a:45: 09:3a:6c:ed:8e:84:6c:1d:a5:d1:7a:bd:fc:d7:0e: aa:e3:4f:51:b4:d4:77:6e:0c:0d:7f:5e:1b:19:30: 4f:cf:0f:06:47:68:bb:46:74:ea:79:f5:0c:92:a3: dc:9d:a2:3e:e1:cd:e0:8d:ec:ec:57:06:b8:ee:cf: c7:ab:36:e2:06:51:55:b6:bb:15:0c:13:e6:cb:f7: bb:31:4b:dd:64:f4:4c:1c:c0:46:b8:c7:b5:54:49: e8:c7:ab:2d:27:27:8b:bb:49:bc:2a:51:13:16:c3: 56:00:9d:e2:c2:85:72:db:f7:f7:50:4b:79:c1:b3: f4:0a:c8:b5:f1:25:18:cd:49:a1:5e:8a:28:2b:c2: 7a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:04:77:F1:D1:B6:AA:18:E4:8A:80:9A:8F:E4:B1:A0:19:C6:D3:37 X509v3 Authority Key Identifier: keyid:52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d8:2c:62:49:82:94:73:c7:8b:29:ae:18:f9:96:4c:7a:22: db:0c:5e:7a:70:09:e0:63:95:40:d7:80:75:70:95:6e:87:78: f7:6a:a0:d1:69:27:e0:00:3a:9e:86:5b:08:c3:b1:40:5d:9a: 1b:60:a5:79:14:91:13:c2:e8:7e:5f:14:a9:7b:cf:ea:f1:aa: 04:6f:70:06:08:3a:94:15:ca:ff:11:72:21:cf:c8:6a:27:6b: cb:10:0d:a8:64:d8:c6:a1:ca:00:bf:4c:45:3f:3a:58:a7:14: 0d:67:c2:51:e5:b0:ba:c8:bf:ca:e2:5e:43:d2:13:e3:f1:3e: 60:44:8e:e1:f4:04:5e:d4:e6:15:31:38:b0:a6:d4:a2:63:9c: b9:db:4f:b9:f8:27:d4:d5:37:ff:b4:fe:51:60:ab:e7:42:fa: 7e:cd:f5:3b:b7:ac:95:7b:1c:d3:f9:0e:21:cf:6b:1b:f2:1e: 4f:9f:db:59:32:97:bc:b7:33:35:50:13:49:fd:96:43:8b:0b: 3d:5a:50:e2:6f:f0:5c:f5:b9:1e:2c:68:eb:dc:44:eb:27:89: 87:4c:d4:fa:8e:76:ba:02:62:de:3d:02:d0:ee:af:39:7c:cb: 2b:22:1e:83:06:a6:ec:53:21:8b:ef:11:6b:af:b5:5a:4e:70: 23:43:56:19 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdHYSGRj1OnW1dXBv03VgCg7OumowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0 Q0UwN0QyQTAeFw0yNjA1MjkwNDM3MzVaFw0yNjA1MzAwNTA5MzVaMDMxMTAvBgNV BAMTKEREMDQ3N0YxRDFCNkFBMThFNDhBODA5QThGRTRCMUEwMTlDNkQzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmhTz22EugamM4vZXpHFCN3uD0 Gmj0KPeYxFkQ5fa650/rhniLwlHfoNXuklOZNfVnObUic8Z44Th3HIuHPF+/iysA ZCMWRQN1kTpkPVXsPirC+AvXK7B2t7VEcs33ZnlK+F/Vw31umls0fxls2bI5z85H dEuaRQk6bO2OhGwdpdF6vfzXDqrjT1G01HduDA1/XhsZME/PDwZHaLtGdOp59QyS o9ydoj7hzeCN7OxXBrjuz8erNuIGUVW2uxUME+bL97sxS91k9EwcwEa4x7VUSejH qy0nJ4u7SbwqURMWw1YAneLChXLb9/dQS3nBs/QKyLXxJRjNSaFeiigrwnppAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3QR38dG2qhjkioCaj+SxoBnG0zcwHwYDVR0j BBgwFoAUUvvsYyMaqt8VOryY5IsqY0zgfSowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTMzNDc4NS8wLzUyRkJFQzYzMjMxQUFBREYxNTNBQkM5OEU0OEIy QTYzNENFMDdEMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0Q0UwN0QyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEzMzQ3ODUvMC81MkZCRUM2MzIzMUFB QURGMTUzQUJDOThFNDhCMkE2MzRDRTA3RDJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNgsYkmClHPH iymuGPmWTHoi2wxeenAJ4GOVQNeAdXCVbod492qg0Wkn4AA6noZbCMOxQF2aG2Cl eRSRE8Lofl8UqXvP6vGqBG9wBgg6lBXK/xFyIc/IaidryxANqGTYxqHKAL9MRT86 WKcUDWfCUeWwusi/yuJeQ9IT4/E+YESO4fQEXtTmFTE4sKbUomOcudtPufgn1NU3 /7T+UWCr50L6fs31O7eslXsc0/kOIc9rG/IeT5/bWTKXvLczNVATSf2WQ4sLPVpQ 4m/wXPW5Hixo69xE6yeJh0zU+o52ugJi3j0C0O6vOXzLKyIegwam7FMhi+8Ra6+1 Wk5wI0NWGQ== -----END CERTIFICATE-----Generated at Fri May 29 22:05:08 2026 by rpki-client