$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft File: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft (raw, json) Hash identifier: RuytxlR5qAymjQSE75V3UB4Q/z99ilMNU9rQd7IGoPE= Subject key identifier: AA:B5:4F:FF:D0:A6:D4:46:19:49:36:2F:30:F4:1B:8D:6F:C3:77:7E Authority key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A Certificate issuer: /CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Certificate serial: 4EDF434368E8EE6F8B224229CF057716DC532DC3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft Manifest number: 0140 Signing time: Mon 12 Oct 2026 11:01:53 +0000 Manifest this update: Mon 12 Oct 2026 10:56:53 +0000 Manifest next update: Thu 15 Oct 2026 15:11:53 +0000 Files and hashes: 1: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl (hash: J/virZm9GKtARbVy1y7TWE6HfgxRztQXmaJMCvDwiCs=) 2: 3130332e3132362e3130332e302f32342d3234203d3e20313337353731.roa (hash: gikIIcEznKxvcaUTGyQMeSzv2o9au6QP6HSnaj/W9jY=) 3: 3130332e3132362e3130322e302f32342d3234203d3e20313337353731.roa (hash: B6hXCa2VtbAaS/QVk3JPWGAK3CXMEjwkn7BnYRAi5e0=) 4: 3130332e3132362e3130302e302f32342d3234203d3e20313337353731.roa (hash: Tulzy2loSZQGgT5vI6JjBZGNxAzzMdSArmk0OaZXJyI=) 5: 3130332e3132362e3130312e302f32342d3234203d3e20313337353731.roa (hash: TEds4zJ1NZLjwghU1L5mKASsDNpUM5UBLSvVg/x2bfA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:df:43:43:68:e8:ee:6f:8b:22:42:29:cf:05:77:16:dc:53:2d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Validity Not Before: Oct 12 10:56:53 2026 GMT Not After : Oct 15 15:11:53 2026 GMT Subject: CN=AAB54FFFD0A6D4461949362F30F41B8D6FC3777E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:33:20:ad:8c:41:65:f3:84:c3:dc:36:a1: cf:58:9f:38:35:f8:42:a9:dd:6c:45:2e:aa:4e:de: 20:2a:c5:77:71:2d:82:01:45:e7:bb:04:7c:2f:e0: 64:6e:73:43:b1:32:bf:f4:14:48:1c:6f:a4:45:95: 20:0b:7d:f8:da:50:f1:57:5b:ce:65:38:ed:c8:19: e5:3a:cf:23:76:b8:6c:40:ae:12:68:9b:c5:29:8f: 0e:6a:c7:1b:8f:9d:ad:c5:6e:0e:9e:6a:d3:80:dc: 11:5d:a2:ac:34:55:9e:dc:7b:34:30:7b:14:77:81: ed:2f:c3:9e:22:3a:dd:5d:bb:4d:20:eb:72:7d:ae: 5d:64:03:a3:60:d5:d5:67:e8:a2:39:c7:a0:09:74: 67:60:e8:e9:b8:6d:2c:45:90:87:61:c5:0c:94:33: a5:3a:62:34:b6:e3:3f:bf:65:32:07:e1:84:51:10: 8a:5a:94:66:88:55:6d:22:5b:ea:f9:81:60:1e:6a: 4e:f8:22:31:7c:61:44:a0:12:da:c5:7c:ce:1c:41: 4d:9a:a8:33:8b:83:dd:94:39:67:00:3f:ca:2b:28: fb:f0:f8:7c:76:ef:bf:4a:49:ec:09:a0:77:80:3c: 0a:c6:4a:05:c4:c8:49:b2:93:80:1e:5b:bb:52:59: c1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B5:4F:FF:D0:A6:D4:46:19:49:36:2F:30:F4:1B:8D:6F:C3:77:7E X509v3 Authority Key Identifier: keyid:52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8e:dd:7f:65:eb:a4:f1:d6:b6:00:a8:6d:b1:92:35:36:61: 94:5b:a0:0c:21:fd:a2:66:df:15:71:ae:f3:ee:93:57:c5:ce: 2f:52:d7:73:18:26:dd:c7:09:fe:48:52:a1:de:78:94:92:05: 53:5a:a7:ae:78:03:31:77:3f:71:4f:90:21:07:21:73:ff:9e: 03:d3:c0:fb:3a:2a:c8:da:7a:ca:26:c3:f1:3a:43:da:8a:52: 2c:1c:08:6f:76:1d:37:2b:b3:00:cf:0d:a1:65:9c:2e:ba:7f: ae:57:a7:36:a9:a6:75:57:4b:16:02:6e:a0:a2:a9:53:a6:30: 53:8f:2b:5e:c6:57:23:bc:a5:ed:c6:ed:3b:33:23:57:08:4f: 2f:b7:54:ec:dd:6f:2b:76:8d:75:9e:45:5b:16:f6:16:c5:13: df:ae:ca:2b:f9:86:60:98:f5:7e:08:1b:26:f9:30:7b:ed:95: 98:59:2c:05:08:4c:f4:08:97:02:87:f1:24:50:31:de:b2:c1: 22:d3:89:03:7b:da:4b:77:a5:63:51:ba:da:68:3c:42:54:44: 3f:9f:1d:57:84:43:b6:be:b1:d0:df:18:a7:31:b1:03:5b:f7: df:33:c4:87:9a:6d:cf:ab:35:fa:e3:09:3d:38:5b:5c:48:05: f2:80:1c:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTt9DQ2jo7m+LIkIpzwV3FtxTLcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0 Q0UwN0QyQTAeFw0yNjEwMTIxMDU2NTNaFw0yNjEwMTUxNTExNTNaMDMxMTAvBgNV BAMTKEFBQjU0RkZGRDBBNkQ0NDYxOTQ5MzYyRjMwRjQxQjhENkZDMzc3N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzezMgrYxBZfOEw9w2oc9Ynzg1 +EKp3WxFLqpO3iAqxXdxLYIBRee7BHwv4GRuc0OxMr/0FEgcb6RFlSALffjaUPFX W85lOO3IGeU6zyN2uGxArhJom8Upjw5qxxuPna3Fbg6eatOA3BFdoqw0VZ7cezQw exR3ge0vw54iOt1du00g63J9rl1kA6Ng1dVn6KI5x6AJdGdg6Om4bSxFkIdhxQyU M6U6YjS24z+/ZTIH4YRREIpalGaIVW0iW+r5gWAeak74IjF8YUSgEtrFfM4cQU2a qDOLg92UOWcAP8orKPvw+Hx2779KSewJoHeAPArGSgXEyEmyk4AeW7tSWcEpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqrVP/9Cm1EYZSTYvMPQbjW/Dd34wHwYDVR0j BBgwFoAUUvvsYyMaqt8VOryY5IsqY0zgfSowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTMzNDc4NS8wLzUyRkJFQzYzMjMxQUFBREYxNTNBQkM5OEU0OEIy QTYzNENFMDdEMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0Q0UwN0QyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEzMzQ3ODUvMC81MkZCRUM2MzIzMUFB QURGMTUzQUJDOThFNDhCMkE2MzRDRTA3RDJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWo7df2XrpPHW tgCobbGSNTZhlFugDCH9ombfFXGu8+6TV8XOL1LXcxgm3ccJ/khSod54lJIFU1qn rngDMXc/cU+QIQchc/+eA9PA+zoqyNp6yibD8TpD2opSLBwIb3YdNyuzAM8NoWWc Lrp/rlenNqmmdVdLFgJuoKKpU6YwU48rXsZXI7yl7cbtOzMjVwhPL7dU7N1vK3aN dZ5FWxb2FsUT367KK/mGYJj1fggbJvkwe+2VmFksBQhM9AiXAofxJFAx3rLBItOJ A3vaS3elY1G62mg8QlREP58dV4RDtr6x0N8YpzGxA1v33zPEh5ptz6s1+uMJPThb XEgF8oAcZQ== -----END CERTIFICATE-----Generated at Tue Oct 13 22:48:43 2026 by rpki-client