$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft File: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft (raw, json) Hash identifier: 9fBSztYIH9RdktZROdA6pdCS1XeMUalzbibK9IRjpN8= Subject key identifier: 16:D2:84:CB:74:93:07:80:0B:70:85:DD:EC:5D:C9:E5:26:CE:C0:12 Authority key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A Certificate issuer: /CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Certificate serial: 50437F6CC6BC51E8DE0E3B103B92F09C3C5ED7B5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft Manifest number: 32 Signing time: Mon 23 Feb 2026 00:32:30 +0000 Manifest this update: Mon 23 Feb 2026 00:27:30 +0000 Manifest next update: Tue 24 Feb 2026 03:56:30 +0000 Files and hashes: 1: 3130332e3132362e3130302e302f32342d3234203d3e203430363736.roa (hash: hs8AdJG/Xf3CnIDVOmA2dlMGNeRgBfrPEXdipO6KhtE=) 2: 3130332e3132362e3130332e302f32342d3234203d3e20313337353731.roa (hash: gikIIcEznKxvcaUTGyQMeSzv2o9au6QP6HSnaj/W9jY=) 3: 3130332e3132362e3130322e302f32342d3234203d3e20313337353731.roa (hash: B6hXCa2VtbAaS/QVk3JPWGAK3CXMEjwkn7BnYRAi5e0=) 4: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl (hash: uaSO1v10hMVa/YoWb4y+l/ts3AGWuf4Zy2ClilRXnI4=) 5: 3130332e3132362e3130312e302f32342d3234203d3e20313337353731.roa (hash: TEds4zJ1NZLjwghU1L5mKASsDNpUM5UBLSvVg/x2bfA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:43:7f:6c:c6:bc:51:e8:de:0e:3b:10:3b:92:f0:9c:3c:5e:d7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Validity Not Before: Feb 23 00:27:30 2026 GMT Not After : Feb 24 03:56:30 2026 GMT Subject: CN=16D284CB749307800B7085DDEC5DC9E526CEC012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:20:80:cb:e8:8b:0e:ea:a0:72:71:95:01:41: 0a:17:39:bc:99:50:30:7b:a8:33:bf:91:3f:14:a6: 5c:42:d3:ba:15:2d:f4:ca:00:0e:69:a7:0e:7d:4c: 07:c9:79:05:5a:d6:5b:52:68:a2:9d:e4:2b:2d:bb: 9a:af:c8:e0:59:cc:19:13:9d:37:cc:88:78:4f:f4: c7:12:3b:c3:a3:9e:ed:4a:9d:95:17:70:74:84:f8: 8d:9a:97:ad:09:b5:f1:cf:b8:69:c6:11:86:f8:9c: e2:3c:6e:bc:71:17:22:60:cf:5e:b9:0e:a8:0d:b2: 1d:14:f1:d0:4b:df:d1:93:5a:58:e8:1c:3c:30:42: 33:e4:19:95:07:8c:15:b6:9b:0a:e7:65:09:20:4d: 16:b0:2b:05:c4:9e:f1:5d:71:d7:3f:0a:ea:e0:60: f9:70:5d:be:a2:8b:83:fa:5a:09:3c:ca:1e:46:ef: 99:ee:65:e6:63:21:b4:b9:5e:03:c1:80:26:b1:9f: b3:6e:70:c8:8f:c2:95:8e:ff:a5:8c:a3:0e:56:ef: 67:b0:a7:12:81:48:f3:70:00:d3:e8:11:32:d8:55: bc:74:d8:ab:66:4b:8f:2d:41:3b:9f:e9:72:b0:a6: 0b:ba:f8:8a:d1:4a:96:6c:f6:e5:4c:15:83:4c:1e: a3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D2:84:CB:74:93:07:80:0B:70:85:DD:EC:5D:C9:E5:26:CE:C0:12 X509v3 Authority Key Identifier: keyid:52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:bd:bb:60:6c:81:f0:72:95:4c:b8:5d:65:fa:8b:53:58:75: 47:28:15:3a:f6:43:9b:d6:6e:21:5e:d9:e5:97:e2:37:b6:24: a4:c3:5e:fa:53:29:85:9e:e9:cd:5b:b1:e2:33:4f:21:c6:86: d2:65:64:1a:c8:e9:f3:3e:3e:42:af:be:3a:cc:4e:97:2b:97: 11:33:a9:b4:8b:ce:4b:6c:1d:3d:70:2f:2b:07:73:69:bf:c5: b9:44:da:47:8e:67:56:26:03:32:d5:74:95:c7:bd:14:db:68: 0d:c4:68:44:c6:03:54:cf:a3:85:96:85:cd:db:24:30:72:04: 88:f6:94:46:74:d8:05:a2:51:41:f1:48:c6:63:5d:9f:86:90: 2f:f2:86:25:16:1f:ed:b3:80:68:07:b4:94:8e:0c:41:52:5a: 4d:66:32:15:8f:d4:a8:c6:4b:14:73:66:09:33:8b:ec:b6:95: 93:79:d1:cf:70:5a:ae:51:03:57:fa:15:3f:99:66:d4:f1:5e: 3d:5d:2d:52:9f:11:8e:17:ae:67:fb:88:15:27:ff:10:c3:75: 95:de:d7:62:5a:92:e8:ee:5a:dd:6d:f3:09:85:9c:a4:35:d2: d2:34:4b:89:d5:66:f8:5f:cb:96:48:fe:a2:2e:83:46:c7:ca: e0:f6:22:40 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUEN/bMa8UejeDjsQO5LwnDxe17UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0 Q0UwN0QyQTAeFw0yNjAyMjMwMDI3MzBaFw0yNjAyMjQwMzU2MzBaMDMxMTAvBgNV BAMTKDE2RDI4NENCNzQ5MzA3ODAwQjcwODVEREVDNURDOUU1MjZDRUMwMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYIIDL6IsO6qBycZUBQQoXObyZ UDB7qDO/kT8UplxC07oVLfTKAA5ppw59TAfJeQVa1ltSaKKd5Cstu5qvyOBZzBkT nTfMiHhP9McSO8Ojnu1KnZUXcHSE+I2al60JtfHPuGnGEYb4nOI8brxxFyJgz165 DqgNsh0U8dBL39GTWljoHDwwQjPkGZUHjBW2mwrnZQkgTRawKwXEnvFdcdc/Curg YPlwXb6ii4P6Wgk8yh5G75nuZeZjIbS5XgPBgCaxn7NucMiPwpWO/6WMow5W72ew pxKBSPNwANPoETLYVbx02KtmS48tQTuf6XKwpgu6+IrRSpZs9uVMFYNMHqNPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFtKEy3STB4ALcIXd7F3J5SbOwBIwHwYDVR0j BBgwFoAUUvvsYyMaqt8VOryY5IsqY0zgfSowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTMzNDc4NS8wLzUyRkJFQzYzMjMxQUFBREYxNTNBQkM5OEU0OEIy QTYzNENFMDdEMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0Q0UwN0QyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEzMzQ3ODUvMC81MkZCRUM2MzIzMUFB QURGMTUzQUJDOThFNDhCMkE2MzRDRTA3RDJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQr27YGyB8HKV TLhdZfqLU1h1RygVOvZDm9ZuIV7Z5ZfiN7YkpMNe+lMphZ7pzVux4jNPIcaG0mVk Gsjp8z4+Qq++OsxOlyuXETOptIvOS2wdPXAvKwdzab/FuUTaR45nViYDMtV0lce9 FNtoDcRoRMYDVM+jhZaFzdskMHIEiPaURnTYBaJRQfFIxmNdn4aQL/KGJRYf7bOA aAe0lI4MQVJaTWYyFY/UqMZLFHNmCTOL7LaVk3nRz3BarlEDV/oVP5lm1PFePV0t Up8RjheuZ/uIFSf/EMN1ld7XYlqS6O5a3W3zCYWcpDXS0jRLidVm+F/Llkj+oi6D RsfK4PYiQA== -----END CERTIFICATE-----Generated at Mon Feb 23 02:06:06 2026 by rpki-client