$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft File: 1E52A9C4B7583314611765C8F6A599F283954B3C.mft (raw, json) Hash identifier: sGKgXh+99z2DGZsEPzykdXoSeSeHWCjKxhjtJYgf8DA= Subject key identifier: 95:AF:FE:9E:9B:84:D2:68:D0:C7:8B:56:BF:8E:F4:F9:51:A0:8C:CF Authority key identifier: 1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C Certificate issuer: /CN=1E52A9C4B7583314611765C8F6A599F283954B3C Certificate serial: 208375140F7FAB8C9C60E945178E3A0EB861F327 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft Manifest number: 7A Signing time: Fri 17 Apr 2026 17:04:43 +0000 Manifest this update: Fri 17 Apr 2026 16:59:43 +0000 Manifest next update: Sat 18 Apr 2026 18:19:43 +0000 Files and hashes: 1: 3133392e3134382e302e302f31362d3136203d3e203233373731.roa (hash: 9pwvUfLeRWTosXHUrLsGjnfPfMD5+GLs5n8xIfzPO5g=) 2: 1E52A9C4B7583314611765C8F6A599F283954B3C.crl (hash: inS/Br40PVLFRVRiUEIXlfGlV/FLimkyVW9BwqzGZeI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:83:75:14:0f:7f:ab:8c:9c:60:e9:45:17:8e:3a:0e:b8:61:f3:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E52A9C4B7583314611765C8F6A599F283954B3C Validity Not Before: Apr 17 16:59:43 2026 GMT Not After : Apr 18 18:19:43 2026 GMT Subject: CN=95AFFE9E9B84D268D0C78B56BF8EF4F951A08CCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:45:5b:62:3a:a6:9b:8c:e6:86:2b:52:ed: b3:8f:3d:01:2d:43:16:77:8b:06:32:fe:6c:68:e6: ac:de:1a:8c:3e:28:55:74:da:8f:2f:9c:e7:86:af: e2:16:70:92:5a:e3:8a:55:07:41:e8:df:b8:12:bc: bc:a5:ae:27:02:ac:87:9c:15:04:56:61:fb:4c:2c: 31:92:13:7a:e4:07:81:6f:bb:be:c3:97:c1:23:91: 96:b1:86:1f:6c:d2:86:1f:69:41:9b:7e:df:61:72: 00:c0:b7:51:c8:d6:69:1b:22:ae:2c:fa:5f:b1:05: d2:dc:25:ba:6e:c6:2f:d0:51:03:e0:1d:7f:7c:c6: a9:cd:d5:77:54:68:2f:15:4e:5c:61:ac:90:14:9d: 88:01:2f:31:da:ad:01:52:80:b3:1c:74:29:84:96: 73:fb:76:f3:ed:34:ba:1c:2c:8c:05:07:a9:68:b8: 41:c2:30:84:55:75:27:9d:55:83:15:18:88:0c:f2: 31:2e:f1:bb:c1:30:72:bc:05:9b:42:62:bc:cf:81: 32:34:2d:0b:af:53:4f:d1:7a:e5:b4:e9:df:6c:73: 50:a2:82:11:60:75:00:a5:52:0d:a9:70:dd:8a:95: a8:fb:42:9d:46:fe:60:91:db:26:1d:2d:f0:27:25: 0a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AF:FE:9E:9B:84:D2:68:D0:C7:8B:56:BF:8E:F4:F9:51:A0:8C:CF X509v3 Authority Key Identifier: keyid:1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:e0:f6:98:b0:37:fa:4f:f8:3f:96:cc:6a:6c:83:4b:80:50: 13:fa:ab:77:61:c7:d1:b3:c2:5c:91:ed:95:7a:6f:02:43:e6: 0f:ea:cf:11:68:03:91:47:f4:29:15:02:01:cf:a8:50:45:16: dc:30:34:11:d1:e8:ea:85:02:aa:06:fa:3d:21:03:72:89:c5: 47:ba:38:2b:73:49:92:57:07:1f:f1:35:b3:26:71:78:a2:93: 06:f2:4d:9c:a8:53:0c:aa:66:92:44:ad:ab:5e:b2:8f:1b:78: 18:82:a7:06:2c:f5:c7:a3:68:66:54:d6:30:58:d6:5f:c3:73: b2:ed:91:3b:0b:f3:d0:af:ba:80:22:7f:73:53:21:46:d7:eb: 1f:5d:96:e3:79:06:55:be:be:64:9a:ee:e7:f0:02:52:02:31: cc:63:ac:81:e0:11:10:5e:47:8c:13:48:84:03:3d:49:c4:30: 27:0d:9d:c7:6b:18:e4:85:50:fc:e1:32:8a:69:e2:5e:aa:67: a6:2d:d2:10:e1:e5:f9:ca:ee:e8:73:6a:0a:75:77:0f:65:b7: 58:5d:6b:95:fb:4c:51:c3:4a:04:42:13:bc:cc:6f:da:78:b0: ff:23:72:3f:a7:80:70:36:48:4c:03:f3:7e:ee:90:c0:f5:22: e5:51:15:0e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIIN1FA9/q4ycYOlFF446Drhh8ycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4 Mzk1NEIzQzAeFw0yNjA0MTcxNjU5NDNaFw0yNjA0MTgxODE5NDNaMDMxMTAvBgNV BAMTKDk1QUZGRTlFOUI4NEQyNjhEMEM3OEI1NkJGOEVGNEY5NTFBMDhDQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSEVbYjqmm4zmhitS7bOPPQEt QxZ3iwYy/mxo5qzeGow+KFV02o8vnOeGr+IWcJJa44pVB0Ho37gSvLylricCrIec FQRWYftMLDGSE3rkB4Fvu77Dl8EjkZaxhh9s0oYfaUGbft9hcgDAt1HI1mkbIq4s +l+xBdLcJbpuxi/QUQPgHX98xqnN1XdUaC8VTlxhrJAUnYgBLzHarQFSgLMcdCmE lnP7dvPtNLocLIwFB6louEHCMIRVdSedVYMVGIgM8jEu8bvBMHK8BZtCYrzPgTI0 LQuvU0/ReuW06d9sc1CighFgdQClUg2pcN2Klaj7Qp1G/mCR2yYdLfAnJQrBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUla/+npuE0mjQx4tWv470+VGgjM8wHwYDVR0j BBgwFoAUHlKpxLdYMxRhF2XI9qWZ8oOVSzwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8xLzFFNTJBOUM0Qjc1ODMzMTQ2MTE3NjVDOEY2QTU5 OUYyODM5NTRCM0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4Mzk1NEIzQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIwNDgzODYvMS8xRTUyQTlDNEI3NTgz MzE0NjExNzY1QzhGNkE1OTlGMjgzOTU0QjNDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeD2mLA3+k/4 P5bMamyDS4BQE/qrd2HH0bPCXJHtlXpvAkPmD+rPEWgDkUf0KRUCAc+oUEUW3DA0 EdHo6oUCqgb6PSEDconFR7o4K3NJklcHH/E1syZxeKKTBvJNnKhTDKpmkkStq16y jxt4GIKnBiz1x6NoZlTWMFjWX8Nzsu2ROwvz0K+6gCJ/c1MhRtfrH12W43kGVb6+ ZJru5/ACUgIxzGOsgeAREF5HjBNIhAM9ScQwJw2dx2sY5IVQ/OEyimniXqpnpi3S EOHl+cru6HNqCnV3D2W3WF1rlftMUcNKBEITvMxv2niw/yNyP6eAcDZITAPzfu6Q wPUi5VEVDg== -----END CERTIFICATE-----Generated at Sat Apr 18 05:01:26 2026 by rpki-client