$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft File: 1E52A9C4B7583314611765C8F6A599F283954B3C.mft (raw, json) Hash identifier: E3Xf/wEtMzkSTD5nKR4ingY8/W293WNbDsgnGk76UN4= Subject key identifier: 40:7E:DB:C2:3E:95:27:72:61:84:D1:D8:3A:42:03:B8:E1:5E:5E:0F Authority key identifier: 1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C Certificate issuer: /CN=1E52A9C4B7583314611765C8F6A599F283954B3C Certificate serial: 727288F5B267BAB1A62A5B3EA8A71332D3529BBD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft Manifest number: 0150 Signing time: Thu 15 Oct 2026 00:51:00 +0000 Manifest this update: Thu 15 Oct 2026 00:46:00 +0000 Manifest next update: Sun 18 Oct 2026 02:40:00 +0000 Files and hashes: 1: 1E52A9C4B7583314611765C8F6A599F283954B3C.crl (hash: eSNWL6jzPSUMZ7TLm+xT1pZTkAKZyd1lqqctNgF6jqs=) 2: 3133392e3134382e302e302f31362d3136203d3e203233373731.roa (hash: 9pwvUfLeRWTosXHUrLsGjnfPfMD5+GLs5n8xIfzPO5g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 02:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:72:88:f5:b2:67:ba:b1:a6:2a:5b:3e:a8:a7:13:32:d3:52:9b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E52A9C4B7583314611765C8F6A599F283954B3C Validity Not Before: Oct 15 00:46:00 2026 GMT Not After : Oct 18 02:40:00 2026 GMT Subject: CN=407EDBC23E9527726184D1D83A4203B8E15E5E0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3f:57:49:4f:ad:9b:8e:57:76:c6:77:f4:46: 54:d2:43:1d:a7:86:4d:a0:10:44:d8:df:ab:92:48: 4f:f0:fb:c8:a9:8a:9b:e7:ee:20:07:43:64:aa:04: 95:71:dd:4a:39:0a:c9:d7:79:2d:51:81:20:8f:cb: d2:c4:64:10:0e:41:85:aa:f2:d3:8e:37:ae:a7:2c: a4:c4:b2:6a:6c:c4:a8:39:22:bf:00:b6:31:d3:b1: a3:7e:12:f5:52:2e:07:de:4f:05:c6:24:38:18:76: d1:c2:ba:d5:6a:9c:df:97:77:3f:5a:cf:19:5b:eb: 41:4f:39:3b:67:a1:8b:40:1b:dc:31:12:c4:ee:19: 6c:78:40:de:f0:97:93:c1:bb:e0:82:b7:c7:88:47: 4b:fb:81:64:29:ba:56:b7:6e:3d:5b:15:3b:15:71: 75:1d:c1:9a:ab:f4:10:32:c7:4c:2c:a4:1d:e3:9e: d0:32:00:26:c8:40:7c:65:7f:4f:82:98:7b:dc:8d: 59:cc:40:0d:5b:b6:81:42:ec:1e:0a:79:ed:a8:76: f2:4e:b4:35:74:20:bc:8b:08:2f:07:3c:88:93:dc: 91:6f:1a:5b:18:7b:41:dc:b7:c5:57:7b:69:6c:e7: d7:45:aa:90:91:19:db:68:75:54:75:8b:87:f0:49: ed:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7E:DB:C2:3E:95:27:72:61:84:D1:D8:3A:42:03:B8:E1:5E:5E:0F X509v3 Authority Key Identifier: keyid:1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c2:ae:da:e7:ba:db:52:a0:ca:dc:59:60:f7:99:fc:6c:d3: fd:cb:9a:e7:f0:26:ac:e9:91:04:5e:f9:84:57:7e:9c:dd:34: 42:31:ac:a2:cb:07:43:32:36:b3:79:9f:54:a2:d4:3a:37:2e: 64:41:04:5a:a4:55:e0:1d:7e:cd:d4:46:62:7a:56:8b:58:99: e1:02:a7:ae:12:3b:2f:d9:95:84:c2:49:01:1b:9e:fb:a0:92: e6:6d:82:f3:90:c6:ee:4e:07:c8:ed:ca:23:b7:9d:99:bd:93: 4a:19:2a:24:57:83:a8:37:ab:8f:b5:76:54:e3:61:aa:f5:50: c5:0a:a1:d3:25:e7:3b:72:6d:eb:11:8a:57:a4:f8:0d:a1:87: 13:f6:59:11:35:1b:be:2a:aa:84:7b:ee:69:b2:1d:5f:76:0c: 0f:f3:40:39:13:5f:d7:35:37:da:3b:1d:e9:d5:a8:69:a6:65: a0:54:2a:7e:5f:db:48:a3:22:59:54:e3:93:73:f3:c4:e1:4e: 71:c9:2a:a4:c1:4b:98:4d:91:5f:a8:a9:91:ea:e6:06:f3:48: 25:c8:15:00:fe:32:43:ca:83:cf:d4:74:00:5c:2f:df:c7:21: 25:52:c4:7e:e4:b6:70:b2:74:9f:c7:e9:e3:29:f7:b5:0c:72: 1a:43:fa:ae -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcnKI9bJnurGmKls+qKcTMtNSm70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4 Mzk1NEIzQzAeFw0yNjEwMTUwMDQ2MDBaFw0yNjEwMTgwMjQwMDBaMDMxMTAvBgNV BAMTKDQwN0VEQkMyM0U5NTI3NzI2MTg0RDFEODNBNDIwM0I4RTE1RTVFMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClP1dJT62bjld2xnf0RlTSQx2n hk2gEETY36uSSE/w+8ipipvn7iAHQ2SqBJVx3Uo5CsnXeS1RgSCPy9LEZBAOQYWq 8tOON66nLKTEsmpsxKg5Ir8AtjHTsaN+EvVSLgfeTwXGJDgYdtHCutVqnN+Xdz9a zxlb60FPOTtnoYtAG9wxEsTuGWx4QN7wl5PBu+CCt8eIR0v7gWQpula3bj1bFTsV cXUdwZqr9BAyx0wspB3jntAyACbIQHxlf0+CmHvcjVnMQA1btoFC7B4Kee2odvJO tDV0ILyLCC8HPIiT3JFvGlsYe0Hct8VXe2ls59dFqpCRGdtodVR1i4fwSe2hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQH7bwj6VJ3JhhNHYOkIDuOFeXg8wHwYDVR0j BBgwFoAUHlKpxLdYMxRhF2XI9qWZ8oOVSzwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8xLzFFNTJBOUM0Qjc1ODMzMTQ2MTE3NjVDOEY2QTU5 OUYyODM5NTRCM0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4Mzk1NEIzQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIwNDgzODYvMS8xRTUyQTlDNEI3NTgz MzE0NjExNzY1QzhGNkE1OTlGMjgzOTU0QjNDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsKu2ue621Kg ytxZYPeZ/GzT/cua5/AmrOmRBF75hFd+nN00QjGsossHQzI2s3mfVKLUOjcuZEEE WqRV4B1+zdRGYnpWi1iZ4QKnrhI7L9mVhMJJARue+6CS5m2C85DG7k4HyO3KI7ed mb2TShkqJFeDqDerj7V2VONhqvVQxQqh0yXnO3Jt6xGKV6T4DaGHE/ZZETUbviqq hHvuabIdX3YMD/NAORNf1zU32jsd6dWoaaZloFQqfl/bSKMiWVTjk3PzxOFOcckq pMFLmE2RX6ipkermBvNIJcgVAP4yQ8qDz9R0AFwv38chJVLEfuS2cLJ0n8fp4yn3 tQxyGkP6rg== -----END CERTIFICATE-----Generated at Thu Oct 15 20:05:17 2026 by rpki-client