$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft File: 1E52A9C4B7583314611765C8F6A599F283954B3C.mft (raw, json) Hash identifier: ElJt+UTsr06r+lA5rZx2PjYTPlK6R4r4hr6WG3gvhZA= Subject key identifier: 5E:52:42:ED:51:92:44:52:AF:59:B7:F0:9C:FF:B8:61:5A:A3:DA:71 Authority key identifier: 1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C Certificate issuer: /CN=1E52A9C4B7583314611765C8F6A599F283954B3C Certificate serial: 4BEEF4F9AF4A8FE1961FB4854CD77256E25D9EBA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft Manifest number: 3A Signing time: Mon 02 Mar 2026 19:38:17 +0000 Manifest this update: Mon 02 Mar 2026 19:33:17 +0000 Manifest next update: Tue 03 Mar 2026 23:06:17 +0000 Files and hashes: 1: 1E52A9C4B7583314611765C8F6A599F283954B3C.crl (hash: nWbzpQlxE+XBjjjvADp4Y67Jg6qqHeAnld/0cuVHSgE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ee:f4:f9:af:4a:8f:e1:96:1f:b4:85:4c:d7:72:56:e2:5d:9e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E52A9C4B7583314611765C8F6A599F283954B3C Validity Not Before: Mar 2 19:33:17 2026 GMT Not After : Mar 3 23:06:17 2026 GMT Subject: CN=5E5242ED51924452AF59B7F09CFFB8615AA3DA71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e4:74:c3:9a:05:cc:38:30:9e:c3:ff:ad:43: a5:bf:0e:b5:39:57:14:3f:49:3f:35:33:3e:c1:d1: de:b1:bb:c0:25:d6:48:45:ce:23:36:61:35:fe:68: 32:02:c3:ba:23:5a:0d:d9:c5:da:2f:f6:59:03:60: 8c:b6:96:7c:66:36:da:a0:c2:2e:b1:6d:dd:41:47: d4:dd:df:05:f9:01:ce:0a:78:a0:53:f6:50:a1:38: 1f:17:56:62:48:f7:53:c4:64:cf:60:b3:07:47:0d: 10:3f:62:77:ac:77:7c:54:cc:c9:0e:95:3d:08:00: 25:39:ca:a3:fa:5c:09:ef:b5:c7:7b:5a:72:2d:b3: 07:b0:c0:f8:6f:79:9f:33:97:43:4b:8d:6f:41:53: be:68:5c:56:ea:c0:06:a5:60:10:d6:71:04:09:c4: 93:27:0c:6d:e7:1d:b5:f9:66:06:9c:6a:65:43:14: da:c5:07:0a:bd:44:b8:35:7d:61:24:0c:ac:70:72: fa:36:60:9c:9c:9f:fd:00:1e:c2:c2:64:bf:45:2c: 98:f7:3a:fd:fe:76:6f:0c:be:45:e7:51:53:92:b8: e0:c4:f2:50:7f:b6:67:60:c1:02:50:83:db:10:3f: e2:b8:e0:7f:03:f4:f2:7f:88:70:db:c6:1e:d7:07: 8d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:52:42:ED:51:92:44:52:AF:59:B7:F0:9C:FF:B8:61:5A:A3:DA:71 X509v3 Authority Key Identifier: keyid:1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:0d:a3:a5:00:01:14:f1:43:80:85:52:3a:7b:0a:dc:8e:a8: 59:be:89:67:93:1e:de:cc:72:02:42:85:d6:41:5d:b0:7c:7e: 44:11:b3:c8:c5:0f:17:4b:61:30:6e:fd:16:54:0f:0c:3a:d1: 5e:88:aa:32:a6:da:dd:7d:fe:a4:c6:47:76:8f:31:dc:16:63: 43:6e:b8:ee:08:48:4d:f9:78:69:cf:75:56:07:e9:c3:f8:4c: 2e:f2:32:7f:1d:43:09:5b:4e:4c:3b:3e:6a:d0:39:d9:f4:5e: de:3f:05:00:e0:bf:6e:09:92:74:a2:98:9f:ad:28:d5:e6:ab: 98:96:6f:7a:5f:0f:70:80:cf:00:ef:e5:54:ea:e0:4d:21:ff: 91:ae:ce:24:49:ee:61:e2:05:a6:b8:49:f1:1e:30:99:10:6f: 4e:57:58:b5:9d:97:38:d1:db:20:05:eb:6e:92:21:ac:c6:c3: 6e:d3:0d:7d:06:77:d0:54:b3:eb:a0:6d:18:31:d0:37:db:ca: f8:51:32:20:27:13:2a:df:ac:44:30:62:c4:9e:72:44:9d:d0: d8:a8:25:ca:cf:78:dc:95:72:b0:9b:f1:e3:e2:cf:26:57:59: 78:8f:fe:b9:4e:92:86:5d:a3:85:fd:f2:50:62:66:1f:da:b9: 5d:d4:c7:42 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUS+70+a9Kj+GWH7SFTNdyVuJdnrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4 Mzk1NEIzQzAeFw0yNjAzMDIxOTMzMTdaFw0yNjAzMDMyMzA2MTdaMDMxMTAvBgNV BAMTKDVFNTI0MkVENTE5MjQ0NTJBRjU5QjdGMDlDRkZCODYxNUFBM0RBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp5HTDmgXMODCew/+tQ6W/DrU5 VxQ/ST81Mz7B0d6xu8Al1khFziM2YTX+aDICw7ojWg3Zxdov9lkDYIy2lnxmNtqg wi6xbd1BR9Td3wX5Ac4KeKBT9lChOB8XVmJI91PEZM9gswdHDRA/Ynesd3xUzMkO lT0IACU5yqP6XAnvtcd7WnItswewwPhveZ8zl0NLjW9BU75oXFbqwAalYBDWcQQJ xJMnDG3nHbX5ZgacamVDFNrFBwq9RLg1fWEkDKxwcvo2YJycn/0AHsLCZL9FLJj3 Ov3+dm8MvkXnUVOSuODE8lB/tmdgwQJQg9sQP+K44H8D9PJ/iHDbxh7XB43pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXlJC7VGSRFKvWbfwnP+4YVqj2nEwHwYDVR0j BBgwFoAUHlKpxLdYMxRhF2XI9qWZ8oOVSzwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8xLzFFNTJBOUM0Qjc1ODMzMTQ2MTE3NjVDOEY2QTU5 OUYyODM5NTRCM0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4Mzk1NEIzQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIwNDgzODYvMS8xRTUyQTlDNEI3NTgz MzE0NjExNzY1QzhGNkE1OTlGMjgzOTU0QjNDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABw2jpQABFPFD gIVSOnsK3I6oWb6JZ5Me3sxyAkKF1kFdsHx+RBGzyMUPF0thMG79FlQPDDrRXoiq Mqba3X3+pMZHdo8x3BZjQ2647ghITfl4ac91Vgfpw/hMLvIyfx1DCVtOTDs+atA5 2fRe3j8FAOC/bgmSdKKYn60o1earmJZvel8PcIDPAO/lVOrgTSH/ka7OJEnuYeIF prhJ8R4wmRBvTldYtZ2XONHbIAXrbpIhrMbDbtMNfQZ30FSz66BtGDHQN9vK+FEy ICcTKt+sRDBixJ5yRJ3Q2Kglys943JVysJvx4+LPJldZeI/+uU6Shl2jhf3yUGJm H9q5XdTHQg== -----END CERTIFICATE-----Generated at Mon Mar 2 23:22:34 2026 by rpki-client