
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
File: 1E52A9C4B7583314611765C8F6A599F283954B3C.mft (raw, json)
Hash identifier: sijtjxAlUYxREhORCJhm3FZxSSx0wgq3pguRIHsRr6w=
Subject key identifier: 1C:3D:0D:2D:6B:B2:69:A6:38:69:33:FC:10:43:F6:7E:75:9A:73:05
Authority key identifier: 1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C
Certificate issuer: /CN=1E52A9C4B7583314611765C8F6A599F283954B3C
Certificate serial: 4A208C87612E91681F9B87391085862CA4A766CC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
Manifest number: D5
Signing time: Sat 13 Jun 2026 11:41:46 +0000
Manifest this update: Sat 13 Jun 2026 11:36:46 +0000
Manifest next update: Sun 14 Jun 2026 12:19:46 +0000
Files and hashes: 1: 3133392e3134382e302e302f31362d3136203d3e203233373731.roa (hash: 9pwvUfLeRWTosXHUrLsGjnfPfMD5+GLs5n8xIfzPO5g=)
2: 1E52A9C4B7583314611765C8F6A599F283954B3C.crl (hash: UsGMkpZ4uE99AyUtpONn8KzchU3vgioPdHM8wJgIEhg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:19:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:20:8c:87:61:2e:91:68:1f:9b:87:39:10:85:86:2c:a4:a7:66:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E52A9C4B7583314611765C8F6A599F283954B3C
Validity
Not Before: Jun 13 11:36:46 2026 GMT
Not After : Jun 14 12:19:46 2026 GMT
Subject: CN=1C3D0D2D6BB269A6386933FC1043F67E759A7305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ec:c6:27:2c:47:d7:ca:71:cb:c2:19:64:c7:
05:44:24:50:32:01:64:7a:f0:01:1b:7a:26:23:1e:
3b:62:09:cb:2b:86:b2:7d:a8:98:dc:c8:fc:2b:07:
e2:02:b7:fd:fd:82:48:2a:ea:e1:f6:19:ce:5d:7f:
81:14:1a:ec:e6:08:16:bd:a9:b9:cc:f4:34:7f:57:
6e:12:a1:0d:f6:48:f7:95:c5:78:32:3b:8e:b5:44:
55:c5:49:94:2b:42:69:ae:49:b1:9c:23:64:56:6c:
48:b9:f9:38:82:ff:f9:c4:fc:69:67:b8:8d:2b:fb:
df:22:cf:9a:1b:2b:78:36:68:3b:b7:29:2f:07:52:
bd:fc:2a:fd:48:20:4d:80:a4:87:b4:17:82:50:78:
24:d0:a9:00:4d:eb:0e:a2:52:eb:28:dc:1b:6b:25:
3c:50:70:6a:73:39:18:6d:fe:5d:80:cd:e2:5a:ee:
00:4b:67:fa:74:0c:44:9b:f5:cb:cd:7c:a8:a2:bf:
01:d1:5e:b6:b7:f5:be:96:59:20:88:03:f6:cb:33:
b5:79:78:97:a0:82:bf:74:46:0b:82:66:1e:6f:70:
54:97:45:64:0b:35:6e:a3:f7:21:38:3a:f5:0f:b2:
10:39:83:06:54:55:7e:28:75:88:f5:2c:b1:1b:8e:
b2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3D:0D:2D:6B:B2:69:A6:38:69:33:FC:10:43:F6:7E:75:9A:73:05
X509v3 Authority Key Identifier:
keyid:1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:61:29:f8:5a:53:5a:99:b9:ce:a7:ce:b4:60:23:94:6b:f0:
12:76:82:f3:78:15:6f:79:5c:21:d7:d0:92:26:0f:c2:c5:f1:
72:a9:da:6a:23:f9:09:a4:95:ba:53:10:7d:10:4c:63:5d:b1:
23:13:67:bc:01:14:0b:34:b6:bd:dc:7e:0c:5b:97:70:8a:7f:
26:e3:ac:44:e1:f8:2d:6a:b6:77:ec:41:eb:34:72:6d:18:ce:
84:ca:00:1c:14:80:eb:7b:61:25:05:3e:2f:03:37:24:e5:99:
8a:f8:d0:41:20:c4:55:4b:08:1a:0c:a4:c8:41:20:d3:a9:a5:
ad:d0:bc:96:d6:08:1c:e3:18:40:b3:b3:0a:66:c7:8e:fb:32:
87:f4:0a:66:da:08:94:7f:3b:71:54:56:b7:64:56:d5:7f:42:
26:cf:72:1b:8d:af:80:f2:ab:bc:88:48:a1:dd:1c:04:30:1f:
9a:4a:8a:60:ce:43:18:4a:f4:11:71:b7:3d:a2:d9:86:bd:ea:
a0:86:88:87:d8:79:83:67:07:a6:ab:a4:97:04:02:69:5a:1b:
1a:d3:9e:5a:83:b7:1f:7b:59:ca:a1:e6:52:7a:7b:dd:cb:42:
b8:32:f1:11:b0:c0:7c:51:aa:b5:cc:c4:f7:d3:05:fa:9d:d0:
55:1f:7f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:47:53 2026 by rpki-client