$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft File: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft (raw, json) Hash identifier: HRjHdUm66KqonyrZDzhyxhlW3AKycvw/DEFReUmA5lY= Subject key identifier: 9E:F0:38:EF:28:CC:5D:A7:3E:F3:B6:05:BF:47:2D:6C:06:EC:38:09 Authority key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A Certificate issuer: /CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Certificate serial: 5F63F2F558D24221B1784D3E4731018E51648BDE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft Manifest number: 0104 Signing time: Wed 29 Jul 2026 07:33:48 +0000 Manifest this update: Wed 29 Jul 2026 07:28:48 +0000 Manifest next update: Thu 30 Jul 2026 11:30:48 +0000 Files and hashes: 1: 3130332e3132362e3130322e302f32342d3234203d3e20313337353731.roa (hash: B6hXCa2VtbAaS/QVk3JPWGAK3CXMEjwkn7BnYRAi5e0=) 2: 3130332e3132362e3130332e302f32342d3234203d3e20313337353731.roa (hash: gikIIcEznKxvcaUTGyQMeSzv2o9au6QP6HSnaj/W9jY=) 3: 3130332e3132362e3130302e302f32342d3234203d3e20313337353731.roa (hash: Tulzy2loSZQGgT5vI6JjBZGNxAzzMdSArmk0OaZXJyI=) 4: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl (hash: rgi+DioYLFxhjPXw9ZblYFKG9bP3b27BmxAI9R2+Qmk=) 5: 3130332e3132362e3130312e302f32342d3234203d3e20313337353731.roa (hash: TEds4zJ1NZLjwghU1L5mKASsDNpUM5UBLSvVg/x2bfA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:63:f2:f5:58:d2:42:21:b1:78:4d:3e:47:31:01:8e:51:64:8b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Validity Not Before: Jul 29 07:28:48 2026 GMT Not After : Jul 30 11:30:48 2026 GMT Subject: CN=9EF038EF28CC5DA73EF3B605BF472D6C06EC3809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:80:50:8f:31:f6:72:d9:00:c2:c0:0c:8e:9e: 34:a2:87:c8:c6:f3:09:1f:ba:bf:ae:ca:c3:84:85: b2:e0:4c:49:ca:d5:7f:3d:70:28:72:e1:24:ef:1c: 7a:1c:de:b6:71:e9:b7:a8:aa:c4:d1:c8:43:c1:1f: f7:53:e3:42:ce:24:c5:ba:a6:e4:be:d7:81:53:ae: 6b:9e:1c:f7:95:04:a8:f7:75:65:0a:87:7f:31:d3: d1:c2:f4:21:f3:18:1b:fe:90:64:19:4b:8c:04:cd: c4:00:7c:1b:ad:5f:98:1c:ca:eb:45:f1:08:02:5b: 73:d7:27:5d:a5:9f:b0:02:06:0c:23:0d:bd:66:ae: e3:e7:9c:78:aa:00:bc:ae:ca:0b:67:2f:cf:14:1a: 5a:d3:67:49:f9:90:fd:bb:dd:b7:e8:cb:e7:2e:40: 4f:38:9c:1f:62:7c:b0:b0:f6:28:2e:af:c9:60:6a: ba:df:f0:3c:3b:7e:fd:4f:b4:27:17:e8:f9:99:33: 96:22:c0:09:07:20:89:a4:44:8d:86:83:b5:df:55: 75:f7:5e:75:e5:2f:0f:6c:35:81:db:c2:ab:86:b8: 31:84:9f:fe:d6:92:93:dc:fd:c1:33:64:86:28:9b: d8:a9:ff:80:37:c8:c2:f5:35:8e:74:53:52:2e:3e: 4f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F0:38:EF:28:CC:5D:A7:3E:F3:B6:05:BF:47:2D:6C:06:EC:38:09 X509v3 Authority Key Identifier: keyid:52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:98:51:2d:a3:d6:ff:7a:0b:d6:7e:02:1f:aa:67:bb:4f:e7: 8d:ef:37:77:06:70:4c:1e:8f:3d:76:20:ff:cb:58:d5:ec:7d: a8:ee:22:2e:2d:3d:59:d4:83:a5:14:8a:21:e3:e8:d3:22:78: bb:7a:39:fd:98:b1:cb:8a:48:fb:e4:d3:64:8b:2e:8c:d8:f1: b4:9e:8d:dc:7d:d2:a8:41:d9:aa:20:36:fb:a4:6a:46:c1:da: 0a:2e:f0:b9:93:47:9b:1c:34:1a:ca:41:fc:ca:3a:98:88:84: 72:b8:4a:c7:4c:6e:90:84:ac:79:ae:8b:c2:06:32:14:ee:11: 16:58:8d:4f:bb:92:4f:9f:e6:60:d0:a4:92:57:34:0b:47:22: a2:87:69:32:c9:d8:c1:b0:30:3f:e9:39:a2:bf:b3:a0:fe:ff: fe:a2:21:04:cc:aa:81:98:74:45:af:75:24:2b:3e:c9:bb:e6: 7c:2d:9f:57:fc:61:81:a7:11:29:5a:b5:88:08:ac:57:65:79: 89:6a:1a:25:f3:5e:64:1b:a1:3b:88:dd:49:0e:8a:33:d9:7a: 95:1c:39:07:f8:b6:80:2f:2e:4f:96:3d:aa:95:e5:b1:3a:6f: e6:cd:28:d1:d0:56:d1:63:e5:01:11:16:1b:f4:09:06:fd:70: f2:84:38:a0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX2Py9VjSQiGxeE0+RzEBjlFki94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0 Q0UwN0QyQTAeFw0yNjA3MjkwNzI4NDhaFw0yNjA3MzAxMTMwNDhaMDMxMTAvBgNV BAMTKDlFRjAzOEVGMjhDQzVEQTczRUYzQjYwNUJGNDcyRDZDMDZFQzM4MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNgFCPMfZy2QDCwAyOnjSih8jG 8wkfur+uysOEhbLgTEnK1X89cChy4STvHHoc3rZx6beoqsTRyEPBH/dT40LOJMW6 puS+14FTrmueHPeVBKj3dWUKh38x09HC9CHzGBv+kGQZS4wEzcQAfButX5gcyutF 8QgCW3PXJ12ln7ACBgwjDb1mruPnnHiqALyuygtnL88UGlrTZ0n5kP273bfoy+cu QE84nB9ifLCw9igur8lgarrf8Dw7fv1PtCcX6PmZM5YiwAkHIImkRI2Gg7XfVXX3 XnXlLw9sNYHbwquGuDGEn/7WkpPc/cEzZIYom9ip/4A3yML1NY50U1IuPk+rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnvA47yjMXac+87YFv0ctbAbsOAkwHwYDVR0j BBgwFoAUUvvsYyMaqt8VOryY5IsqY0zgfSowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTMzNDc4NS8wLzUyRkJFQzYzMjMxQUFBREYxNTNBQkM5OEU0OEIy QTYzNENFMDdEMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0Q0UwN0QyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEzMzQ3ODUvMC81MkZCRUM2MzIzMUFB QURGMTUzQUJDOThFNDhCMkE2MzRDRTA3RDJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZhRLaPW/3oL 1n4CH6pnu0/nje83dwZwTB6PPXYg/8tY1ex9qO4iLi09WdSDpRSKIePo0yJ4u3o5 /Zixy4pI++TTZIsujNjxtJ6N3H3SqEHZqiA2+6RqRsHaCi7wuZNHmxw0GspB/Mo6 mIiEcrhKx0xukISsea6LwgYyFO4RFliNT7uST5/mYNCkklc0C0cioodpMsnYwbAw P+k5or+zoP7//qIhBMyqgZh0Ra91JCs+ybvmfC2fV/xhgacRKVq1iAisV2V5iWoa JfNeZBuhO4jdSQ6KM9l6lRw5B/i2gC8uT5Y9qpXlsTpv5s0o0dBW0WPlAREWG/QJ Bv1w8oQ4oA== -----END CERTIFICATE-----Generated at Wed Jul 29 23:01:54 2026 by rpki-client