$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft File: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft (raw, json) Hash identifier: PhqNwebBUA08okXumNjYSiR1/IrF7yF0nlQ8ebASKco= Subject key identifier: 0C:E5:F9:DD:46:50:50:E1:58:69:78:C1:2A:CB:26:07:10:47:DC:12 Authority key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A Certificate issuer: /CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Certificate serial: 25847F897AF45B5A41F6338960BB37136EBEC7C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft Manifest number: 78 Signing time: Fri 17 Apr 2026 05:14:40 +0000 Manifest this update: Fri 17 Apr 2026 05:09:40 +0000 Manifest next update: Sat 18 Apr 2026 07:19:40 +0000 Files and hashes: 1: 3130332e3132362e3130312e302f32342d3234203d3e20313337353731.roa (hash: TEds4zJ1NZLjwghU1L5mKASsDNpUM5UBLSvVg/x2bfA=) 2: 3130332e3132362e3130302e302f32342d3234203d3e203430363736.roa (hash: hs8AdJG/Xf3CnIDVOmA2dlMGNeRgBfrPEXdipO6KhtE=) 3: 3130332e3132362e3130332e302f32342d3234203d3e20313337353731.roa (hash: gikIIcEznKxvcaUTGyQMeSzv2o9au6QP6HSnaj/W9jY=) 4: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl (hash: QF5JS5iATMC0sG3Ou5jakDq0COH1VEWjnloB+fD2Nbg=) 5: 3130332e3132362e3130322e302f32342d3234203d3e20313337353731.roa (hash: B6hXCa2VtbAaS/QVk3JPWGAK3CXMEjwkn7BnYRAi5e0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 07:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:84:7f:89:7a:f4:5b:5a:41:f6:33:89:60:bb:37:13:6e:be:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Validity Not Before: Apr 17 05:09:40 2026 GMT Not After : Apr 18 07:19:40 2026 GMT Subject: CN=0CE5F9DD465050E1586978C12ACB26071047DC12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7a:30:53:b5:4c:b2:a1:40:d6:77:f3:af:b8: c1:46:a1:32:6b:47:2f:76:e7:24:33:fe:c8:5e:c1: ce:6f:0e:f7:42:de:8e:e4:a6:ae:69:2f:eb:8a:88: 23:37:c5:f7:10:af:56:6b:0e:d3:1b:72:83:37:4d: bc:54:7d:30:d0:93:9f:15:56:75:91:13:37:d9:33: c7:c7:fe:68:3c:b7:18:d2:49:c0:92:b3:86:d5:a7: 7f:9f:6c:7c:0d:91:41:76:a7:bb:65:a1:3d:4b:4b: a2:3e:6a:52:c5:db:24:bf:1f:11:7a:68:67:4d:86: 45:f4:2c:f1:87:98:8c:46:cf:5c:77:6d:21:f8:c6: 23:28:27:d9:f0:c6:03:dc:4b:ae:9f:8b:17:64:fb: 74:0a:08:1f:cd:83:8e:39:a9:24:5b:a9:ff:9c:37: ac:cb:ff:bd:6a:79:ff:a6:15:18:ab:5f:f9:93:f6: 32:0a:3b:e2:60:81:6e:47:ac:2b:68:b3:dd:9a:c2: 8a:fe:6f:c6:e2:58:06:0f:43:4e:de:03:e0:f8:9b: 15:41:81:2e:1d:7c:65:7d:92:2f:e3:cb:92:be:ce: e5:b2:4f:46:09:a4:2f:e0:7d:44:3e:f1:2b:64:bb: 11:32:6a:ce:9b:4c:53:45:cc:30:10:f8:63:33:76: f1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E5:F9:DD:46:50:50:E1:58:69:78:C1:2A:CB:26:07:10:47:DC:12 X509v3 Authority Key Identifier: keyid:52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a3:b4:43:34:93:ee:72:c0:51:44:81:ef:42:48:99:64:06: bc:f3:4d:0c:8f:9c:b7:f0:8b:f7:6c:ee:bf:72:7f:04:1b:2a: 26:cf:4d:72:62:69:45:9c:98:ad:b3:65:5f:fa:27:92:20:f3: d3:c7:70:ad:49:5f:ce:0e:bd:b0:72:82:96:99:45:71:76:bc: 5f:a4:13:68:56:db:cb:09:34:85:b5:a9:52:2a:65:b9:c4:97: 59:2e:b8:b5:50:95:b4:98:58:00:e2:49:40:fa:40:bb:e4:cd: 6e:ce:7c:8c:d3:8e:3c:0f:91:07:50:19:10:bd:7e:bb:17:22: ac:ce:7b:74:91:79:e6:98:74:8b:60:2b:f7:9c:3a:a3:2e:66: 46:a7:77:5c:f3:12:b4:b5:b9:3f:61:fa:12:d3:38:c9:f6:69: cc:78:58:d2:ad:22:8c:49:5d:f4:ad:1f:80:2a:01:cb:df:b6: 88:2a:90:f4:ba:9a:ce:ff:d8:2a:dc:26:93:b0:6f:5e:cc:62: cb:7f:88:37:60:82:cc:45:22:26:63:bf:6f:02:9f:d5:cf:ef: c0:84:f4:ab:db:99:e3:a5:47:37:0f:62:95:44:a1:66:8c:fe: a0:97:18:9d:b1:7c:06:43:74:74:02:f0:1e:27:fd:db:a5:6a: 6c:f7:1c:aa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJYR/iXr0W1pB9jOJYLs3E26+x8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0 Q0UwN0QyQTAeFw0yNjA0MTcwNTA5NDBaFw0yNjA0MTgwNzE5NDBaMDMxMTAvBgNV BAMTKDBDRTVGOURENDY1MDUwRTE1ODY5NzhDMTJBQ0IyNjA3MTA0N0RDMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDejBTtUyyoUDWd/OvuMFGoTJr Ry925yQz/shewc5vDvdC3o7kpq5pL+uKiCM3xfcQr1ZrDtMbcoM3TbxUfTDQk58V VnWREzfZM8fH/mg8txjSScCSs4bVp3+fbHwNkUF2p7tloT1LS6I+alLF2yS/HxF6 aGdNhkX0LPGHmIxGz1x3bSH4xiMoJ9nwxgPcS66fixdk+3QKCB/Ng445qSRbqf+c N6zL/71qef+mFRirX/mT9jIKO+JggW5HrCtos92awor+b8biWAYPQ07eA+D4mxVB gS4dfGV9ki/jy5K+zuWyT0YJpC/gfUQ+8StkuxEyas6bTFNFzDAQ+GMzdvExAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDOX53UZQUOFYaXjBKssmBxBH3BIwHwYDVR0j BBgwFoAUUvvsYyMaqt8VOryY5IsqY0zgfSowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTMzNDc4NS8wLzUyRkJFQzYzMjMxQUFBREYxNTNBQkM5OEU0OEIy QTYzNENFMDdEMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0Q0UwN0QyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEzMzQ3ODUvMC81MkZCRUM2MzIzMUFB QURGMTUzQUJDOThFNDhCMkE2MzRDRTA3RDJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaO0QzST7nLA UUSB70JImWQGvPNNDI+ct/CL92zuv3J/BBsqJs9NcmJpRZyYrbNlX/onkiDz08dw rUlfzg69sHKClplFcXa8X6QTaFbbywk0hbWpUiplucSXWS64tVCVtJhYAOJJQPpA u+TNbs58jNOOPA+RB1AZEL1+uxcirM57dJF55ph0i2Ar95w6oy5mRqd3XPMStLW5 P2H6EtM4yfZpzHhY0q0ijEld9K0fgCoBy9+2iCqQ9Lqazv/YKtwmk7BvXsxiy3+I N2CCzEUiJmO/bwKf1c/vwIT0q9uZ46VHNw9ilUShZoz+oJcYnbF8BkN0dALwHif9 26VqbPccqg== -----END CERTIFICATE-----Generated at Fri Apr 17 23:38:08 2026 by rpki-client