$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft File: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft (raw, json) Hash identifier: a389XuxT9PAk06mgf81N3K3QAyz5jUz0VA+pQVifOXQ= Subject key identifier: 03:FA:40:03:C6:56:E4:ED:46:10:39:CE:8F:9D:5E:34:81:48:B2:4D Authority key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A Certificate issuer: /CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Certificate serial: 025C0542C84231174C9CCCEB76590E4FCABDA173 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft Manifest number: 013F Signing time: Sat 10 Oct 2026 06:19:21 +0000 Manifest this update: Sat 10 Oct 2026 06:14:21 +0000 Manifest next update: Tue 13 Oct 2026 10:59:21 +0000 Files and hashes: 1: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl (hash: BUxiYIZG8poaN+D5TvBQ60XtrnvuCImMkkh82quHrcQ=) 2: 3130332e3132362e3130312e302f32342d3234203d3e20313337353731.roa (hash: TEds4zJ1NZLjwghU1L5mKASsDNpUM5UBLSvVg/x2bfA=) 3: 3130332e3132362e3130322e302f32342d3234203d3e20313337353731.roa (hash: B6hXCa2VtbAaS/QVk3JPWGAK3CXMEjwkn7BnYRAi5e0=) 4: 3130332e3132362e3130332e302f32342d3234203d3e20313337353731.roa (hash: gikIIcEznKxvcaUTGyQMeSzv2o9au6QP6HSnaj/W9jY=) 5: 3130332e3132362e3130302e302f32342d3234203d3e20313337353731.roa (hash: Tulzy2loSZQGgT5vI6JjBZGNxAzzMdSArmk0OaZXJyI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:5c:05:42:c8:42:31:17:4c:9c:cc:eb:76:59:0e:4f:ca:bd:a1:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Validity Not Before: Oct 10 06:14:21 2026 GMT Not After : Oct 13 10:59:21 2026 GMT Subject: CN=03FA4003C656E4ED461039CE8F9D5E348148B24D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cb:58:dc:5b:f7:bc:42:b7:3d:06:77:26:76: bb:68:f6:6a:41:0f:88:c7:a3:fd:82:0c:f7:96:6c: e1:3f:63:1e:ff:7d:56:df:ff:a8:9b:c8:5c:2f:7b: 3d:99:ae:b7:bf:61:2d:2f:e6:75:00:f9:29:8f:60: b6:4b:25:74:84:ec:eb:d2:48:e9:2c:45:8e:ff:92: 99:5c:bb:e1:07:27:26:ee:16:b5:b1:3f:c1:27:d4: 69:33:78:8a:48:b8:ff:50:f4:4e:03:eb:77:02:a3: b4:4b:24:69:c1:3c:f9:d5:aa:37:c5:d1:a1:dd:93: fe:4b:45:4d:b0:f6:15:0e:be:2e:1c:d8:73:23:95: 81:06:84:92:b4:7f:38:b5:e1:fc:44:86:25:40:71: 16:84:e3:f7:86:5d:93:c0:47:d5:6e:48:64:bc:e0: 06:ed:0c:e2:a2:b7:09:bd:6c:1f:a8:80:94:54:e4: 05:bb:ea:50:a1:7f:20:61:07:85:24:9f:23:d4:e8: ca:da:dc:fb:80:15:91:6a:fb:93:a1:61:d7:93:7b: 76:24:59:93:a7:21:95:e9:d3:54:6a:77:e8:2c:35: 7d:4d:75:70:4f:87:de:93:86:0d:6d:06:04:4c:14: a2:a6:fb:d5:cd:ba:7d:14:c6:85:77:f3:22:ed:49: a4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FA:40:03:C6:56:E4:ED:46:10:39:CE:8F:9D:5E:34:81:48:B2:4D X509v3 Authority Key Identifier: keyid:52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d3:39:85:41:ad:04:0b:b0:e4:f0:ef:0e:75:52:b2:ba:7a: e0:5c:81:0b:96:66:a0:21:84:f6:d7:e3:06:93:a5:0f:09:fb: 20:48:e6:75:76:e4:ad:13:89:78:67:ba:04:5c:da:bd:0b:a3: a6:55:5b:bb:ff:08:a7:1e:1c:63:8d:e8:f6:96:ce:49:b9:9a: 96:66:67:ad:34:33:c1:5a:56:3e:79:bb:2b:7c:5f:50:df:c3: 2b:b4:37:e4:10:e4:4f:2b:fe:b8:43:2b:49:90:eb:74:59:6b: 2f:5c:de:ce:b5:e5:ac:84:91:e7:16:21:c7:e4:7a:ec:84:92: fd:25:71:82:6f:f2:58:46:ca:55:98:81:4c:81:6f:93:a4:fe: 42:3e:ba:ab:ae:6b:b3:de:d1:2f:36:c6:4d:7c:6a:bc:07:89: 7f:d8:f0:fb:cd:a5:2b:8e:f6:d2:43:e2:f3:6c:78:69:08:7f: 5f:aa:1f:ec:54:c2:ae:30:e5:19:35:e5:e2:2f:29:e8:75:c3: 8e:43:a3:a3:23:79:f0:4c:b3:b4:2c:b8:0d:b3:cf:e6:d8:2c: c4:26:ab:71:fc:54:c8:ad:55:ab:ea:20:b0:7c:1b:96:85:61: 95:6b:e7:62:66:da:52:ab:52:8c:e1:76:48:5e:9a:61:27:cc: 06:7f:15:4c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAlwFQshCMRdMnMzrdlkOT8q9oXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0 Q0UwN0QyQTAeFw0yNjEwMTAwNjE0MjFaFw0yNjEwMTMxMDU5MjFaMDMxMTAvBgNV BAMTKDAzRkE0MDAzQzY1NkU0RUQ0NjEwMzlDRThGOUQ1RTM0ODE0OEIyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCny1jcW/e8Qrc9Bncmdrto9mpB D4jHo/2CDPeWbOE/Yx7/fVbf/6ibyFwvez2Zrre/YS0v5nUA+SmPYLZLJXSE7OvS SOksRY7/kplcu+EHJybuFrWxP8En1GkzeIpIuP9Q9E4D63cCo7RLJGnBPPnVqjfF 0aHdk/5LRU2w9hUOvi4c2HMjlYEGhJK0fzi14fxEhiVAcRaE4/eGXZPAR9VuSGS8 4AbtDOKitwm9bB+ogJRU5AW76lChfyBhB4UknyPU6Mra3PuAFZFq+5OhYdeTe3Yk WZOnIZXp01Rqd+gsNX1NdXBPh96Thg1tBgRMFKKm+9XNun0UxoV38yLtSaTjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUA/pAA8ZW5O1GEDnOj51eNIFIsk0wHwYDVR0j BBgwFoAUUvvsYyMaqt8VOryY5IsqY0zgfSowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTMzNDc4NS8wLzUyRkJFQzYzMjMxQUFBREYxNTNBQkM5OEU0OEIy QTYzNENFMDdEMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0Q0UwN0QyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEzMzQ3ODUvMC81MkZCRUM2MzIzMUFB QURGMTUzQUJDOThFNDhCMkE2MzRDRTA3RDJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtM5hUGtBAuw 5PDvDnVSsrp64FyBC5ZmoCGE9tfjBpOlDwn7IEjmdXbkrROJeGe6BFzavQujplVb u/8Ipx4cY43o9pbOSbmalmZnrTQzwVpWPnm7K3xfUN/DK7Q35BDkTyv+uEMrSZDr dFlrL1zezrXlrISR5xYhx+R67ISS/SVxgm/yWEbKVZiBTIFvk6T+Qj66q65rs97R LzbGTXxqvAeJf9jw+82lK4720kPi82x4aQh/X6of7FTCrjDlGTXl4i8p6HXDjkOj oyN58EyztCy4DbPP5tgsxCarcfxUyK1Vq+ogsHwbloVhlWvnYmbaUqtSjOF2SF6a YSfMBn8VTA== -----END CERTIFICATE-----Generated at Sun Oct 11 10:51:30 2026 by rpki-client