$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft File: 528FB7389148F9961BE07564A1BCC28DE1440954.mft (raw, json) Hash identifier: sO9oQ5ic5jgpGyv182Mknl4/BlMh4rOtFY8GjBeLAqU= Subject key identifier: 76:AB:7C:BC:26:8F:FC:06:DB:B4:00:AB:D4:C3:4E:4B:38:C1:D3:2E Authority key identifier: 52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 Certificate issuer: /CN=528FB7389148F9961BE07564A1BCC28DE1440954 Certificate serial: 05869F237AE08670500553D958061298E582A871 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft Manifest number: 013D Signing time: Wed 14 Oct 2026 03:18:28 +0000 Manifest this update: Wed 14 Oct 2026 03:13:28 +0000 Manifest next update: Sat 17 Oct 2026 13:20:28 +0000 Files and hashes: 1: 3130332e3135322e3234372e302f32342d3234203d3e20313532343735.roa (hash: phf4Dfqb5M3Ykxs2j+sNy+Y1lZxL1CrzZ7fuUfc1kQM=) 2: 528FB7389148F9961BE07564A1BCC28DE1440954.crl (hash: wklIhG08eWz3BaPfHSsqCk+2IRKhmKVihOkiy51bXeA=) 3: 3130332e3135322e3234372e302f32342d3234203d3e20313335333931.roa (hash: EcqA+WlWeIsBbUwVfChqaarTFSzboqSnaqEftxipkFg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 13:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:86:9f:23:7a:e0:86:70:50:05:53:d9:58:06:12:98:e5:82:a8:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528FB7389148F9961BE07564A1BCC28DE1440954 Validity Not Before: Oct 14 03:13:28 2026 GMT Not After : Oct 17 13:20:28 2026 GMT Subject: CN=76AB7CBC268FFC06DBB400ABD4C34E4B38C1D32E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8a:6f:bf:f6:c4:06:78:25:91:06:8f:5c:be: 10:c4:90:4d:9c:96:35:fb:7c:3d:50:17:91:cd:bf: 11:6a:b0:d5:dc:e6:92:a4:47:4f:1b:99:47:62:e8: 03:29:1f:cb:88:e1:7e:fe:2c:68:0c:f9:95:c2:d4: ea:7b:0e:d2:9e:42:1c:bd:e8:a8:ff:1c:43:fd:50: c8:68:9f:13:58:b3:f9:75:ce:5e:d3:59:31:d5:48: 2d:9a:59:4d:42:1e:7d:30:67:4d:a5:5f:eb:3e:ed: 54:96:af:6f:77:16:19:fc:2b:58:78:f0:d0:56:a2: ab:f8:fc:4c:5e:10:2e:49:b9:8e:4a:70:47:1e:0d: 6b:bf:18:08:f8:bd:d5:e5:cb:3c:68:2e:e2:73:f9: 83:72:06:ca:44:d7:1b:e1:4a:be:7d:9d:8f:5f:f0: 26:fc:4b:44:8c:e6:f2:d9:11:43:23:b5:cc:18:99: 65:7d:83:fc:f0:0e:00:d6:d3:37:2f:ff:57:3c:24: 91:80:ea:d1:6e:13:7f:eb:61:f1:ff:a9:0c:9c:ed: 6b:fb:11:61:c4:ba:1a:62:8c:06:7e:27:32:6c:9f: f9:4f:16:7e:d2:f7:10:05:7e:bc:a1:ae:42:09:d5: 7e:ab:bc:ac:ea:dd:8f:64:3a:a1:be:e8:a1:aa:ce: 31:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AB:7C:BC:26:8F:FC:06:DB:B4:00:AB:D4:C3:4E:4B:38:C1:D3:2E X509v3 Authority Key Identifier: keyid:52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:8f:91:6f:8c:1e:5e:e3:ba:d9:e3:d0:4e:8c:b6:39:ed:7b: de:5c:c7:4e:bf:03:48:47:8d:09:33:a9:a7:b0:56:63:e4:47: 69:e5:f0:3a:1c:45:ac:9f:02:02:49:c5:bc:af:06:2c:a6:9e: 23:68:b6:44:8a:16:bf:d2:1a:b0:b1:51:93:d0:93:4d:39:01: 64:2f:dc:b2:f8:29:84:ce:fa:11:e9:c6:ba:81:d3:38:31:6d: 6c:2c:04:ec:c6:12:c3:44:96:13:df:ea:f8:2c:d3:05:9b:e5: fd:67:ee:a0:8b:0c:10:51:c0:7b:2c:9b:9b:43:c3:81:bd:be: e2:79:ce:24:3a:f5:c2:2a:00:0f:a9:e2:c7:f5:f9:41:ab:17: 9c:e1:6c:ad:bf:44:95:91:70:dd:c9:59:28:0a:55:52:8c:99: 6d:5b:41:d7:60:95:f7:27:55:ee:4e:57:d2:09:cc:81:c0:ce: f0:fb:d4:05:b4:3a:85:19:25:71:1b:bc:a9:f0:25:6f:e9:b2: 43:41:1b:eb:4f:b6:6e:a2:aa:a7:53:48:5c:43:89:64:b7:19: b9:eb:c0:a0:12:4f:61:3a:4f:52:ed:45:0d:a2:57:7e:cb:6f: 1c:a0:5b:7d:a2:60:91:d6:c3:a4:0c:06:1c:a9:2b:6a:89:91: 04:53:f8:4d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBYafI3rghnBQBVPZWAYSmOWCqHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERF MTQ0MDk1NDAeFw0yNjEwMTQwMzEzMjhaFw0yNjEwMTcxMzIwMjhaMDMxMTAvBgNV BAMTKDc2QUI3Q0JDMjY4RkZDMDZEQkI0MDBBQkQ0QzM0RTRCMzhDMUQzMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyim+/9sQGeCWRBo9cvhDEkE2c ljX7fD1QF5HNvxFqsNXc5pKkR08bmUdi6AMpH8uI4X7+LGgM+ZXC1Op7DtKeQhy9 6Kj/HEP9UMhonxNYs/l1zl7TWTHVSC2aWU1CHn0wZ02lX+s+7VSWr293Fhn8K1h4 8NBWoqv4/ExeEC5JuY5KcEceDWu/GAj4vdXlyzxoLuJz+YNyBspE1xvhSr59nY9f 8Cb8S0SM5vLZEUMjtcwYmWV9g/zwDgDW0zcv/1c8JJGA6tFuE3/rYfH/qQyc7Wv7 EWHEuhpijAZ+JzJsn/lPFn7S9xAFfryhrkIJ1X6rvKzq3Y9kOqG+6KGqzjG7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdqt8vCaP/AbbtACr1MNOSzjB0y4wHwYDVR0j BBgwFoAUUo+3OJFI+ZYb4HVkobzCjeFECVQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTUzMTM5My8wLzUyOEZCNzM4OTE0OEY5OTYxQkUwNzU2NEExQkND MjhERTE0NDA5NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERFMTQ0MDk1NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE1MzEzOTMvMC81MjhGQjczODkxNDhG OTk2MUJFMDc1NjRBMUJDQzI4REUxNDQwOTU0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxI+Rb4weXuO6 2ePQToy2Oe173lzHTr8DSEeNCTOpp7BWY+RHaeXwOhxFrJ8CAknFvK8GLKaeI2i2 RIoWv9IasLFRk9CTTTkBZC/csvgphM76EenGuoHTODFtbCwE7MYSw0SWE9/q+CzT BZvl/WfuoIsMEFHAeyybm0PDgb2+4nnOJDr1wioAD6nix/X5QasXnOFsrb9ElZFw 3clZKApVUoyZbVtB12CV9ydV7k5X0gnMgcDO8PvUBbQ6hRklcRu8qfAlb+myQ0Eb 60+2bqKqp1NIXEOJZLcZuevAoBJPYTpPUu1FDaJXfstvHKBbfaJgkdbDpAwGHKkr aomRBFP4TQ== -----END CERTIFICATE-----Generated at Thu Oct 15 12:24:39 2026 by rpki-client