$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft File: 528FB7389148F9961BE07564A1BCC28DE1440954.mft (raw, json) Hash identifier: XKk5SSzVhhPlA3YcdZQKkp+8mMUYCLT2cscpDeF6HdA= Subject key identifier: 82:9D:E1:DD:24:0D:11:12:3A:C3:67:2C:D1:36:8C:F7:2B:65:57:D2 Authority key identifier: 52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 Certificate issuer: /CN=528FB7389148F9961BE07564A1BCC28DE1440954 Certificate serial: 04135C0DC1C194CCEA9F0EF3FC1B1C6D3D83C50E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft Manifest number: F9 Signing time: Fri 24 Jul 2026 10:51:01 +0000 Manifest this update: Fri 24 Jul 2026 10:46:01 +0000 Manifest next update: Sat 25 Jul 2026 14:12:01 +0000 Files and hashes: 1: 528FB7389148F9961BE07564A1BCC28DE1440954.crl (hash: rNIw0vy2pVj7Tvxw8vjXh/da9ZfSO7efsfAFieoftiA=) 2: 3130332e3135322e3234372e302f32342d3234203d3e20313335333931.roa (hash: EcqA+WlWeIsBbUwVfChqaarTFSzboqSnaqEftxipkFg=) 3: 3130332e3135322e3234372e302f32342d3234203d3e20313532343735.roa (hash: phf4Dfqb5M3Ykxs2j+sNy+Y1lZxL1CrzZ7fuUfc1kQM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:13:5c:0d:c1:c1:94:cc:ea:9f:0e:f3:fc:1b:1c:6d:3d:83:c5:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528FB7389148F9961BE07564A1BCC28DE1440954 Validity Not Before: Jul 24 10:46:01 2026 GMT Not After : Jul 25 14:12:01 2026 GMT Subject: CN=829DE1DD240D11123AC3672CD1368CF72B6557D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:f9:58:89:c5:22:a0:8e:5e:67:2d:01:14: 32:6d:84:a0:00:e9:b0:9a:d9:19:a3:c7:68:88:5f: 69:fd:ba:ec:33:46:d9:fe:45:78:fe:bf:92:ec:b9: ac:c3:e5:48:d4:1a:ac:1c:85:35:67:94:d2:97:74: 7b:6f:84:55:c4:aa:50:86:4c:de:0e:48:df:aa:9b: 9e:03:d4:5b:f0:2c:cd:f0:ef:1b:b9:82:c1:42:33: 2d:3d:59:28:27:24:6f:fe:1b:cb:a7:e9:7d:95:7e: cb:6a:03:2c:86:4f:d8:c9:ba:63:ad:10:cc:49:27: 78:4c:74:6e:d9:3c:b2:64:f6:35:8c:64:d7:33:0e: eb:a9:1c:e7:11:76:17:51:b9:74:59:64:3a:6b:61: 08:c0:17:4d:99:fc:b8:e3:ee:33:03:ad:de:5a:cf: 04:4f:b4:f0:ae:05:41:43:23:d7:30:9d:b7:63:ac: 13:08:75:53:c9:c6:c4:99:30:9b:f6:46:3c:d2:a5: f2:06:53:0e:db:f9:b5:0c:b5:c6:61:5c:8a:c6:a9: c7:18:3c:ca:cb:19:a0:2b:da:c9:d2:d1:fa:71:ef: 73:e9:c4:97:fe:a8:99:ea:df:10:0c:d2:0a:45:86: 76:ea:d1:c9:20:eb:38:d1:d2:9d:30:37:4a:43:3e: 88:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9D:E1:DD:24:0D:11:12:3A:C3:67:2C:D1:36:8C:F7:2B:65:57:D2 X509v3 Authority Key Identifier: keyid:52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:b0:b8:19:9f:16:9e:7c:ec:04:5b:98:42:dc:84:1b:ba:e4: 05:90:48:12:94:f3:5c:d2:ed:16:ed:de:ec:8f:d3:94:2a:68: 1e:c8:9d:26:7b:8c:15:b4:70:07:a0:ca:2a:75:5c:e2:e0:ff: 43:ac:40:8b:d7:83:eb:62:b2:c6:a8:26:2b:5a:54:d2:90:d3: 04:74:dd:1a:fe:61:5b:54:b1:9d:43:4a:55:03:03:64:91:7f: ba:8c:4d:15:7d:c2:65:f2:61:f7:ed:56:11:a2:5d:48:05:ed: bc:6a:30:2c:55:f1:bc:4d:f3:8b:f2:31:92:fc:5c:d1:d1:36: 90:5e:e4:22:0c:0b:e4:d7:23:0a:b5:44:c8:67:bb:73:b9:ef: ad:99:d2:f0:3c:e3:f9:5e:f1:b4:c5:92:ba:b2:74:2e:04:fc: 1b:9b:0e:c7:5c:bd:bf:7f:88:27:a9:bb:1a:70:54:ea:c1:15: 0d:ef:e0:ae:67:63:b3:57:8e:24:88:9b:db:fa:5b:88:cf:63: 59:76:bf:e0:8d:12:40:f9:cc:7f:27:c3:b4:50:4e:64:79:2c: df:7d:84:c7:db:b3:6e:3c:93:4b:94:9e:fb:fe:1b:7d:cb:53: 1a:5f:cc:f1:a5:d7:bc:cb:f2:09:c2:37:70:7c:6a:2c:fa:21: 5d:07:fc:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBBNcDcHBlMzqnw7z/BscbT2DxQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERF MTQ0MDk1NDAeFw0yNjA3MjQxMDQ2MDFaFw0yNjA3MjUxNDEyMDFaMDMxMTAvBgNV BAMTKDgyOURFMUREMjQwRDExMTIzQUMzNjcyQ0QxMzY4Q0Y3MkI2NTU3RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlflYicUioI5eZy0BFDJthKAA 6bCa2Rmjx2iIX2n9uuwzRtn+RXj+v5LsuazD5UjUGqwchTVnlNKXdHtvhFXEqlCG TN4OSN+qm54D1FvwLM3w7xu5gsFCMy09WSgnJG/+G8un6X2VfstqAyyGT9jJumOt EMxJJ3hMdG7ZPLJk9jWMZNczDuupHOcRdhdRuXRZZDprYQjAF02Z/Ljj7jMDrd5a zwRPtPCuBUFDI9cwnbdjrBMIdVPJxsSZMJv2RjzSpfIGUw7b+bUMtcZhXIrGqccY PMrLGaAr2snS0fpx73PpxJf+qJnq3xAM0gpFhnbq0ckg6zjR0p0wN0pDPoiDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgp3h3SQNERI6w2cs0TaM9ytlV9IwHwYDVR0j BBgwFoAUUo+3OJFI+ZYb4HVkobzCjeFECVQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTUzMTM5My8wLzUyOEZCNzM4OTE0OEY5OTYxQkUwNzU2NEExQkND MjhERTE0NDA5NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERFMTQ0MDk1NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE1MzEzOTMvMC81MjhGQjczODkxNDhG OTk2MUJFMDc1NjRBMUJDQzI4REUxNDQwOTU0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArLC4GZ8Wnnzs BFuYQtyEG7rkBZBIEpTzXNLtFu3e7I/TlCpoHsidJnuMFbRwB6DKKnVc4uD/Q6xA i9eD62KyxqgmK1pU0pDTBHTdGv5hW1SxnUNKVQMDZJF/uoxNFX3CZfJh9+1WEaJd SAXtvGowLFXxvE3zi/Ixkvxc0dE2kF7kIgwL5NcjCrVEyGe7c7nvrZnS8Dzj+V7x tMWSurJ0LgT8G5sOx1y9v3+IJ6m7GnBU6sEVDe/grmdjs1eOJIib2/pbiM9jWXa/ 4I0SQPnMfyfDtFBOZHks332Ex9uzbjyTS5Se+/4bfctTGl/M8aXXvMvyCcI3cHxq LPohXQf8Kg== -----END CERTIFICATE-----Generated at Fri Jul 24 17:50:59 2026 by rpki-client