$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft File: 28DFD9381458E1E763ECB35799823E4D24EAD13F.mft (raw, json) Hash identifier: 0K7cwF7SyukzkKjzGATw/F1umNzJkqE6jK8AoT8rPS4= Subject key identifier: A3:75:7F:22:71:84:0D:EB:21:5D:8F:19:0B:98:CE:B1:41:65:9C:E5 Authority key identifier: 28:DF:D9:38:14:58:E1:E7:63:EC:B3:57:99:82:3E:4D:24:EA:D1:3F Certificate issuer: /CN=28DFD9381458E1E763ECB35799823E4D24EAD13F Certificate serial: 569A8F24DD438424BA0EA08DF1FB7AF113356515 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft Manifest number: B5 Signing time: Sun 11 Oct 2026 17:50:48 +0000 Manifest this update: Sun 11 Oct 2026 17:45:48 +0000 Manifest next update: Thu 15 Oct 2026 05:06:48 +0000 Files and hashes: 1: 28DFD9381458E1E763ECB35799823E4D24EAD13F.crl (hash: aqRB09tkQ1mj1gEiJx/w+KB5nijR5nuqdedKoGgA5T0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.crl rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 05:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:9a:8f:24:dd:43:84:24:ba:0e:a0:8d:f1:fb:7a:f1:13:35:65:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28DFD9381458E1E763ECB35799823E4D24EAD13F Validity Not Before: Oct 11 17:45:48 2026 GMT Not After : Oct 15 05:06:48 2026 GMT Subject: CN=A3757F2271840DEB215D8F190B98CEB141659CE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:78:d7:c2:eb:b2:95:9e:81:99:e4:6a:1e:ca: f8:31:5a:53:c7:4e:eb:24:37:f5:df:0f:ac:3d:ae: f6:94:79:45:32:3e:73:85:07:90:74:ab:00:45:de: a1:f7:a4:a0:65:1c:e7:f2:18:3b:5e:fd:20:73:93: 5e:6f:3b:c5:0a:00:59:da:db:4d:e2:89:e1:fb:9a: b8:36:fe:13:ab:b6:7a:47:92:6c:a2:24:16:b3:c4: 44:04:b4:ef:c9:ff:16:76:35:85:3e:1d:ca:97:a6: 5a:6a:56:39:ea:2f:20:e7:8c:dc:e8:51:93:e9:db: d9:80:4a:6a:2e:88:6c:68:68:f2:b5:2d:77:74:af: 1c:2c:ed:fa:fe:4c:8d:3e:65:09:d9:1a:a4:7a:92: c0:6c:2f:85:32:13:82:e5:04:c2:2e:19:40:8e:00: af:62:d2:ab:64:20:9d:6a:5a:88:d5:38:f6:e5:ae: 81:0a:68:2d:ee:6b:a6:ff:75:f3:17:58:75:de:f3: c2:53:2c:d4:4e:01:b2:06:1d:58:8f:bd:b0:9b:b6: 05:74:3e:65:0c:00:39:3c:1e:e7:97:9a:f9:fb:86: cb:e3:01:ce:fe:76:ee:11:5e:db:6a:af:43:c5:13: b3:9e:27:81:35:11:63:59:20:86:2f:0e:42:f2:d2: 27:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:75:7F:22:71:84:0D:EB:21:5D:8F:19:0B:98:CE:B1:41:65:9C:E5 X509v3 Authority Key Identifier: keyid:28:DF:D9:38:14:58:E1:E7:63:EC:B3:57:99:82:3E:4D:24:EA:D1:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:5d:4e:6a:4e:72:4d:a6:b3:dc:60:5e:6e:fd:05:79:85:8c: 5c:0f:87:31:cb:ee:03:b5:28:48:02:4f:e0:c9:75:19:f5:3b: 6f:4d:39:b5:6c:22:65:5a:78:a7:25:3b:21:4e:21:9d:87:3d: 2b:80:8d:55:bb:aa:06:6e:83:8f:c5:94:9c:99:ac:a7:32:e8: 98:d7:79:2a:55:cd:33:9e:84:1d:b0:dd:28:45:8e:7f:31:47: 51:49:f3:36:61:9c:d7:92:a0:e6:7a:d1:f9:c7:fd:3f:9c:6c: 74:1d:2c:60:db:66:29:1b:da:f5:2e:a1:6e:5c:09:6f:2e:7b: 2c:2f:65:11:53:58:00:ee:9f:01:1f:be:88:94:de:ca:1e:56: 0a:60:1f:80:52:04:2a:24:9e:d7:b4:84:4b:a0:f8:73:9e:49: 5d:b1:b6:14:25:48:d9:90:91:17:b4:d3:fc:5a:ae:2b:c7:ec: cb:af:0c:c1:20:a9:08:d1:51:7e:c7:c6:37:33:e6:7a:3c:c8: 1f:be:4c:81:75:66:90:be:a9:3e:87:cd:ce:f8:3b:63:07:9c: 43:f6:a3:06:9b:e5:7f:8d:65:0b:be:26:a1:89:a9:4c:4a:a6: 82:35:15:e1:2f:c4:13:fe:fc:a8:55:84:0c:33:52:08:3a:1e: 34:c3:fa:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVpqPJN1DhCS6DqCN8ft68RM1ZRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhERkQ5MzgxNDU4RTFFNzYzRUNCMzU3OTk4MjNFNEQy NEVBRDEzRjAeFw0yNjEwMTExNzQ1NDhaFw0yNjEwMTUwNTA2NDhaMDMxMTAvBgNV BAMTKEEzNzU3RjIyNzE4NDBERUIyMTVEOEYxOTBCOThDRUIxNDE2NTlDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/eNfC67KVnoGZ5GoeyvgxWlPH TuskN/XfD6w9rvaUeUUyPnOFB5B0qwBF3qH3pKBlHOfyGDte/SBzk15vO8UKAFna 203iieH7mrg2/hOrtnpHkmyiJBazxEQEtO/J/xZ2NYU+HcqXplpqVjnqLyDnjNzo UZPp29mASmouiGxoaPK1LXd0rxws7fr+TI0+ZQnZGqR6ksBsL4UyE4LlBMIuGUCO AK9i0qtkIJ1qWojVOPblroEKaC3ua6b/dfMXWHXe88JTLNROAbIGHViPvbCbtgV0 PmUMADk8HueXmvn7hsvjAc7+du4RXttqr0PFE7OeJ4E1EWNZIIYvDkLy0iePAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUo3V/InGEDeshXY8ZC5jOsUFlnOUwHwYDVR0j BBgwFoAUKN/ZOBRY4edj7LNXmYI+TSTq0T8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MjA2NzM4ODE3NTYxMzk1OS8wLzI4REZEOTM4MTQ1OEUxRTc2M0VDQjM1Nzk5ODIz RTREMjRFQUQxM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMjhERkQ5MzgxNDU4RTFFNzYzRUNCMzU3OTk4MjNFNEQyNEVBRDEzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDIwNjczODgxNzU2MTM5NTkvMC8yOERGRDkzODE0NThF MUU3NjNFQ0IzNTc5OTgyM0U0RDI0RUFEMTNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoF1Oak5yTaaz 3GBebv0FeYWMXA+HMcvuA7UoSAJP4Ml1GfU7b005tWwiZVp4pyU7IU4hnYc9K4CN VbuqBm6Dj8WUnJmspzLomNd5KlXNM56EHbDdKEWOfzFHUUnzNmGc15Kg5nrR+cf9 P5xsdB0sYNtmKRva9S6hblwJby57LC9lEVNYAO6fAR++iJTeyh5WCmAfgFIEKiSe 17SES6D4c55JXbG2FCVI2ZCRF7TT/FquK8fsy68MwSCpCNFRfsfGNzPmejzIH75M gXVmkL6pPofNzvg7YwecQ/ajBpvlf41lC74moYmpTEqmgjUV4S/EE/78qFWEDDNS CDoeNMP6FA== -----END CERTIFICATE-----Generated at Wed Oct 14 06:31:17 2026 by rpki-client