$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft File: 28DFD9381458E1E763ECB35799823E4D24EAD13F.mft (raw, json) Hash identifier: hWhBP7tzojvRIs2kloWFrSQfofomqsXjPxBnAS6C1s4= Subject key identifier: FF:D0:2F:60:64:A5:F1:63:3E:D1:62:C6:8A:4B:AD:01:13:A5:BB:E4 Authority key identifier: 28:DF:D9:38:14:58:E1:E7:63:EC:B3:57:99:82:3E:4D:24:EA:D1:3F Certificate issuer: /CN=28DFD9381458E1E763ECB35799823E4D24EAD13F Certificate serial: 48BEDDFF06B353E80CD200DB7975E700FB3F0DEC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft Manifest number: 12 Signing time: Tue 12 May 2026 22:50:49 +0000 Manifest this update: Tue 12 May 2026 22:45:49 +0000 Manifest next update: Thu 14 May 2026 00:54:49 +0000 Files and hashes: 1: 28DFD9381458E1E763ECB35799823E4D24EAD13F.crl (hash: 9yg8IJ/VDuUN6CvYK+00qea1S02ytEwkZA7nSAQHfPU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.crl rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:be:dd:ff:06:b3:53:e8:0c:d2:00:db:79:75:e7:00:fb:3f:0d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28DFD9381458E1E763ECB35799823E4D24EAD13F Validity Not Before: May 12 22:45:49 2026 GMT Not After : May 14 00:54:49 2026 GMT Subject: CN=FFD02F6064A5F1633ED162C68A4BAD0113A5BBE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a0:34:30:ef:db:56:db:9e:5a:bc:d2:58:fd: 9d:89:04:c8:c3:6e:cc:cf:e9:14:11:10:8a:59:bf: d3:ee:0c:95:48:31:b3:81:43:7f:78:1e:e5:ab:18: 98:c7:d6:0e:53:90:a7:1d:d7:a5:15:e2:e9:d7:a4: e2:bd:7a:5a:a3:d5:bf:13:25:eb:e7:71:43:eb:8a: 05:5c:c5:11:b8:02:b4:2a:ce:c5:c0:e6:f5:aa:b8: 5a:c6:27:85:63:46:66:45:84:e2:d1:28:92:40:9e: b5:c8:62:a0:b9:61:94:c9:73:38:fc:38:5c:3f:fd: b5:59:ed:fa:9d:3c:97:97:e4:75:12:16:d5:91:ea: a7:85:9d:77:1b:d0:98:5e:02:41:bb:6e:86:7f:d1: 1c:df:b5:35:fa:e3:4b:c3:63:a1:08:ec:44:7c:da: 8b:6a:17:ae:dd:a1:c7:40:8d:6d:64:76:30:9d:7b: 9c:cb:df:53:a2:ee:4d:34:9f:1e:60:63:7d:16:54: fb:dd:d7:b3:4b:27:88:48:e7:61:4c:de:e3:9e:74: dc:04:f5:72:c3:d0:c9:6e:7a:0b:6b:1d:a2:eb:da: 56:3e:90:eb:e1:0e:11:bb:74:13:88:ca:e9:be:79: a6:ac:48:da:d2:73:c5:6e:4e:39:a9:71:62:c5:d1: 63:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D0:2F:60:64:A5:F1:63:3E:D1:62:C6:8A:4B:AD:01:13:A5:BB:E4 X509v3 Authority Key Identifier: keyid:28:DF:D9:38:14:58:E1:E7:63:EC:B3:57:99:82:3E:4D:24:EA:D1:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ef:36:77:7c:c3:e4:d8:df:d1:e3:9d:f6:cd:12:0e:61:42: ce:84:df:dc:c2:83:6f:cd:47:5b:4f:3e:b0:5b:08:7c:a3:5d: 4f:6d:d9:21:e6:42:47:8e:9b:64:df:18:8e:f2:99:3e:62:f1: ff:8b:24:73:fc:21:b9:3d:7a:7c:77:9c:4b:3c:59:d8:27:48: a1:7b:0d:36:88:c8:89:85:da:75:74:49:35:39:55:46:46:d4: a8:aa:b1:42:b7:32:03:99:d7:bd:09:84:de:a7:88:44:65:7d: 86:21:5d:e1:44:4e:e4:50:e6:d5:6d:09:ae:67:9b:56:d7:e5: 3c:a3:b1:86:56:a6:8c:a8:20:97:fe:78:b4:c4:6e:b4:9e:96: a6:64:ce:64:3b:4b:26:6d:6f:1b:67:e0:34:c2:29:f3:79:2b: aa:67:5e:5f:9b:82:4d:df:a8:9b:e0:2c:18:da:71:3c:4f:37: 31:46:a3:34:76:46:9e:44:83:d8:2e:12:6a:e2:49:62:e0:38: b0:08:37:02:d2:20:7e:34:f9:e7:ee:b2:c2:a9:13:a7:a9:c0: f1:2f:67:4a:06:78:72:13:3c:23:67:df:88:af:96:94:1a:83: c2:5f:78:e2:a2:1d:ca:76:d5:ae:32:56:b9:0b:de:10:9b:87: ce:d6:63:5d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSL7d/wazU+gM0gDbeXXnAPs/DewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhERkQ5MzgxNDU4RTFFNzYzRUNCMzU3OTk4MjNFNEQy NEVBRDEzRjAeFw0yNjA1MTIyMjQ1NDlaFw0yNjA1MTQwMDU0NDlaMDMxMTAvBgNV BAMTKEZGRDAyRjYwNjRBNUYxNjMzRUQxNjJDNjhBNEJBRDAxMTNBNUJCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtoDQw79tW255avNJY/Z2JBMjD bszP6RQREIpZv9PuDJVIMbOBQ394HuWrGJjH1g5TkKcd16UV4unXpOK9elqj1b8T JevncUPrigVcxRG4ArQqzsXA5vWquFrGJ4VjRmZFhOLRKJJAnrXIYqC5YZTJczj8 OFw//bVZ7fqdPJeX5HUSFtWR6qeFnXcb0JheAkG7boZ/0RzftTX640vDY6EI7ER8 2otqF67docdAjW1kdjCde5zL31Oi7k00nx5gY30WVPvd17NLJ4hI52FM3uOedNwE 9XLD0MluegtrHaLr2lY+kOvhDhG7dBOIyum+eaasSNrSc8VuTjmpcWLF0WOVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/9AvYGSl8WM+0WLGikutAROlu+QwHwYDVR0j BBgwFoAUKN/ZOBRY4edj7LNXmYI+TSTq0T8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MjA2NzM4ODE3NTYxMzk1OS8wLzI4REZEOTM4MTQ1OEUxRTc2M0VDQjM1Nzk5ODIz RTREMjRFQUQxM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMjhERkQ5MzgxNDU4RTFFNzYzRUNCMzU3OTk4MjNFNEQyNEVBRDEzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDIwNjczODgxNzU2MTM5NTkvMC8yOERGRDkzODE0NThF MUU3NjNFQ0IzNTc5OTgyM0U0RDI0RUFEMTNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+82d3zD5Njf 0eOd9s0SDmFCzoTf3MKDb81HW08+sFsIfKNdT23ZIeZCR46bZN8YjvKZPmLx/4sk c/whuT16fHecSzxZ2CdIoXsNNojIiYXadXRJNTlVRkbUqKqxQrcyA5nXvQmE3qeI RGV9hiFd4URO5FDm1W0JrmebVtflPKOxhlamjKggl/54tMRutJ6WpmTOZDtLJm1v G2fgNMIp83krqmdeX5uCTd+om+AsGNpxPE83MUajNHZGnkSD2C4SauJJYuA4sAg3 AtIgfjT55+6ywqkTp6nA8S9nSgZ4chM8I2ffiK+WlBqDwl944qIdynbVrjJWuQve EJuHztZjXQ== -----END CERTIFICATE-----Generated at Wed May 13 16:48:01 2026 by rpki-client