$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft File: 28DFD9381458E1E763ECB35799823E4D24EAD13F.mft (raw, json) Hash identifier: 83CQ5K/volqjAQAN1p/zB8YccmSUj4MwT9+0nDb6jNY= Subject key identifier: 0E:F7:74:DD:B5:37:0F:F0:42:D3:38:D9:0F:40:84:C5:85:61:47:BB Authority key identifier: 28:DF:D9:38:14:58:E1:E7:63:EC:B3:57:99:82:3E:4D:24:EA:D1:3F Certificate issuer: /CN=28DFD9381458E1E763ECB35799823E4D24EAD13F Certificate serial: 1AFC89E2EE435560E9E22DFC96DE525CB4D35AF7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft Manifest number: 73 Signing time: Fri 24 Jul 2026 13:21:17 +0000 Manifest this update: Fri 24 Jul 2026 13:16:17 +0000 Manifest next update: Sat 25 Jul 2026 16:24:17 +0000 Files and hashes: 1: 28DFD9381458E1E763ECB35799823E4D24EAD13F.crl (hash: 0+hPQ3K4BfCVINrzrBVKkUUDtm6VlVV+ZZ7jqOfL1Ww=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.crl rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 16:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:fc:89:e2:ee:43:55:60:e9:e2:2d:fc:96:de:52:5c:b4:d3:5a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28DFD9381458E1E763ECB35799823E4D24EAD13F Validity Not Before: Jul 24 13:16:17 2026 GMT Not After : Jul 25 16:24:17 2026 GMT Subject: CN=0EF774DDB5370FF042D338D90F4084C5856147BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2a:1f:f8:66:41:37:9f:bc:37:df:04:3e:eb: 4e:fe:f2:12:d2:ed:06:8b:38:51:11:95:36:64:c5: 91:84:f6:19:a8:a8:ba:8b:08:88:97:81:a9:a8:8a: 44:53:05:36:6b:fe:ad:04:10:70:f4:aa:34:57:b7: d7:02:76:95:be:2d:41:f3:aa:db:dc:c2:57:0e:70: 62:4d:c6:56:4a:3a:e1:d5:0b:da:15:a1:66:a0:42: 22:25:c3:0a:d1:42:40:c0:c3:23:7d:4d:14:f1:78: b6:6e:f1:17:66:b2:a2:97:13:a9:2f:5d:b7:eb:65: 83:43:cb:76:24:70:90:99:d0:c5:4d:dd:ba:28:d1: ca:53:55:da:f5:5d:e0:6a:f1:f2:63:cc:c1:d2:d0: 94:50:a9:6e:ca:34:4c:7f:b1:e8:fd:9b:dc:59:ea: 99:40:56:3e:f0:81:83:f7:44:03:b4:48:69:45:60: bd:4f:c2:60:a7:7d:6e:e9:42:f3:22:a7:eb:ff:c4: 02:33:8a:ce:88:c3:b8:f9:83:aa:80:c4:59:61:06: 46:84:21:08:2f:95:b4:ff:08:7a:c0:dd:37:c0:17: 91:61:34:d7:8d:26:07:bd:01:88:e8:37:d2:23:4d: e0:0f:d4:a4:eb:fb:2a:6c:e4:2e:44:ab:d8:fa:b7: 39:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F7:74:DD:B5:37:0F:F0:42:D3:38:D9:0F:40:84:C5:85:61:47:BB X509v3 Authority Key Identifier: keyid:28:DF:D9:38:14:58:E1:E7:63:EC:B3:57:99:82:3E:4D:24:EA:D1:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:8c:ef:11:d1:79:ae:15:33:d6:59:ab:ed:8e:53:c2:38:c9: 89:e2:ed:72:30:63:3a:78:c4:55:47:52:c0:93:5f:cd:59:b3: 1f:88:ee:4b:5e:ff:e0:52:d8:9d:6b:ec:e5:e1:6f:9e:5d:f6: da:8b:a4:67:23:d4:1f:6d:a2:5d:32:aa:d0:1a:d6:9e:be:6c: 3e:6a:32:4f:1b:ab:68:43:9e:96:cd:c4:4f:92:80:e6:2b:5d: a7:1b:89:24:3a:49:57:a1:05:89:ba:82:a1:96:02:17:36:0b: 74:0a:c8:55:86:90:d1:07:68:de:b8:a2:87:37:23:ed:6d:c6: d5:e8:5b:24:7a:92:c7:a4:80:3c:2f:6b:48:97:5b:8d:29:81: 76:1c:ac:26:5f:03:1f:37:c0:5f:62:79:ed:c6:81:d3:35:4d: 82:1c:29:60:61:cb:f0:2d:72:3d:63:61:c8:f1:5a:f3:8f:bc: 79:e4:fa:8c:4d:06:c7:58:aa:85:80:95:1c:64:78:94:e2:a0: 92:ae:64:12:61:82:46:97:48:e4:78:8d:26:a5:24:03:16:0d: 99:0c:b5:04:90:cd:25:32:ce:ae:7f:da:28:ab:3e:9e:01:88: 72:c2:a7:5b:12:22:3c:03:89:6d:dd:72:d5:08:ff:4c:e8:21: cc:3f:43:4a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGvyJ4u5DVWDp4i38lt5SXLTTWvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhERkQ5MzgxNDU4RTFFNzYzRUNCMzU3OTk4MjNFNEQy NEVBRDEzRjAeFw0yNjA3MjQxMzE2MTdaFw0yNjA3MjUxNjI0MTdaMDMxMTAvBgNV BAMTKDBFRjc3NEREQjUzNzBGRjA0MkQzMzhEOTBGNDA4NEM1ODU2MTQ3QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwKh/4ZkE3n7w33wQ+607+8hLS 7QaLOFERlTZkxZGE9hmoqLqLCIiXgamoikRTBTZr/q0EEHD0qjRXt9cCdpW+LUHz qtvcwlcOcGJNxlZKOuHVC9oVoWagQiIlwwrRQkDAwyN9TRTxeLZu8RdmsqKXE6kv XbfrZYNDy3YkcJCZ0MVN3boo0cpTVdr1XeBq8fJjzMHS0JRQqW7KNEx/sej9m9xZ 6plAVj7wgYP3RAO0SGlFYL1PwmCnfW7pQvMip+v/xAIzis6Iw7j5g6qAxFlhBkaE IQgvlbT/CHrA3TfAF5FhNNeNJge9AYjoN9IjTeAP1KTr+yps5C5Eq9j6tzm1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDvd03bU3D/BC0zjZD0CExYVhR7swHwYDVR0j BBgwFoAUKN/ZOBRY4edj7LNXmYI+TSTq0T8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MjA2NzM4ODE3NTYxMzk1OS8wLzI4REZEOTM4MTQ1OEUxRTc2M0VDQjM1Nzk5ODIz RTREMjRFQUQxM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMjhERkQ5MzgxNDU4RTFFNzYzRUNCMzU3OTk4MjNFNEQyNEVBRDEzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDIwNjczODgxNzU2MTM5NTkvMC8yOERGRDkzODE0NThF MUU3NjNFQ0IzNTc5OTgyM0U0RDI0RUFEMTNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIzvEdF5rhUz 1lmr7Y5TwjjJieLtcjBjOnjEVUdSwJNfzVmzH4juS17/4FLYnWvs5eFvnl322ouk ZyPUH22iXTKq0BrWnr5sPmoyTxuraEOels3ET5KA5itdpxuJJDpJV6EFibqCoZYC FzYLdArIVYaQ0Qdo3riihzcj7W3G1ehbJHqSx6SAPC9rSJdbjSmBdhysJl8DHzfA X2J57caB0zVNghwpYGHL8C1yPWNhyPFa84+8eeT6jE0Gx1iqhYCVHGR4lOKgkq5k EmGCRpdI5HiNJqUkAxYNmQy1BJDNJTLOrn/aKKs+ngGIcsKnWxIiPAOJbd1y1Qj/ TOghzD9DSg== -----END CERTIFICATE-----Generated at Fri Jul 24 22:40:44 2026 by rpki-client