$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft File: 528FB7389148F9961BE07564A1BCC28DE1440954.mft (raw, json) Hash identifier: FkC/3GCJAUqx6WY3cOSpI1TrLHmdnLzyYJjeUwpXRGw= Subject key identifier: 08:64:1F:7B:7C:55:F0:E1:65:96:18:72:F8:C6:DF:87:6F:76:8A:84 Authority key identifier: 52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 Certificate issuer: /CN=528FB7389148F9961BE07564A1BCC28DE1440954 Certificate serial: 08B12028472C9898DF09ABFC0CEF7488B645A9B5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft Manifest number: 0100 Signing time: Wed 29 Jul 2026 18:39:57 +0000 Manifest this update: Wed 29 Jul 2026 18:34:57 +0000 Manifest next update: Thu 30 Jul 2026 20:21:57 +0000 Files and hashes: 1: 3130332e3135322e3234372e302f32342d3234203d3e20313532343735.roa (hash: phf4Dfqb5M3Ykxs2j+sNy+Y1lZxL1CrzZ7fuUfc1kQM=) 2: 3130332e3135322e3234372e302f32342d3234203d3e20313335333931.roa (hash: EcqA+WlWeIsBbUwVfChqaarTFSzboqSnaqEftxipkFg=) 3: 528FB7389148F9961BE07564A1BCC28DE1440954.crl (hash: lVMYefFwoDl2Vaz3l5Mvw4KI0bfT+SXlt9/bJT2YPy0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 20:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b1:20:28:47:2c:98:98:df:09:ab:fc:0c:ef:74:88:b6:45:a9:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528FB7389148F9961BE07564A1BCC28DE1440954 Validity Not Before: Jul 29 18:34:57 2026 GMT Not After : Jul 30 20:21:57 2026 GMT Subject: CN=08641F7B7C55F0E165961872F8C6DF876F768A84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:67:7c:ef:ba:a9:b9:d9:15:9f:de:8e:e2:4b: 4e:e0:7d:99:e3:61:68:77:27:0b:16:c5:32:60:69: a6:09:81:e4:19:29:26:4c:06:73:65:72:54:3c:d2: 9f:fc:69:72:36:3b:5f:2f:79:7e:b9:c3:4b:8e:91: 66:ee:b1:b2:eb:17:d5:4a:07:81:53:53:f7:fd:30: 11:26:cb:84:e2:da:73:92:55:a7:04:4c:f6:cf:1b: 3a:55:cb:c8:96:65:8f:f3:c2:4c:8f:b4:56:73:31: 36:f7:96:f9:04:96:07:07:38:09:d3:1a:e9:47:de: 7f:47:32:58:38:74:70:4f:5b:2b:96:33:d6:b8:81: b1:e4:ba:ba:58:61:fd:fc:73:5f:73:46:14:af:92: 01:1b:91:82:b8:d0:76:dd:ff:3d:cf:1d:db:48:04: 12:c4:0c:95:07:27:c6:ae:23:0e:3e:7f:16:ca:24: b3:aa:ac:80:b9:30:70:d2:1e:e3:f7:e4:fd:d9:b3: 7c:0b:76:b8:fd:89:ca:82:72:b1:1d:d2:0f:7b:b9: bb:49:ac:34:8e:8d:67:20:7b:0c:46:81:71:92:b3: a2:1c:92:4c:98:a3:1d:73:6d:0d:83:b0:f6:d1:5c: d9:c9:d8:1d:78:1d:6e:64:93:63:a5:bf:a2:47:21: 5e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:64:1F:7B:7C:55:F0:E1:65:96:18:72:F8:C6:DF:87:6F:76:8A:84 X509v3 Authority Key Identifier: keyid:52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:61:bf:06:f8:f6:72:f2:d1:5d:6f:da:9b:c9:bf:90:55:da: ad:bb:01:e6:59:cb:d9:a0:55:51:8b:36:00:23:45:20:98:f8: 85:6e:a2:e0:21:89:d1:74:29:f3:3f:dd:fc:7a:b9:fd:62:ce: b2:56:f5:cc:02:49:b0:fe:63:d9:12:1b:d9:08:82:c7:c4:f8: c8:da:46:59:46:3f:8b:06:a1:cd:4d:cb:10:08:84:3c:6e:3f: 56:9c:5b:52:4b:8e:7c:88:66:67:5d:7a:a3:37:f0:4a:89:c6: 04:87:29:31:d6:b5:9c:7c:42:9b:e8:1f:78:e0:6a:06:99:34: 31:3b:97:1f:75:44:1b:67:d7:8a:b2:47:2f:e5:2e:5a:4a:d9: 41:b0:c1:bd:74:e3:1e:ce:78:7c:66:60:50:bd:4c:65:b6:95: 1e:e9:a8:ef:bb:e0:6c:93:de:53:c2:e7:9c:dd:7a:52:87:72: 90:e8:a8:c5:f3:da:ab:3e:a6:1d:c7:30:9c:b4:b6:e5:10:c2: 0f:31:20:53:4e:18:f4:15:ad:4f:78:06:33:ec:4a:f9:4c:c7: d7:15:b5:07:e1:96:76:21:a2:3c:72:2a:e2:18:24:2f:d7:38: 1c:8b:b4:9b:29:fe:ff:56:fb:fa:a8:4f:44:3c:c3:15:53:42: 7c:3c:b0:b9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCLEgKEcsmJjfCav8DO90iLZFqbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERF MTQ0MDk1NDAeFw0yNjA3MjkxODM0NTdaFw0yNjA3MzAyMDIxNTdaMDMxMTAvBgNV BAMTKDA4NjQxRjdCN0M1NUYwRTE2NTk2MTg3MkY4QzZERjg3NkY3NjhBODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClZ3zvuqm52RWf3o7iS07gfZnj YWh3JwsWxTJgaaYJgeQZKSZMBnNlclQ80p/8aXI2O18veX65w0uOkWbusbLrF9VK B4FTU/f9MBEmy4Ti2nOSVacETPbPGzpVy8iWZY/zwkyPtFZzMTb3lvkElgcHOAnT GulH3n9HMlg4dHBPWyuWM9a4gbHkurpYYf38c19zRhSvkgEbkYK40Hbd/z3PHdtI BBLEDJUHJ8auIw4+fxbKJLOqrIC5MHDSHuP35P3Zs3wLdrj9icqCcrEd0g97ubtJ rDSOjWcgewxGgXGSs6IckkyYox1zbQ2DsPbRXNnJ2B14HW5kk2Olv6JHIV7/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCGQfe3xV8OFllhhy+Mbfh292ioQwHwYDVR0j BBgwFoAUUo+3OJFI+ZYb4HVkobzCjeFECVQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTUzMTM5My8wLzUyOEZCNzM4OTE0OEY5OTYxQkUwNzU2NEExQkND MjhERTE0NDA5NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERFMTQ0MDk1NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE1MzEzOTMvMC81MjhGQjczODkxNDhG OTk2MUJFMDc1NjRBMUJDQzI4REUxNDQwOTU0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWG/Bvj2cvLR XW/am8m/kFXarbsB5lnL2aBVUYs2ACNFIJj4hW6i4CGJ0XQp8z/d/Hq5/WLOslb1 zAJJsP5j2RIb2QiCx8T4yNpGWUY/iwahzU3LEAiEPG4/VpxbUkuOfIhmZ116ozfw SonGBIcpMda1nHxCm+gfeOBqBpk0MTuXH3VEG2fXirJHL+UuWkrZQbDBvXTjHs54 fGZgUL1MZbaVHumo77vgbJPeU8LnnN16UodykOioxfPaqz6mHccwnLS25RDCDzEg U04Y9BWtT3gGM+xK+UzH1xW1B+GWdiGiPHIq4hgkL9c4HIu0myn+/1b7+qhPRDzD FVNCfDywuQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:09:33 2026 by rpki-client