$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft File: 28DFD9381458E1E763ECB35799823E4D24EAD13F.mft (raw, json) Hash identifier: IfG+v3H/Yo2ca3nCPv0wrvn5SvqgsS1GNi30jkT/7aI= Subject key identifier: 43:FD:56:48:49:86:D3:01:7F:40:2B:81:06:E7:BF:E9:92:94:22:47 Authority key identifier: 28:DF:D9:38:14:58:E1:E7:63:EC:B3:57:99:82:3E:4D:24:EA:D1:3F Certificate issuer: /CN=28DFD9381458E1E763ECB35799823E4D24EAD13F Certificate serial: 024099F75AED87A8D3D0870200938AA371BC1DC3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft Manifest number: 3C Signing time: Sat 13 Jun 2026 12:51:49 +0000 Manifest this update: Sat 13 Jun 2026 12:46:49 +0000 Manifest next update: Sun 14 Jun 2026 16:38:49 +0000 Files and hashes: 1: 28DFD9381458E1E763ECB35799823E4D24EAD13F.crl (hash: X0blyWLHfp2b0icYM5jvTGerR1/Bgn1yHHnoZqE3S6M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.crl rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:40:99:f7:5a:ed:87:a8:d3:d0:87:02:00:93:8a:a3:71:bc:1d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28DFD9381458E1E763ECB35799823E4D24EAD13F Validity Not Before: Jun 13 12:46:49 2026 GMT Not After : Jun 14 16:38:49 2026 GMT Subject: CN=43FD56484986D3017F402B8106E7BFE992942247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:92:5c:1c:27:8c:5d:90:8f:7c:37:30:f0: c5:a0:98:09:fb:64:fa:bc:7d:12:89:f6:d2:d2:9c: 6a:08:fe:e0:f9:ac:ad:ac:e4:83:cf:1c:d8:12:bc: df:c8:6b:13:43:c7:07:67:8c:c3:b0:c9:34:8a:79: 86:77:a7:64:b5:71:03:cf:e3:1f:43:fd:50:d4:5f: 76:f3:ab:4c:82:a4:76:68:da:5d:a4:96:49:57:35: 87:0a:85:9b:63:6e:ea:6b:9b:a6:14:03:eb:d9:50: 53:bf:71:08:ac:13:ea:1b:33:cc:41:4d:6a:30:a5: 99:5d:7d:2f:c0:12:48:9f:cc:8e:48:47:92:e5:7d: eb:96:84:07:ce:6d:b5:d2:77:8c:69:37:c0:23:04: b1:11:7a:0e:ea:43:11:40:04:fd:f2:bf:9d:9b:d7: 16:11:98:dd:f8:af:f0:fe:79:fa:7a:08:f6:36:52: 95:ec:e6:4b:4d:fe:59:c9:b1:ba:21:ee:71:a3:5d: fa:a7:ff:a0:33:48:43:80:a1:12:dd:e3:07:2d:fa: 5d:03:b9:e4:62:c0:1f:5e:67:8f:27:a0:f6:97:e9: 03:e8:36:8e:96:cb:22:f6:b0:b5:ef:61:b6:5b:85: 4a:69:1c:f9:d9:96:50:6f:d4:9a:8c:74:a0:30:70: 7b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FD:56:48:49:86:D3:01:7F:40:2B:81:06:E7:BF:E9:92:94:22:47 X509v3 Authority Key Identifier: keyid:28:DF:D9:38:14:58:E1:E7:63:EC:B3:57:99:82:3E:4D:24:EA:D1:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c3:7b:98:66:43:47:85:2b:bd:c7:50:94:39:5f:0d:ec:a9: 1f:2f:9d:35:3c:c3:e6:d2:f7:99:a8:ec:c6:e9:81:fa:e6:32: 88:d5:7c:69:7f:5c:43:d9:62:3c:57:2e:7f:0d:77:da:f2:01: ae:62:f5:64:5b:ff:6f:01:00:9e:26:a0:a5:dd:65:cc:85:8e: c3:eb:f1:f1:bf:4a:d5:f2:f3:e5:52:a4:90:bf:95:1b:d3:e7: 34:c7:24:d8:cf:46:9b:37:d8:b3:56:59:ec:3e:95:bd:10:17: 70:9b:32:46:2a:5b:d3:eb:ca:bc:37:ef:06:23:de:41:0b:9e: e6:e6:d3:f3:cc:5a:89:92:3d:27:49:f1:a0:f2:ab:58:25:c7: 69:fd:e7:65:32:dd:29:13:37:aa:62:ee:de:a8:ed:1e:8f:0f: ea:fd:b3:b8:43:5a:59:4d:94:f3:38:b3:38:15:6d:a5:e7:58: 38:9e:21:2d:8f:49:5b:ba:6d:95:fe:bf:a1:11:a5:42:61:88: 68:55:99:a6:5e:53:d4:89:92:ae:8c:de:6b:c6:5d:1f:de:81: 4e:df:5d:5c:1f:43:22:0a:9c:ef:df:c7:e1:14:81:e3:54:5c: bd:3a:2d:fd:83:a3:9e:10:e7:f3:11:26:03:fe:c0:a4:b4:e2: 56:a6:13:2c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAkCZ91rth6jT0IcCAJOKo3G8HcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhERkQ5MzgxNDU4RTFFNzYzRUNCMzU3OTk4MjNFNEQy NEVBRDEzRjAeFw0yNjA2MTMxMjQ2NDlaFw0yNjA2MTQxNjM4NDlaMDMxMTAvBgNV BAMTKDQzRkQ1NjQ4NDk4NkQzMDE3RjQwMkI4MTA2RTdCRkU5OTI5NDIyNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1b5JcHCeMXZCPfDcw8MWgmAn7 ZPq8fRKJ9tLSnGoI/uD5rK2s5IPPHNgSvN/IaxNDxwdnjMOwyTSKeYZ3p2S1cQPP 4x9D/VDUX3bzq0yCpHZo2l2klklXNYcKhZtjbuprm6YUA+vZUFO/cQisE+obM8xB TWowpZldfS/AEkifzI5IR5LlfeuWhAfObbXSd4xpN8AjBLEReg7qQxFABP3yv52b 1xYRmN34r/D+efp6CPY2UpXs5ktN/lnJsboh7nGjXfqn/6AzSEOAoRLd4wct+l0D ueRiwB9eZ48noPaX6QPoNo6WyyL2sLXvYbZbhUppHPnZllBv1JqMdKAwcHsLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQ/1WSEmG0wF/QCuBBue/6ZKUIkcwHwYDVR0j BBgwFoAUKN/ZOBRY4edj7LNXmYI+TSTq0T8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MjA2NzM4ODE3NTYxMzk1OS8wLzI4REZEOTM4MTQ1OEUxRTc2M0VDQjM1Nzk5ODIz RTREMjRFQUQxM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMjhERkQ5MzgxNDU4RTFFNzYzRUNCMzU3OTk4MjNFNEQyNEVBRDEzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDIwNjczODgxNzU2MTM5NTkvMC8yOERGRDkzODE0NThF MUU3NjNFQ0IzNTc5OTgyM0U0RDI0RUFEMTNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMN7mGZDR4Ur vcdQlDlfDeypHy+dNTzD5tL3majsxumB+uYyiNV8aX9cQ9liPFcufw132vIBrmL1 ZFv/bwEAniagpd1lzIWOw+vx8b9K1fLz5VKkkL+VG9PnNMck2M9GmzfYs1ZZ7D6V vRAXcJsyRipb0+vKvDfvBiPeQQue5ubT88xaiZI9J0nxoPKrWCXHaf3nZTLdKRM3 qmLu3qjtHo8P6v2zuENaWU2U8zizOBVtpedYOJ4hLY9JW7ptlf6/oRGlQmGIaFWZ pl5T1ImSrozea8ZdH96BTt9dXB9DIgqc79/H4RSB41RcvTot/YOjnhDn8xEmA/7A pLTiVqYTLA== -----END CERTIFICATE-----Generated at Sun Jun 14 06:31:53 2026 by rpki-client