$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft File: 28DFD9381458E1E763ECB35799823E4D24EAD13F.mft (raw, json) Hash identifier: Kll1K5jpRNvQZ2wInaz1e54O9dQkE6Wyf7g+eATk4/o= Subject key identifier: D6:87:2B:E0:39:33:E7:98:64:1D:5B:2E:8C:A1:2A:E0:45:14:3C:87 Authority key identifier: 28:DF:D9:38:14:58:E1:E7:63:EC:B3:57:99:82:3E:4D:24:EA:D1:3F Certificate issuer: /CN=28DFD9381458E1E763ECB35799823E4D24EAD13F Certificate serial: 5409383CA2A8F9BFDCB9469A1F81DF805E91ED4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft Manifest number: BB Signing time: Sun 25 Oct 2026 20:22:57 +0000 Manifest this update: Sun 25 Oct 2026 20:17:57 +0000 Manifest next update: Wed 28 Oct 2026 23:23:57 +0000 Files and hashes: 1: 28DFD9381458E1E763ECB35799823E4D24EAD13F.crl (hash: 03FNzQlJo9E74LIaMolQFNzXbNs7LZitX+/r6R0/YZk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.crl rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 23:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:09:38:3c:a2:a8:f9:bf:dc:b9:46:9a:1f:81:df:80:5e:91:ed:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28DFD9381458E1E763ECB35799823E4D24EAD13F Validity Not Before: Oct 25 20:17:57 2026 GMT Not After : Oct 28 23:23:57 2026 GMT Subject: CN=D6872BE03933E798641D5B2E8CA12AE045143C87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d0:69:da:63:a9:e2:04:ba:58:1c:b4:b7:d1: 12:40:b5:76:0d:90:8a:b5:c6:2a:91:a2:51:f8:2e: 62:b1:4e:4a:17:9b:f8:6b:41:fe:10:9c:5b:c9:c8: 6e:7b:17:e1:3c:f6:10:19:bf:05:03:c3:5c:7a:26: 74:bd:3a:17:8f:c8:80:7b:3c:9f:a2:55:63:30:67: 50:a4:9f:d4:1f:31:d8:e5:92:93:aa:27:34:ea:43: 73:c8:86:ab:6e:3f:54:fd:bf:93:3d:48:52:0d:2f: d0:16:75:0f:79:19:56:6b:13:bd:cd:4a:b5:5a:5b: c4:e8:1b:16:fc:99:ff:3d:bc:76:dc:d3:b3:3a:14: 51:30:da:4f:15:95:33:8a:d9:91:bf:66:df:fd:c0: 32:5b:02:4f:32:32:8f:41:34:7a:0e:82:a9:f1:a3: df:1c:47:e7:cc:79:6e:6b:2d:ce:c9:93:71:b5:d3: 89:0e:8b:11:51:30:16:ef:62:da:ff:95:0f:14:8f: a5:e4:20:21:33:d5:a2:1a:dd:f6:31:8f:54:63:57: 8a:02:fe:c6:5c:aa:06:5d:f1:33:79:d2:4a:cf:df: fd:49:32:e9:4b:28:18:5f:59:47:3a:c9:cf:0f:39: 7a:37:95:12:7d:5b:d0:f5:04:8f:1c:2b:65:e0:6c: 21:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:87:2B:E0:39:33:E7:98:64:1D:5B:2E:8C:A1:2A:E0:45:14:3C:87 X509v3 Authority Key Identifier: keyid:28:DF:D9:38:14:58:E1:E7:63:EC:B3:57:99:82:3E:4D:24:EA:D1:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:93:7b:0b:9c:23:36:5c:1e:a1:a5:72:9e:73:e3:42:99:ae: 6f:fa:2b:a7:f5:00:85:e6:a0:81:2f:80:45:83:2b:a4:9d:f0: 12:79:97:16:76:14:aa:8c:62:08:09:69:fa:63:85:c8:d7:9b: b4:10:24:61:2c:ca:58:fb:8a:9a:02:43:83:7c:a3:ea:3d:9e: ca:aa:c7:01:dc:95:cb:84:d1:ef:a7:37:6a:c1:0c:bb:cf:e5: 8c:5b:6b:a1:72:fe:f7:c4:10:72:10:43:99:3c:05:32:6e:0c: 3e:31:00:f7:de:e6:ae:99:49:79:8c:b5:c2:07:0b:62:8d:fa: 52:00:96:8e:43:82:8e:4d:d0:86:24:b6:c8:c9:11:15:66:72: 02:c0:fb:f6:33:0b:df:18:03:9a:35:e7:72:6d:bc:3c:ab:93: 6e:10:c0:97:03:00:8b:eb:b4:73:cc:47:6e:b4:b9:38:8a:73: c5:36:86:3d:04:3d:cb:e5:d3:f8:9b:f3:c1:67:28:10:ca:4c: a2:64:05:d4:45:bd:bf:bf:a5:ed:cc:f1:5a:aa:77:17:cb:53: cd:c3:fa:7d:a1:70:10:fd:cc:1d:4f:49:39:f7:59:f0:93:5c: dc:27:8d:8b:ed:b2:aa:1f:60:30:51:f3:94:06:23:19:c6:45: 58:4d:d2:23 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVAk4PKKo+b/cuUaaH4HfgF6R7U4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhERkQ5MzgxNDU4RTFFNzYzRUNCMzU3OTk4MjNFNEQy NEVBRDEzRjAeFw0yNjEwMjUyMDE3NTdaFw0yNjEwMjgyMzIzNTdaMDMxMTAvBgNV BAMTKEQ2ODcyQkUwMzkzM0U3OTg2NDFENUIyRThDQTEyQUUwNDUxNDNDODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj0GnaY6niBLpYHLS30RJAtXYN kIq1xiqRolH4LmKxTkoXm/hrQf4QnFvJyG57F+E89hAZvwUDw1x6JnS9OhePyIB7 PJ+iVWMwZ1Ckn9QfMdjlkpOqJzTqQ3PIhqtuP1T9v5M9SFINL9AWdQ95GVZrE73N SrVaW8ToGxb8mf89vHbc07M6FFEw2k8VlTOK2ZG/Zt/9wDJbAk8yMo9BNHoOgqnx o98cR+fMeW5rLc7Jk3G104kOixFRMBbvYtr/lQ8Uj6XkICEz1aIa3fYxj1RjV4oC /sZcqgZd8TN50krP3/1JMulLKBhfWUc6yc8POXo3lRJ9W9D1BI8cK2XgbCGtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1ocr4Dkz55hkHVsujKEq4EUUPIcwHwYDVR0j BBgwFoAUKN/ZOBRY4edj7LNXmYI+TSTq0T8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MjA2NzM4ODE3NTYxMzk1OS8wLzI4REZEOTM4MTQ1OEUxRTc2M0VDQjM1Nzk5ODIz RTREMjRFQUQxM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMjhERkQ5MzgxNDU4RTFFNzYzRUNCMzU3OTk4MjNFNEQyNEVBRDEzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDIwNjczODgxNzU2MTM5NTkvMC8yOERGRDkzODE0NThF MUU3NjNFQ0IzNTc5OTgyM0U0RDI0RUFEMTNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5N7C5wjNlwe oaVynnPjQpmub/orp/UAheaggS+ARYMrpJ3wEnmXFnYUqoxiCAlp+mOFyNebtBAk YSzKWPuKmgJDg3yj6j2eyqrHAdyVy4TR76c3asEMu8/ljFtroXL+98QQchBDmTwF Mm4MPjEA997mrplJeYy1wgcLYo36UgCWjkOCjk3QhiS2yMkRFWZyAsD79jML3xgD mjXncm28PKuTbhDAlwMAi+u0c8xHbrS5OIpzxTaGPQQ9y+XT+JvzwWcoEMpMomQF 1EW9v7+l7czxWqp3F8tTzcP6faFwEP3MHU9JOfdZ8JNc3CeNi+2yqh9gMFHzlAYj GcZFWE3SIw== -----END CERTIFICATE-----Generated at Tue Oct 27 18:41:14 2026 by rpki-client