$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft File: 528FB7389148F9961BE07564A1BCC28DE1440954.mft (raw, json) Hash identifier: 6nm26ubSzZMDNbibfapLizW5nQDo5z90uXM1LDVyUKI= Subject key identifier: 8A:AD:60:BE:22:F0:6F:B6:C2:7E:59:9B:55:2C:8A:93:C9:D5:63:39 Authority key identifier: 52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 Certificate issuer: /CN=528FB7389148F9961BE07564A1BCC28DE1440954 Certificate serial: 1B33F504F8B8AE1DDBCE428B7484E221DB287A3A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft Manifest number: D9 Signing time: Tue 30 Jun 2026 09:41:44 +0000 Manifest this update: Tue 30 Jun 2026 09:36:44 +0000 Manifest next update: Wed 01 Jul 2026 12:44:44 +0000 Files and hashes: 1: 3130332e3135322e3234372e302f32342d3234203d3e20313335333931.roa (hash: EcqA+WlWeIsBbUwVfChqaarTFSzboqSnaqEftxipkFg=) 2: 3130332e3135322e3234372e302f32342d3234203d3e20313532343735.roa (hash: phf4Dfqb5M3Ykxs2j+sNy+Y1lZxL1CrzZ7fuUfc1kQM=) 3: 528FB7389148F9961BE07564A1BCC28DE1440954.crl (hash: vSHF8GAiPXEfp6fEvvGygbwWOKhulGWyk1tH/JKQ8FE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 12:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:33:f5:04:f8:b8:ae:1d:db:ce:42:8b:74:84:e2:21:db:28:7a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528FB7389148F9961BE07564A1BCC28DE1440954 Validity Not Before: Jun 30 09:36:44 2026 GMT Not After : Jul 1 12:44:44 2026 GMT Subject: CN=8AAD60BE22F06FB6C27E599B552C8A93C9D56339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:48:47:b7:6b:2e:0c:39:55:bc:61:11:25:7f: 1a:53:cc:49:07:db:33:5e:65:fc:10:b5:fb:ec:39: a9:2f:86:f0:9e:51:88:fd:74:9c:e4:9b:21:aa:c2: ae:a8:cc:84:77:24:be:9d:09:a6:0c:81:85:70:fd: 42:4d:db:70:00:3a:0b:24:98:e8:bf:35:37:b6:0c: 19:f0:03:e2:3c:f1:b1:e0:f4:0c:8e:a2:55:86:ee: 79:55:e4:a7:f5:89:66:4f:bf:b8:84:2c:bf:5e:4d: cc:e4:4a:5f:68:85:2e:07:4c:f4:ed:30:f9:fa:e2: c1:f6:fc:cd:a4:06:04:8c:26:2d:ef:66:b1:ab:84: 8f:31:58:d7:5b:39:39:52:bf:ab:5e:6b:83:9a:8c: 2f:d5:70:30:e5:27:38:5f:ac:4e:b8:5a:6f:b0:22: 11:d3:19:ef:20:06:09:37:b9:57:61:3c:0e:57:5c: f4:01:ef:e3:06:2b:22:0b:5a:a2:50:67:4b:e1:44: 48:d9:72:aa:b8:4d:34:e9:84:ac:0e:58:ac:56:90: b4:1f:a0:cb:9a:a3:bb:cb:dd:7b:64:a3:38:9d:f6: 10:1b:74:6b:c9:20:82:c5:93:23:85:95:f6:71:ed: 0d:b0:ca:49:de:5f:7c:bb:bf:1a:0e:8d:6f:55:15: 47:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AD:60:BE:22:F0:6F:B6:C2:7E:59:9B:55:2C:8A:93:C9:D5:63:39 X509v3 Authority Key Identifier: keyid:52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:07:5f:01:00:64:25:2f:f0:10:b0:99:f5:e8:88:e9:2e:81: 0c:2f:3b:43:65:43:94:b2:38:48:6a:4f:47:44:3c:1a:95:2b: f8:fd:14:42:9e:f3:5e:69:e3:cd:c7:c0:a9:cf:2f:9c:53:56: d1:b2:d5:52:22:e6:9f:8d:03:5f:89:b9:25:3c:a8:e6:f8:d3: d5:e2:d8:26:4c:06:ca:20:36:b5:f7:5c:f0:b3:1f:a5:8e:e9: 1b:ab:a3:2a:09:b2:99:bd:7c:f3:a0:83:46:14:32:a2:24:1e: 86:94:c7:ce:c9:f1:42:f6:f5:d8:de:27:55:2b:10:37:5d:5e: d2:39:1f:fd:0f:5b:5f:70:df:90:16:ea:37:b1:36:b4:cb:41: 61:87:57:20:2b:e6:b3:39:7d:81:e2:45:61:30:31:d1:a8:44: de:ab:10:d9:aa:4b:1e:a3:ac:87:31:02:71:bd:db:73:56:4d: 32:3d:57:aa:cf:1f:c2:8e:48:e7:93:7f:f4:c1:31:d1:a9:a0: 45:03:cf:4b:27:c1:7f:2f:ea:2a:0c:60:88:b8:94:2c:4c:26: 8c:a7:da:09:ed:0b:93:e6:d1:a3:a8:11:e5:c2:a2:5c:df:1b: 64:34:c1:f8:8b:ee:3a:88:ce:d7:21:84:83:98:9a:c6:c6:4f: 40:aa:84:dd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGzP1BPi4rh3bzkKLdITiIdsoejowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERF MTQ0MDk1NDAeFw0yNjA2MzAwOTM2NDRaFw0yNjA3MDExMjQ0NDRaMDMxMTAvBgNV BAMTKDhBQUQ2MEJFMjJGMDZGQjZDMjdFNTk5QjU1MkM4QTkzQzlENTYzMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrSEe3ay4MOVW8YRElfxpTzEkH 2zNeZfwQtfvsOakvhvCeUYj9dJzkmyGqwq6ozIR3JL6dCaYMgYVw/UJN23AAOgsk mOi/NTe2DBnwA+I88bHg9AyOolWG7nlV5Kf1iWZPv7iELL9eTczkSl9ohS4HTPTt MPn64sH2/M2kBgSMJi3vZrGrhI8xWNdbOTlSv6tea4OajC/VcDDlJzhfrE64Wm+w IhHTGe8gBgk3uVdhPA5XXPQB7+MGKyILWqJQZ0vhREjZcqq4TTTphKwOWKxWkLQf oMuao7vL3Xtkozid9hAbdGvJIILFkyOFlfZx7Q2wykneX3y7vxoOjW9VFUdbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiq1gviLwb7bCflmbVSyKk8nVYzkwHwYDVR0j BBgwFoAUUo+3OJFI+ZYb4HVkobzCjeFECVQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTUzMTM5My8wLzUyOEZCNzM4OTE0OEY5OTYxQkUwNzU2NEExQkND MjhERTE0NDA5NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERFMTQ0MDk1NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE1MzEzOTMvMC81MjhGQjczODkxNDhG OTk2MUJFMDc1NjRBMUJDQzI4REUxNDQwOTU0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwdfAQBkJS/w ELCZ9eiI6S6BDC87Q2VDlLI4SGpPR0Q8GpUr+P0UQp7zXmnjzcfAqc8vnFNW0bLV UiLmn40DX4m5JTyo5vjT1eLYJkwGyiA2tfdc8LMfpY7pG6ujKgmymb1886CDRhQy oiQehpTHzsnxQvb12N4nVSsQN11e0jkf/Q9bX3DfkBbqN7E2tMtBYYdXICvmszl9 geJFYTAx0ahE3qsQ2apLHqOshzECcb3bc1ZNMj1Xqs8fwo5I55N/9MEx0amgRQPP SyfBfy/qKgxgiLiULEwmjKfaCe0Lk+bRo6gR5cKiXN8bZDTB+IvuOojO1yGEg5ia xsZPQKqE3Q== -----END CERTIFICATE-----Generated at Wed Jul 1 04:38:49 2026 by rpki-client