$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft File: 528FB7389148F9961BE07564A1BCC28DE1440954.mft (raw, json) Hash identifier: opTgYEjf80z33ZEBUdLns66im10MPF3CYXJ/fwDnyCE= Subject key identifier: FB:C7:DF:09:BA:0B:36:FD:70:2B:75:0B:19:93:08:72:6D:80:AD:06 Authority key identifier: 52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 Certificate issuer: /CN=528FB7389148F9961BE07564A1BCC28DE1440954 Certificate serial: 195C2CFE2068E84A756F1332CD661E6D5521E6E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft Manifest number: 013C Signing time: Sun 11 Oct 2026 16:30:43 +0000 Manifest this update: Sun 11 Oct 2026 16:25:43 +0000 Manifest next update: Thu 15 Oct 2026 03:14:43 +0000 Files and hashes: 1: 3130332e3135322e3234372e302f32342d3234203d3e20313335333931.roa (hash: EcqA+WlWeIsBbUwVfChqaarTFSzboqSnaqEftxipkFg=) 2: 3130332e3135322e3234372e302f32342d3234203d3e20313532343735.roa (hash: phf4Dfqb5M3Ykxs2j+sNy+Y1lZxL1CrzZ7fuUfc1kQM=) 3: 528FB7389148F9961BE07564A1BCC28DE1440954.crl (hash: v/PgSbA77HdKA3ydaz/i070NJtuEXTbXihmNSF/G2TM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:5c:2c:fe:20:68:e8:4a:75:6f:13:32:cd:66:1e:6d:55:21:e6:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528FB7389148F9961BE07564A1BCC28DE1440954 Validity Not Before: Oct 11 16:25:43 2026 GMT Not After : Oct 15 03:14:43 2026 GMT Subject: CN=FBC7DF09BA0B36FD702B750B199308726D80AD06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7e:11:e6:a3:c4:d8:03:c9:7e:58:7a:f7:de: 25:86:29:d7:ff:90:16:2c:48:0d:47:e9:f6:a8:43: 75:08:b4:78:40:33:c9:6c:2d:ed:39:29:8d:b1:66: f9:37:3c:30:b0:a7:96:49:58:f0:7c:0a:fd:a9:ef: 0d:2d:1a:4f:cc:45:73:4a:60:1b:ba:7f:b7:48:d5: 03:06:af:db:30:df:b0:79:ca:30:87:0e:32:11:76: 63:1b:00:3b:f7:83:80:f0:7c:36:1e:43:53:21:b9: c3:4e:32:b0:33:a7:71:ec:ca:a8:32:c7:2a:04:f8: d7:8a:f9:57:38:a8:f8:5e:08:1d:98:84:d3:5b:26: c3:00:c8:2a:bf:db:39:a2:1e:cc:57:22:5b:12:fd: e7:21:f8:4f:04:fe:a8:d6:6a:80:88:06:c3:f6:c2: 86:a3:40:ae:e9:97:b7:17:dd:73:d2:74:67:28:b4: 80:d0:5f:d0:ba:69:b2:58:e6:62:ad:d9:24:b5:89: 83:13:a3:53:f2:17:a2:5c:f8:15:76:0b:3a:22:da: 9f:78:44:3b:d8:c6:06:96:69:06:57:4a:55:f1:04: 12:32:7f:69:2b:9d:77:cd:ff:de:08:46:32:10:f6: 29:18:97:4e:7d:21:78:c1:7c:3c:cc:bf:64:74:a9: 20:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C7:DF:09:BA:0B:36:FD:70:2B:75:0B:19:93:08:72:6D:80:AD:06 X509v3 Authority Key Identifier: keyid:52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:46:e8:82:ab:58:7e:48:78:05:a9:a4:e0:ec:03:e0:3f:a2: 89:90:28:09:b9:69:9d:98:0b:df:0f:4e:48:32:8d:f9:94:c8: e1:e0:50:7c:83:e7:4f:1a:e2:b4:1e:cf:15:bd:39:7e:4d:81: 25:7a:01:bf:0b:77:dd:f9:b8:f6:51:88:97:e6:c9:f3:e0:56: 47:18:8d:95:62:60:3b:02:63:c5:cc:e0:fe:5e:fe:ef:ab:d7: dc:a5:a6:8f:10:3d:49:a3:b8:f5:52:1a:70:c3:3f:6a:9a:c2: 10:5d:d1:00:df:c6:fe:df:47:76:bd:1e:3b:9b:ce:a7:e2:46: e7:22:64:6e:6a:4b:df:8b:1c:e2:ac:38:f0:ac:eb:31:81:b8: 4c:37:2f:cf:43:bb:1c:07:af:c4:85:1e:98:02:21:86:32:9d: d9:a2:9e:98:4b:c2:9e:71:41:46:a3:5c:01:97:dc:1b:74:60: 1d:41:39:e1:4d:35:a8:4a:13:d6:1d:8c:c3:19:9b:bc:cf:30: 52:6f:78:b6:e4:86:b0:76:79:b2:0a:4a:d5:ca:03:16:b6:19: 77:df:39:1b:3d:ee:3c:ee:b1:6f:15:16:e7:e5:01:17:4f:19: 8c:93:e9:c8:18:45:a0:51:a6:4f:3e:60:18:37:8f:4b:1b:fb: 3c:f4:d8:ea -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGVws/iBo6Ep1bxMyzWYebVUh5uUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERF MTQ0MDk1NDAeFw0yNjEwMTExNjI1NDNaFw0yNjEwMTUwMzE0NDNaMDMxMTAvBgNV BAMTKEZCQzdERjA5QkEwQjM2RkQ3MDJCNzUwQjE5OTMwODcyNkQ4MEFEMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDfhHmo8TYA8l+WHr33iWGKdf/ kBYsSA1H6faoQ3UItHhAM8lsLe05KY2xZvk3PDCwp5ZJWPB8Cv2p7w0tGk/MRXNK YBu6f7dI1QMGr9sw37B5yjCHDjIRdmMbADv3g4DwfDYeQ1MhucNOMrAzp3Hsyqgy xyoE+NeK+Vc4qPheCB2YhNNbJsMAyCq/2zmiHsxXIlsS/ech+E8E/qjWaoCIBsP2 woajQK7pl7cX3XPSdGcotIDQX9C6abJY5mKt2SS1iYMTo1PyF6Jc+BV2Czoi2p94 RDvYxgaWaQZXSlXxBBIyf2krnXfN/94IRjIQ9ikYl059IXjBfDzMv2R0qSAHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+8ffCboLNv1wK3ULGZMIcm2ArQYwHwYDVR0j BBgwFoAUUo+3OJFI+ZYb4HVkobzCjeFECVQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTUzMTM5My8wLzUyOEZCNzM4OTE0OEY5OTYxQkUwNzU2NEExQkND MjhERTE0NDA5NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERFMTQ0MDk1NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE1MzEzOTMvMC81MjhGQjczODkxNDhG OTk2MUJFMDc1NjRBMUJDQzI4REUxNDQwOTU0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUbogqtYfkh4 Bamk4OwD4D+iiZAoCblpnZgL3w9OSDKN+ZTI4eBQfIPnTxritB7PFb05fk2BJXoB vwt33fm49lGIl+bJ8+BWRxiNlWJgOwJjxczg/l7+76vX3KWmjxA9SaO49VIacMM/ aprCEF3RAN/G/t9Hdr0eO5vOp+JG5yJkbmpL34sc4qw48KzrMYG4TDcvz0O7HAev xIUemAIhhjKd2aKemEvCnnFBRqNcAZfcG3RgHUE54U01qEoT1h2MwxmbvM8wUm94 tuSGsHZ5sgpK1coDFrYZd985Gz3uPO6xbxUW5+UBF08ZjJPpyBhFoFGmTz5gGDeP Sxv7PPTY6g== -----END CERTIFICATE-----Generated at Mon Oct 12 02:17:14 2026 by rpki-client