$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft File: 528FB7389148F9961BE07564A1BCC28DE1440954.mft (raw, json) Hash identifier: 2qtSx5DDj6lKRZgdGR9TY/VF648y8XF6VGoz4aZE5V8= Subject key identifier: AC:01:AF:19:EA:80:75:1F:38:D3:8B:95:18:C2:13:86:10:C7:91:C4 Authority key identifier: 52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 Certificate issuer: /CN=528FB7389148F9961BE07564A1BCC28DE1440954 Certificate serial: 7812F00D126775BAB20B545998FDC67662319939 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft Manifest number: 9E Signing time: Sat 16 May 2026 19:12:50 +0000 Manifest this update: Sat 16 May 2026 19:07:50 +0000 Manifest next update: Sun 17 May 2026 20:29:50 +0000 Files and hashes: 1: 3130332e3135322e3234372e302f32342d3234203d3e20313532343735.roa (hash: phf4Dfqb5M3Ykxs2j+sNy+Y1lZxL1CrzZ7fuUfc1kQM=) 2: 3130332e3135322e3234372e302f32342d3234203d3e20313335333931.roa (hash: EcqA+WlWeIsBbUwVfChqaarTFSzboqSnaqEftxipkFg=) 3: 528FB7389148F9961BE07564A1BCC28DE1440954.crl (hash: Df84iLKeEUBNWHzQ+Z209gxFbXtnGQafMbYOeSaVPyM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 20:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:12:f0:0d:12:67:75:ba:b2:0b:54:59:98:fd:c6:76:62:31:99:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528FB7389148F9961BE07564A1BCC28DE1440954 Validity Not Before: May 16 19:07:50 2026 GMT Not After : May 17 20:29:50 2026 GMT Subject: CN=AC01AF19EA80751F38D38B9518C2138610C791C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3a:87:be:08:50:aa:83:3e:fe:f4:a2:61:ff: 5f:02:9b:e4:84:cc:8b:86:11:0f:3f:5b:60:fb:da: 74:e4:f4:8a:4c:fb:12:01:c4:83:55:60:4b:7b:d4: fc:e3:53:7b:4c:91:ad:c2:c3:b2:1a:4d:be:be:75: 29:44:fe:fd:0a:d1:31:64:c5:81:5f:d7:5e:d4:6a: 77:89:76:a5:cb:a0:35:86:88:0c:eb:20:f4:17:49: 7f:a1:4c:0c:55:80:56:5b:4d:76:e9:00:bd:a5:23: fe:a2:65:7d:af:3e:d7:72:e9:27:1a:fa:9b:b6:22: 57:98:d5:26:2b:5b:e0:15:55:d6:3f:9e:ee:c6:37: 44:48:2d:7c:f1:ae:e3:c9:5c:1a:76:3a:8b:04:b4: 2a:8d:ed:fb:fa:d4:9d:d3:75:30:f1:77:e8:01:a1: ef:25:4c:57:29:b4:f8:45:7d:6c:0e:53:41:0e:cb: c2:a1:b6:3d:72:ed:e7:aa:2e:2d:de:09:d2:7b:94: a1:8e:b2:ca:1b:c7:fc:43:80:fd:e2:f5:e7:08:7a: c3:80:bd:05:24:3a:97:64:d8:0d:90:9b:77:83:45: 7f:7c:f0:21:3b:5b:59:58:ef:02:70:9e:c0:7e:72: d0:9c:53:5f:9b:b2:02:cb:36:11:8f:51:09:2a:8b: f9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:01:AF:19:EA:80:75:1F:38:D3:8B:95:18:C2:13:86:10:C7:91:C4 X509v3 Authority Key Identifier: keyid:52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:81:a9:ab:6c:91:e2:65:52:6c:b1:80:82:5e:99:f7:88:c6: 79:22:89:dd:f2:05:40:b4:31:b3:e5:2a:1c:2c:30:16:8e:1f: b6:db:f4:9f:3d:6e:2c:18:1a:16:d4:c0:d5:f7:a4:a0:6d:01: 25:04:86:06:14:84:f5:60:fc:1d:ee:e1:14:5b:cd:e2:96:da: ce:cc:83:be:aa:b2:2b:54:36:5d:67:4e:2f:62:b8:84:32:51: 78:b1:8a:c3:70:5e:fd:b8:5d:0d:16:da:2b:ce:85:68:31:64: 30:ff:16:ff:d2:bb:0b:20:ef:77:e6:f4:26:e5:43:35:cc:d2: bb:52:2f:1f:48:58:69:40:ac:29:7e:da:c9:74:85:f7:f3:1d: 11:54:d1:25:04:a5:55:10:c6:69:f7:73:25:49:30:84:e3:7e: 2e:21:19:8f:47:ea:5e:b9:b7:53:89:48:86:d5:b4:c1:2f:17: b6:ff:f2:4f:8d:40:2d:68:73:20:f6:af:d5:14:f4:4a:3e:e9: 2a:c2:d3:ff:af:04:fc:7a:d7:4d:71:75:9e:9c:aa:9b:c9:01: 26:81:98:97:77:07:0d:9e:c4:af:90:1f:a5:21:d2:95:41:b9: 27:f3:d2:4a:a3:83:85:0d:d1:3a:47:53:60:41:cf:e0:b1:51: e6:8f:af:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeBLwDRJndbqyC1RZmP3GdmIxmTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERF MTQ0MDk1NDAeFw0yNjA1MTYxOTA3NTBaFw0yNjA1MTcyMDI5NTBaMDMxMTAvBgNV BAMTKEFDMDFBRjE5RUE4MDc1MUYzOEQzOEI5NTE4QzIxMzg2MTBDNzkxQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTOoe+CFCqgz7+9KJh/18Cm+SE zIuGEQ8/W2D72nTk9IpM+xIBxINVYEt71PzjU3tMka3Cw7IaTb6+dSlE/v0K0TFk xYFf117UaneJdqXLoDWGiAzrIPQXSX+hTAxVgFZbTXbpAL2lI/6iZX2vPtdy6Sca +pu2IleY1SYrW+AVVdY/nu7GN0RILXzxruPJXBp2OosEtCqN7fv61J3TdTDxd+gB oe8lTFcptPhFfWwOU0EOy8Khtj1y7eeqLi3eCdJ7lKGOssobx/xDgP3i9ecIesOA vQUkOpdk2A2Qm3eDRX988CE7W1lY7wJwnsB+ctCcU1+bsgLLNhGPUQkqi/kRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrAGvGeqAdR8404uVGMIThhDHkcQwHwYDVR0j BBgwFoAUUo+3OJFI+ZYb4HVkobzCjeFECVQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTUzMTM5My8wLzUyOEZCNzM4OTE0OEY5OTYxQkUwNzU2NEExQkND MjhERTE0NDA5NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERFMTQ0MDk1NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE1MzEzOTMvMC81MjhGQjczODkxNDhG OTk2MUJFMDc1NjRBMUJDQzI4REUxNDQwOTU0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYGpq2yR4mVS bLGAgl6Z94jGeSKJ3fIFQLQxs+UqHCwwFo4fttv0nz1uLBgaFtTA1fekoG0BJQSG BhSE9WD8He7hFFvN4pbazsyDvqqyK1Q2XWdOL2K4hDJReLGKw3Be/bhdDRbaK86F aDFkMP8W/9K7CyDvd+b0JuVDNczSu1IvH0hYaUCsKX7ayXSF9/MdEVTRJQSlVRDG afdzJUkwhON+LiEZj0fqXrm3U4lIhtW0wS8Xtv/yT41ALWhzIPav1RT0Sj7pKsLT /68E/HrXTXF1npyqm8kBJoGYl3cHDZ7Er5AfpSHSlUG5J/PSSqODhQ3ROkdTYEHP 4LFR5o+vJw== -----END CERTIFICATE-----Generated at Sat May 16 22:42:20 2026 by rpki-client