$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft File: 528FB7389148F9961BE07564A1BCC28DE1440954.mft (raw, json) Hash identifier: pIydHPkMw+Cka7qKpf4g2A2mZrGNy2kbgBSQAGOvDGw= Subject key identifier: E7:12:77:52:86:FF:90:23:9F:99:C4:78:15:2A:14:21:FF:3B:70:25 Authority key identifier: 52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 Certificate issuer: /CN=528FB7389148F9961BE07564A1BCC28DE1440954 Certificate serial: 2194BE5E45DE62076FC818FA8FC03C57EA13548D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft Manifest number: 0116 Signing time: Sat 15 Aug 2026 02:32:54 +0000 Manifest this update: Sat 15 Aug 2026 02:27:54 +0000 Manifest next update: Sun 16 Aug 2026 03:09:54 +0000 Files and hashes: 1: 3130332e3135322e3234372e302f32342d3234203d3e20313532343735.roa (hash: phf4Dfqb5M3Ykxs2j+sNy+Y1lZxL1CrzZ7fuUfc1kQM=) 2: 3130332e3135322e3234372e302f32342d3234203d3e20313335333931.roa (hash: EcqA+WlWeIsBbUwVfChqaarTFSzboqSnaqEftxipkFg=) 3: 528FB7389148F9961BE07564A1BCC28DE1440954.crl (hash: XcqUHwAXyojkHvlAHsTFG1dIR9WQpSX6fdW9pI9D3ZU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 19:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:94:be:5e:45:de:62:07:6f:c8:18:fa:8f:c0:3c:57:ea:13:54:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528FB7389148F9961BE07564A1BCC28DE1440954 Validity Not Before: Aug 15 02:27:54 2026 GMT Not After : Aug 16 03:09:54 2026 GMT Subject: CN=E712775286FF90239F99C478152A1421FF3B7025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:8d:2c:67:b9:89:21:b2:59:65:3c:7f:a3: 3a:23:3e:fa:a3:1b:fb:cb:14:a1:b8:56:d6:28:36: a7:37:57:31:75:3d:1d:24:80:f2:ed:02:3e:a1:c4: 51:53:ca:7c:88:30:d4:02:b9:34:8d:9f:d2:68:ce: 8b:51:fe:36:fb:97:d1:85:78:a7:65:07:89:d9:40: 27:ef:f7:27:16:f0:b3:24:5d:12:76:eb:af:49:bd: 47:08:ef:85:4b:4e:02:dc:50:16:ca:71:f8:8d:98: bd:30:9c:2a:71:aa:06:e9:10:30:e4:15:8c:1e:e6: 7e:d6:02:81:57:e0:f6:1b:a2:4a:38:a4:f4:85:3b: ee:43:9d:84:39:6d:6c:f5:9c:86:ec:a2:9c:bd:88: b9:b4:19:1a:94:d3:3a:35:36:ff:df:e2:16:c3:73: 8e:ee:15:ba:47:06:97:5b:9b:0e:e8:c4:bc:e4:b8: 8f:4b:51:ea:44:4c:0e:5b:6d:de:1b:0e:16:90:84: a2:42:e5:3e:95:35:23:a3:ec:b0:88:16:3d:ea:51: 54:c8:dd:1d:40:4e:16:5f:47:3d:e5:0e:cf:d5:71: 95:ea:eb:a2:e5:7d:bf:1b:dc:e2:e4:4b:01:fa:d4: e2:94:a1:02:aa:5b:98:16:ab:cb:eb:72:8a:5b:9c: a6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:12:77:52:86:FF:90:23:9F:99:C4:78:15:2A:14:21:FF:3B:70:25 X509v3 Authority Key Identifier: keyid:52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:f3:34:b1:66:dd:23:9a:7d:a4:23:04:a0:88:79:b0:1f:05: 65:d4:ef:c5:73:31:d9:fa:69:3c:da:5d:2e:dd:17:17:9b:59: 1c:bd:d2:e5:e2:6e:19:62:a4:34:df:9f:e1:f8:d6:03:c3:d4: 7e:5c:79:d0:1b:72:c5:61:eb:6f:67:6e:f6:b5:2b:45:ce:0d: 19:29:f5:21:19:60:fd:50:43:bc:84:7e:14:cc:d1:70:84:61: b1:a8:58:f3:ce:b6:c5:4a:64:93:40:82:d5:b6:99:dc:47:f4: d2:80:f1:3d:29:cb:7c:6e:77:2c:39:d0:d4:12:66:b2:c5:7d: 13:6f:50:46:f8:db:41:2e:ee:d7:70:76:8c:f4:b5:84:f3:91: 02:5c:3e:70:06:04:d6:b4:4a:41:9d:22:9c:7f:e1:e8:56:3d: 7c:57:43:95:e2:ad:a3:b9:26:06:ec:76:d4:c1:e3:d0:f9:59: 10:ed:c1:a9:b3:32:3e:f9:a4:bd:6b:d6:8c:d4:2f:99:4f:30: 88:36:14:ed:ca:34:0f:a2:0d:c9:b3:e2:ba:0c:43:61:d3:4f: fe:8c:04:cd:4d:12:7d:fd:96:23:b2:80:9d:08:4d:e8:35:53: d1:b6:22:9e:f2:d1:fc:73:8b:f0:05:a0:34:d2:69:21:69:46: 4a:d4:66:cf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIZS+XkXeYgdvyBj6j8A8V+oTVI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERF MTQ0MDk1NDAeFw0yNjA4MTUwMjI3NTRaFw0yNjA4MTYwMzA5NTRaMDMxMTAvBgNV BAMTKEU3MTI3NzUyODZGRjkwMjM5Rjk5QzQ3ODE1MkExNDIxRkYzQjcwMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC70o0sZ7mJIbJZZTx/ozojPvqj G/vLFKG4VtYoNqc3VzF1PR0kgPLtAj6hxFFTynyIMNQCuTSNn9JozotR/jb7l9GF eKdlB4nZQCfv9ycW8LMkXRJ2669JvUcI74VLTgLcUBbKcfiNmL0wnCpxqgbpEDDk FYwe5n7WAoFX4PYboko4pPSFO+5DnYQ5bWz1nIbsopy9iLm0GRqU0zo1Nv/f4hbD c47uFbpHBpdbmw7oxLzkuI9LUepETA5bbd4bDhaQhKJC5T6VNSOj7LCIFj3qUVTI 3R1AThZfRz3lDs/VcZXq66Llfb8b3OLkSwH61OKUoQKqW5gWq8vrcopbnKbNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5xJ3Uob/kCOfmcR4FSoUIf87cCUwHwYDVR0j BBgwFoAUUo+3OJFI+ZYb4HVkobzCjeFECVQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTUzMTM5My8wLzUyOEZCNzM4OTE0OEY5OTYxQkUwNzU2NEExQkND MjhERTE0NDA5NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERFMTQ0MDk1NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE1MzEzOTMvMC81MjhGQjczODkxNDhG OTk2MUJFMDc1NjRBMUJDQzI4REUxNDQwOTU0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1PM0sWbdI5p9 pCMEoIh5sB8FZdTvxXMx2fppPNpdLt0XF5tZHL3S5eJuGWKkNN+f4fjWA8PUflx5 0BtyxWHrb2du9rUrRc4NGSn1IRlg/VBDvIR+FMzRcIRhsahY8862xUpkk0CC1baZ 3Ef00oDxPSnLfG53LDnQ1BJmssV9E29QRvjbQS7u13B2jPS1hPORAlw+cAYE1rRK QZ0inH/h6FY9fFdDleKto7kmBux21MHj0PlZEO3BqbMyPvmkvWvWjNQvmU8wiDYU 7co0D6INybPiugxDYdNP/owEzU0Sff2WI7KAnQhN6DVT0bYinvLR/HOL8AWgNNJp IWlGStRmzw== -----END CERTIFICATE-----Generated at Sat Aug 15 08:46:18 2026 by rpki-client