$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft File: 528FB7389148F9961BE07564A1BCC28DE1440954.mft (raw, json) Hash identifier: mwA9kl0tyEI23BSJuMb4WN+i0HPbS5R/G7RiJnbgA4s= Subject key identifier: 9B:22:5D:AD:DA:C4:FC:9F:47:C7:F3:52:A1:E6:AE:13:1C:31:92:8D Authority key identifier: 52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 Certificate issuer: /CN=528FB7389148F9961BE07564A1BCC28DE1440954 Certificate serial: 61E14F57045E2AA77FEA1C7022A5B44042C97F83 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft Manifest number: 5E Signing time: Sun 29 Mar 2026 20:38:32 +0000 Manifest this update: Sun 29 Mar 2026 20:33:32 +0000 Manifest next update: Mon 30 Mar 2026 23:07:32 +0000 Files and hashes: 1: 528FB7389148F9961BE07564A1BCC28DE1440954.crl (hash: jHKrmBH5W8HEQWgXzfTR87CIk1FLnIQm88DVUz/Hurg=) 2: 3130332e3135322e3234372e302f32342d3234203d3e20313532343735.roa (hash: phf4Dfqb5M3Ykxs2j+sNy+Y1lZxL1CrzZ7fuUfc1kQM=) 3: 3130332e3135322e3234372e302f32342d3234203d3e20313335333931.roa (hash: EcqA+WlWeIsBbUwVfChqaarTFSzboqSnaqEftxipkFg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 10:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e1:4f:57:04:5e:2a:a7:7f:ea:1c:70:22:a5:b4:40:42:c9:7f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528FB7389148F9961BE07564A1BCC28DE1440954 Validity Not Before: Mar 29 20:33:32 2026 GMT Not After : Mar 30 23:07:32 2026 GMT Subject: CN=9B225DADDAC4FC9F47C7F352A1E6AE131C31928D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cb:df:a1:f4:7b:64:f3:f6:73:09:7b:62:15: c6:e2:a3:fa:0c:64:6c:a0:63:5a:f5:0a:c9:c2:63: 32:05:e2:01:87:94:69:1d:35:3a:19:98:a8:aa:78: f0:31:4e:e9:8b:19:e2:65:13:a8:3c:8c:b9:ef:3e: 3d:78:78:ea:f9:2b:30:34:ae:60:d6:33:c8:60:14: 3f:4b:6c:65:b0:b0:b9:88:fe:19:f6:c4:87:a2:25: b7:8f:f5:94:06:21:72:56:8d:3c:0e:79:98:fe:02: 25:40:fc:5b:e5:4f:9b:21:10:1b:36:e4:7d:6b:c3: 7a:d4:7a:0e:a9:98:2b:9b:d7:1a:e0:df:c0:36:77: 9d:e5:b1:e3:2a:a7:d4:6a:f8:ae:b0:57:bf:98:7f: b4:33:27:48:46:3d:57:e4:4f:84:4b:79:f3:0b:ce: 15:f9:a2:9e:8a:38:49:d0:a1:b5:3c:6b:51:20:75: d6:42:b3:25:1f:cc:f7:4f:97:f2:19:98:15:92:e5: 48:a4:4c:d9:62:f5:a0:46:8d:79:02:35:f3:14:f7: 15:63:09:07:25:3e:56:ea:ea:37:61:ed:a9:7b:49: f2:85:c1:2b:c2:3d:a0:2d:d8:65:8f:f6:36:cc:ec: 91:04:c2:1f:ea:39:81:8c:98:fc:59:a4:ca:e0:3f: 7a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:22:5D:AD:DA:C4:FC:9F:47:C7:F3:52:A1:E6:AE:13:1C:31:92:8D X509v3 Authority Key Identifier: keyid:52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:db:ab:4b:6d:fb:2b:ae:25:45:59:5f:2b:84:24:a2:fa:a4: a9:8b:4a:16:bf:56:df:28:b1:7f:97:37:8d:d3:0f:cf:15:97: 93:61:29:7a:3c:c5:63:38:cf:f4:74:22:32:c4:40:50:da:d0: 1e:c8:8e:54:61:9f:59:5c:d0:a8:d9:4d:ec:a4:bb:8a:ed:df: 6b:94:96:6e:5b:ce:31:59:43:20:93:e1:46:b3:30:98:a7:28: 52:5a:55:55:03:6f:a4:bb:44:8b:1d:26:3a:17:0c:26:9c:19: 0b:0e:b0:24:f6:f5:d4:cf:c2:5b:e8:24:b1:e1:5f:b6:01:c3: 6b:c0:d1:c9:41:44:a1:f9:f8:aa:e6:98:7a:72:16:00:06:1b: f7:5e:30:11:b9:ee:97:21:da:ba:b6:c3:86:9c:ec:21:ac:b8: ad:85:6b:55:f0:1d:78:32:fc:a6:95:48:84:c5:fa:6b:c7:05: ba:68:cc:74:18:97:eb:37:cb:0c:ea:93:30:75:de:ea:94:a9: 3a:d8:0b:bf:dd:a9:6a:d5:7b:25:ed:38:6b:0a:9e:d4:61:a4: ca:86:66:ee:77:7e:4f:75:7c:8e:45:fa:f9:db:87:29:a5:1f: 92:0f:6a:4c:a6:a9:8d:49:b5:38:31:6b:e2:27:cd:aa:d5:10: 80:a5:ca:d8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYeFPVwReKqd/6hxwIqW0QELJf4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERF MTQ0MDk1NDAeFw0yNjAzMjkyMDMzMzJaFw0yNjAzMzAyMzA3MzJaMDMxMTAvBgNV BAMTKDlCMjI1REFEREFDNEZDOUY0N0M3RjM1MkExRTZBRTEzMUMzMTkyOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+y9+h9Htk8/ZzCXtiFcbio/oM ZGygY1r1CsnCYzIF4gGHlGkdNToZmKiqePAxTumLGeJlE6g8jLnvPj14eOr5KzA0 rmDWM8hgFD9LbGWwsLmI/hn2xIeiJbeP9ZQGIXJWjTwOeZj+AiVA/FvlT5shEBs2 5H1rw3rUeg6pmCub1xrg38A2d53lseMqp9Rq+K6wV7+Yf7QzJ0hGPVfkT4RLefML zhX5op6KOEnQobU8a1EgddZCsyUfzPdPl/IZmBWS5UikTNli9aBGjXkCNfMU9xVj CQclPlbq6jdh7al7SfKFwSvCPaAt2GWP9jbM7JEEwh/qOYGMmPxZpMrgP3orAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmyJdrdrE/J9Hx/NSoeauExwxko0wHwYDVR0j BBgwFoAUUo+3OJFI+ZYb4HVkobzCjeFECVQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTUzMTM5My8wLzUyOEZCNzM4OTE0OEY5OTYxQkUwNzU2NEExQkND MjhERTE0NDA5NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERFMTQ0MDk1NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE1MzEzOTMvMC81MjhGQjczODkxNDhG OTk2MUJFMDc1NjRBMUJDQzI4REUxNDQwOTU0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNurS237K64l RVlfK4QkovqkqYtKFr9W3yixf5c3jdMPzxWXk2EpejzFYzjP9HQiMsRAUNrQHsiO VGGfWVzQqNlN7KS7iu3fa5SWblvOMVlDIJPhRrMwmKcoUlpVVQNvpLtEix0mOhcM JpwZCw6wJPb11M/CW+gkseFftgHDa8DRyUFEofn4quaYenIWAAYb914wEbnulyHa urbDhpzsIay4rYVrVfAdeDL8ppVIhMX6a8cFumjMdBiX6zfLDOqTMHXe6pSpOtgL v92patV7Je04awqe1GGkyoZm7nd+T3V8jkX6+duHKaUfkg9qTKapjUm1ODFr4ifN qtUQgKXK2A== -----END CERTIFICATE-----Generated at Mon Mar 30 01:53:34 2026 by rpki-client