$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft File: 28DFD9381458E1E763ECB35799823E4D24EAD13F.mft (raw, json) Hash identifier: t7bJ2zXB+mp7iJK6uqb6CuQqZiOke7hVbzGPUy8Frb0= Subject key identifier: E1:AE:70:69:2E:91:7D:CE:1D:62:FE:3F:31:78:50:66:DA:43:40:52 Authority key identifier: 28:DF:D9:38:14:58:E1:E7:63:EC:B3:57:99:82:3E:4D:24:EA:D1:3F Certificate issuer: /CN=28DFD9381458E1E763ECB35799823E4D24EAD13F Certificate serial: 3384FCF50C0C5F5937766BACF4E974350C236F5C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft Manifest number: A4 Signing time: Thu 03 Sep 2026 20:04:00 +0000 Manifest this update: Thu 03 Sep 2026 19:59:00 +0000 Manifest next update: Sun 06 Sep 2026 22:14:00 +0000 Files and hashes: 1: 28DFD9381458E1E763ECB35799823E4D24EAD13F.crl (hash: WVr2cgV+ljBKy526Nsu6I4+1RpIUSs/cCS910LDEj1k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.crl rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 10:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:84:fc:f5:0c:0c:5f:59:37:76:6b:ac:f4:e9:74:35:0c:23:6f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28DFD9381458E1E763ECB35799823E4D24EAD13F Validity Not Before: Sep 3 19:59:00 2026 GMT Not After : Sep 6 22:14:00 2026 GMT Subject: CN=E1AE70692E917DCE1D62FE3F31785066DA434052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3d:eb:76:e2:a6:84:c2:31:aa:81:29:79:8d: 08:ab:93:16:a2:73:34:4c:6c:5d:d6:be:9c:08:cc: 3f:18:a8:8b:5e:42:20:f7:1c:53:ae:85:02:96:35: 9d:76:f7:25:2e:d6:de:21:7f:20:41:1c:7a:10:7f: e0:a2:11:6e:15:c8:e9:c5:e5:7d:3e:86:6e:50:39: 14:20:dd:51:bf:be:10:88:09:d8:36:ce:8d:97:d2: 1a:a2:4e:e9:b7:0c:f7:dd:fb:2e:6e:6f:11:cd:77: c8:dc:d6:f8:3e:ae:fd:0e:5f:6f:91:c4:23:ef:0e: d5:03:7f:a6:36:93:64:f0:d3:9b:cc:02:ca:ed:e7: 85:d8:d0:41:b3:41:16:6d:ef:5d:a5:01:5d:60:10: 7b:8e:01:2c:fa:78:d9:72:a4:cd:4c:37:f6:b2:30: 01:49:fd:a1:51:23:61:94:3f:c4:f3:12:88:31:f4: 50:cd:46:8a:83:1b:66:48:24:be:4b:2a:85:8c:52: 0f:25:a1:de:9c:cd:20:cf:7e:30:f0:06:46:a2:6d: c0:17:98:46:b8:63:1f:5f:46:a8:4c:c1:85:f2:75: b8:11:03:33:92:51:68:48:e8:ad:19:4c:f4:17:10: 45:1e:cd:e8:92:03:f9:2d:ff:63:4b:52:8d:be:c1: 91:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AE:70:69:2E:91:7D:CE:1D:62:FE:3F:31:78:50:66:DA:43:40:52 X509v3 Authority Key Identifier: keyid:28:DF:D9:38:14:58:E1:E7:63:EC:B3:57:99:82:3E:4D:24:EA:D1:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e4:a3:a4:cb:22:71:21:64:2e:7d:66:cd:08:a5:33:d7:14: d0:4e:a5:71:4b:99:6a:ab:1d:bf:21:8b:e0:2e:29:4f:6f:4d: 98:c4:5c:86:38:6f:2d:4a:2e:cb:bd:9f:59:b0:31:ee:97:fe: 3a:89:3f:22:85:c8:8a:90:0a:b3:a1:79:6a:dc:9c:9c:c7:18: 97:5e:ea:01:ab:a7:77:0d:90:d1:5b:b6:b0:08:88:14:be:52: 56:a4:5a:43:55:c9:a7:9c:2a:cb:28:90:a8:c7:16:66:29:32: 9d:6f:7b:f8:4d:60:f3:8f:14:3f:ba:f5:b7:67:77:f4:81:78: 36:07:81:5b:e7:16:15:a4:c8:4e:79:be:63:ea:68:4c:16:30: 5d:03:13:2e:20:c6:52:ba:b5:b5:2a:c8:a7:67:8f:73:00:f1: c0:3e:59:57:50:8f:4d:3c:ae:41:dc:5a:97:1f:f9:3f:c0:be: 89:b5:ff:3c:a3:e2:62:c0:f7:41:87:0c:d2:77:2f:fb:1f:dc: 72:32:ec:6d:4d:7d:5e:50:4d:8b:18:e6:e8:a3:12:14:5b:d0: dc:a2:fe:37:9c:a3:58:c8:92:63:d1:9e:b0:04:9b:d7:da:34: 3d:af:2c:5d:91:06:ec:7f:9e:68:cb:fd:7b:bc:40:7d:bb:4b: eb:81:b9:0d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM4T89QwMX1k3dmus9Ol0NQwjb1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhERkQ5MzgxNDU4RTFFNzYzRUNCMzU3OTk4MjNFNEQy NEVBRDEzRjAeFw0yNjA5MDMxOTU5MDBaFw0yNjA5MDYyMjE0MDBaMDMxMTAvBgNV BAMTKEUxQUU3MDY5MkU5MTdEQ0UxRDYyRkUzRjMxNzg1MDY2REE0MzQwNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiPet24qaEwjGqgSl5jQirkxai czRMbF3WvpwIzD8YqIteQiD3HFOuhQKWNZ129yUu1t4hfyBBHHoQf+CiEW4VyOnF 5X0+hm5QORQg3VG/vhCICdg2zo2X0hqiTum3DPfd+y5ubxHNd8jc1vg+rv0OX2+R xCPvDtUDf6Y2k2Tw05vMAsrt54XY0EGzQRZt712lAV1gEHuOASz6eNlypM1MN/ay MAFJ/aFRI2GUP8TzEogx9FDNRoqDG2ZIJL5LKoWMUg8lod6czSDPfjDwBkaibcAX mEa4Yx9fRqhMwYXydbgRAzOSUWhI6K0ZTPQXEEUezeiSA/kt/2NLUo2+wZFFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4a5waS6Rfc4dYv4/MXhQZtpDQFIwHwYDVR0j BBgwFoAUKN/ZOBRY4edj7LNXmYI+TSTq0T8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MjA2NzM4ODE3NTYxMzk1OS8wLzI4REZEOTM4MTQ1OEUxRTc2M0VDQjM1Nzk5ODIz RTREMjRFQUQxM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMjhERkQ5MzgxNDU4RTFFNzYzRUNCMzU3OTk4MjNFNEQyNEVBRDEzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDIwNjczODgxNzU2MTM5NTkvMC8yOERGRDkzODE0NThF MUU3NjNFQ0IzNTc5OTgyM0U0RDI0RUFEMTNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+SjpMsicSFk Ln1mzQilM9cU0E6lcUuZaqsdvyGL4C4pT29NmMRchjhvLUouy72fWbAx7pf+Ook/ IoXIipAKs6F5atycnMcYl17qAaundw2Q0Vu2sAiIFL5SVqRaQ1XJp5wqyyiQqMcW ZikynW97+E1g848UP7r1t2d39IF4NgeBW+cWFaTITnm+Y+poTBYwXQMTLiDGUrq1 tSrIp2ePcwDxwD5ZV1CPTTyuQdxalx/5P8C+ibX/PKPiYsD3QYcM0ncv+x/ccjLs bU19XlBNixjm6KMSFFvQ3KL+N5yjWMiSY9GesASb19o0Pa8sXZEG7H+eaMv9e7xA fbtL64G5DQ== -----END CERTIFICATE-----Generated at Sat Sep 5 09:41:54 2026 by rpki-client