$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft File: 28DFD9381458E1E763ECB35799823E4D24EAD13F.mft (raw, json) Hash identifier: r7YbaSH1oRiLWc4+LSSwdQ0nfFjif8iTLJqcjO47rFY= Subject key identifier: 92:BE:28:EF:43:47:E1:AF:3A:F5:17:7F:54:D9:B5:EC:74:C4:AB:50 Authority key identifier: 28:DF:D9:38:14:58:E1:E7:63:EC:B3:57:99:82:3E:4D:24:EA:D1:3F Certificate issuer: /CN=28DFD9381458E1E763ECB35799823E4D24EAD13F Certificate serial: 132DBCDFDA051BC50E510B333763D44413121A11 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft Manifest number: BC Signing time: Tue 27 Oct 2026 23:25:18 +0000 Manifest this update: Tue 27 Oct 2026 23:20:18 +0000 Manifest next update: Sat 31 Oct 2026 00:40:18 +0000 Files and hashes: 1: 28DFD9381458E1E763ECB35799823E4D24EAD13F.crl (hash: sfn4q9OaDBtaWhNKcLh/Ngqv5wjFjLafuRPV4FJnOR8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.crl rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 14:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2d:bc:df:da:05:1b:c5:0e:51:0b:33:37:63:d4:44:13:12:1a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28DFD9381458E1E763ECB35799823E4D24EAD13F Validity Not Before: Oct 27 23:20:18 2026 GMT Not After : Oct 31 00:40:18 2026 GMT Subject: CN=92BE28EF4347E1AF3AF5177F54D9B5EC74C4AB50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:59:1e:29:d4:80:69:67:f0:26:8e:34:49:e4: f7:63:c2:cb:f6:50:fa:c6:3d:0e:37:2d:4d:c8:e4: 30:51:42:5e:5c:5f:dd:5f:fc:7e:3f:35:06:bb:04: 83:89:69:08:41:52:23:01:fc:15:e9:89:06:bf:ce: a7:0e:c4:39:d3:63:03:bc:b0:6b:d6:a5:b8:c2:94: 5e:ad:53:2e:35:7d:6f:50:93:c9:02:95:f9:b4:77: 4c:2c:a5:41:13:0e:38:4d:c8:7a:29:05:95:1a:66: 5b:ab:f1:2b:57:10:32:00:af:99:31:69:0c:b8:40: 99:cc:76:ab:5b:79:72:28:ef:68:e0:c8:1c:a0:f4: 2a:21:93:e3:3c:e2:df:33:25:2e:be:95:fe:d6:e9: 8f:05:87:75:f7:b5:0a:2e:95:0a:18:59:50:58:c0: c4:16:12:6e:99:7c:25:13:01:05:06:aa:c3:18:1f: 78:27:b0:12:4d:a4:ed:61:da:66:73:2c:14:a8:80: 69:20:1a:86:fe:c0:ab:6b:5c:48:1f:7c:80:84:ea: af:6d:7b:36:f4:d4:81:53:46:b8:c9:97:65:37:b5: 0d:c1:df:7c:ab:ea:d6:aa:92:91:34:2e:78:a7:b5: 2a:81:80:01:1c:2a:f7:de:49:bf:9e:b9:c0:ad:e1: 1a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BE:28:EF:43:47:E1:AF:3A:F5:17:7F:54:D9:B5:EC:74:C4:AB:50 X509v3 Authority Key Identifier: keyid:28:DF:D9:38:14:58:E1:E7:63:EC:B3:57:99:82:3E:4D:24:EA:D1:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:fb:d5:41:71:a4:5d:ee:6f:97:b6:29:66:d3:76:32:f5:b3: 0d:91:28:76:fd:4f:6c:0a:6e:59:51:cc:48:51:62:04:15:71: a8:7a:59:93:82:0e:7c:90:f0:74:d8:dd:92:83:ec:b6:01:9d: 8f:5e:87:a8:f5:07:64:c7:8d:cb:87:6c:9b:8a:69:57:73:47: d3:ce:2a:91:1e:8f:10:37:ac:64:cc:95:19:cd:72:f3:32:b6: 05:f2:47:0f:60:07:ea:2d:4a:83:51:35:b5:d0:6a:69:29:b6: 4e:85:19:e7:10:54:f6:d7:d6:49:b3:c1:92:82:0c:c1:2e:a5: da:67:e7:63:34:9b:ec:ea:5e:b8:5c:5c:d2:f3:aa:b9:8f:af: 01:2a:80:cd:96:37:4a:1b:ba:ab:61:b8:6c:64:7c:fe:9f:6a: a8:0c:9b:cd:62:4d:a7:94:0c:89:cf:f7:e5:f0:7b:e5:21:3d: 33:80:ae:36:a1:a5:28:35:41:24:54:d9:cc:d0:cd:d5:9c:4e: 2e:03:a8:b6:ce:05:79:e9:d4:bb:10:52:74:d7:63:68:9d:15: 69:50:fe:9c:0e:e3:97:83:84:90:24:c5:24:6a:5e:d4:b7:91: 92:7e:b4:03:6e:86:ee:7d:17:c6:8a:f6:1d:32:6f:6e:64:9c: 0c:72:2c:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEy2839oFG8UOUQszN2PURBMSGhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhERkQ5MzgxNDU4RTFFNzYzRUNCMzU3OTk4MjNFNEQy NEVBRDEzRjAeFw0yNjEwMjcyMzIwMThaFw0yNjEwMzEwMDQwMThaMDMxMTAvBgNV BAMTKDkyQkUyOEVGNDM0N0UxQUYzQUY1MTc3RjU0RDlCNUVDNzRDNEFCNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxWR4p1IBpZ/AmjjRJ5Pdjwsv2 UPrGPQ43LU3I5DBRQl5cX91f/H4/NQa7BIOJaQhBUiMB/BXpiQa/zqcOxDnTYwO8 sGvWpbjClF6tUy41fW9Qk8kClfm0d0wspUETDjhNyHopBZUaZlur8StXEDIAr5kx aQy4QJnMdqtbeXIo72jgyByg9Cohk+M84t8zJS6+lf7W6Y8Fh3X3tQoulQoYWVBY wMQWEm6ZfCUTAQUGqsMYH3gnsBJNpO1h2mZzLBSogGkgGob+wKtrXEgffICE6q9t ezb01IFTRrjJl2U3tQ3B33yr6taqkpE0LnintSqBgAEcKvfeSb+eucCt4RrvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkr4o70NH4a869Rd/VNm17HTEq1AwHwYDVR0j BBgwFoAUKN/ZOBRY4edj7LNXmYI+TSTq0T8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MjA2NzM4ODE3NTYxMzk1OS8wLzI4REZEOTM4MTQ1OEUxRTc2M0VDQjM1Nzk5ODIz RTREMjRFQUQxM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMjhERkQ5MzgxNDU4RTFFNzYzRUNCMzU3OTk4MjNFNEQyNEVBRDEzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDIwNjczODgxNzU2MTM5NTkvMC8yOERGRDkzODE0NThF MUU3NjNFQ0IzNTc5OTgyM0U0RDI0RUFEMTNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/vVQXGkXe5v l7YpZtN2MvWzDZEodv1PbApuWVHMSFFiBBVxqHpZk4IOfJDwdNjdkoPstgGdj16H qPUHZMeNy4dsm4ppV3NH084qkR6PEDesZMyVGc1y8zK2BfJHD2AH6i1Kg1E1tdBq aSm2ToUZ5xBU9tfWSbPBkoIMwS6l2mfnYzSb7OpeuFxc0vOquY+vASqAzZY3Shu6 q2G4bGR8/p9qqAybzWJNp5QMic/35fB75SE9M4CuNqGlKDVBJFTZzNDN1ZxOLgOo ts4FeenUuxBSdNdjaJ0VaVD+nA7jl4OEkCTFJGpe1LeRkn60A26G7n0Xxor2HTJv bmScDHIsGA== -----END CERTIFICATE-----Generated at Wed Oct 28 02:56:23 2026 by rpki-client