$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft File: 28DFD9381458E1E763ECB35799823E4D24EAD13F.mft (raw, json) Hash identifier: 3LrFRuuve5A99IiAEKFkpatpI3zxXzmP/XUYg8afuAs= Subject key identifier: E9:26:F0:45:39:47:39:64:B6:E6:CE:F6:92:93:46:9F:CB:EA:38:2D Authority key identifier: 28:DF:D9:38:14:58:E1:E7:63:EC:B3:57:99:82:3E:4D:24:EA:D1:3F Certificate issuer: /CN=28DFD9381458E1E763ECB35799823E4D24EAD13F Certificate serial: 6A56D99B33905282AECA6F064643F372C21568A2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft Manifest number: 2F Signing time: Wed 03 Jun 2026 23:44:01 +0000 Manifest this update: Wed 03 Jun 2026 23:39:01 +0000 Manifest next update: Fri 05 Jun 2026 03:15:01 +0000 Files and hashes: 1: 28DFD9381458E1E763ECB35799823E4D24EAD13F.crl (hash: p+629gWW8ovxoLFixHepztQZZM4Hi/wwWJ3zcpzXj40=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.crl rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 03:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:56:d9:9b:33:90:52:82:ae:ca:6f:06:46:43:f3:72:c2:15:68:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28DFD9381458E1E763ECB35799823E4D24EAD13F Validity Not Before: Jun 3 23:39:01 2026 GMT Not After : Jun 5 03:15:01 2026 GMT Subject: CN=E926F04539473964B6E6CEF69293469FCBEA382D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:cf:30:89:ea:29:81:7b:0b:2f:b9:f7:6b: 80:30:d8:ec:11:73:33:7c:c5:86:d7:c2:74:12:2a: 42:70:75:bb:98:cf:26:b4:cc:aa:22:c3:ab:46:25: 98:ae:80:d6:77:3a:8d:f5:ae:60:2e:4b:b9:e6:c2: 10:2b:de:20:f9:d0:4c:8b:ac:36:39:6d:83:db:95: 09:3f:39:31:7c:5e:99:34:bd:7a:06:5d:82:81:54: fd:df:3c:67:2b:5d:a5:ba:fe:70:c9:60:db:9b:b4: eb:b2:6c:46:b5:b2:1e:47:3d:55:81:44:12:5d:5d: 31:99:e2:a3:20:14:6b:b8:27:5f:92:82:dd:33:73: 0b:84:20:b3:44:93:83:9b:eb:68:de:3c:19:c2:0d: 4a:ef:d3:7a:59:b0:7c:0a:06:05:08:2f:9b:6e:32: 29:79:8c:a4:da:70:c6:7f:23:46:c2:80:2a:50:61: ac:3e:31:d3:77:28:b5:4d:ad:fb:f4:95:18:03:96: 28:8d:c9:a8:13:32:64:60:7d:6e:0d:bb:30:48:28: 58:90:73:63:53:16:14:d4:e4:a4:f7:2c:6d:8d:96: 07:2b:05:b4:b9:f5:8b:ea:0b:c0:ac:09:dc:84:2c: dc:a3:d1:a0:66:3d:9d:8c:7e:30:9b:eb:13:3d:1a: a8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:26:F0:45:39:47:39:64:B6:E6:CE:F6:92:93:46:9F:CB:EA:38:2D X509v3 Authority Key Identifier: keyid:28:DF:D9:38:14:58:E1:E7:63:EC:B3:57:99:82:3E:4D:24:EA:D1:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:4b:fe:63:b0:cb:7a:a7:14:e5:5c:4e:49:90:28:c0:d0:17: f3:3d:b4:da:21:4b:21:e2:f9:de:69:9f:a3:a5:3c:e6:fa:33: d3:fd:d4:10:ee:b2:f2:16:c4:a8:eb:d7:0c:b8:dc:a0:5b:e5: b2:6f:67:35:a1:a5:92:6d:1b:5a:99:73:23:a2:f3:87:4c:ea: 98:8d:42:77:3d:89:9c:aa:9d:b8:3d:97:4f:72:6a:ae:30:87: 1a:78:2e:f1:40:51:69:88:c5:ae:fe:4d:df:dd:9e:74:a9:b7: 9b:ef:37:a9:ea:78:39:6f:ee:fe:08:d5:b5:7d:af:11:24:a6: d0:cd:91:38:e5:26:99:f0:e6:67:08:ee:5e:e0:fd:0d:43:da: 82:43:2f:48:a6:14:78:70:4a:80:e0:e8:0b:fd:f5:22:38:8d: a9:dd:68:ef:51:c1:9b:87:a1:64:c8:32:d9:88:87:35:97:d0: 97:cf:2e:9d:3c:61:7a:73:e5:8a:00:f9:e0:0d:f6:a7:c0:f3: f9:60:29:2b:92:8d:9c:54:d3:81:43:ca:e2:ad:2b:76:de:f7: 0f:00:72:b4:17:1d:23:97:c6:2d:24:ca:23:1e:5a:1f:2c:6e: 5f:a7:67:6e:22:df:2a:40:99:c2:07:d4:7a:05:f3:00:6f:83: 27:e9:57:d1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUalbZmzOQUoKuym8GRkPzcsIVaKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhERkQ5MzgxNDU4RTFFNzYzRUNCMzU3OTk4MjNFNEQy NEVBRDEzRjAeFw0yNjA2MDMyMzM5MDFaFw0yNjA2MDUwMzE1MDFaMDMxMTAvBgNV BAMTKEU5MjZGMDQ1Mzk0NzM5NjRCNkU2Q0VGNjkyOTM0NjlGQ0JFQTM4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0z88wieopgXsLL7n3a4Aw2OwR czN8xYbXwnQSKkJwdbuYzya0zKoiw6tGJZiugNZ3Oo31rmAuS7nmwhAr3iD50EyL rDY5bYPblQk/OTF8Xpk0vXoGXYKBVP3fPGcrXaW6/nDJYNubtOuybEa1sh5HPVWB RBJdXTGZ4qMgFGu4J1+Sgt0zcwuEILNEk4Ob62jePBnCDUrv03pZsHwKBgUIL5tu Mil5jKTacMZ/I0bCgCpQYaw+MdN3KLVNrfv0lRgDliiNyagTMmRgfW4NuzBIKFiQ c2NTFhTU5KT3LG2NlgcrBbS59YvqC8CsCdyELNyj0aBmPZ2MfjCb6xM9GqjdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6SbwRTlHOWS25s72kpNGn8vqOC0wHwYDVR0j BBgwFoAUKN/ZOBRY4edj7LNXmYI+TSTq0T8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MjA2NzM4ODE3NTYxMzk1OS8wLzI4REZEOTM4MTQ1OEUxRTc2M0VDQjM1Nzk5ODIz RTREMjRFQUQxM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMjhERkQ5MzgxNDU4RTFFNzYzRUNCMzU3OTk4MjNFNEQyNEVBRDEzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDIwNjczODgxNzU2MTM5NTkvMC8yOERGRDkzODE0NThF MUU3NjNFQ0IzNTc5OTgyM0U0RDI0RUFEMTNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUv+Y7DLeqcU 5VxOSZAowNAX8z202iFLIeL53mmfo6U85voz0/3UEO6y8hbEqOvXDLjcoFvlsm9n NaGlkm0bWplzI6Lzh0zqmI1Cdz2JnKqduD2XT3JqrjCHGngu8UBRaYjFrv5N392e dKm3m+83qep4OW/u/gjVtX2vESSm0M2ROOUmmfDmZwjuXuD9DUPagkMvSKYUeHBK gODoC/31IjiNqd1o71HBm4ehZMgy2YiHNZfQl88unTxhenPligD54A32p8Dz+WAp K5KNnFTTgUPK4q0rdt73DwBytBcdI5fGLSTKIx5aHyxuX6dnbiLfKkCZwgfUegXz AG+DJ+lX0Q== -----END CERTIFICATE-----Generated at Thu Jun 4 15:07:02 2026 by rpki-client