$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft File: 192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft (raw, json) Hash identifier: IU/emcLzV9m5j48PKew5r+adfeKqfvCioFGxUKJtfXA= Subject key identifier: BD:A4:C1:A7:1E:AE:41:C0:B1:71:D4:4E:48:D7:0A:D3:BA:63:04:C8 Authority key identifier: 19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84 Certificate issuer: /CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184 Certificate serial: 58B952BF1BE1359ADD35F88C53AE61F3B4937D7F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft Manifest number: 0168 Signing time: Fri 16 Oct 2026 09:07:23 +0000 Manifest this update: Fri 16 Oct 2026 09:02:23 +0000 Manifest next update: Mon 19 Oct 2026 12:21:23 +0000 Files and hashes: 1: AS9812.roa (hash: TCsU4/hp59fDHvgCzxIh3dSpRzRqD4Ky9FA7aHqLkjQ=) 2: 192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl (hash: c6ubFS039QSgLz6Hl2G443iBFB07OPPJAnekd0TjAn0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b9:52:bf:1b:e1:35:9a:dd:35:f8:8c:53:ae:61:f3:b4:93:7d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184 Validity Not Before: Oct 16 09:02:23 2026 GMT Not After : Oct 19 12:21:23 2026 GMT Subject: CN=BDA4C1A71EAE41C0B171D44E48D70AD3BA6304C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:ca:9f:d0:97:66:3b:26:ef:21:c1:47:ad: 9c:d7:1d:1c:72:2b:c8:5f:aa:6d:f1:06:f1:0c:71: cb:4d:7e:24:dd:bc:4f:d1:e4:55:ad:5f:ff:5b:1e: 68:fc:67:20:b1:cc:1c:36:c8:50:d9:a1:db:32:14: 71:34:19:52:3b:26:41:74:38:b6:a1:63:e4:7d:94: 2c:0f:9a:ab:57:fd:ff:b5:ee:87:cd:3a:88:15:26: 99:09:0f:80:f5:24:fd:18:17:e6:67:11:9a:12:4a: 6a:6c:80:6b:d7:d3:34:0a:cb:34:23:3f:f7:2c:ef: e2:ba:b3:d3:5d:da:fc:30:f3:35:7b:b3:5a:a4:97: d3:34:bb:0f:e4:e1:12:62:8d:ab:e9:84:be:af:96: 7f:53:62:87:22:b1:ef:4b:5b:dc:70:30:43:b2:04: 64:49:5e:18:e7:93:d5:ac:6b:7a:4c:33:04:7e:85: 6a:d6:25:c7:e9:1e:ee:0b:8d:4b:4f:de:bb:f2:a1: 28:8f:61:91:b2:9f:ff:b8:83:13:4a:10:c3:5c:50: 93:43:cc:fc:97:83:83:33:83:b0:81:7a:52:9d:53: 02:56:af:35:eb:77:66:88:37:cc:a5:aa:50:78:a6: 39:98:c0:f7:ca:ce:86:7c:e8:5d:45:c5:4d:b1:34: a2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A4:C1:A7:1E:AE:41:C0:B1:71:D4:4E:48:D7:0A:D3:BA:63:04:C8 X509v3 Authority Key Identifier: keyid:19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d2:ee:1e:9f:5e:e6:b0:30:ca:00:9a:ec:5f:d2:fd:fb:77: c8:59:69:b9:44:f8:7b:79:dc:e1:ee:0f:a3:da:36:d6:52:21: 4c:c1:05:3c:bc:15:df:37:6e:d1:0b:6a:01:a5:27:d0:50:e4: f9:a3:f8:85:96:97:fb:07:b3:a8:ef:c8:71:f1:79:76:60:51: 00:d7:af:28:51:22:21:13:01:12:e1:78:77:7c:78:dc:7e:8e: c9:ee:3c:88:ec:b0:aa:3a:b2:9a:b9:e7:07:29:fd:85:34:0b: 90:87:7d:f7:07:b1:66:b5:4f:24:59:89:b4:84:08:f8:2d:77: 23:af:46:df:aa:51:20:42:03:67:1a:ca:d4:de:99:1a:ee:3e: 89:15:e1:76:7f:56:e0:db:51:cd:67:ed:9b:55:70:07:8f:0f: d3:34:d1:2a:28:21:77:29:aa:32:e5:dd:8f:af:21:0b:c7:9f: 40:47:65:43:df:21:5f:48:3e:72:01:a1:ed:23:d8:78:7c:d3: f8:2d:9b:ec:6b:e0:63:a9:ea:18:d0:3d:9b:86:c7:67:a3:41: 55:b1:cf:72:86:9d:98:ff:cf:a8:ab:71:04:71:70:61:0b:3e: 4d:8b:93:4a:f9:d1:89:e6:fa:a4:4f:80:db:f0:7b:91:43:43: c8:19:95:f8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWLlSvxvhNZrdNfiMU65h87STfX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkyQTI0NEQ3MDBCRkQ0OEUzNThFMkIyMUNCMUJBN0Ez QTVGQjE4NDAeFw0yNjEwMTYwOTAyMjNaFw0yNjEwMTkxMjIxMjNaMDMxMTAvBgNV BAMTKEJEQTRDMUE3MUVBRTQxQzBCMTcxRDQ0RTQ4RDcwQUQzQkE2MzA0QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzUMqf0JdmOybvIcFHrZzXHRxy K8hfqm3xBvEMcctNfiTdvE/R5FWtX/9bHmj8ZyCxzBw2yFDZodsyFHE0GVI7JkF0 OLahY+R9lCwPmqtX/f+17ofNOogVJpkJD4D1JP0YF+ZnEZoSSmpsgGvX0zQKyzQj P/cs7+K6s9Nd2vww8zV7s1qkl9M0uw/k4RJijavphL6vln9TYocise9LW9xwMEOy BGRJXhjnk9Wsa3pMMwR+hWrWJcfpHu4LjUtP3rvyoSiPYZGyn/+4gxNKEMNcUJND zPyXg4Mzg7CBelKdUwJWrzXrd2aIN8ylqlB4pjmYwPfKzoZ86F1FxU2xNKKvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvaTBpx6uQcCxcdROSNcK07pjBMgwHwYDVR0j BBgwFoAUGSokTXAL/UjjWOKyHLG6ejpfsYQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0MjkxNzYzMy8wLzE5MkEyNDRENzAwQkZENDhFMzU4RTJCMjFDQjFC QTdBM0E1RkIxODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTkyQTI0NEQ3MDBCRkQ0OEUzNThFMkIyMUNCMUJBN0EzQTVGQjE4NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI5MTc2MzMvMC8xOTJBMjQ0RDcwMEJG RDQ4RTM1OEUyQjIxQ0IxQkE3QTNBNUZCMTg0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtLuHp9e5rAw ygCa7F/S/ft3yFlpuUT4e3nc4e4Po9o21lIhTMEFPLwV3zdu0QtqAaUn0FDk+aP4 hZaX+wezqO/IcfF5dmBRANevKFEiIRMBEuF4d3x43H6Oye48iOywqjqymrnnByn9 hTQLkId99wexZrVPJFmJtIQI+C13I69G36pRIEIDZxrK1N6ZGu4+iRXhdn9W4NtR zWftm1VwB48P0zTRKighdymqMuXdj68hC8efQEdlQ98hX0g+cgGh7SPYeHzT+C2b 7GvgY6nqGNA9m4bHZ6NBVbHPcoadmP/PqKtxBHFwYQs+TYuTSvnRieb6pE+A2/B7 kUNDyBmV+A== -----END CERTIFICATE-----Generated at Fri Oct 16 16:48:25 2026 by rpki-client