$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft File: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft (raw, json) Hash identifier: W2ic4UaWxRhVnYSaZ7JA0Q7NDUKwFmoq3vE/kFBKul0= Subject key identifier: 58:8F:9C:98:DE:FA:18:B0:E4:58:B3:A0:C2:46:1B:FE:CA:7D:66:15 Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Certificate serial: 6BC65FD726ED25662CED102C3B28638C23C6ABC3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft Manifest number: 0132 Signing time: Wed 29 Jul 2026 09:13:58 +0000 Manifest this update: Wed 29 Jul 2026 09:08:58 +0000 Manifest next update: Thu 30 Jul 2026 13:00:58 +0000 Files and hashes: 1: AS58563.roa (hash: kYInOTPip8w5PslmevGG8vQjhMgGwaKWoF+4hhPIBAc=) 2: AS38283.roa (hash: b+LNtB8BnlfAgJOygGrMMt2yq1yQieV7mM6TBSUOHTg=) 3: AS58466.roa (hash: pNtrvsIxnKSPSR3qrnhNlUDUeD+0ItvWPxCmkPmSobo=) 4: AS134756.roa (hash: R0qO1qhdZDTQtnkct1FnPpedhyffJKgR3uHLGveHyaU=) 5: AS56040.roa (hash: W81Ik1UbVtj0SRWqtC3P7xyEWt3IgDbB4QjgkvOz+tY=) 6: AS23724.roa (hash: W9hq4noVS3K8oFSoam54kFzfyzZ8KLodeD0jWtdBu+E=) 7: AS55967.roa (hash: JWz91HIzRpIvCaetNDaEjl+15GD/QV9ZC2R8TKVFSiA=) 8: AS140903.roa (hash: iyz26ug9khgPrNNhJtEuOhWmlszHQlfbJTsEIMCRpnM=) 9: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl (hash: 2sKsIMSFJfJtAnguEHzKkn2MyLgzXb7Z5r9oMJdbaaE=) 10: AS136958.roa (hash: HEG2G2FDqpPcwg9U+B72KeFsxwTgTK4fYMDfE+rG2vc=) 11: AS38365.roa (hash: GfhbepfPCiBLiW7f7C/pzcTtvnquxDHsuz1kUUcRsRU=) 12: AS38627.roa (hash: nFp+8yml9hkEza1wgfZStNJI0UTaVHYBZwksHuv4bH0=) 13: AS58540.roa (hash: ODEMxdA+rDgGXKZmPBMgK9yomv/d+1QGAeEkWm3Q6yA=) 14: AS4808.roa (hash: nfus4h8QwbxcdSJltah7w99JVhAwpPCoz9XlgVyX9D4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:c6:5f:d7:26:ed:25:66:2c:ed:10:2c:3b:28:63:8c:23:c6:ab:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Validity Not Before: Jul 29 09:08:58 2026 GMT Not After : Jul 30 13:00:58 2026 GMT Subject: CN=588F9C98DEFA18B0E458B3A0C2461BFECA7D6615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:31:a8:78:04:05:2c:8e:6f:c9:e5:2f:00:44: 0a:d5:7a:8b:47:2e:4f:0b:83:9d:67:af:85:99:5e: d8:16:90:2c:b7:91:39:48:b1:e1:66:74:fd:d4:40: 77:dd:2e:18:8a:84:f0:9f:ad:db:41:d1:26:7a:5a: fb:b1:7d:0f:76:45:0d:dd:a4:94:22:a2:0a:1d:84: 8c:02:a9:00:a7:13:01:fd:0b:e2:5c:b5:9e:91:d3: 2c:da:62:56:ae:31:5c:0b:9c:d0:b2:df:ee:b7:9a: 40:c5:70:ba:e2:37:e4:93:8f:50:12:7a:8b:30:d4: d7:08:76:67:7b:c8:ff:3c:c8:30:1e:ca:bc:4f:8d: 3f:5c:e6:d9:fb:12:3f:c6:d0:fb:6a:28:c7:88:02: f6:c3:32:ca:bb:f1:89:41:9b:a7:9d:39:4e:9b:6e: e2:8a:4e:b9:eb:a0:ac:9d:a7:bd:12:c7:cf:82:10: 7f:a6:df:1d:86:db:74:03:6b:06:d7:5c:43:df:05: f7:5e:f2:60:08:31:81:f7:d9:c1:c4:57:32:09:80: 13:ba:18:3b:6b:90:96:c5:bb:73:46:19:3e:11:b6: f2:c0:39:7f:ec:b2:a7:04:e1:5b:54:6d:3a:48:e6: f8:06:a5:1f:93:23:47:9c:54:de:77:0e:5b:a0:94: ed:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8F:9C:98:DE:FA:18:B0:E4:58:B3:A0:C2:46:1B:FE:CA:7D:66:15 X509v3 Authority Key Identifier: keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:cc:61:4a:58:13:09:e3:0f:8e:f3:cc:23:21:07:35:85:85: fe:aa:62:4a:34:86:1f:7d:d2:ce:4c:3d:9a:d7:26:0b:0e:b3: 3d:92:e8:09:c2:ab:3e:0c:ac:86:6d:02:26:5b:1b:ba:53:b9: 44:79:37:33:c9:52:40:08:a2:6f:79:d8:83:1c:71:0a:6a:0e: c7:0a:a5:f1:d7:24:54:e0:11:da:af:84:52:c9:f9:48:79:97: f2:5e:a8:e2:f7:73:07:c0:11:8d:28:cf:cc:44:67:fb:9c:16: a6:e2:3c:90:26:62:ea:26:61:e4:a8:1c:69:8c:6d:9c:a2:8e: 04:80:65:bb:1d:23:c5:09:fe:c9:23:4c:da:0e:ad:b4:3d:42: 8d:10:12:77:b3:3f:a2:3f:92:4d:a8:27:61:e4:48:50:1c:87: 2b:73:20:76:b2:35:09:7d:fa:01:f1:c5:23:cb:b7:80:16:58: a6:0a:a3:3a:c4:0e:db:04:4d:b5:79:66:57:0d:ba:29:2e:f7: 11:6e:a9:3e:81:a8:52:2f:7a:b1:8a:cc:52:8d:d0:36:9f:27: 3d:3c:90:58:fd:dd:f1:51:7c:ba:8a:6b:17:c6:8f:39:24:fa: 69:da:ed:ab:8f:81:52:ed:63:a0:3a:d0:e1:07:78:c8:cc:9b: 20:6a:09:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUa8Zf1ybtJWYs7RAsOyhjjCPGq8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB OEVCQTcwRTAeFw0yNjA3MjkwOTA4NThaFw0yNjA3MzAxMzAwNThaMDMxMTAvBgNV BAMTKDU4OEY5Qzk4REVGQTE4QjBFNDU4QjNBMEMyNDYxQkZFQ0E3RDY2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkMah4BAUsjm/J5S8ARArVeotH Lk8Lg51nr4WZXtgWkCy3kTlIseFmdP3UQHfdLhiKhPCfrdtB0SZ6WvuxfQ92RQ3d pJQiogodhIwCqQCnEwH9C+JctZ6R0yzaYlauMVwLnNCy3+63mkDFcLriN+STj1AS eosw1NcIdmd7yP88yDAeyrxPjT9c5tn7Ej/G0PtqKMeIAvbDMsq78YlBm6edOU6b buKKTrnroKydp70Sx8+CEH+m3x2G23QDawbXXEPfBfde8mAIMYH32cHEVzIJgBO6 GDtrkJbFu3NGGT4RtvLAOX/ssqcE4VtUbTpI5vgGpR+TI0ecVN53DluglO1hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWI+cmN76GLDkWLOgwkYb/sp9ZhUwHwYDVR0j BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxMTM5MjIvMC9BMTk2NzIyMDZBOURB N0RGNDI5NTM2QzlCRkZBREE5NEE4RUJBNzBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcxhSlgTCeMP jvPMIyEHNYWF/qpiSjSGH33Szkw9mtcmCw6zPZLoCcKrPgyshm0CJlsbulO5RHk3 M8lSQAiib3nYgxxxCmoOxwql8dckVOAR2q+EUsn5SHmX8l6o4vdzB8ARjSjPzERn +5wWpuI8kCZi6iZh5KgcaYxtnKKOBIBlux0jxQn+ySNM2g6ttD1CjRASd7M/oj+S TagnYeRIUByHK3MgdrI1CX36AfHFI8u3gBZYpgqjOsQO2wRNtXlmVw26KS73EW6p PoGoUi96sYrMUo3QNp8nPTyQWP3d8VF8uoprF8aPOST6adrtq4+BUu1joDrQ4Qd4 yMybIGoJVw== -----END CERTIFICATE-----Generated at Wed Jul 29 11:04:10 2026 by rpki-client