$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft File: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft (raw, json) Hash identifier: UHpu5K9LkzWmpjgjH3TQ/KD+cPX7aLlu4cuGb973Ao0= Subject key identifier: F3:75:EE:CD:25:9E:89:C4:CE:64:84:16:3D:6A:60:B4:E8:F5:05:4A Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Certificate serial: 46D79642429A0A60545E0CAC731CD2D6C41FC084 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft Manifest number: 016D Signing time: Sun 11 Oct 2026 09:20:27 +0000 Manifest this update: Sun 11 Oct 2026 09:15:27 +0000 Manifest next update: Wed 14 Oct 2026 16:22:27 +0000 Files and hashes: 1: AS58540.roa (hash: ODEMxdA+rDgGXKZmPBMgK9yomv/d+1QGAeEkWm3Q6yA=) 2: AS38627.roa (hash: nFp+8yml9hkEza1wgfZStNJI0UTaVHYBZwksHuv4bH0=) 3: AS140903.roa (hash: iyz26ug9khgPrNNhJtEuOhWmlszHQlfbJTsEIMCRpnM=) 4: AS38365.roa (hash: GfhbepfPCiBLiW7f7C/pzcTtvnquxDHsuz1kUUcRsRU=) 5: AS134756.roa (hash: R0qO1qhdZDTQtnkct1FnPpedhyffJKgR3uHLGveHyaU=) 6: AS136958.roa (hash: HEG2G2FDqpPcwg9U+B72KeFsxwTgTK4fYMDfE+rG2vc=) 7: AS23724.roa (hash: W9hq4noVS3K8oFSoam54kFzfyzZ8KLodeD0jWtdBu+E=) 8: AS58563.roa (hash: kYInOTPip8w5PslmevGG8vQjhMgGwaKWoF+4hhPIBAc=) 9: AS4808.roa (hash: nfus4h8QwbxcdSJltah7w99JVhAwpPCoz9XlgVyX9D4=) 10: AS38283.roa (hash: b+LNtB8BnlfAgJOygGrMMt2yq1yQieV7mM6TBSUOHTg=) 11: AS56040.roa (hash: W81Ik1UbVtj0SRWqtC3P7xyEWt3IgDbB4QjgkvOz+tY=) 12: AS55967.roa (hash: JWz91HIzRpIvCaetNDaEjl+15GD/QV9ZC2R8TKVFSiA=) 13: AS58466.roa (hash: pNtrvsIxnKSPSR3qrnhNlUDUeD+0ItvWPxCmkPmSobo=) 14: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl (hash: fHU5/yHKhYlsqYm3Wyb1y+Wvn1xpG3xTqI57h9g0LgE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d7:96:42:42:9a:0a:60:54:5e:0c:ac:73:1c:d2:d6:c4:1f:c0:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Validity Not Before: Oct 11 09:15:27 2026 GMT Not After : Oct 14 16:22:27 2026 GMT Subject: CN=F375EECD259E89C4CE6484163D6A60B4E8F5054A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:95:80:fc:6d:3d:1c:97:79:02:56:f1:d2:f8: a9:d7:c1:81:dd:1b:eb:eb:69:99:d5:9e:7c:16:8f: ab:29:0e:fe:6e:fa:be:62:3a:56:fb:4d:02:71:76: c4:96:02:b3:57:a3:4d:27:37:8b:91:c5:d7:e0:81: 82:ae:c5:8e:d6:14:7d:1e:d2:60:32:36:4b:04:17: 3e:95:e9:a8:0c:73:dc:38:1b:2e:1b:d9:d0:ec:26: db:47:d7:c6:47:ee:5f:92:0d:c7:cc:58:1c:e1:52: 17:57:aa:43:0c:da:4a:65:36:85:0c:fb:10:22:24: 2d:5a:25:02:cf:ed:20:4a:cf:d9:0b:3e:d1:2d:b3: 63:36:ec:6f:9b:a4:8a:b0:78:5f:24:83:d6:02:34: 78:d4:b7:9a:6f:8c:0a:0a:1c:be:30:b6:20:ad:3d: a8:77:c2:bc:b0:34:63:5a:07:28:98:74:df:94:fb: 5c:4d:9e:2c:0c:f4:ba:80:db:07:b3:69:0b:a4:a7: c9:bf:ff:0b:da:12:48:8e:c6:fb:05:15:46:ab:c0: 3e:2a:01:7b:4d:55:97:64:83:25:f9:1a:73:86:52: 8d:fa:68:ae:e0:44:50:2b:0a:30:bf:eb:06:8d:53: 05:1d:f1:24:67:0c:1b:03:1f:ce:7d:45:f3:2a:68: 97:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:75:EE:CD:25:9E:89:C4:CE:64:84:16:3D:6A:60:B4:E8:F5:05:4A X509v3 Authority Key Identifier: keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ff:71:19:d3:7c:02:9c:34:72:1b:8d:e5:41:4b:74:c9:cb: 3b:31:15:63:59:b1:46:03:1e:3a:fe:27:ae:ae:b8:72:02:60: b2:58:54:71:15:9c:2f:2e:2b:11:68:93:cc:10:25:2a:75:23: 3f:e2:ce:cb:66:a0:55:e1:0a:ce:13:83:be:51:0d:53:ba:b7: 1f:8a:80:f9:8d:39:ed:ac:48:d1:ce:d6:21:79:a3:3a:23:d8: dc:41:67:2d:54:7f:2f:57:fd:d3:8b:9d:b0:aa:c4:92:ac:ce: e3:69:4b:f7:1f:99:24:48:ee:12:6a:fc:0f:7d:2b:0f:17:8d: 61:52:59:7a:ae:dc:4a:50:7b:76:0f:7e:13:0b:2d:2a:b4:b4: f4:f7:db:d8:ae:9b:fa:63:e1:13:e0:e2:3c:46:e0:ba:24:60: 51:93:c1:9c:bd:4e:0d:ea:7b:db:a7:d5:a9:f8:80:90:b2:b4: d1:86:1d:b5:fe:e1:2b:21:a9:b5:c7:0b:13:12:d0:5f:de:47: ae:c2:40:74:2e:9f:dd:b4:c6:30:b0:c9:90:40:e0:52:5e:f3: 83:cc:ea:d5:bc:21:b3:3e:ea:17:e6:fb:2f:e7:97:9f:07:2a: 91:02:b8:cc:86:83:d4:ab:14:59:22:e4:68:ed:2f:e4:6c:fc: 56:bf:9d:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURteWQkKaCmBUXgyscxzS1sQfwIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB OEVCQTcwRTAeFw0yNjEwMTEwOTE1MjdaFw0yNjEwMTQxNjIyMjdaMDMxMTAvBgNV BAMTKEYzNzVFRUNEMjU5RTg5QzRDRTY0ODQxNjNENkE2MEI0RThGNTA1NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrlYD8bT0cl3kCVvHS+KnXwYHd G+vraZnVnnwWj6spDv5u+r5iOlb7TQJxdsSWArNXo00nN4uRxdfggYKuxY7WFH0e 0mAyNksEFz6V6agMc9w4Gy4b2dDsJttH18ZH7l+SDcfMWBzhUhdXqkMM2kplNoUM +xAiJC1aJQLP7SBKz9kLPtEts2M27G+bpIqweF8kg9YCNHjUt5pvjAoKHL4wtiCt Pah3wrywNGNaByiYdN+U+1xNniwM9LqA2wezaQukp8m//wvaEkiOxvsFFUarwD4q AXtNVZdkgyX5GnOGUo36aK7gRFArCjC/6waNUwUd8SRnDBsDH859RfMqaJf9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU83XuzSWeicTOZIQWPWpgtOj1BUowHwYDVR0j BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxMTM5MjIvMC9BMTk2NzIyMDZBOURB N0RGNDI5NTM2QzlCRkZBREE5NEE4RUJBNzBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQv9xGdN8Apw0 chuN5UFLdMnLOzEVY1mxRgMeOv4nrq64cgJgslhUcRWcLy4rEWiTzBAlKnUjP+LO y2agVeEKzhODvlENU7q3H4qA+Y057axI0c7WIXmjOiPY3EFnLVR/L1f904udsKrE kqzO42lL9x+ZJEjuEmr8D30rDxeNYVJZeq7cSlB7dg9+EwstKrS09Pfb2K6b+mPh E+DiPEbguiRgUZPBnL1ODep726fVqfiAkLK00YYdtf7hKyGptccLExLQX95HrsJA dC6f3bTGMLDJkEDgUl7zg8zq1bwhsz7qF+b7L+eXnwcqkQK4zIaD1KsUWSLkaO0v 5Gz8Vr+dcg== -----END CERTIFICATE-----Generated at Sun Oct 11 16:42:27 2026 by rpki-client