$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft File: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft (raw, json) Hash identifier: jPJwxhbngA2Yn5Ku39NPvhcji2uLGnAGtin5sxVPi+8= Subject key identifier: 88:6F:F9:2A:8B:B5:04:B9:94:8A:94:DD:3E:3D:A0:8A:03:61:C8:9D Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Certificate serial: 570D97C4F10DEBF4D18AAEEC17704B1BDE53B425 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft Manifest number: 0131 Signing time: Tue 28 Jul 2026 15:02:05 +0000 Manifest this update: Tue 28 Jul 2026 14:57:05 +0000 Manifest next update: Wed 29 Jul 2026 17:09:05 +0000 Files and hashes: 1: AS55967.roa (hash: JWz91HIzRpIvCaetNDaEjl+15GD/QV9ZC2R8TKVFSiA=) 2: AS56040.roa (hash: W81Ik1UbVtj0SRWqtC3P7xyEWt3IgDbB4QjgkvOz+tY=) 3: AS134756.roa (hash: R0qO1qhdZDTQtnkct1FnPpedhyffJKgR3uHLGveHyaU=) 4: AS140903.roa (hash: iyz26ug9khgPrNNhJtEuOhWmlszHQlfbJTsEIMCRpnM=) 5: AS23724.roa (hash: W9hq4noVS3K8oFSoam54kFzfyzZ8KLodeD0jWtdBu+E=) 6: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl (hash: bp8EMsu3KdeMiVanet8hvsMptv6nTD2/bCR1EAzHdvQ=) 7: AS38283.roa (hash: b+LNtB8BnlfAgJOygGrMMt2yq1yQieV7mM6TBSUOHTg=) 8: AS38365.roa (hash: GfhbepfPCiBLiW7f7C/pzcTtvnquxDHsuz1kUUcRsRU=) 9: AS4808.roa (hash: nfus4h8QwbxcdSJltah7w99JVhAwpPCoz9XlgVyX9D4=) 10: AS136958.roa (hash: HEG2G2FDqpPcwg9U+B72KeFsxwTgTK4fYMDfE+rG2vc=) 11: AS38627.roa (hash: nFp+8yml9hkEza1wgfZStNJI0UTaVHYBZwksHuv4bH0=) 12: AS58466.roa (hash: pNtrvsIxnKSPSR3qrnhNlUDUeD+0ItvWPxCmkPmSobo=) 13: AS58540.roa (hash: ODEMxdA+rDgGXKZmPBMgK9yomv/d+1QGAeEkWm3Q6yA=) 14: AS58563.roa (hash: kYInOTPip8w5PslmevGG8vQjhMgGwaKWoF+4hhPIBAc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:0d:97:c4:f1:0d:eb:f4:d1:8a:ae:ec:17:70:4b:1b:de:53:b4:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Validity Not Before: Jul 28 14:57:05 2026 GMT Not After : Jul 29 17:09:05 2026 GMT Subject: CN=886FF92A8BB504B9948A94DD3E3DA08A0361C89D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f5:63:15:17:f4:17:86:b9:9b:da:6f:03:22: 28:68:5a:a0:0f:9f:06:ca:c7:4c:a9:a8:61:03:b2: 7a:b1:b7:02:e2:d8:6f:68:53:7e:2b:bf:67:6b:03: 25:e1:2c:89:d9:0a:6b:3a:b2:db:0d:44:17:86:d5: 1d:39:aa:41:0d:8c:c0:54:93:39:8a:42:eb:06:8d: d9:8d:dc:b9:5b:47:26:f8:d1:0b:01:31:3a:5c:88: c1:1d:e4:1d:5a:dd:fc:24:12:90:d2:f0:a4:54:0e: c9:92:9d:cd:88:40:16:d4:aa:0a:0e:33:d0:b5:ce: a5:53:10:2d:97:0a:75:9d:4e:fe:1e:e2:e2:54:3b: 88:51:e8:1d:f1:02:c9:36:f8:f9:1d:c7:4a:df:57: 78:7f:b3:95:7d:90:f8:45:b8:28:f6:3d:3a:31:61: 2f:f8:d5:94:ff:78:32:5e:2f:43:37:a7:77:b9:93: 46:f9:db:ef:74:58:96:16:b3:fc:1c:bc:56:f0:59: dd:87:3e:82:38:9e:9e:ba:9e:8b:61:82:4f:2d:c8: d6:49:a3:c4:8a:cb:c4:c4:38:7b:81:b9:c8:35:72: f9:1a:f5:04:c6:9b:76:93:35:fd:36:66:44:31:ef: 6e:3e:5c:8d:55:2b:06:2d:b6:a9:90:bd:14:70:c8: df:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6F:F9:2A:8B:B5:04:B9:94:8A:94:DD:3E:3D:A0:8A:03:61:C8:9D X509v3 Authority Key Identifier: keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:7b:79:25:ca:4c:5e:0f:e3:71:db:e8:e8:56:f0:5a:2f:cc: 9b:ab:4f:16:43:9a:c2:87:2f:9b:5a:6d:79:3c:b9:99:59:15: f3:ff:df:bf:f9:76:a9:4e:47:91:74:6e:22:89:cb:6e:6c:8a: 02:db:d8:a9:0b:34:9b:56:a6:46:6d:52:df:12:5a:83:d4:6f: 30:9b:58:2a:02:89:04:77:7f:d3:92:47:8b:5f:de:0b:be:8c: 93:ff:0c:03:d4:0c:94:02:8b:a5:eb:54:04:64:fa:04:ce:a0: d6:2c:83:e6:85:25:bc:46:9f:86:2b:0f:97:c9:04:5d:26:e0: 94:f2:f6:4f:94:0b:3a:b5:ea:91:fa:02:12:75:c2:5e:fb:e9: a3:4b:d6:9e:67:d2:39:0f:08:d3:16:1f:a0:31:44:80:db:3a: 92:66:8f:89:15:5e:1e:7a:30:42:1b:12:79:2a:c6:fb:15:25: 0e:29:f2:8e:47:40:16:71:eb:d6:80:17:f7:3c:07:1a:ba:f4: 93:4b:95:00:c7:36:d3:f0:4e:45:de:43:94:cb:82:bd:6d:4d: 71:4c:89:b3:79:eb:0d:b5:4b:be:91:30:c4:77:0e:0a:ae:1d: 13:18:ec:c0:14:db:28:c9:17:17:44:c7:08:f2:b1:7d:ce:87: 27:4c:a2:19 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVw2XxPEN6/TRiq7sF3BLG95TtCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB OEVCQTcwRTAeFw0yNjA3MjgxNDU3MDVaFw0yNjA3MjkxNzA5MDVaMDMxMTAvBgNV BAMTKDg4NkZGOTJBOEJCNTA0Qjk5NDhBOTRERDNFM0RBMDhBMDM2MUM4OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd9WMVF/QXhrmb2m8DIihoWqAP nwbKx0ypqGEDsnqxtwLi2G9oU34rv2drAyXhLInZCms6stsNRBeG1R05qkENjMBU kzmKQusGjdmN3LlbRyb40QsBMTpciMEd5B1a3fwkEpDS8KRUDsmSnc2IQBbUqgoO M9C1zqVTEC2XCnWdTv4e4uJUO4hR6B3xAsk2+Pkdx0rfV3h/s5V9kPhFuCj2PTox YS/41ZT/eDJeL0M3p3e5k0b52+90WJYWs/wcvFbwWd2HPoI4np66nothgk8tyNZJ o8SKy8TEOHuBucg1cvka9QTGm3aTNf02ZkQx724+XI1VKwYttqmQvRRwyN+FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiG/5Kou1BLmUipTdPj2gigNhyJ0wHwYDVR0j BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxMTM5MjIvMC9BMTk2NzIyMDZBOURB N0RGNDI5NTM2QzlCRkZBREE5NEE4RUJBNzBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXt5JcpMXg/j cdvo6FbwWi/Mm6tPFkOawocvm1pteTy5mVkV8//fv/l2qU5HkXRuIonLbmyKAtvY qQs0m1amRm1S3xJag9RvMJtYKgKJBHd/05JHi1/eC76Mk/8MA9QMlAKLpetUBGT6 BM6g1iyD5oUlvEafhisPl8kEXSbglPL2T5QLOrXqkfoCEnXCXvvpo0vWnmfSOQ8I 0xYfoDFEgNs6kmaPiRVeHnowQhsSeSrG+xUlDinyjkdAFnHr1oAX9zwHGrr0k0uV AMc20/BORd5DlMuCvW1NcUyJs3nrDbVLvpEwxHcOCq4dExjswBTbKMkXF0THCPKx fc6HJ0yiGQ== -----END CERTIFICATE-----Generated at Wed Jul 29 10:39:50 2026 by rpki-client