$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft File: 191E76D74421148B42FA2A7F663270AE7FAD25F9.mft (raw, json) Hash identifier: hF9tOkgkcIxzWx+9wS/spO6HAQ1b6YMRErVT04rLDbo= Subject key identifier: 9B:E1:2D:BE:CC:BF:FD:31:30:EA:8B:D9:5F:BE:03:A9:29:DF:72:E8 Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9 Certificate issuer: /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9 Certificate serial: 7C290176CFB9D2F229A6AFABF88EA7C1DD077A16 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 17:58:16 +0000 Manifest this update: Sun 01 Mar 2026 17:53:16 +0000 Manifest next update: Mon 02 Mar 2026 18:41:16 +0000 Files and hashes: 1: 191E76D74421148B42FA2A7F663270AE7FAD25F9.crl (hash: iSxD0FTq7Bh8/BHi85mDEY3SYatKonAnAwt052kRpTA=) 2: 323430323a663963303a3a2f34382d3438203d3e20313337373937.roa (hash: Xa71V3zlzwJxLxJVMnOGWGmp2Wl6+BqPl/c74CX5nDA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 18:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:29:01:76:cf:b9:d2:f2:29:a6:af:ab:f8:8e:a7:c1:dd:07:7a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9 Validity Not Before: Mar 1 17:53:16 2026 GMT Not After : Mar 2 18:41:16 2026 GMT Subject: CN=9BE12DBECCBFFD3130EA8BD95FBE03A929DF72E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c9:9d:a0:f9:4c:93:35:7a:15:58:90:15:44: 29:e1:e9:48:75:83:39:bc:95:a5:87:fa:82:8c:ad: 4d:59:74:1f:ac:68:67:9d:cb:4d:04:e2:07:73:9d: e5:c8:6d:73:ab:f1:aa:57:4f:ce:ce:a3:91:f7:8a: eb:b8:20:dd:3b:0b:b0:d3:99:a7:b5:64:45:90:63: 42:b4:24:15:91:a6:47:c2:c8:58:9b:31:60:38:51: dc:49:5a:27:17:f0:4d:5b:6c:48:3c:a0:35:47:4f: f1:18:9e:fa:5e:8e:a4:c0:51:b5:c7:0f:10:c2:f1: 5e:6f:be:d4:f5:ae:46:bd:a3:d6:42:81:28:66:35: 2a:bf:8c:9a:c4:c1:49:72:d5:b6:de:0d:b8:fd:28: 0d:31:08:58:82:91:bc:b0:66:5d:36:c5:cf:1d:fc: cb:27:3f:99:7a:e1:98:6e:72:3f:fc:c7:6c:85:b9: 07:a7:29:52:69:ff:17:14:88:1e:7f:d7:0b:e9:32: 04:d9:eb:a3:1f:34:72:b7:a4:33:13:2e:7d:4f:db: 61:7d:cd:10:ed:42:11:df:79:6d:6f:07:75:2a:06: f9:28:fd:6f:75:75:65:eb:b2:75:7d:62:e3:82:fd: 74:a0:db:2f:29:85:55:9c:1c:75:72:00:60:4c:6e: d2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E1:2D:BE:CC:BF:FD:31:30:EA:8B:D9:5F:BE:03:A9:29:DF:72:E8 X509v3 Authority Key Identifier: keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c6:6d:35:e3:5e:13:1f:a0:e5:8f:cb:e4:97:57:c3:47:5e: 64:29:56:38:34:09:37:7a:61:47:74:b6:a8:e6:63:a9:dd:79: b0:bd:1b:6e:27:96:e6:85:08:84:7d:3b:79:d7:bb:69:ae:e7: 3a:35:a0:48:41:a3:c8:2a:57:f7:87:2e:1d:cb:62:09:2c:74: 08:7b:b9:05:eb:21:d4:49:80:5a:08:01:94:d1:d0:74:b8:95: 4d:71:1b:bb:30:1a:20:d2:aa:f8:af:6a:fb:18:1f:52:5e:d1: 03:d2:13:1b:3b:e7:e6:7f:c4:9a:37:20:9a:cb:27:3e:20:4b: c9:94:dd:f9:39:0d:fc:a8:18:63:66:48:bd:22:04:b8:23:b2: 49:40:f6:0b:6e:bd:6a:02:8a:f3:5c:fd:6a:80:17:93:d5:f4: 7d:b6:75:88:2a:d1:47:0a:b8:84:74:46:a8:a6:0b:f7:d5:fa: 2d:c7:7f:fd:47:0c:21:90:ec:88:3f:b7:59:3d:6a:2a:79:b2: df:28:94:63:f6:a1:e0:c8:bb:4c:7d:54:ac:89:e5:05:55:05: f5:95:2a:ef:aa:85:24:64:6a:9c:93:cb:f9:6b:71:42:78:5d: 60:b1:c6:fb:c0:e8:02:79:82:93:10:3d:52:b4:69:7b:7a:bd: 2d:62:52:00 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfCkBds+50vIppq+r+I6nwd0HehYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxRTc2RDc0NDIxMTQ4QjQyRkEyQTdGNjYzMjcwQUU3 RkFEMjVGOTAeFw0yNjAzMDExNzUzMTZaFw0yNjAzMDIxODQxMTZaMDMxMTAvBgNV BAMTKDlCRTEyREJFQ0NCRkZEMzEzMEVBOEJEOTVGQkUwM0E5MjlERjcyRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDByZ2g+UyTNXoVWJAVRCnh6Uh1 gzm8laWH+oKMrU1ZdB+saGedy00E4gdzneXIbXOr8apXT87Oo5H3iuu4IN07C7DT mae1ZEWQY0K0JBWRpkfCyFibMWA4UdxJWicX8E1bbEg8oDVHT/EYnvpejqTAUbXH DxDC8V5vvtT1rka9o9ZCgShmNSq/jJrEwUly1bbeDbj9KA0xCFiCkbywZl02xc8d /MsnP5l64Zhucj/8x2yFuQenKVJp/xcUiB5/1wvpMgTZ66MfNHK3pDMTLn1P22F9 zRDtQhHfeW1vB3UqBvko/W91dWXrsnV9YuOC/XSg2y8phVWcHHVyAGBMbtKVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUm+Etvsy//TEw6ovZX74DqSnfcugwHwYDVR0j BBgwFoAUGR5210QhFItC+ip/ZjJwrn+tJfkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzEyNjc4NS8wLzE5MUU3NkQ3NDQyMTE0OEI0MkZBMkE3RjY2MzI3 MEFFN0ZBRDI1RjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTkxRTc2RDc0NDIxMTQ4QjQyRkEyQTdGNjYzMjcwQUU3RkFEMjVGOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxMjY3ODUvMC8xOTFFNzZENzQ0MjEx NDhCNDJGQTJBN0Y2NjMyNzBBRTdGQUQyNUY5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8ZtNeNeEx+g 5Y/L5JdXw0deZClWODQJN3phR3S2qOZjqd15sL0bbieW5oUIhH07ede7aa7nOjWg SEGjyCpX94cuHctiCSx0CHu5Besh1EmAWggBlNHQdLiVTXEbuzAaINKq+K9q+xgf Ul7RA9ITGzvn5n/EmjcgmssnPiBLyZTd+TkN/KgYY2ZIvSIEuCOySUD2C269agKK 81z9aoAXk9X0fbZ1iCrRRwq4hHRGqKYL99X6Lcd//UcMIZDsiD+3WT1qKnmy3yiU Y/ah4Mi7TH1UrInlBVUF9ZUq76qFJGRqnJPL+WtxQnhdYLHG+8DoAnmCkxA9UrRp e3q9LWJSAA== -----END CERTIFICATE-----Generated at Mon Mar 2 04:22:50 2026 by rpki-client