$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft File: 191E76D74421148B42FA2A7F663270AE7FAD25F9.mft (raw, json) Hash identifier: zPhbxDV5cuX3IQlFByncjk4V35icDptdl7iYfCf4FJo= Subject key identifier: F8:A5:99:A3:2E:E7:F3:1E:78:86:E1:17:6A:73:E5:61:11:84:CA:66 Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9 Certificate issuer: /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9 Certificate serial: 0867FD06724C7C9E6BA9CA82DB9EFEF6D8A92D32 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft Manifest number: 75 Signing time: Fri 17 Apr 2026 06:44:40 +0000 Manifest this update: Fri 17 Apr 2026 06:39:40 +0000 Manifest next update: Sat 18 Apr 2026 10:34:40 +0000 Files and hashes: 1: 323430323a663963303a3a2f34382d3438203d3e20313337373937.roa (hash: Xa71V3zlzwJxLxJVMnOGWGmp2Wl6+BqPl/c74CX5nDA=) 2: 191E76D74421148B42FA2A7F663270AE7FAD25F9.crl (hash: xzCi91XuMwm38djiwSwzA2hZjzSTw+blgNLc/PAjpjo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 10:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:67:fd:06:72:4c:7c:9e:6b:a9:ca:82:db:9e:fe:f6:d8:a9:2d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9 Validity Not Before: Apr 17 06:39:40 2026 GMT Not After : Apr 18 10:34:40 2026 GMT Subject: CN=F8A599A32EE7F31E7886E1176A73E5611184CA66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:40:7f:63:46:0d:2e:b7:46:56:70:6a:c7:97: 86:c5:d1:66:ab:16:61:82:8a:20:53:ae:2e:38:6e: 14:db:ed:e9:4f:97:65:84:2c:df:0e:73:0a:11:d4: 54:45:84:ac:66:cd:5a:7d:ad:bb:f3:f2:48:6e:ad: 61:8a:43:35:fc:73:c8:7f:3d:26:04:f6:e0:da:89: 59:17:04:cf:34:83:9d:54:74:b1:e4:bb:84:4d:de: 5c:3a:90:35:fb:3d:98:20:d8:a7:02:0e:6d:23:13: 16:08:0d:14:7e:68:35:c5:c1:9f:8a:e6:7e:68:5f: 89:16:89:76:ac:ae:b3:a9:27:e9:4e:8f:4f:8e:2f: 80:14:ff:8e:24:1f:8e:f9:44:9d:c9:54:01:30:6d: a1:e3:00:af:4a:58:ad:b5:90:b3:e7:e9:4c:c4:c2: 5b:dd:ee:36:0d:17:bd:e6:11:e3:cb:60:7c:41:89: 13:78:89:98:14:c8:ed:07:14:a0:fb:19:a2:40:9d: 7d:e3:ea:91:85:52:6a:58:e3:7f:87:df:5c:7e:c3: ac:a2:10:1f:2c:4c:15:c2:d7:95:bd:28:58:9d:5e: f0:c7:8d:7f:a1:82:6b:3b:f9:1a:e4:69:88:34:12: 19:77:77:eb:3d:45:a7:c7:6f:be:77:38:6f:ea:fe: cd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A5:99:A3:2E:E7:F3:1E:78:86:E1:17:6A:73:E5:61:11:84:CA:66 X509v3 Authority Key Identifier: keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:56:5b:58:ed:8f:a6:f6:e5:98:6a:1a:12:92:0d:ca:de:d2: 5b:97:8e:95:af:3a:9d:33:81:e5:9c:09:a9:0e:56:ac:8a:c0: 1a:5b:cd:b7:e1:da:ec:93:bf:ff:e1:b1:66:43:89:d2:69:bf: 0f:39:e4:23:26:72:33:3e:af:bc:b2:33:c5:ed:f9:c1:73:38: 40:e3:ca:d5:9f:72:b1:22:17:ab:a2:7d:f7:09:d7:00:07:dc: 31:7c:e1:76:df:14:34:3a:2c:27:32:ac:dd:eb:60:66:7c:53: 1a:46:fe:fa:a5:bb:cf:5b:72:b4:eb:e7:ce:be:73:7a:d8:e7: 9a:47:4e:8c:8a:f9:78:8e:7d:33:be:47:51:91:25:1a:ef:a9: d5:f3:6c:8e:29:6e:c6:5e:26:42:de:80:65:94:5a:9f:23:e3: 5d:97:e6:eb:30:28:73:18:91:c8:9c:3f:f0:b7:4d:5e:d7:2f: 12:60:f9:4f:1e:91:83:f4:0d:2a:d3:19:57:8d:7c:38:90:e2: 5f:84:d0:10:4d:a6:a3:9e:ff:4e:a9:f6:cd:83:29:5a:90:18: 9e:0d:eb:da:c8:8d:49:2b:08:1d:0f:5a:b2:bf:39:06:9e:c0: 92:dc:93:ee:4a:5a:09:45:a8:c5:36:15:10:3a:29:aa:40:f5: 2b:4f:9f:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCGf9BnJMfJ5rqcqC257+9tipLTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxRTc2RDc0NDIxMTQ4QjQyRkEyQTdGNjYzMjcwQUU3 RkFEMjVGOTAeFw0yNjA0MTcwNjM5NDBaFw0yNjA0MTgxMDM0NDBaMDMxMTAvBgNV BAMTKEY4QTU5OUEzMkVFN0YzMUU3ODg2RTExNzZBNzNFNTYxMTE4NENBNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSQH9jRg0ut0ZWcGrHl4bF0War FmGCiiBTri44bhTb7elPl2WELN8OcwoR1FRFhKxmzVp9rbvz8khurWGKQzX8c8h/ PSYE9uDaiVkXBM80g51UdLHku4RN3lw6kDX7PZgg2KcCDm0jExYIDRR+aDXFwZ+K 5n5oX4kWiXasrrOpJ+lOj0+OL4AU/44kH475RJ3JVAEwbaHjAK9KWK21kLPn6UzE wlvd7jYNF73mEePLYHxBiRN4iZgUyO0HFKD7GaJAnX3j6pGFUmpY43+H31x+w6yi EB8sTBXC15W9KFidXvDHjX+hgms7+RrkaYg0Ehl3d+s9RafHb753OG/q/s23AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+KWZoy7n8x54huEXanPlYRGEymYwHwYDVR0j BBgwFoAUGR5210QhFItC+ip/ZjJwrn+tJfkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzEyNjc4NS8wLzE5MUU3NkQ3NDQyMTE0OEI0MkZBMkE3RjY2MzI3 MEFFN0ZBRDI1RjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTkxRTc2RDc0NDIxMTQ4QjQyRkEyQTdGNjYzMjcwQUU3RkFEMjVGOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxMjY3ODUvMC8xOTFFNzZENzQ0MjEx NDhCNDJGQTJBN0Y2NjMyNzBBRTdGQUQyNUY5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlZbWO2Ppvbl mGoaEpINyt7SW5eOla86nTOB5ZwJqQ5WrIrAGlvNt+Ha7JO//+GxZkOJ0mm/Dznk IyZyMz6vvLIzxe35wXM4QOPK1Z9ysSIXq6J99wnXAAfcMXzhdt8UNDosJzKs3etg ZnxTGkb++qW7z1tytOvnzr5zetjnmkdOjIr5eI59M75HUZElGu+p1fNsjiluxl4m Qt6AZZRanyPjXZfm6zAocxiRyJw/8LdNXtcvEmD5Tx6Rg/QNKtMZV418OJDiX4TQ EE2mo57/Tqn2zYMpWpAYng3r2siNSSsIHQ9asr85Bp7AktyT7kpaCUWoxTYVEDop qkD1K0+fzg== -----END CERTIFICATE-----Generated at Sat Apr 18 01:34:43 2026 by rpki-client