$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft File: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft (raw, json) Hash identifier: XkADV/1cJHkhmo5gFGZNZnt2Tit62jrPnigGdyc2v8A= Subject key identifier: 1D:0D:54:17:BD:F0:4B:53:9E:4D:82:33:8F:D1:43:67:E2:9D:62:FA Authority key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD Certificate issuer: /CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD Certificate serial: 3256C3A12CA27EDE83F60384963FDFD07BE7D66F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 14:34:43 +0000 Manifest this update: Fri 17 Apr 2026 14:29:43 +0000 Manifest next update: Sat 18 Apr 2026 18:24:43 +0000 Files and hashes: 1: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl (hash: DSQJXg+9O+0MOOqXtuWWY806Z/WHMvp84B4lQd9yRkg=) 2: 3134342e37392e31302e302f32332d3234203d3e20313531323531.roa (hash: WjMCSVc2nZ6LHlmIFS3fh2fKf0RsOi1ahfbmP+aZL0U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:56:c3:a1:2c:a2:7e:de:83:f6:03:84:96:3f:df:d0:7b:e7:d6:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD Validity Not Before: Apr 17 14:29:43 2026 GMT Not After : Apr 18 18:24:43 2026 GMT Subject: CN=1D0D5417BDF04B539E4D82338FD14367E29D62FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:53:13:fc:ad:f8:12:29:e3:33:a0:f3:12: e0:e6:15:92:40:bd:16:ee:fd:8a:91:58:1a:3e:cb: 2d:b5:4e:bd:e8:61:02:53:ef:f6:54:d8:51:ee:fd: 82:4f:ca:3d:d9:c6:d7:79:39:28:aa:9a:ab:f7:89: ef:63:6c:ec:60:42:57:fc:8e:39:8c:62:cb:e8:7a: af:ad:b6:40:70:2f:04:3a:eb:e3:96:1c:d5:a0:4c: 40:a5:17:4a:6d:af:79:2e:45:50:05:cf:93:17:87: 50:83:9f:c7:c3:98:ce:87:50:c1:f9:16:1f:13:80: 01:a4:8e:2e:a0:a5:1a:d7:2e:13:44:cf:8f:0d:76: 0b:5a:f0:1f:a5:c7:10:f6:f2:19:bd:f8:d5:55:c3: 16:b2:47:5a:98:5e:df:c3:1e:4c:b3:ee:eb:b9:2f: 0b:16:70:b7:db:d0:05:a8:35:1e:4a:d6:2a:3c:21: 55:8c:c9:58:05:b7:cf:83:8e:2b:8b:3f:d2:9d:9d: 86:95:10:c2:7f:96:a5:98:70:9f:af:76:54:8a:51: 92:ae:60:4f:8c:a9:70:ef:4f:d9:77:7c:64:eb:9e: 93:bb:d1:89:1d:47:3e:be:ce:15:7c:34:50:5b:2c: 28:0c:fa:0b:bd:7d:85:59:44:29:0e:b7:96:72:de: 1e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0D:54:17:BD:F0:4B:53:9E:4D:82:33:8F:D1:43:67:E2:9D:62:FA X509v3 Authority Key Identifier: keyid:19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:44:34:86:fe:aa:11:40:67:aa:87:80:1c:91:52:6a:67:eb: 6c:b8:7a:ef:0c:6c:45:f5:d3:60:1e:4d:81:ad:de:3a:42:6e: 9d:d2:c3:b0:47:b1:17:b1:31:f6:4b:a3:2e:f1:cc:72:a4:45: 5b:1a:2e:0f:05:53:90:b5:df:4a:fd:6e:58:62:fe:24:b1:b3: 15:ba:47:bd:13:a9:7b:14:ed:cf:74:0a:fa:0c:46:f3:c2:a7: 4a:04:28:03:38:14:04:c0:ba:29:e6:8d:ad:96:d8:91:d2:23: 6e:7a:af:07:5f:b2:b2:6e:4d:8d:0b:b0:37:46:98:f9:8f:40: e5:da:ef:e4:8a:bf:5f:54:8f:4f:c0:56:fd:84:f4:e4:40:a3: e8:1c:1f:5e:ba:f6:e3:c6:f0:ec:a1:f3:83:d5:cd:da:36:96: eb:7a:46:20:36:71:5d:e1:2b:8f:af:fc:49:79:10:33:f7:55: 61:a5:b1:9b:5a:70:2e:26:50:7a:b7:b7:be:67:2a:17:e1:64: b1:40:fc:69:78:40:b1:59:ab:02:14:27:b1:94:62:f3:c1:1d: 90:12:fd:84:a6:73:35:a2:0d:4f:4b:9c:21:02:f0:b5:ad:5c: 95:b4:66:c0:f3:c1:94:77:1e:d2:41:e0:3a:ba:be:cb:3b:d3: 7e:6d:f1:0c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMlbDoSyift6D9gOElj/f0Hvn1m8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2 NUJDNzdBRDAeFw0yNjA0MTcxNDI5NDNaFw0yNjA0MTgxODI0NDNaMDMxMTAvBgNV BAMTKDFEMEQ1NDE3QkRGMDRCNTM5RTREODIzMzhGRDE0MzY3RTI5RDYyRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzy1MT/K34EinjM6DzEuDmFZJA vRbu/YqRWBo+yy21Tr3oYQJT7/ZU2FHu/YJPyj3Zxtd5OSiqmqv3ie9jbOxgQlf8 jjmMYsvoeq+ttkBwLwQ66+OWHNWgTEClF0ptr3kuRVAFz5MXh1CDn8fDmM6HUMH5 Fh8TgAGkji6gpRrXLhNEz48Ndgta8B+lxxD28hm9+NVVwxayR1qYXt/DHkyz7uu5 LwsWcLfb0AWoNR5K1io8IVWMyVgFt8+DjiuLP9KdnYaVEMJ/lqWYcJ+vdlSKUZKu YE+MqXDvT9l3fGTrnpO70YkdRz6+zhV8NFBbLCgM+gu9fYVZRCkOt5Zy3h5bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHQ1UF73wS1OeTYIzj9FDZ+KdYvowHwYDVR0j BBgwFoAUGa5VZr+D0Ucv2dm65cxwEmW8d60wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTM5NDE3OS8xLzE5QUU1NTY2QkY4M0QxNDcyRkQ5RDlCQUU1Q0M3 MDEyNjVCQzc3QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2NUJDNzdBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMS8xOUFFNTU2NkJGODNE MTQ3MkZEOUQ5QkFFNUNDNzAxMjY1QkM3N0FELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwUQ0hv6qEUBn qoeAHJFSamfrbLh67wxsRfXTYB5Nga3eOkJundLDsEexF7Ex9kujLvHMcqRFWxou DwVTkLXfSv1uWGL+JLGzFbpHvROpexTtz3QK+gxG88KnSgQoAzgUBMC6KeaNrZbY kdIjbnqvB1+ysm5NjQuwN0aY+Y9A5drv5Iq/X1SPT8BW/YT05ECj6BwfXrr248bw 7KHzg9XN2jaW63pGIDZxXeErj6/8SXkQM/dVYaWxm1pwLiZQere3vmcqF+FksUD8 aXhAsVmrAhQnsZRi88EdkBL9hKZzNaINT0ucIQLwta1clbRmwPPBlHce0kHgOrq+ yzvTfm3xDA== -----END CERTIFICATE-----Generated at Sat Apr 18 04:41:28 2026 by rpki-client