$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft File: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft (raw, json) Hash identifier: bmhYONZ7S0Dj5XCe+t2qGMEuAY/8sqHgtMWCflVMl8w= Subject key identifier: 01:37:A6:5F:D4:FB:92:BE:1D:38:05:D9:2E:10:4E:54:9E:5B:FA:D7 Authority key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD Certificate issuer: /CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD Certificate serial: 4CD2B58A3C9EDEBEA863F6D57150FCC17C26B7A7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft Manifest number: FE Signing time: Tue 28 Jul 2026 15:52:10 +0000 Manifest this update: Tue 28 Jul 2026 15:47:10 +0000 Manifest next update: Wed 29 Jul 2026 16:29:10 +0000 Files and hashes: 1: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl (hash: G82sJCHqlZRa3Tlv9EtwqNugdRLpg61lXwMZSFr2nYg=) 2: 3134342e37392e31302e302f32332d3234203d3e20313531323531.roa (hash: WjMCSVc2nZ6LHlmIFS3fh2fKf0RsOi1ahfbmP+aZL0U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d2:b5:8a:3c:9e:de:be:a8:63:f6:d5:71:50:fc:c1:7c:26:b7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD Validity Not Before: Jul 28 15:47:10 2026 GMT Not After : Jul 29 16:29:10 2026 GMT Subject: CN=0137A65FD4FB92BE1D3805D92E104E549E5BFAD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1c:6b:c1:02:49:3a:21:12:15:04:e3:92:27: d6:45:b9:4d:cb:f2:f9:c6:d0:b5:18:b5:2c:83:8b: d6:a4:c4:a6:8f:67:65:03:34:bc:7c:11:e7:64:ec: 40:e6:f7:81:f1:f4:7c:30:52:f2:02:e6:9b:74:a3: 68:07:ae:a5:1a:39:71:8c:fe:83:6c:df:92:ed:57: 2d:ad:e8:0a:c0:f7:5f:e2:0b:61:6e:96:2b:b4:d9: e3:0d:00:57:6c:7e:c0:7c:f2:c7:32:d4:5a:42:fc: 50:da:2f:85:cd:d9:b8:84:ae:e1:cd:0c:a2:9f:e5: 0d:43:0f:1b:39:91:f9:32:69:8c:8c:d9:6e:98:35: 86:10:73:5c:b4:d2:d7:ed:04:65:b5:3c:ce:8b:66: d1:68:1f:5a:57:99:5b:20:76:c7:9c:fc:ba:49:dc: b0:92:20:ee:4e:e7:47:72:40:6c:10:21:1c:ec:31: 6a:59:cb:25:c9:38:06:59:1c:29:92:79:66:13:92: c3:05:f5:23:2e:e9:67:2a:b9:32:0d:e9:c2:35:87: 71:25:3c:8f:f6:2c:2b:de:0a:72:87:7a:ff:29:c0: 9f:db:2a:5d:67:5b:05:90:09:f0:c8:29:04:14:c6: 05:4c:be:e7:c8:ce:81:43:c1:e9:c2:03:6e:da:44: 57:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:37:A6:5F:D4:FB:92:BE:1D:38:05:D9:2E:10:4E:54:9E:5B:FA:D7 X509v3 Authority Key Identifier: keyid:19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7b:b3:6f:2f:4e:8b:b5:3b:ba:b9:b6:ab:a0:16:8a:f3:9e: e2:f2:ed:1d:64:0e:00:74:d4:1f:59:44:9d:73:61:71:b9:9a: 44:a7:68:29:7c:ae:52:65:15:83:93:fa:8d:c7:6b:c5:fa:6a: a8:7d:26:9c:8a:44:d5:f8:0a:6a:07:cc:e4:97:a4:32:dd:bb: 88:19:f1:47:af:dc:32:87:b5:55:5c:4c:57:5d:b0:c0:85:47: 5e:f1:72:94:c8:cc:5b:ad:02:d5:47:97:56:e0:87:5d:5a:72: d4:84:14:10:1a:d6:e9:82:27:60:54:a1:2b:8e:20:f2:9d:33: 92:f1:a3:ed:81:21:86:b1:c7:1e:cf:75:b9:ec:cf:97:cc:ea: 05:d7:bd:59:32:b9:84:ab:76:41:49:ec:3d:56:85:1c:71:a6: 12:3e:cc:92:df:90:62:a7:2a:a1:ae:50:0d:54:ad:b6:55:5c: ed:7e:93:fe:a5:24:ba:96:82:8a:b6:75:eb:a3:5c:6d:f6:93: ff:96:5c:8a:49:36:4f:f8:04:c9:7c:b7:71:52:f7:75:b6:77: 76:34:a0:71:b3:8b:24:4e:74:14:bd:8f:a8:2c:0e:f4:92:97: 46:0f:60:6a:90:4a:9a:60:64:e8:dd:ab:a4:44:e3:90:0f:16: 0e:08:8b:a0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTNK1ijye3r6oY/bVcVD8wXwmt6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2 NUJDNzdBRDAeFw0yNjA3MjgxNTQ3MTBaFw0yNjA3MjkxNjI5MTBaMDMxMTAvBgNV BAMTKDAxMzdBNjVGRDRGQjkyQkUxRDM4MDVEOTJFMTA0RTU0OUU1QkZBRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVHGvBAkk6IRIVBOOSJ9ZFuU3L 8vnG0LUYtSyDi9akxKaPZ2UDNLx8Eedk7EDm94Hx9HwwUvIC5pt0o2gHrqUaOXGM /oNs35LtVy2t6ArA91/iC2Fuliu02eMNAFdsfsB88scy1FpC/FDaL4XN2biEruHN DKKf5Q1DDxs5kfkyaYyM2W6YNYYQc1y00tftBGW1PM6LZtFoH1pXmVsgdsec/LpJ 3LCSIO5O50dyQGwQIRzsMWpZyyXJOAZZHCmSeWYTksMF9SMu6WcquTIN6cI1h3El PI/2LCveCnKHev8pwJ/bKl1nWwWQCfDIKQQUxgVMvufIzoFDwenCA27aRFc7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUATemX9T7kr4dOAXZLhBOVJ5b+tcwHwYDVR0j BBgwFoAUGa5VZr+D0Ucv2dm65cxwEmW8d60wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTM5NDE3OS8xLzE5QUU1NTY2QkY4M0QxNDcyRkQ5RDlCQUU1Q0M3 MDEyNjVCQzc3QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2NUJDNzdBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMS8xOUFFNTU2NkJGODNE MTQ3MkZEOUQ5QkFFNUNDNzAxMjY1QkM3N0FELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3uzby9Oi7U7 urm2q6AWivOe4vLtHWQOAHTUH1lEnXNhcbmaRKdoKXyuUmUVg5P6jcdrxfpqqH0m nIpE1fgKagfM5JekMt27iBnxR6/cMoe1VVxMV12wwIVHXvFylMjMW60C1UeXVuCH XVpy1IQUEBrW6YInYFShK44g8p0zkvGj7YEhhrHHHs91uezPl8zqBde9WTK5hKt2 QUnsPVaFHHGmEj7Mkt+QYqcqoa5QDVSttlVc7X6T/qUkupaCirZ166NcbfaT/5Zc ikk2T/gEyXy3cVL3dbZ3djSgcbOLJE50FL2PqCwO9JKXRg9gapBKmmBk6N2rpETj kA8WDgiLoA== -----END CERTIFICATE-----Generated at Wed Jul 29 08:51:50 2026 by rpki-client