$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft File: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft (raw, json) Hash identifier: ttaQM/tKrZ9gvp8fi6FboF8PlwqoMAdgsPqNu/BPOME= Subject key identifier: 5D:A9:5E:78:9B:BD:83:68:CD:3E:BA:0A:AC:01:FC:E0:0B:88:61:1D Authority key identifier: E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3 Certificate issuer: /CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3 Certificate serial: 3E3DA77E32D0131901ABE77DB77390DD227B0F8D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft Manifest number: 71 Signing time: Fri 17 Apr 2026 21:54:48 +0000 Manifest this update: Fri 17 Apr 2026 21:49:48 +0000 Manifest next update: Sun 19 Apr 2026 00:37:48 +0000 Files and hashes: 1: 3130332e3139312e3130322e302f32332d3234203d3e20313436373731.roa (hash: qAdl9Mqv3eghaNLnjs9oT32gnvAkpvMtk+dQyAwDJFg=) 2: 323430303a393565303a3a2f33322d3438203d3e20313436373731.roa (hash: oiFeA5HCtr2Fpw6iWNSFO+M1S+ANQ/Wm7HsdABpTV6Y=) 3: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl (hash: hqDUvqKyBnZWgnV2/hR1gLnYWNvHMKUO0vWh4jkWRNY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:3d:a7:7e:32:d0:13:19:01:ab:e7:7d:b7:73:90:dd:22:7b:0f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3 Validity Not Before: Apr 17 21:49:48 2026 GMT Not After : Apr 19 00:37:48 2026 GMT Subject: CN=5DA95E789BBD8368CD3EBA0AAC01FCE00B88611D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:75:2b:d6:de:5f:89:33:de:fa:58:4c:1d:da: c3:38:65:10:01:5d:81:6c:09:71:19:5a:78:4e:68: 9e:77:c9:cf:49:48:30:fb:86:cc:ae:89:0e:d0:3c: aa:b9:e4:4c:cf:dd:c2:64:6a:92:8c:92:91:45:c0: bd:6b:cf:1c:c6:6d:c2:b5:14:d4:ee:db:28:88:d6: bb:e5:e9:8a:12:ad:1b:8a:d9:23:74:a7:35:14:13: a3:80:f9:09:aa:cd:09:f9:6f:4e:8a:0e:0a:7b:aa: e8:45:bc:a8:64:45:7b:23:f3:e6:74:a8:23:4e:b7: 45:13:b2:d2:60:8f:da:ed:0f:31:ff:44:ae:e9:da: 68:a4:bd:49:04:44:42:2d:0d:b6:54:30:91:6a:bc: 14:c6:a9:18:ef:3b:39:56:7f:71:09:73:32:bd:da: 3e:ce:e5:55:d5:9f:3d:db:96:56:c6:4b:1e:9e:5b: ca:70:51:9f:04:aa:2b:a0:4e:9f:51:30:bd:43:9b: 46:52:37:64:79:4a:cc:20:be:54:db:33:08:e5:8e: 2c:04:00:de:dd:f8:66:02:46:2c:23:79:a4:ed:37: 4b:a8:e0:3c:69:46:a1:a8:b9:7b:c2:b1:54:54:3c: 33:dc:25:05:09:19:66:4e:2f:8a:3f:5e:cd:7e:57: f7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A9:5E:78:9B:BD:83:68:CD:3E:BA:0A:AC:01:FC:E0:0B:88:61:1D X509v3 Authority Key Identifier: keyid:E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:05:0a:32:b7:9a:82:f8:3b:2b:b9:bd:70:88:e4:94:02:7c: 15:8c:1a:7a:fa:a8:70:5e:d6:94:e3:44:e7:dd:de:37:0c:a0: 75:a9:28:34:6e:00:b1:c5:37:70:80:0d:6b:92:f1:00:f0:a9: fd:26:60:a4:29:36:f3:5a:b0:15:18:d8:8f:0c:43:23:29:20: fd:ac:ff:c6:cf:75:e4:c4:a7:27:d5:97:dd:df:06:55:ad:2d: 1a:09:c5:21:24:37:4f:d0:68:25:02:e8:4a:57:b3:1b:c8:89: bb:79:3b:74:1c:53:0f:7c:23:6e:cd:b7:b5:7c:d2:5f:25:23: cc:64:56:78:dc:30:42:ad:28:b1:63:ff:10:c3:21:c2:8a:f3: 45:0a:3b:fe:ad:e6:6f:ae:d7:13:f1:f1:2d:bb:1b:0c:f6:20: 83:ff:d1:72:dc:81:4d:90:a4:27:07:fe:c3:38:80:40:16:fe: f4:2b:42:80:13:c1:95:08:62:0a:9e:f0:bd:7a:b9:f6:1c:23: b1:5a:8a:d1:eb:d3:9c:76:6f:43:43:17:ea:1e:75:27:a5:77: be:46:22:f2:e5:ea:e0:09:9e:01:46:07:25:2e:d1:57:6e:cb: c1:d3:44:82:24:e1:7a:dc:4b:8c:5a:12:28:78:11:46:3f:d9: 80:90:56:7a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPj2nfjLQExkBq+d9t3OQ3SJ7D40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5REFDN0E1MjgyQUYwQjQ0NkUxQzk2NEY3RjQ1MDlB OTYxNzdEMzAeFw0yNjA0MTcyMTQ5NDhaFw0yNjA0MTkwMDM3NDhaMDMxMTAvBgNV BAMTKDVEQTk1RTc4OUJCRDgzNjhDRDNFQkEwQUFDMDFGQ0UwMEI4ODYxMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkdSvW3l+JM976WEwd2sM4ZRAB XYFsCXEZWnhOaJ53yc9JSDD7hsyuiQ7QPKq55EzP3cJkapKMkpFFwL1rzxzGbcK1 FNTu2yiI1rvl6YoSrRuK2SN0pzUUE6OA+QmqzQn5b06KDgp7quhFvKhkRXsj8+Z0 qCNOt0UTstJgj9rtDzH/RK7p2mikvUkEREItDbZUMJFqvBTGqRjvOzlWf3EJczK9 2j7O5VXVnz3bllbGSx6eW8pwUZ8EqiugTp9RML1Dm0ZSN2R5SswgvlTbMwjljiwE AN7d+GYCRiwjeaTtN0uo4DxpRqGouXvCsVRUPDPcJQUJGWZOL4o/Xs1+V/e5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXaleeJu9g2jNProKrAH84AuIYR0wHwYDVR0j BBgwFoAU4Z2selKCrwtEbhyWT39FCalhd9MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 OTE0ODkzOTU1NjQ4NzE2OS8wL0UxOURBQzdBNTI4MkFGMEI0NDZFMUM5NjRGN0Y0 NTA5QTk2MTc3RDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTE5REFDN0E1MjgyQUYwQjQ0NkUxQzk2NEY3RjQ1MDlBOTYxNzdEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjkxNDg5Mzk1NTY0ODcxNjkvMC9FMTlEQUM3QTUyODJB RjBCNDQ2RTFDOTY0RjdGNDUwOUE5NjE3N0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQUKMreagvg7 K7m9cIjklAJ8FYwaevqocF7WlONE593eNwygdakoNG4AscU3cIANa5LxAPCp/SZg pCk281qwFRjYjwxDIykg/az/xs915MSnJ9WX3d8GVa0tGgnFISQ3T9BoJQLoSlez G8iJu3k7dBxTD3wjbs23tXzSXyUjzGRWeNwwQq0osWP/EMMhworzRQo7/q3mb67X E/HxLbsbDPYgg//RctyBTZCkJwf+wziAQBb+9CtCgBPBlQhiCp7wvXq59hwjsVqK 0evTnHZvQ0MX6h51J6V3vkYi8uXq4AmeAUYHJS7RV27LwdNEgiThetxLjFoSKHgR Rj/ZgJBWeg== -----END CERTIFICATE-----Generated at Sat Apr 18 08:06:16 2026 by rpki-client