$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft File: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft (raw, json) Hash identifier: 2XXx9gQAPDrxb0UnpkxirIhov4wqlsH2UYJGSpFIw/c= Subject key identifier: 96:6F:BD:41:7E:0A:A5:E6:D6:DC:81:E8:6D:50:A7:6F:9E:3A:CB:F4 Authority key identifier: E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3 Certificate issuer: /CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3 Certificate serial: 3C82BDD480F3369D11AA4278EB7EAF76E1726256 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft Manifest number: 0138 Signing time: Sat 17 Oct 2026 05:38:33 +0000 Manifest this update: Sat 17 Oct 2026 05:33:33 +0000 Manifest next update: Tue 20 Oct 2026 08:27:33 +0000 Files and hashes: 1: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl (hash: v5aXZ2g6eSz3M5b+eUDOo0fyK8n/KONBvfXMuiO/ANo=) 2: 3130332e3139312e3130322e302f32332d3234203d3e20313436373731.roa (hash: qAdl9Mqv3eghaNLnjs9oT32gnvAkpvMtk+dQyAwDJFg=) 3: 323430303a393565303a3a2f33322d3438203d3e20313436373731.roa (hash: oiFeA5HCtr2Fpw6iWNSFO+M1S+ANQ/Wm7HsdABpTV6Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:82:bd:d4:80:f3:36:9d:11:aa:42:78:eb:7e:af:76:e1:72:62:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3 Validity Not Before: Oct 17 05:33:33 2026 GMT Not After : Oct 20 08:27:33 2026 GMT Subject: CN=966FBD417E0AA5E6D6DC81E86D50A76F9E3ACBF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:e6:ba:82:0c:63:49:54:1d:c0:b4:39:b2: 8d:c2:d4:23:20:b8:ad:78:5c:62:b7:40:01:78:45: e7:4b:be:9e:bb:d4:75:e7:4d:c0:b4:c7:c1:e1:16: 6c:2f:42:5b:57:9b:e2:d9:a5:8f:98:99:de:dc:b5: 78:8e:60:38:de:ab:4a:ba:8a:84:a8:b4:85:af:b9: b7:af:10:81:c7:04:0f:6c:c1:d7:32:95:d7:51:4d: c7:41:a0:95:14:20:a6:59:af:a2:ed:e5:20:bd:c3: b4:e6:98:67:23:66:34:8a:11:82:46:bd:06:36:8a: d7:08:6f:ca:ec:66:bd:4d:55:1f:31:0d:16:d6:ff: ad:8b:5b:8a:67:ef:d6:c1:d0:21:79:e9:0f:26:ef: a9:69:85:98:df:1a:d3:bf:ac:22:8d:f2:9a:9d:c8: 74:ad:eb:4a:22:89:32:c0:ce:f6:90:49:a7:57:f3: 4e:cf:13:9e:eb:bb:0e:7b:61:f5:c7:fa:ac:b6:f6: ea:94:1a:f3:54:b4:13:87:be:4c:31:08:a2:32:5b: 0d:ae:ec:70:a8:91:79:5c:2c:57:2e:50:34:d4:a3: 2c:89:63:a0:4c:63:fc:a4:eb:ba:f1:19:06:1f:54: 17:f3:11:98:0f:4c:9d:a0:22:b5:60:ad:bb:ea:9e: 22:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6F:BD:41:7E:0A:A5:E6:D6:DC:81:E8:6D:50:A7:6F:9E:3A:CB:F4 X509v3 Authority Key Identifier: keyid:E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:62:4a:2c:da:75:f3:6d:0f:74:dc:cf:0e:db:ca:b1:b1:9d: 86:3f:25:8a:32:33:23:5a:0f:b4:b3:13:a7:7c:c7:7d:8d:e5: 10:9a:37:a2:0e:ea:19:1f:cf:90:26:36:d0:2c:0b:d8:64:ea: dd:69:36:66:88:15:69:fc:74:ae:70:2f:47:e5:d7:8a:2f:d0: d7:ca:05:eb:a5:63:3f:f0:37:f3:4f:69:04:a7:e6:b8:83:d3: 7e:e4:a9:9a:c5:eb:a4:f7:6d:fb:fd:01:67:9b:fb:09:36:52: bd:06:90:78:9a:85:a7:9e:04:27:e7:98:25:e3:48:77:31:be: 99:47:73:6a:ec:8a:ef:13:c8:d5:88:10:84:f9:e4:8f:01:29: 07:a6:91:0e:82:ff:9c:64:a9:22:9f:8e:c6:75:cc:1a:45:fb: 93:ea:9f:c6:5a:d4:9f:2f:04:8a:a2:92:64:d8:1b:13:76:a6: 5d:07:a1:5e:85:20:bf:e6:1f:9d:f7:28:8f:6e:67:85:19:21: 54:bd:c1:f9:31:05:27:08:f0:7b:a2:9d:71:99:d8:9b:5c:2e: da:cf:f8:29:3d:2c:d9:8b:49:dc:84:6c:0b:c3:58:3e:58:43: c2:fe:88:d0:3a:6b:d6:37:4e:be:f1:ec:a9:8b:ed:20:07:a5: fa:05:84:63 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPIK91IDzNp0RqkJ4636vduFyYlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5REFDN0E1MjgyQUYwQjQ0NkUxQzk2NEY3RjQ1MDlB OTYxNzdEMzAeFw0yNjEwMTcwNTMzMzNaFw0yNjEwMjAwODI3MzNaMDMxMTAvBgNV BAMTKDk2NkZCRDQxN0UwQUE1RTZENkRDODFFODZENTBBNzZGOUUzQUNCRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4rua6ggxjSVQdwLQ5so3C1CMg uK14XGK3QAF4RedLvp671HXnTcC0x8HhFmwvQltXm+LZpY+Ymd7ctXiOYDjeq0q6 ioSotIWvubevEIHHBA9swdcylddRTcdBoJUUIKZZr6Lt5SC9w7TmmGcjZjSKEYJG vQY2itcIb8rsZr1NVR8xDRbW/62LW4pn79bB0CF56Q8m76lphZjfGtO/rCKN8pqd yHSt60oiiTLAzvaQSadX807PE57ruw57YfXH+qy29uqUGvNUtBOHvkwxCKIyWw2u 7HCokXlcLFcuUDTUoyyJY6BMY/yk67rxGQYfVBfzEZgPTJ2gIrVgrbvqniKBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlm+9QX4KpebW3IHobVCnb546y/QwHwYDVR0j BBgwFoAU4Z2selKCrwtEbhyWT39FCalhd9MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 OTE0ODkzOTU1NjQ4NzE2OS8wL0UxOURBQzdBNTI4MkFGMEI0NDZFMUM5NjRGN0Y0 NTA5QTk2MTc3RDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTE5REFDN0E1MjgyQUYwQjQ0NkUxQzk2NEY3RjQ1MDlBOTYxNzdEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjkxNDg5Mzk1NTY0ODcxNjkvMC9FMTlEQUM3QTUyODJB RjBCNDQ2RTFDOTY0RjdGNDUwOUE5NjE3N0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGJKLNp1820P dNzPDtvKsbGdhj8lijIzI1oPtLMTp3zHfY3lEJo3og7qGR/PkCY20CwL2GTq3Wk2 ZogVafx0rnAvR+XXii/Q18oF66VjP/A3809pBKfmuIPTfuSpmsXrpPdt+/0BZ5v7 CTZSvQaQeJqFp54EJ+eYJeNIdzG+mUdzauyK7xPI1YgQhPnkjwEpB6aRDoL/nGSp Ip+OxnXMGkX7k+qfxlrUny8EiqKSZNgbE3amXQehXoUgv+Yfnfcoj25nhRkhVL3B +TEFJwjwe6KdcZnYm1wu2s/4KT0s2YtJ3IRsC8NYPlhDwv6I0Dpr1jdOvvHsqYvt IAel+gWEYw== -----END CERTIFICATE-----Generated at Sat Oct 17 19:43:56 2026 by rpki-client