$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft File: 192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft (raw, json) Hash identifier: MBKzyBIwQPre13/I7x6AaiL56LTmA7fs3YfzsecPzH0= Subject key identifier: B1:37:3B:96:F9:A0:40:B9:9A:C5:1E:B8:34:14:F3:95:62:46:77:EE Authority key identifier: 19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84 Certificate issuer: /CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184 Certificate serial: 4774FF2070A2E469D307CC15F66FF6B8E154D766 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft Manifest number: 0123 Signing time: Fri 24 Jul 2026 09:30:54 +0000 Manifest this update: Fri 24 Jul 2026 09:25:54 +0000 Manifest next update: Sat 25 Jul 2026 12:29:54 +0000 Files and hashes: 1: AS9812.roa (hash: TCsU4/hp59fDHvgCzxIh3dSpRzRqD4Ky9FA7aHqLkjQ=) 2: 192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl (hash: zecugSCMVRfysgVbZ4KbTNiKpU4Phu+GUMk8p+hAhVA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:74:ff:20:70:a2:e4:69:d3:07:cc:15:f6:6f:f6:b8:e1:54:d7:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184 Validity Not Before: Jul 24 09:25:54 2026 GMT Not After : Jul 25 12:29:54 2026 GMT Subject: CN=B1373B96F9A040B99AC51EB83414F395624677EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e3:00:86:ba:1e:0f:86:d2:ad:52:4c:73:00: b5:97:31:c4:0e:67:73:1e:7c:45:c8:bf:60:9c:b7: ce:b0:f4:dc:c8:41:b8:99:c8:5a:f8:6f:e6:48:58: 31:3f:ad:37:16:c0:28:fd:44:99:38:17:44:63:80: 11:e3:69:65:7d:0a:7c:b1:cb:36:e5:c3:a4:a0:10: 7a:22:d5:ac:af:96:a9:36:e9:19:9a:63:a2:05:7b: 1c:6d:32:85:2b:f5:63:67:22:03:75:a6:9c:3a:52: b3:8e:c9:66:99:1c:44:7c:3f:20:bd:cf:28:1d:35: 65:04:24:d3:16:74:72:a5:9a:62:e6:71:88:bf:c4: 00:bd:71:7a:90:b1:09:37:b9:e8:06:c2:03:ca:21: 6b:af:d2:d9:70:c6:71:b0:3a:6f:93:c1:cc:b7:54: 35:f0:9a:3a:63:c3:12:48:d7:44:eb:41:4b:80:cf: 7c:22:a6:ce:ec:3f:7a:32:31:3f:e3:21:30:45:ad: 49:df:23:03:d2:20:d5:b9:4f:07:3a:1c:07:af:79: db:82:64:93:2b:fc:c3:13:b3:85:06:0d:b2:0a:88: fb:8a:5b:a5:59:e7:b2:d3:c9:78:9a:74:69:97:bb: fa:02:1a:be:b7:3f:9f:a5:13:9a:b6:ef:0c:4c:c8: 91:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:37:3B:96:F9:A0:40:B9:9A:C5:1E:B8:34:14:F3:95:62:46:77:EE X509v3 Authority Key Identifier: keyid:19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:2c:c5:f7:f7:3c:6c:c8:6f:37:13:ec:a8:d2:67:bb:53:a5: 37:00:c6:fc:76:05:f2:54:99:6f:16:06:50:dc:e2:78:39:5c: 76:21:56:99:a7:6d:dd:66:5b:e1:05:d2:1a:ad:ef:6b:0b:54: f3:ea:42:17:fd:72:85:3f:2b:24:27:12:dc:69:fa:be:88:68: be:4d:cc:9e:6c:9a:ac:6d:bc:16:7c:a6:d5:01:b3:fb:13:5b: 36:c0:22:fe:aa:33:9e:f0:72:64:1f:40:ef:22:92:81:01:0f: 4b:ec:53:f9:3d:d6:d2:c2:3d:46:25:b4:68:52:5f:07:e2:b8: d7:0a:2f:5b:49:58:e7:c0:e7:0c:41:29:3e:e1:90:af:af:a7: 6b:9a:63:2d:0b:13:8f:f5:cc:07:a5:6f:cd:93:c4:f8:37:66: fc:50:95:bc:f1:9d:56:82:9a:6a:13:36:7f:26:33:49:ad:71: 41:12:6c:90:9a:9b:9a:d0:ee:1e:0c:c9:3c:f9:f7:1e:17:e5: e1:97:ee:a7:72:37:b4:a9:06:d2:42:90:97:b1:02:a4:79:71: d3:58:18:8b:ae:33:77:e1:85:ae:b7:92:53:91:d8:f4:f9:26: 6e:3b:54:7f:c3:62:46:3d:a9:d2:27:ac:93:97:52:63:ca:fb: 83:6c:0c:f4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUR3T/IHCi5GnTB8wV9m/2uOFU12YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkyQTI0NEQ3MDBCRkQ0OEUzNThFMkIyMUNCMUJBN0Ez QTVGQjE4NDAeFw0yNjA3MjQwOTI1NTRaFw0yNjA3MjUxMjI5NTRaMDMxMTAvBgNV BAMTKEIxMzczQjk2RjlBMDQwQjk5QUM1MUVCODM0MTRGMzk1NjI0Njc3RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi4wCGuh4PhtKtUkxzALWXMcQO Z3MefEXIv2Cct86w9NzIQbiZyFr4b+ZIWDE/rTcWwCj9RJk4F0RjgBHjaWV9Cnyx yzblw6SgEHoi1ayvlqk26RmaY6IFexxtMoUr9WNnIgN1ppw6UrOOyWaZHER8PyC9 zygdNWUEJNMWdHKlmmLmcYi/xAC9cXqQsQk3uegGwgPKIWuv0tlwxnGwOm+Twcy3 VDXwmjpjwxJI10TrQUuAz3wips7sP3oyMT/jITBFrUnfIwPSINW5Twc6HAeveduC ZJMr/MMTs4UGDbIKiPuKW6VZ57LTyXiadGmXu/oCGr63P5+lE5q27wxMyJHJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsTc7lvmgQLmaxR64NBTzlWJGd+4wHwYDVR0j BBgwFoAUGSokTXAL/UjjWOKyHLG6ejpfsYQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0MjkxNzYzMy8wLzE5MkEyNDRENzAwQkZENDhFMzU4RTJCMjFDQjFC QTdBM0E1RkIxODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTkyQTI0NEQ3MDBCRkQ0OEUzNThFMkIyMUNCMUJBN0EzQTVGQjE4NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI5MTc2MzMvMC8xOTJBMjQ0RDcwMEJG RDQ4RTM1OEUyQjIxQ0IxQkE3QTNBNUZCMTg0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCzF9/c8bMhv NxPsqNJnu1OlNwDG/HYF8lSZbxYGUNzieDlcdiFWmadt3WZb4QXSGq3vawtU8+pC F/1yhT8rJCcS3Gn6vohovk3MnmyarG28Fnym1QGz+xNbNsAi/qoznvByZB9A7yKS gQEPS+xT+T3W0sI9RiW0aFJfB+K41wovW0lY58DnDEEpPuGQr6+na5pjLQsTj/XM B6VvzZPE+Ddm/FCVvPGdVoKaahM2fyYzSa1xQRJskJqbmtDuHgzJPPn3Hhfl4Zfu p3I3tKkG0kKQl7ECpHlx01gYi64zd+GFrreSU5HY9PkmbjtUf8NiRj2p0iesk5dS Y8r7g2wM9A== -----END CERTIFICATE-----Generated at Fri Jul 24 19:15:03 2026 by rpki-client