$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft File: 192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft (raw, json) Hash identifier: W1wjLLWa88UcFejDcaLUA/x+Y+FJJGf+0wFW/159UkY= Subject key identifier: D9:EE:44:73:3A:87:D6:65:BC:72:68:7D:A0:59:67:93:36:53:E4:11 Authority key identifier: 19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84 Certificate issuer: /CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184 Certificate serial: 717042CBA73714177B35FD46AD115925A288862D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft Manifest number: 0166 Signing time: Sun 11 Oct 2026 16:25:43 +0000 Manifest this update: Sun 11 Oct 2026 16:20:43 +0000 Manifest next update: Thu 15 Oct 2026 02:38:43 +0000 Files and hashes: 1: 192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl (hash: pdks3NCObefbGX7BewHYH2Wob1Qy0QbMSgNJIiGS954=) 2: AS9812.roa (hash: TCsU4/hp59fDHvgCzxIh3dSpRzRqD4Ky9FA7aHqLkjQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:70:42:cb:a7:37:14:17:7b:35:fd:46:ad:11:59:25:a2:88:86:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184 Validity Not Before: Oct 11 16:20:43 2026 GMT Not After : Oct 15 02:38:43 2026 GMT Subject: CN=D9EE44733A87D665BC72687DA05967933653E411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d1:4b:59:64:5e:28:b6:17:14:8f:7c:1c:e9: 82:c0:85:77:2c:98:35:78:76:a7:33:d9:99:12:c6: ed:e4:7b:0c:70:fd:13:5b:3b:69:18:2b:05:06:46: 31:36:89:d6:f7:d1:ac:d9:4b:e8:f2:99:63:b5:c0: 54:41:9b:f1:7a:2d:72:66:c3:1e:4a:04:4e:21:66: d1:dc:93:a4:7d:57:e9:2c:f5:7a:fa:d8:11:22:5a: 03:1a:ec:b0:1c:75:35:ca:76:21:d9:02:23:ff:ed: f1:83:b5:e4:ab:b1:aa:c4:8d:8b:d4:47:2f:05:14: 85:ee:fc:45:5e:38:93:17:cd:13:d2:e2:6f:1c:a2: 7e:61:ed:17:c5:b6:75:f6:fe:09:cb:79:5c:4c:a1: be:18:25:b3:ce:16:2b:19:6e:f3:2b:67:16:c2:b6: f7:0c:2e:01:7e:da:99:f1:0e:0d:c7:74:e7:c9:8d: 22:71:0e:db:4c:f9:bb:37:56:a9:12:59:63:3f:b8: 3f:16:e9:7b:8a:01:e7:7a:bc:9e:bc:c4:84:5a:0f: 1a:e8:f7:45:44:74:9a:af:8e:a9:3d:0e:09:f3:d7: 77:c1:20:6b:c8:32:98:1c:ca:ae:d4:11:22:9f:02: 9d:b5:ec:7e:1a:51:a1:4a:29:f4:4b:35:71:2e:e6: 90:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EE:44:73:3A:87:D6:65:BC:72:68:7D:A0:59:67:93:36:53:E4:11 X509v3 Authority Key Identifier: keyid:19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:8d:1e:7f:e4:64:a5:f2:11:27:10:7c:b4:ad:3a:9c:0b:dc: 4a:a9:fe:d0:f4:50:78:85:0d:d8:43:3d:13:1f:6c:fd:30:c2: 79:6b:43:02:b6:73:f1:ee:cc:64:b6:0d:2e:6e:de:33:e9:d8: 96:70:56:b2:38:09:07:0a:10:45:df:3d:97:7b:02:15:0a:28: 1a:db:a7:47:f3:1e:ea:41:50:9b:ca:b9:c8:f7:ac:7a:83:8c: d7:62:51:96:7a:58:7a:e6:62:4c:aa:db:b0:e2:55:b1:17:de: ca:e1:56:98:05:93:81:21:ea:45:86:4b:92:71:ad:21:d6:46: 19:bd:06:b3:cd:46:6b:32:db:46:26:ed:31:73:8e:a6:be:9f: 33:90:9e:41:36:1b:e2:08:aa:68:55:aa:97:6b:a2:93:ef:be: 96:b7:14:56:90:ce:44:74:6f:09:c9:b7:bb:73:8a:aa:40:a4: a1:0d:91:8f:d7:12:82:d1:88:48:fe:64:e8:f0:0a:d7:94:ef: a4:81:d2:af:6f:ad:0a:76:3e:f5:f7:74:23:cf:64:3b:81:df: f6:6d:b5:68:70:28:dd:26:fa:45:3b:e6:84:df:ad:3a:ef:c1: 00:fd:ce:79:5e:98:3b:db:b3:aa:e6:01:53:e6:16:61:73:03: b4:22:b1:20 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcXBCy6c3FBd7Nf1GrRFZJaKIhi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkyQTI0NEQ3MDBCRkQ0OEUzNThFMkIyMUNCMUJBN0Ez QTVGQjE4NDAeFw0yNjEwMTExNjIwNDNaFw0yNjEwMTUwMjM4NDNaMDMxMTAvBgNV BAMTKEQ5RUU0NDczM0E4N0Q2NjVCQzcyNjg3REEwNTk2NzkzMzY1M0U0MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm0UtZZF4othcUj3wc6YLAhXcs mDV4dqcz2ZkSxu3kewxw/RNbO2kYKwUGRjE2idb30azZS+jymWO1wFRBm/F6LXJm wx5KBE4hZtHck6R9V+ks9Xr62BEiWgMa7LAcdTXKdiHZAiP/7fGDteSrsarEjYvU Ry8FFIXu/EVeOJMXzRPS4m8con5h7RfFtnX2/gnLeVxMob4YJbPOFisZbvMrZxbC tvcMLgF+2pnxDg3HdOfJjSJxDttM+bs3VqkSWWM/uD8W6XuKAed6vJ68xIRaDxro 90VEdJqvjqk9Dgnz13fBIGvIMpgcyq7UESKfAp217H4aUaFKKfRLNXEu5pDZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2e5EczqH1mW8cmh9oFlnkzZT5BEwHwYDVR0j BBgwFoAUGSokTXAL/UjjWOKyHLG6ejpfsYQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0MjkxNzYzMy8wLzE5MkEyNDRENzAwQkZENDhFMzU4RTJCMjFDQjFC QTdBM0E1RkIxODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTkyQTI0NEQ3MDBCRkQ0OEUzNThFMkIyMUNCMUJBN0EzQTVGQjE4NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI5MTc2MzMvMC8xOTJBMjQ0RDcwMEJG RDQ4RTM1OEUyQjIxQ0IxQkE3QTNBNUZCMTg0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQY0ef+RkpfIR JxB8tK06nAvcSqn+0PRQeIUN2EM9Ex9s/TDCeWtDArZz8e7MZLYNLm7eM+nYlnBW sjgJBwoQRd89l3sCFQooGtunR/Me6kFQm8q5yPeseoOM12JRlnpYeuZiTKrbsOJV sRfeyuFWmAWTgSHqRYZLknGtIdZGGb0Gs81GazLbRibtMXOOpr6fM5CeQTYb4giq aFWql2uik+++lrcUVpDORHRvCcm3u3OKqkCkoQ2Rj9cSgtGISP5k6PAK15TvpIHS r2+tCnY+9fd0I89kO4Hf9m21aHAo3Sb6RTvmhN+tOu/BAP3OeV6YO9uzquYBU+YW YXMDtCKxIA== -----END CERTIFICATE-----Generated at Tue Oct 13 17:05:32 2026 by rpki-client