$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft File: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft (raw, json) Hash identifier: TvMpIEmJeWFaklyWT17wAAkRYRosF8+k6Z5VSSTYQCk= Subject key identifier: 99:50:8A:A8:04:90:93:31:EB:5D:3F:89:60:53:62:A7:48:C0:A0:B4 Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Certificate serial: 63686D971D2A29CBC9B66506953CBB31763588EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft Manifest number: 012B Signing time: Fri 24 Jul 2026 03:15:14 +0000 Manifest this update: Fri 24 Jul 2026 03:10:14 +0000 Manifest next update: Sat 25 Jul 2026 03:46:14 +0000 Files and hashes: 1: AS23724.roa (hash: W9hq4noVS3K8oFSoam54kFzfyzZ8KLodeD0jWtdBu+E=) 2: AS38365.roa (hash: GfhbepfPCiBLiW7f7C/pzcTtvnquxDHsuz1kUUcRsRU=) 3: AS136958.roa (hash: HEG2G2FDqpPcwg9U+B72KeFsxwTgTK4fYMDfE+rG2vc=) 4: AS58563.roa (hash: kYInOTPip8w5PslmevGG8vQjhMgGwaKWoF+4hhPIBAc=) 5: AS56040.roa (hash: W81Ik1UbVtj0SRWqtC3P7xyEWt3IgDbB4QjgkvOz+tY=) 6: AS58540.roa (hash: ODEMxdA+rDgGXKZmPBMgK9yomv/d+1QGAeEkWm3Q6yA=) 7: AS55967.roa (hash: JWz91HIzRpIvCaetNDaEjl+15GD/QV9ZC2R8TKVFSiA=) 8: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl (hash: azdKc9r0MEidutHz4x574CEEuMZ9HeR70v2z75lNPx8=) 9: AS38627.roa (hash: nFp+8yml9hkEza1wgfZStNJI0UTaVHYBZwksHuv4bH0=) 10: AS140903.roa (hash: iyz26ug9khgPrNNhJtEuOhWmlszHQlfbJTsEIMCRpnM=) 11: AS134756.roa (hash: R0qO1qhdZDTQtnkct1FnPpedhyffJKgR3uHLGveHyaU=) 12: AS58466.roa (hash: pNtrvsIxnKSPSR3qrnhNlUDUeD+0ItvWPxCmkPmSobo=) 13: AS4808.roa (hash: nfus4h8QwbxcdSJltah7w99JVhAwpPCoz9XlgVyX9D4=) 14: AS38283.roa (hash: b+LNtB8BnlfAgJOygGrMMt2yq1yQieV7mM6TBSUOHTg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:68:6d:97:1d:2a:29:cb:c9:b6:65:06:95:3c:bb:31:76:35:88:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Validity Not Before: Jul 24 03:10:14 2026 GMT Not After : Jul 25 03:46:14 2026 GMT Subject: CN=99508AA804909331EB5D3F89605362A748C0A0B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:54:7c:a0:10:00:a2:94:d6:1f:08:59:1a:b9: 59:77:db:2d:64:4b:9f:8a:a9:b1:64:16:47:95:40: 42:fb:c7:fc:6a:5e:3a:a7:94:f0:5d:65:a6:53:51: 62:35:0c:e4:25:ec:fc:3d:18:fe:28:d4:10:af:88: 0b:15:24:2a:80:1f:1b:63:7f:27:0f:3d:71:93:70: ec:69:aa:7c:81:c3:81:b7:f8:af:3f:8c:64:94:64: 2a:90:bc:6e:9e:9d:6f:19:a3:f0:bf:48:b9:c8:37: c0:30:43:42:1d:99:ae:22:e3:42:86:d1:eb:72:50: 45:99:6b:e0:90:e4:ae:a9:8a:4e:8a:59:ee:90:f7: c1:54:6a:fa:a9:ed:9a:81:66:ba:44:20:52:0f:85: ff:b0:50:f5:ce:98:4b:eb:91:5c:f8:45:bf:e5:11: f8:6c:ea:6e:a6:1e:23:72:9c:b7:4b:7b:bb:5b:32: 2e:f3:1e:e3:05:26:69:47:63:21:74:d6:ea:a9:f3: d0:61:32:66:32:e5:1a:34:ca:f0:80:3d:3f:70:c9: 28:88:d5:97:fd:5d:91:cc:fb:b1:56:8e:90:ed:c6: 53:7b:41:43:0d:44:15:1a:93:ed:aa:87:7c:bf:0b: 9d:4e:44:75:95:bc:e2:a7:18:b8:63:de:3e:77:8a: 13:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:50:8A:A8:04:90:93:31:EB:5D:3F:89:60:53:62:A7:48:C0:A0:B4 X509v3 Authority Key Identifier: keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:8c:fc:23:7c:f6:fd:a1:d8:8a:83:c7:1c:16:fe:8b:8a:39: 74:a2:ce:3b:52:f7:9f:6e:02:97:d9:41:66:71:54:89:84:63: 5c:20:c2:46:3a:a6:0f:b6:85:b4:37:f0:d3:c7:9e:f3:5d:f1: 7b:f6:04:14:15:e4:7a:5e:5a:c0:3d:94:6b:95:67:41:01:1a: 68:1a:46:48:d8:c7:3b:a7:80:7c:68:c5:99:f3:10:d2:07:04: 49:8d:10:99:85:fe:35:df:e4:65:cb:1f:67:01:47:35:53:2b: fe:70:d9:2e:4c:d7:21:96:40:5b:1e:a0:97:7b:80:f5:60:62: 81:e7:84:c5:49:d3:85:c2:b0:36:27:87:03:db:d6:75:b5:54: 75:10:0b:02:4a:1a:3f:cc:b5:71:50:79:ea:83:18:67:60:90: ce:20:eb:65:e0:36:08:e2:9f:d0:93:8e:b2:f0:43:6c:25:0a: 37:02:45:9d:ce:c1:d7:96:d1:e6:95:6f:3c:b7:31:8d:9c:a0: ab:bd:28:01:31:a8:ab:ec:36:dc:54:d1:1e:d6:69:6c:e5:9f: cb:1e:ca:f2:24:91:c1:30:58:7c:93:55:3c:67:ad:0e:cd:1f: 57:a6:7b:86:5e:18:5b:58:8d:3d:54:38:bf:74:a6:85:37:99: ca:8f:82:f8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUY2htlx0qKcvJtmUGlTy7MXY1iOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB OEVCQTcwRTAeFw0yNjA3MjQwMzEwMTRaFw0yNjA3MjUwMzQ2MTRaMDMxMTAvBgNV BAMTKDk5NTA4QUE4MDQ5MDkzMzFFQjVEM0Y4OTYwNTM2MkE3NDhDMEEwQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmVHygEACilNYfCFkauVl32y1k S5+KqbFkFkeVQEL7x/xqXjqnlPBdZaZTUWI1DOQl7Pw9GP4o1BCviAsVJCqAHxtj fycPPXGTcOxpqnyBw4G3+K8/jGSUZCqQvG6enW8Zo/C/SLnIN8AwQ0Idma4i40KG 0etyUEWZa+CQ5K6pik6KWe6Q98FUavqp7ZqBZrpEIFIPhf+wUPXOmEvrkVz4Rb/l Efhs6m6mHiNynLdLe7tbMi7zHuMFJmlHYyF01uqp89BhMmYy5Ro0yvCAPT9wySiI 1Zf9XZHM+7FWjpDtxlN7QUMNRBUak+2qh3y/C51ORHWVvOKnGLhj3j53ihPvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmVCKqASQkzHrXT+JYFNip0jAoLQwHwYDVR0j BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxMTM5MjIvMC9BMTk2NzIyMDZBOURB N0RGNDI5NTM2QzlCRkZBREE5NEE4RUJBNzBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIz8I3z2/aHY ioPHHBb+i4o5dKLOO1L3n24Cl9lBZnFUiYRjXCDCRjqmD7aFtDfw08ee813xe/YE FBXkel5awD2Ua5VnQQEaaBpGSNjHO6eAfGjFmfMQ0gcESY0QmYX+Nd/kZcsfZwFH NVMr/nDZLkzXIZZAWx6gl3uA9WBigeeExUnThcKwNieHA9vWdbVUdRALAkoaP8y1 cVB56oMYZ2CQziDrZeA2COKf0JOOsvBDbCUKNwJFnc7B15bR5pVvPLcxjZygq70o ATGoq+w23FTRHtZpbOWfyx7K8iSRwTBYfJNVPGetDs0fV6Z7hl4YW1iNPVQ4v3Sm hTeZyo+C+A== -----END CERTIFICATE-----Generated at Fri Jul 24 17:17:48 2026 by rpki-client