$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft File: 191E76D74421148B42FA2A7F663270AE7FAD25F9.mft (raw, json) Hash identifier: XWEK/4fuhEDLEpQa3603x9LVziaQj9BRMvvHrd1KtBw= Subject key identifier: A4:7D:45:31:04:FC:51:6A:BE:E7:7B:72:3E:A0:E1:38:03:39:BB:D6 Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9 Certificate issuer: /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9 Certificate serial: 04F25ADB7B9E8FD807D35591C3847A265FE554D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 20:18:28 +0000 Manifest this update: Thu 26 Mar 2026 20:13:28 +0000 Manifest next update: Fri 27 Mar 2026 21:29:28 +0000 Files and hashes: 1: 191E76D74421148B42FA2A7F663270AE7FAD25F9.crl (hash: AtYG0ilW+bAPPcGgD7ShIstnrMgQOcPsbywi0c4Ku7s=) 2: 323430323a663963303a3a2f34382d3438203d3e20313337373937.roa (hash: Xa71V3zlzwJxLxJVMnOGWGmp2Wl6+BqPl/c74CX5nDA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f2:5a:db:7b:9e:8f:d8:07:d3:55:91:c3:84:7a:26:5f:e5:54:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9 Validity Not Before: Mar 26 20:13:28 2026 GMT Not After : Mar 27 21:29:28 2026 GMT Subject: CN=A47D453104FC516ABEE77B723EA0E1380339BBD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8e:51:80:77:48:4b:b6:65:e9:57:c2:59:05: 63:d1:f2:32:a6:17:b8:d6:32:a1:25:66:e9:fe:f2: 22:99:80:7f:12:16:70:66:5f:c5:fb:f8:eb:44:1c: ad:9c:8e:6f:c6:7e:fd:33:bf:06:ff:1b:ea:2c:12: 47:9d:cf:cf:b0:20:03:ac:c7:2b:5a:2c:40:b2:97: ee:82:ea:6e:17:a1:73:a3:5c:46:78:b9:13:36:19: 34:ce:ab:68:3c:5f:25:ff:0d:ff:07:de:51:bd:f4: db:6d:5f:70:ec:c3:d4:04:e4:e2:82:9e:01:a5:74: 5b:8d:c9:19:c8:85:8d:c9:dd:4e:f7:4e:27:b0:5d: ad:37:bf:39:60:c9:ef:2a:f4:d1:ce:c3:d0:dd:b5: e4:bd:02:0e:2d:34:9f:18:f7:79:1b:a3:26:ea:a1: 0a:6d:ae:3d:99:c9:f1:a0:7c:0f:41:99:04:dc:a6: 28:f4:a4:0f:a6:05:50:83:2e:a9:78:8c:fc:d4:b0: 8a:a6:17:37:f3:20:02:bb:be:44:26:44:cd:90:b8: d2:48:3b:b9:53:73:e1:c8:d8:fb:5e:63:eb:57:d0: 5e:0a:41:d2:12:88:73:15:fe:de:a1:a9:0c:e9:83: 3c:1a:34:ce:a2:9e:d8:67:01:07:02:e3:0f:1b:33: d6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7D:45:31:04:FC:51:6A:BE:E7:7B:72:3E:A0:E1:38:03:39:BB:D6 X509v3 Authority Key Identifier: keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:81:2f:2a:b1:3c:92:3a:69:74:04:61:d9:6f:39:72:9c:65: d6:d2:ba:4b:b7:82:14:bf:de:28:bb:65:f1:71:8e:f8:b5:5e: 16:13:29:0b:89:30:6a:fa:70:38:fa:3d:02:7a:27:bc:0f:aa: f5:57:e0:94:91:77:b5:8f:aa:e3:93:e0:6f:57:3b:5d:f0:a0: cf:75:0a:23:17:a0:bd:52:3f:c5:71:94:a1:40:36:ae:93:38: e0:a6:43:4e:05:26:5b:fc:dd:9a:8d:50:f9:d0:f1:90:c9:b8: 73:8c:a4:3b:6c:64:89:63:7c:78:b9:6c:1a:b1:15:29:e5:4a: 9a:d2:48:1e:12:a1:b8:e2:66:bc:ce:6e:6d:94:3f:ac:7e:21: 2b:9f:7e:57:3c:ef:a0:ca:87:3b:ba:3a:55:9b:1b:c4:85:bf: aa:0a:a9:2c:9b:22:f8:7b:c3:ff:c5:a3:07:d0:f2:b7:20:1b: 89:dd:1a:ed:8e:fc:54:af:65:73:cf:fc:2b:71:29:3b:28:d1: b8:80:3d:47:71:53:86:5f:d0:d3:93:cc:d2:d3:10:66:08:27: f4:a4:90:ea:7e:c6:7d:34:0b:5c:47:dc:ea:96:ea:95:f8:a9: f9:dd:77:9d:8d:08:8c:54:c5:57:35:19:18:85:5b:40:80:75: 49:8c:47:bf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBPJa23uej9gH01WRw4R6Jl/lVNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxRTc2RDc0NDIxMTQ4QjQyRkEyQTdGNjYzMjcwQUU3 RkFEMjVGOTAeFw0yNjAzMjYyMDEzMjhaFw0yNjAzMjcyMTI5MjhaMDMxMTAvBgNV BAMTKEE0N0Q0NTMxMDRGQzUxNkFCRUU3N0I3MjNFQTBFMTM4MDMzOUJCRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOjlGAd0hLtmXpV8JZBWPR8jKm F7jWMqElZun+8iKZgH8SFnBmX8X7+OtEHK2cjm/Gfv0zvwb/G+osEkedz8+wIAOs xytaLECyl+6C6m4XoXOjXEZ4uRM2GTTOq2g8XyX/Df8H3lG99NttX3Dsw9QE5OKC ngGldFuNyRnIhY3J3U73TiewXa03vzlgye8q9NHOw9DdteS9Ag4tNJ8Y93kboybq oQptrj2ZyfGgfA9BmQTcpij0pA+mBVCDLql4jPzUsIqmFzfzIAK7vkQmRM2QuNJI O7lTc+HI2PteY+tX0F4KQdISiHMV/t6hqQzpgzwaNM6inthnAQcC4w8bM9ZRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpH1FMQT8UWq+53tyPqDhOAM5u9YwHwYDVR0j BBgwFoAUGR5210QhFItC+ip/ZjJwrn+tJfkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzEyNjc4NS8wLzE5MUU3NkQ3NDQyMTE0OEI0MkZBMkE3RjY2MzI3 MEFFN0ZBRDI1RjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTkxRTc2RDc0NDIxMTQ4QjQyRkEyQTdGNjYzMjcwQUU3RkFEMjVGOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxMjY3ODUvMC8xOTFFNzZENzQ0MjEx NDhCNDJGQTJBN0Y2NjMyNzBBRTdGQUQyNUY5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIEvKrE8kjpp dARh2W85cpxl1tK6S7eCFL/eKLtl8XGO+LVeFhMpC4kwavpwOPo9AnonvA+q9Vfg lJF3tY+q45Pgb1c7XfCgz3UKIxegvVI/xXGUoUA2rpM44KZDTgUmW/zdmo1Q+dDx kMm4c4ykO2xkiWN8eLlsGrEVKeVKmtJIHhKhuOJmvM5ubZQ/rH4hK59+VzzvoMqH O7o6VZsbxIW/qgqpLJsi+HvD/8WjB9DytyAbid0a7Y78VK9lc8/8K3EpOyjRuIA9 R3FThl/Q05PM0tMQZggn9KSQ6n7GfTQLXEfc6pbqlfip+d13nY0IjFTFVzUZGIVb QIB1SYxHvw== -----END CERTIFICATE-----Generated at Fri Mar 27 04:59:24 2026 by rpki-client