$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft File: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft (raw, json) Hash identifier: hpNO1WnzpPqlNqmrd1jTIwzn/elfwP2z0wDCOZ/fwFg= Subject key identifier: 58:2F:D1:5F:15:13:99:BF:0E:4A:4D:6C:60:AC:BC:55:92:DB:47:4F Authority key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD Certificate issuer: /CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD Certificate serial: 10A0C14CE92AB3DC4437DDA9BE0936062C3B83C5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 03:23:28 +0000 Manifest this update: Thu 26 Mar 2026 03:18:28 +0000 Manifest next update: Fri 27 Mar 2026 07:06:28 +0000 Files and hashes: 1: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl (hash: keIzJ3dBdbrBu8mi4VKd1VTq5+sifVBvuDPIRVSeebA=) 2: 3134342e37392e31302e302f32332d3234203d3e20313531323531.roa (hash: WjMCSVc2nZ6LHlmIFS3fh2fKf0RsOi1ahfbmP+aZL0U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 04:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a0:c1:4c:e9:2a:b3:dc:44:37:dd:a9:be:09:36:06:2c:3b:83:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD Validity Not Before: Mar 26 03:18:28 2026 GMT Not After : Mar 27 07:06:28 2026 GMT Subject: CN=582FD15F151399BF0E4A4D6C60ACBC5592DB474F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:67:fc:6f:8a:14:8e:e9:2a:09:40:68:c7:6a: 64:7c:0d:f1:37:ea:b6:1c:c2:3e:33:28:0b:e0:ed: 03:53:69:25:4c:58:97:61:58:07:cf:d0:28:f7:f8: 4c:92:87:5d:4c:9e:e9:01:ac:76:32:9b:0b:7f:6a: cf:89:6e:80:b6:74:58:c7:1c:a8:14:bc:d7:25:19: fc:ed:b6:00:7a:ae:ca:91:16:c9:25:d4:57:d9:7d: 50:7c:6d:5f:61:77:42:07:bb:e9:1e:66:89:0d:6a: a1:2d:b6:e9:9e:4d:be:59:f8:45:07:8e:0d:9a:33: 87:f8:a6:1e:dc:27:82:85:09:36:20:76:21:4a:57: 1d:4f:4b:f4:cb:e1:ed:25:d9:ee:b7:b7:f9:2e:60: 58:ad:b8:52:b2:8f:6a:d9:d3:3d:84:a5:2d:1f:18: cb:d8:55:8e:09:cc:64:7a:a6:1f:cc:b7:94:0c:f0: 41:f4:2f:8b:57:a5:d7:51:62:54:b1:30:2f:6b:76: 33:2b:82:e9:4d:39:46:48:4a:17:4d:30:83:e5:ae: 00:c2:41:b3:0b:f3:27:ec:12:b6:b0:fe:50:c1:57: 3a:e8:80:ff:d2:79:3d:fa:5f:a6:c6:38:96:7e:15: f8:40:0a:b8:2e:1d:74:61:d5:37:34:c6:04:a0:4f: e6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2F:D1:5F:15:13:99:BF:0E:4A:4D:6C:60:AC:BC:55:92:DB:47:4F X509v3 Authority Key Identifier: keyid:19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:36:47:4b:34:97:d4:12:b2:9a:63:2e:ef:34:aa:a8:98:77: cb:3b:9a:d3:66:12:dc:99:c9:d3:07:60:52:e8:94:4e:50:3b: 92:79:e4:40:57:17:01:f3:51:1d:0f:95:a0:33:cd:33:ab:80: ec:0f:2c:9d:cb:c3:ad:0c:b4:cc:4e:0d:fa:fa:f1:cc:f5:72: c6:7f:82:a8:58:2c:11:e8:9e:f6:bd:4b:d1:e3:75:6e:1f:d5: f3:0b:13:76:53:25:fe:0e:c7:c6:51:30:36:07:c9:94:b8:45: 93:c3:56:ce:3f:10:ad:be:f0:c6:eb:6c:9e:7f:2d:a9:ef:ae: 37:c5:43:55:84:87:6f:c9:85:8d:85:41:ab:c0:0b:46:c4:6c: 01:de:fa:b3:aa:c5:86:8f:fa:33:e6:d7:d5:3a:e8:96:0a:57: 2b:54:6f:36:b5:fa:5d:d7:bf:71:3d:76:ff:46:88:e0:f3:59: bb:72:b7:c9:6a:87:84:ae:08:ac:8a:a2:bd:ec:b8:b4:68:b5: 22:a2:43:89:38:0e:69:d8:7d:fb:a5:ef:3a:a9:5d:a9:ea:86: 68:be:73:b2:53:a2:46:8d:53:c6:dc:ab:4e:08:34:e5:8a:26: 90:65:c3:1b:ba:3a:7b:44:6c:5a:04:20:96:4d:45:54:a7:45: eb:2f:fe:b1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEKDBTOkqs9xEN92pvgk2Biw7g8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2 NUJDNzdBRDAeFw0yNjAzMjYwMzE4MjhaFw0yNjAzMjcwNzA2MjhaMDMxMTAvBgNV BAMTKDU4MkZEMTVGMTUxMzk5QkYwRTRBNEQ2QzYwQUNCQzU1OTJEQjQ3NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpZ/xvihSO6SoJQGjHamR8DfE3 6rYcwj4zKAvg7QNTaSVMWJdhWAfP0Cj3+EySh11MnukBrHYymwt/as+JboC2dFjH HKgUvNclGfzttgB6rsqRFskl1FfZfVB8bV9hd0IHu+keZokNaqEttumeTb5Z+EUH jg2aM4f4ph7cJ4KFCTYgdiFKVx1PS/TL4e0l2e63t/kuYFituFKyj2rZ0z2EpS0f GMvYVY4JzGR6ph/Mt5QM8EH0L4tXpddRYlSxMC9rdjMrgulNOUZIShdNMIPlrgDC QbML8yfsEraw/lDBVzrogP/SeT36X6bGOJZ+FfhACrguHXRh1Tc0xgSgT+aXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWC/RXxUTmb8OSk1sYKy8VZLbR08wHwYDVR0j BBgwFoAUGa5VZr+D0Ucv2dm65cxwEmW8d60wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTM5NDE3OS8xLzE5QUU1NTY2QkY4M0QxNDcyRkQ5RDlCQUU1Q0M3 MDEyNjVCQzc3QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2NUJDNzdBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMS8xOUFFNTU2NkJGODNE MTQ3MkZEOUQ5QkFFNUNDNzAxMjY1QkM3N0FELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3DZHSzSX1BKy mmMu7zSqqJh3yzua02YS3JnJ0wdgUuiUTlA7knnkQFcXAfNRHQ+VoDPNM6uA7A8s ncvDrQy0zE4N+vrxzPVyxn+CqFgsEeie9r1L0eN1bh/V8wsTdlMl/g7HxlEwNgfJ lLhFk8NWzj8Qrb7wxutsnn8tqe+uN8VDVYSHb8mFjYVBq8ALRsRsAd76s6rFho/6 M+bX1TrolgpXK1RvNrX6Xde/cT12/0aI4PNZu3K3yWqHhK4IrIqivey4tGi1IqJD iTgOadh9+6XvOqldqeqGaL5zslOiRo1TxtyrTgg05YomkGXDG7o6e0RsWgQglk1F VKdF6y/+sQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:37:16 2026 by rpki-client