$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft File: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft (raw, json) Hash identifier: sq+YmJ0lKjbLaPQPLMDEiUG7w9geFT2LqYCEZTJIU7w= Subject key identifier: C8:2A:BC:E9:E4:EE:1F:B4:DA:D8:9F:A6:0B:B6:92:C1:17:7F:75:39 Authority key identifier: E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3 Certificate issuer: /CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3 Certificate serial: 44B450B4627778EE2A352CD394E406655A8416D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft Manifest number: 53 Signing time: Thu 26 Mar 2026 17:43:28 +0000 Manifest this update: Thu 26 Mar 2026 17:38:28 +0000 Manifest next update: Fri 27 Mar 2026 21:33:28 +0000 Files and hashes: 1: 3130332e3139312e3130322e302f32332d3234203d3e20313436373731.roa (hash: qAdl9Mqv3eghaNLnjs9oT32gnvAkpvMtk+dQyAwDJFg=) 2: 323430303a393565303a3a2f33322d3438203d3e20313436373731.roa (hash: oiFeA5HCtr2Fpw6iWNSFO+M1S+ANQ/Wm7HsdABpTV6Y=) 3: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl (hash: tVomgurBT/nhqh1NTWvlhGZvMsG+Nb4FYgEI5MOYGuA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b4:50:b4:62:77:78:ee:2a:35:2c:d3:94:e4:06:65:5a:84:16:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3 Validity Not Before: Mar 26 17:38:28 2026 GMT Not After : Mar 27 21:33:28 2026 GMT Subject: CN=C82ABCE9E4EE1FB4DAD89FA60BB692C1177F7539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:22:b0:34:d4:13:ad:38:e1:48:65:92:c0:84: 18:db:de:02:26:5e:6c:7a:2c:a3:b7:30:d8:3c:c0: eb:ef:2c:52:34:4b:e5:97:be:d2:16:cd:a7:11:d7: 65:f3:d3:a9:39:cb:6f:06:0d:42:62:0e:8b:bf:a5: be:9a:e5:0b:4b:ff:0a:15:26:0b:c1:bc:9e:84:6a: 9f:ed:5f:d6:c7:28:ca:79:89:91:f7:30:26:29:af: 52:48:cc:d1:e2:ce:46:52:ac:83:8e:b3:c6:40:98: 28:80:e1:e7:9d:8d:8f:2b:85:e5:c5:7a:50:51:61: 9f:42:2a:93:35:67:3c:e1:0b:14:b9:ba:d7:7e:e0: 61:49:eb:7d:fe:9e:0b:0a:e6:b9:22:b4:a4:29:64: d5:4e:8a:59:ea:e1:3b:e0:42:8c:4f:19:17:85:67: 4c:22:35:2f:3a:68:72:14:ad:b2:ca:82:3a:1e:38: 0b:1a:f3:62:bc:f3:ed:20:cc:e6:ea:a7:44:75:1e: 16:ef:09:db:b2:32:83:85:26:e3:fb:6f:af:f7:3f: b8:ec:ee:3d:d2:37:cb:3b:27:10:0e:57:f5:ca:81: 1e:9f:83:30:e8:4e:33:94:74:0d:e5:a9:3a:1e:15: ca:0b:5d:a3:da:9e:a0:3a:5f:b6:e7:4a:8f:02:f1: b7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2A:BC:E9:E4:EE:1F:B4:DA:D8:9F:A6:0B:B6:92:C1:17:7F:75:39 X509v3 Authority Key Identifier: keyid:E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e7:89:3f:aa:39:82:aa:15:bb:e5:1f:63:b2:9c:45:f0:db: ef:90:14:2e:be:87:09:66:85:04:ad:7f:43:bf:11:f6:bf:93: c7:07:1f:a5:5d:06:fb:bf:1d:e3:3e:10:60:9c:a8:d9:fa:d1: 11:a0:34:9f:ee:ca:6b:6b:67:c3:54:2e:ee:64:a1:67:42:c8: 54:1f:fb:ca:bc:17:23:e3:59:9b:d7:08:c7:bd:ed:c7:85:0a: af:a9:b1:f1:97:bc:f5:fa:60:76:52:04:0d:1e:32:75:d4:bb: 1d:1a:a8:d0:01:1d:a9:45:57:9b:fd:8f:b9:f6:1f:24:4f:fc: 21:84:b2:61:34:77:14:bc:30:c6:e9:0f:9f:6c:a2:4b:b7:f1: 55:f0:30:0a:bb:5a:cc:28:1d:2f:44:e2:9f:11:c8:5a:0c:b9: 59:0c:fa:e7:9a:67:fc:ac:ad:0e:8c:f7:6f:14:f8:b8:c3:76: ac:a5:16:e5:8a:d7:6b:93:2d:e1:6d:ab:ef:f0:a5:01:05:30: d0:a4:da:d8:40:c5:b8:ea:c6:35:45:5c:3e:24:ff:c5:0e:67: e4:29:0f:5f:f1:4f:fd:04:06:07:70:83:f5:01:8f:e2:46:5d: ba:62:d9:aa:bf:fd:d7:a0:8a:08:ba:9b:19:da:04:d8:63:63: 72:88:c2:cd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURLRQtGJ3eO4qNSzTlOQGZVqEFtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5REFDN0E1MjgyQUYwQjQ0NkUxQzk2NEY3RjQ1MDlB OTYxNzdEMzAeFw0yNjAzMjYxNzM4MjhaFw0yNjAzMjcyMTMzMjhaMDMxMTAvBgNV BAMTKEM4MkFCQ0U5RTRFRTFGQjREQUQ4OUZBNjBCQjY5MkMxMTc3Rjc1MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3IrA01BOtOOFIZZLAhBjb3gIm Xmx6LKO3MNg8wOvvLFI0S+WXvtIWzacR12Xz06k5y28GDUJiDou/pb6a5QtL/woV JgvBvJ6Eap/tX9bHKMp5iZH3MCYpr1JIzNHizkZSrIOOs8ZAmCiA4eedjY8rheXF elBRYZ9CKpM1ZzzhCxS5utd+4GFJ633+ngsK5rkitKQpZNVOilnq4TvgQoxPGReF Z0wiNS86aHIUrbLKgjoeOAsa82K88+0gzObqp0R1HhbvCduyMoOFJuP7b6/3P7js 7j3SN8s7JxAOV/XKgR6fgzDoTjOUdA3lqToeFcoLXaPanqA6X7bnSo8C8bdzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyCq86eTuH7Ta2J+mC7aSwRd/dTkwHwYDVR0j BBgwFoAU4Z2selKCrwtEbhyWT39FCalhd9MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 OTE0ODkzOTU1NjQ4NzE2OS8wL0UxOURBQzdBNTI4MkFGMEI0NDZFMUM5NjRGN0Y0 NTA5QTk2MTc3RDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTE5REFDN0E1MjgyQUYwQjQ0NkUxQzk2NEY3RjQ1MDlBOTYxNzdEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjkxNDg5Mzk1NTY0ODcxNjkvMC9FMTlEQUM3QTUyODJB RjBCNDQ2RTFDOTY0RjdGNDUwOUE5NjE3N0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjueJP6o5gqoV u+UfY7KcRfDb75AULr6HCWaFBK1/Q78R9r+TxwcfpV0G+78d4z4QYJyo2frREaA0 n+7Ka2tnw1Qu7mShZ0LIVB/7yrwXI+NZm9cIx73tx4UKr6mx8Ze89fpgdlIEDR4y ddS7HRqo0AEdqUVXm/2PufYfJE/8IYSyYTR3FLwwxukPn2yiS7fxVfAwCrtazCgd L0TinxHIWgy5WQz655pn/KytDoz3bxT4uMN2rKUW5YrXa5Mt4W2r7/ClAQUw0KTa 2EDFuOrGNUVcPiT/xQ5n5CkPX/FP/QQGB3CD9QGP4kZdumLZqr/916CKCLqbGdoE 2GNjcojCzQ== -----END CERTIFICATE-----Generated at Fri Mar 27 01:29:07 2026 by rpki-client