$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft File: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft (raw, json) Hash identifier: cB/mbGg9d0PYLQl0LrSaXkVDkqcW85mwT76xJz8iQcQ= Subject key identifier: 7A:96:F1:B5:9E:8E:7B:AD:44:25:07:37:6C:9D:77:4C:5F:3A:1A:22 Authority key identifier: E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3 Certificate issuer: /CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3 Certificate serial: 21F4F9E6C5CDAFE689B48DEDFA6584CC5BA3BA54 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft Manifest number: F3 Signing time: Fri 24 Jul 2026 11:01:03 +0000 Manifest this update: Fri 24 Jul 2026 10:56:03 +0000 Manifest next update: Sat 25 Jul 2026 11:33:03 +0000 Files and hashes: 1: 3130332e3139312e3130322e302f32332d3234203d3e20313436373731.roa (hash: qAdl9Mqv3eghaNLnjs9oT32gnvAkpvMtk+dQyAwDJFg=) 2: 323430303a393565303a3a2f33322d3438203d3e20313436373731.roa (hash: oiFeA5HCtr2Fpw6iWNSFO+M1S+ANQ/Wm7HsdABpTV6Y=) 3: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl (hash: bxo637WS9wFKFaHKChBOKdb1JKzkcHBCdqhGEraSEN0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f4:f9:e6:c5:cd:af:e6:89:b4:8d:ed:fa:65:84:cc:5b:a3:ba:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3 Validity Not Before: Jul 24 10:56:03 2026 GMT Not After : Jul 25 11:33:03 2026 GMT Subject: CN=7A96F1B59E8E7BAD442507376C9D774C5F3A1A22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:23:ac:6e:35:01:db:76:53:f9:3d:dc:c6: a3:4d:04:c2:ea:25:0b:99:48:25:1d:f8:a3:68:ca: 43:dd:e5:cb:42:d3:d3:cd:08:0c:3e:5f:4c:07:2d: e0:13:74:01:22:48:7d:5e:3b:e7:ac:06:8c:f0:ad: 8b:a4:56:c1:c2:c7:8e:d1:b1:2e:d7:38:39:cb:07: df:34:57:9e:92:66:2e:b8:01:34:54:4a:c8:c7:13: 34:5a:56:5a:5c:2d:98:86:10:cf:21:6b:2d:66:49: 6c:7a:32:6d:6f:fd:29:77:53:3b:1b:ed:18:70:61: cc:97:a8:34:7a:ce:21:ae:3f:cd:02:dc:2d:2f:28: e5:34:45:fd:e2:a6:f6:5e:86:8c:a7:37:e2:37:a7: 49:26:95:11:97:b8:4e:f1:9e:ad:ec:16:9f:9f:31: 7a:37:3e:35:00:5c:2d:a2:63:87:c9:33:c8:ca:f9: 8f:c3:fb:8f:f6:22:29:6a:94:17:48:a0:db:ce:94: 23:45:08:57:c3:af:1e:49:41:6b:3f:75:b9:79:95: cd:ac:d8:f6:65:82:1a:73:16:a5:6f:d9:79:0a:0e: ce:6d:7d:d7:96:f9:c7:73:56:28:77:33:83:b3:5a: 15:ac:9f:94:03:16:ae:ae:14:bb:45:11:fe:41:97: d1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:96:F1:B5:9E:8E:7B:AD:44:25:07:37:6C:9D:77:4C:5F:3A:1A:22 X509v3 Authority Key Identifier: keyid:E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d1:21:61:c6:01:68:ed:0a:81:35:cd:22:d6:e8:f5:1e:39: 51:dc:d9:13:79:6c:a6:34:68:81:dc:bc:d9:ca:ae:c9:a4:31: 68:1d:3c:0d:59:c0:50:98:91:c0:c6:e4:23:b1:42:75:14:ff: 44:6c:48:fa:0d:d6:c9:6a:55:de:fd:97:15:15:36:73:68:63: 12:c3:39:32:e2:72:a0:47:ba:8f:82:3e:06:31:68:23:70:71: f6:db:94:be:40:1c:41:8f:0e:73:ca:e1:eb:68:9b:7a:8f:42: e0:8e:ac:67:a4:a8:b5:ca:76:e2:5a:79:18:a4:21:58:0f:fe: 59:b3:87:a1:03:60:60:bd:e5:96:2e:b9:ee:5d:10:6d:ee:57: 4a:1b:8f:d2:9b:bb:d8:d4:f9:4c:87:9a:dd:35:34:6d:84:ad: cf:b8:4e:98:be:d8:b4:a5:61:9b:da:7a:d3:e5:89:6c:c0:26: 06:cd:bd:77:18:bd:89:fd:37:bf:91:e1:7e:02:f7:2a:5f:21: 84:cd:49:c1:be:b9:00:63:4c:b7:e6:26:d4:d4:f6:1e:21:0a: 25:7a:01:b1:04:a1:07:18:b9:e5:eb:fb:ca:f3:e0:92:aa:b5: e5:4a:f7:a2:0b:ee:a0:9f:8e:89:f8:e4:5a:bd:52:86:aa:9d: 1c:10:4f:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIfT55sXNr+aJtI3t+mWEzFujulQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5REFDN0E1MjgyQUYwQjQ0NkUxQzk2NEY3RjQ1MDlB OTYxNzdEMzAeFw0yNjA3MjQxMDU2MDNaFw0yNjA3MjUxMTMzMDNaMDMxMTAvBgNV BAMTKDdBOTZGMUI1OUU4RTdCQUQ0NDI1MDczNzZDOUQ3NzRDNUYzQTFBMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBiOsbjUB23ZT+T3cxqNNBMLq JQuZSCUd+KNoykPd5ctC09PNCAw+X0wHLeATdAEiSH1eO+esBozwrYukVsHCx47R sS7XODnLB980V56SZi64ATRUSsjHEzRaVlpcLZiGEM8hay1mSWx6Mm1v/Sl3Uzsb 7RhwYcyXqDR6ziGuP80C3C0vKOU0Rf3ipvZehoynN+I3p0kmlRGXuE7xnq3sFp+f MXo3PjUAXC2iY4fJM8jK+Y/D+4/2IilqlBdIoNvOlCNFCFfDrx5JQWs/dbl5lc2s 2PZlghpzFqVv2XkKDs5tfdeW+cdzVih3M4OzWhWsn5QDFq6uFLtFEf5Bl9G1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUepbxtZ6Oe61EJQc3bJ13TF86GiIwHwYDVR0j BBgwFoAU4Z2selKCrwtEbhyWT39FCalhd9MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 OTE0ODkzOTU1NjQ4NzE2OS8wL0UxOURBQzdBNTI4MkFGMEI0NDZFMUM5NjRGN0Y0 NTA5QTk2MTc3RDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTE5REFDN0E1MjgyQUYwQjQ0NkUxQzk2NEY3RjQ1MDlBOTYxNzdEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjkxNDg5Mzk1NTY0ODcxNjkvMC9FMTlEQUM3QTUyODJB RjBCNDQ2RTFDOTY0RjdGNDUwOUE5NjE3N0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdEhYcYBaO0K gTXNItbo9R45UdzZE3lspjRogdy82cquyaQxaB08DVnAUJiRwMbkI7FCdRT/RGxI +g3WyWpV3v2XFRU2c2hjEsM5MuJyoEe6j4I+BjFoI3Bx9tuUvkAcQY8Oc8rh62ib eo9C4I6sZ6Sotcp24lp5GKQhWA/+WbOHoQNgYL3lli657l0Qbe5XShuP0pu72NT5 TIea3TU0bYStz7hOmL7YtKVhm9p60+WJbMAmBs29dxi9if03v5HhfgL3Kl8hhM1J wb65AGNMt+Ym1NT2HiEKJXoBsQShBxi55ev7yvPgkqq15Ur3ogvuoJ+OifjkWr1S hqqdHBBPMQ== -----END CERTIFICATE-----Generated at Fri Jul 24 20:10:40 2026 by rpki-client