$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft File: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft (raw, json) Hash identifier: ybf5Ua+rQRvdTjXEULCkqv5xSdDhIFojyBQ7OF4Otno= Subject key identifier: 74:CF:DA:45:BE:9E:18:CB:3A:E5:BB:CB:8E:1E:F7:D5:19:A4:31:20 Authority key identifier: E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3 Certificate issuer: /CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3 Certificate serial: 27333F3D1EF6CBFD5937B7240E4AD08C84742342 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft Manifest number: 0136 Signing time: Tue 13 Oct 2026 01:57:38 +0000 Manifest this update: Tue 13 Oct 2026 01:52:38 +0000 Manifest next update: Fri 16 Oct 2026 03:04:38 +0000 Files and hashes: 1: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl (hash: gfQdwjR6muR7dsvwMRltGetdRMowicM7YA3B1mRNWkk=) 2: 323430303a393565303a3a2f33322d3438203d3e20313436373731.roa (hash: oiFeA5HCtr2Fpw6iWNSFO+M1S+ANQ/Wm7HsdABpTV6Y=) 3: 3130332e3139312e3130322e302f32332d3234203d3e20313436373731.roa (hash: qAdl9Mqv3eghaNLnjs9oT32gnvAkpvMtk+dQyAwDJFg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 03:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:33:3f:3d:1e:f6:cb:fd:59:37:b7:24:0e:4a:d0:8c:84:74:23:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3 Validity Not Before: Oct 13 01:52:38 2026 GMT Not After : Oct 16 03:04:38 2026 GMT Subject: CN=74CFDA45BE9E18CB3AE5BBCB8E1EF7D519A43120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:61:64:8a:54:20:3e:cb:02:0d:ce:22:4b:bc: 24:06:49:7a:9e:c5:3e:9a:69:7e:9d:12:93:9d:a9: 15:bc:4b:7c:a9:83:1c:f6:df:c6:a9:cb:de:c5:4b: 94:60:ec:a4:58:be:7f:0c:1b:3f:fd:92:f0:f7:a9: dc:7a:69:a2:73:b9:94:11:f6:a5:d1:f0:c0:ba:6d: 86:4f:58:42:0d:91:c9:a5:53:74:7c:f4:f6:b7:41: 9c:89:71:75:2a:8b:7f:7c:36:ee:46:bd:80:fe:db: 7d:0c:1a:c3:f6:7a:ec:89:7a:19:0d:6b:97:2a:24: 18:d3:5a:93:32:99:97:fc:8d:b3:9b:e2:0c:62:c4: e4:bc:17:4c:16:b7:a3:57:86:1f:10:a6:96:a9:67: 41:25:5b:a6:9a:90:c0:02:19:b3:84:d5:66:a7:45: 1c:1f:08:9b:80:1f:85:b4:2d:e3:f8:4a:2e:50:1e: a8:c7:38:30:ab:3d:10:97:9c:06:62:c2:9f:79:f1: 2c:af:40:83:f4:bf:d6:b4:15:13:f5:27:55:13:73: ee:0f:a8:5f:e0:73:80:ae:c0:40:ba:4c:2f:11:36: cd:c8:00:67:8f:14:f2:55:5f:c3:0e:af:28:f8:13: 6f:34:6e:2a:26:25:0a:58:09:7d:38:b4:4b:31:f3: c8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CF:DA:45:BE:9E:18:CB:3A:E5:BB:CB:8E:1E:F7:D5:19:A4:31:20 X509v3 Authority Key Identifier: keyid:E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:b4:ec:03:9d:c0:cf:06:6c:45:31:d5:cf:f5:42:f4:6c:3e: a1:bc:12:85:e1:c2:0b:81:a8:c9:4d:de:1c:2f:d9:fa:8f:43: 01:2f:7a:3c:85:48:c8:80:89:72:ec:08:1b:1c:93:10:29:b8: 50:e1:89:3a:f1:69:7c:fb:e2:af:22:2b:12:ed:00:67:a8:c6: 92:78:c8:2f:4b:bc:21:75:38:ef:10:14:c7:6b:af:a7:fb:44: 36:1a:89:1e:ec:71:7a:41:19:c5:c0:c4:16:cc:f6:14:ef:e4: b1:3c:ca:7b:12:ba:29:10:75:ae:92:db:4c:47:88:c9:49:e5: db:a1:e7:60:e2:8c:c6:1c:14:85:8e:f6:de:b7:66:55:4b:f3: 40:9c:96:f9:64:80:c7:6b:34:e4:97:09:61:ea:2f:59:63:9e: bb:3c:c1:d7:9b:75:ed:52:b5:4c:10:9b:19:ff:44:69:fd:a5: c3:24:90:f1:6c:fa:04:10:29:c1:4d:04:69:e3:d1:c2:7b:fc: 2d:5e:1c:f8:02:fb:11:a7:c2:5e:2c:cc:5a:57:55:92:32:e4: 50:7c:67:e4:ec:ae:ad:ae:d7:f1:ce:0f:00:fc:bb:78:ac:4c: 32:8d:05:fb:26:8a:c9:81:12:02:e8:ba:08:22:18:f7:49:ef: 65:66:78:d7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJzM/PR72y/1ZN7ckDkrQjIR0I0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5REFDN0E1MjgyQUYwQjQ0NkUxQzk2NEY3RjQ1MDlB OTYxNzdEMzAeFw0yNjEwMTMwMTUyMzhaFw0yNjEwMTYwMzA0MzhaMDMxMTAvBgNV BAMTKDc0Q0ZEQTQ1QkU5RTE4Q0IzQUU1QkJDQjhFMUVGN0Q1MTlBNDMxMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChYWSKVCA+ywINziJLvCQGSXqe xT6aaX6dEpOdqRW8S3ypgxz238apy97FS5Rg7KRYvn8MGz/9kvD3qdx6aaJzuZQR 9qXR8MC6bYZPWEINkcmlU3R89Pa3QZyJcXUqi398Nu5GvYD+230MGsP2euyJehkN a5cqJBjTWpMymZf8jbOb4gxixOS8F0wWt6NXhh8QppapZ0ElW6aakMACGbOE1Wan RRwfCJuAH4W0LeP4Si5QHqjHODCrPRCXnAZiwp958SyvQIP0v9a0FRP1J1UTc+4P qF/gc4CuwEC6TC8RNs3IAGePFPJVX8MOryj4E280biomJQpYCX04tEsx88hRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdM/aRb6eGMs65bvLjh731RmkMSAwHwYDVR0j BBgwFoAU4Z2selKCrwtEbhyWT39FCalhd9MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 OTE0ODkzOTU1NjQ4NzE2OS8wL0UxOURBQzdBNTI4MkFGMEI0NDZFMUM5NjRGN0Y0 NTA5QTk2MTc3RDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTE5REFDN0E1MjgyQUYwQjQ0NkUxQzk2NEY3RjQ1MDlBOTYxNzdEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjkxNDg5Mzk1NTY0ODcxNjkvMC9FMTlEQUM3QTUyODJB RjBCNDQ2RTFDOTY0RjdGNDUwOUE5NjE3N0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrTsA53AzwZs RTHVz/VC9Gw+obwSheHCC4GoyU3eHC/Z+o9DAS96PIVIyICJcuwIGxyTECm4UOGJ OvFpfPviryIrEu0AZ6jGknjIL0u8IXU47xAUx2uvp/tENhqJHuxxekEZxcDEFsz2 FO/ksTzKexK6KRB1rpLbTEeIyUnl26HnYOKMxhwUhY723rdmVUvzQJyW+WSAx2s0 5JcJYeovWWOeuzzB15t17VK1TBCbGf9Eaf2lwySQ8Wz6BBApwU0EaePRwnv8LV4c +AL7EafCXizMWldVkjLkUHxn5Oyura7X8c4PAPy7eKxMMo0F+yaKyYESAui6CCIY 90nvZWZ41w== -----END CERTIFICATE-----Generated at Wed Oct 14 04:48:18 2026 by rpki-client