$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft File: 19C56F6C979C215AF864F9E18F7A8F62631A1268.mft (raw, json) Hash identifier: LfUTdlXKMcw39VbfeSOt8piiN0shcz87qkCppNtEjEg= Subject key identifier: 9C:40:09:45:B7:06:EF:2D:82:0D:6B:39:3F:F2:CE:D5:93:7C:58:EA Authority key identifier: 19:C5:6F:6C:97:9C:21:5A:F8:64:F9:E1:8F:7A:8F:62:63:1A:12:68 Certificate issuer: /CN=19C56F6C979C215AF864F9E18F7A8F62631A1268 Certificate serial: 1839F9750C446595821B41978C792966A4ED4CB4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft Manifest number: 25 Signing time: Wed 13 May 2026 12:51:04 +0000 Manifest this update: Wed 13 May 2026 12:46:04 +0000 Manifest next update: Thu 14 May 2026 15:07:04 +0000 Files and hashes: 1: 19C56F6C979C215AF864F9E18F7A8F62631A1268.crl (hash: LTZwZP6ZRR4vcFDoUmir78TKuu+y0iWhVqBOLlv40ZQ=) 2: 3130332e3135342e33302e302f32332d3233203d3e20313339313431.roa (hash: l7ihaAL2K1gp0WFgFaF5vhfWpS9Haphuut9+xh4iEFI=) 3: 323430363a353263303a3a2f33322d3332203d3e20313339313431.roa (hash: 0VCs7Br2LEypju+8+bG9yDec+3HSZ8IfNVbmHboPoB4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.crl rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:39:f9:75:0c:44:65:95:82:1b:41:97:8c:79:29:66:a4:ed:4c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19C56F6C979C215AF864F9E18F7A8F62631A1268 Validity Not Before: May 13 12:46:04 2026 GMT Not After : May 14 15:07:04 2026 GMT Subject: CN=9C400945B706EF2D820D6B393FF2CED5937C58EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:ec:19:73:a5:b5:28:70:95:62:6a:ab:ac: aa:a7:0d:42:7a:31:98:f0:fa:10:8a:12:81:82:90: ed:26:22:b2:d8:2d:7c:42:6a:ef:77:54:a2:21:1c: 74:4e:72:cf:b3:51:37:e5:c2:8f:b9:cd:e1:18:28: 0d:79:d0:57:4e:2e:3f:e4:f1:af:d4:81:41:b4:bb: cc:43:9d:1c:71:95:ca:53:96:be:45:54:d2:d9:a8: 8c:15:c3:68:8b:36:a6:c5:4c:d6:b3:ec:f2:e2:65: b4:d7:e3:5d:94:d1:50:b3:67:9c:3b:7f:6b:32:87: 4d:aa:f6:98:af:ea:7f:d1:4e:8d:be:5b:bc:3a:07: 2f:6f:df:41:7b:10:62:ae:33:7f:d7:9e:b9:d5:d0: b6:63:fd:72:44:d7:2b:91:32:30:6d:a6:bc:f4:ec: 69:56:21:61:e3:86:a2:73:b2:f5:fc:e6:16:7b:70: 6a:bf:13:99:b6:8b:b2:8d:e1:26:9f:28:44:27:66: 45:99:63:55:a4:35:bf:13:d9:73:08:3d:d4:d1:71: a1:cc:7c:02:fe:4b:37:06:7b:e8:83:75:4c:6d:fa: ef:a4:c0:69:57:eb:b3:b9:3c:53:23:24:f5:69:a1: 74:4d:ea:f9:1b:92:7e:ee:71:d6:9b:cd:bf:5c:b2: a0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:40:09:45:B7:06:EF:2D:82:0D:6B:39:3F:F2:CE:D5:93:7C:58:EA X509v3 Authority Key Identifier: keyid:19:C5:6F:6C:97:9C:21:5A:F8:64:F9:E1:8F:7A:8F:62:63:1A:12:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:83:07:0f:87:73:e9:e5:6a:b0:99:1f:23:db:8f:d5:be:31: 33:7b:36:04:b9:da:ab:dc:c0:4d:37:6d:d2:c3:a8:be:71:5b: ae:1f:d2:70:5a:a1:6c:ff:42:98:4b:35:65:33:17:c8:40:6b: 27:ab:a1:fe:e0:18:16:11:28:18:f1:0c:50:1a:b7:64:8b:81: ac:25:0e:37:d5:37:9d:07:38:9d:77:f5:ee:18:2a:92:f0:5b: 61:07:3e:f7:ff:16:28:1c:c1:79:84:e3:36:75:6b:9e:5e:26: 21:d1:b1:82:7a:dc:b4:c5:37:4d:aa:32:78:b3:05:c4:1d:31: 47:46:04:f3:42:96:e9:db:c9:fe:c8:3f:8d:27:db:61:b5:fd: 3a:64:6c:70:7f:be:22:7b:63:44:e0:8b:00:94:79:46:a4:91: d9:9d:f1:4f:1d:19:7a:2a:ed:04:5a:24:20:2b:b7:68:53:e7: 69:09:1b:7c:03:bb:80:43:86:6f:6f:d9:1e:67:4a:dc:db:c3: 36:ab:de:ca:53:31:cc:f1:08:22:c9:5b:b1:f2:49:c3:dd:fb: cc:6b:7b:cc:a4:ee:ac:bc:43:3d:11:ab:cf:64:d6:8c:90:16: 6c:cb:80:8c:d5:83:d1:7e:43:b6:6d:3e:ff:4b:94:4f:32:72: c7:51:9c:8a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGDn5dQxEZZWCG0GXjHkpZqTtTLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlDNTZGNkM5NzlDMjE1QUY4NjRGOUUxOEY3QThGNjI2 MzFBMTI2ODAeFw0yNjA1MTMxMjQ2MDRaFw0yNjA1MTQxNTA3MDRaMDMxMTAvBgNV BAMTKDlDNDAwOTQ1QjcwNkVGMkQ4MjBENkIzOTNGRjJDRUQ1OTM3QzU4RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/fuwZc6W1KHCVYmqrrKqnDUJ6 MZjw+hCKEoGCkO0mIrLYLXxCau93VKIhHHROcs+zUTflwo+5zeEYKA150FdOLj/k 8a/UgUG0u8xDnRxxlcpTlr5FVNLZqIwVw2iLNqbFTNaz7PLiZbTX412U0VCzZ5w7 f2syh02q9piv6n/RTo2+W7w6By9v30F7EGKuM3/XnrnV0LZj/XJE1yuRMjBtprz0 7GlWIWHjhqJzsvX85hZ7cGq/E5m2i7KN4SafKEQnZkWZY1WkNb8T2XMIPdTRcaHM fAL+SzcGe+iDdUxt+u+kwGlX67O5PFMjJPVpoXRN6vkbkn7ucdabzb9csqBPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnEAJRbcG7y2CDWs5P/LO1ZN8WOowHwYDVR0j BBgwFoAUGcVvbJecIVr4ZPnhj3qPYmMaEmgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0ODQ5MzY0MzUzMDI0Mi8wLzE5QzU2RjZDOTc5QzIxNUFGODY0RjlFMThGN0E4 RjYyNjMxQTEyNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTlDNTZGNkM5NzlDMjE1QUY4NjRGOUUxOEY3QThGNjI2MzFBMTI2OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDg0OTM2NDM1MzAyNDIvMC8xOUM1NkY2Qzk3OUMy MTVBRjg2NEY5RTE4RjdBOEY2MjYzMUExMjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooMHD4dz6eVq sJkfI9uP1b4xM3s2BLnaq9zATTdt0sOovnFbrh/ScFqhbP9CmEs1ZTMXyEBrJ6uh /uAYFhEoGPEMUBq3ZIuBrCUON9U3nQc4nXf17hgqkvBbYQc+9/8WKBzBeYTjNnVr nl4mIdGxgnrctMU3TaoyeLMFxB0xR0YE80KW6dvJ/sg/jSfbYbX9OmRscH++Intj ROCLAJR5RqSR2Z3xTx0ZeirtBFokICu3aFPnaQkbfAO7gEOGb2/ZHmdK3NvDNqve ylMxzPEIIslbsfJJw937zGt7zKTurLxDPRGrz2TWjJAWbMuAjNWD0X5Dtm0+/0uU TzJyx1Gcig== -----END CERTIFICATE-----Generated at Wed May 13 20:55:02 2026 by rpki-client