$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft File: 19C56F6C979C215AF864F9E18F7A8F62631A1268.mft (raw, json) Hash identifier: 2IBffP/9uWTJ48c+N4SsUrI3AMs8jb5u0+vHtmA058Q= Subject key identifier: 68:D3:70:E5:76:5D:A2:46:F9:30:42:33:D7:B3:8E:10:12:3C:DD:FD Authority key identifier: 19:C5:6F:6C:97:9C:21:5A:F8:64:F9:E1:8F:7A:8F:62:63:1A:12:68 Certificate issuer: /CN=19C56F6C979C215AF864F9E18F7A8F62631A1268 Certificate serial: 5214F37520F1A5B46D1E80C6DF57108967B1537E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft Manifest number: 85 Signing time: Fri 24 Jul 2026 11:41:06 +0000 Manifest this update: Fri 24 Jul 2026 11:36:06 +0000 Manifest next update: Sat 25 Jul 2026 14:54:06 +0000 Files and hashes: 1: 19C56F6C979C215AF864F9E18F7A8F62631A1268.crl (hash: 5dJpwSPDOcbQaBEk3I0JbMuoQtuqltlJ+VoH7sCpEzM=) 2: 3130332e3135342e33302e302f32332d3233203d3e20313339313431.roa (hash: l7ihaAL2K1gp0WFgFaF5vhfWpS9Haphuut9+xh4iEFI=) 3: 323430363a353263303a3a2f33322d3332203d3e20313339313431.roa (hash: 0VCs7Br2LEypju+8+bG9yDec+3HSZ8IfNVbmHboPoB4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.crl rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:14:f3:75:20:f1:a5:b4:6d:1e:80:c6:df:57:10:89:67:b1:53:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19C56F6C979C215AF864F9E18F7A8F62631A1268 Validity Not Before: Jul 24 11:36:06 2026 GMT Not After : Jul 25 14:54:06 2026 GMT Subject: CN=68D370E5765DA246F9304233D7B38E10123CDDFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:65:d6:86:71:db:dc:cd:19:d1:5e:6f:10:68: 81:01:63:e8:64:ff:32:8c:f6:0a:72:3f:42:dc:41: d2:7e:b3:7c:4a:20:dd:a4:eb:8c:3b:47:02:61:bf: d8:be:37:a6:ea:6c:41:26:19:26:17:0a:0c:72:9c: 6c:3b:ea:e9:9f:05:71:f3:c8:3e:5a:05:29:bd:b2: 9c:78:a1:f4:c8:f5:1c:2d:a8:2b:ed:fb:fd:a5:a5: 9c:0a:5b:83:8e:65:a3:15:4b:d8:01:8f:08:25:58: c5:ba:cc:ad:8b:60:7b:f8:af:ec:ad:f1:f7:af:08: 64:ac:dd:1b:fd:05:af:56:76:96:db:0a:d7:6d:f4: 69:f1:28:14:b8:cc:3f:5f:e2:4f:04:48:2c:2a:9d: 25:44:84:2b:8d:99:43:41:19:75:3c:ac:dd:d2:b9: 64:47:74:14:38:57:13:37:c9:84:17:ee:ff:5b:36: 4e:fc:3d:0e:0c:6a:91:f0:20:fe:71:08:b1:97:5c: 14:df:c9:ee:b6:d9:0a:65:fc:cb:2b:eb:94:5d:4d: 04:be:56:b2:22:e7:ed:0b:b9:35:bf:45:53:71:24: 86:16:e3:44:c7:a4:a2:2f:a4:db:3d:e9:3f:bd:e0: c8:b5:5e:eb:26:82:5b:0a:a2:5b:96:dc:a4:38:40: 41:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D3:70:E5:76:5D:A2:46:F9:30:42:33:D7:B3:8E:10:12:3C:DD:FD X509v3 Authority Key Identifier: keyid:19:C5:6F:6C:97:9C:21:5A:F8:64:F9:E1:8F:7A:8F:62:63:1A:12:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:6e:35:b9:06:19:fa:15:4a:6f:89:65:eb:5e:88:2a:a2:17: f7:22:36:77:aa:01:e4:c7:0e:7a:72:40:aa:e5:bc:a1:b7:cf: 87:55:1e:41:16:80:26:15:6b:4a:9e:a8:3b:9c:88:cd:c2:9b: 22:7f:9c:48:16:e7:2f:e4:b3:fb:98:8f:60:97:aa:c7:fe:c7: 44:9f:b8:d7:10:28:29:74:a2:9b:80:55:a7:07:22:dd:c0:7b: 0a:e6:e4:00:f4:a7:48:a4:d9:b0:ba:b6:21:d8:fa:aa:db:67: 6e:b9:54:f7:0b:dd:29:ec:1b:07:64:da:2c:40:7b:c8:0f:a6: 9e:3d:19:c3:49:f6:6f:fe:11:1c:9d:d4:f7:1d:f8:b6:54:29: 8f:ac:95:3c:79:d0:8d:85:8e:91:d8:1f:46:d3:b3:1e:0c:ed: f9:2a:56:5f:0b:ee:ba:91:ad:a4:7d:23:bf:da:13:29:41:c0: 6f:0f:55:b9:90:92:38:c0:5f:6f:e9:fb:3e:95:da:a7:91:76: b1:19:86:8a:db:7e:24:c9:0f:00:45:7a:54:2a:f6:de:4a:6e: 21:db:e9:e6:6a:be:93:4e:e9:4e:4e:37:54:56:f8:77:c9:7d: 93:17:d7:c8:ba:6d:c4:ad:d1:24:6a:5a:22:eb:a8:29:79:9d: ab:a4:38:b0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUhTzdSDxpbRtHoDG31cQiWexU34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlDNTZGNkM5NzlDMjE1QUY4NjRGOUUxOEY3QThGNjI2 MzFBMTI2ODAeFw0yNjA3MjQxMTM2MDZaFw0yNjA3MjUxNDU0MDZaMDMxMTAvBgNV BAMTKDY4RDM3MEU1NzY1REEyNDZGOTMwNDIzM0Q3QjM4RTEwMTIzQ0RERkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYZdaGcdvczRnRXm8QaIEBY+hk /zKM9gpyP0LcQdJ+s3xKIN2k64w7RwJhv9i+N6bqbEEmGSYXCgxynGw76umfBXHz yD5aBSm9spx4ofTI9RwtqCvt+/2lpZwKW4OOZaMVS9gBjwglWMW6zK2LYHv4r+yt 8fevCGSs3Rv9Ba9WdpbbCtdt9GnxKBS4zD9f4k8ESCwqnSVEhCuNmUNBGXU8rN3S uWRHdBQ4VxM3yYQX7v9bNk78PQ4MapHwIP5xCLGXXBTfye622Qpl/Msr65RdTQS+ VrIi5+0LuTW/RVNxJIYW40THpKIvpNs96T+94Mi1XusmglsKoluW3KQ4QEE1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaNNw5XZdokb5MEIz17OOEBI83f0wHwYDVR0j BBgwFoAUGcVvbJecIVr4ZPnhj3qPYmMaEmgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0ODQ5MzY0MzUzMDI0Mi8wLzE5QzU2RjZDOTc5QzIxNUFGODY0RjlFMThGN0E4 RjYyNjMxQTEyNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTlDNTZGNkM5NzlDMjE1QUY4NjRGOUUxOEY3QThGNjI2MzFBMTI2OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDg0OTM2NDM1MzAyNDIvMC8xOUM1NkY2Qzk3OUMy MTVBRjg2NEY5RTE4RjdBOEY2MjYzMUExMjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO241uQYZ+hVK b4ll616IKqIX9yI2d6oB5McOenJAquW8obfPh1UeQRaAJhVrSp6oO5yIzcKbIn+c SBbnL+Sz+5iPYJeqx/7HRJ+41xAoKXSim4BVpwci3cB7CubkAPSnSKTZsLq2Idj6 qttnbrlU9wvdKewbB2TaLEB7yA+mnj0Zw0n2b/4RHJ3U9x34tlQpj6yVPHnQjYWO kdgfRtOzHgzt+SpWXwvuupGtpH0jv9oTKUHAbw9VuZCSOMBfb+n7PpXap5F2sRmG itt+JMkPAEV6VCr23kpuIdvp5mq+k07pTk43VFb4d8l9kxfXyLptxK3RJGpaIuuo KXmdq6Q4sA== -----END CERTIFICATE-----Generated at Fri Jul 24 21:31:25 2026 by rpki-client