$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft File: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft (raw, json) Hash identifier: 1ojpqKuaNLTdh1IgVU0Kn0iRU2mv3TJPL727YKd6fbc= Subject key identifier: DA:45:84:1D:E2:57:F7:1A:5D:58:D5:B6:7C:05:6B:CF:8C:35:9F:C7 Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Certificate serial: 2E9DC495CF6F8E8CD79F7B03CFE652E87C594676 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft Manifest number: 016E Signing time: Tue 13 Oct 2026 16:23:09 +0000 Manifest this update: Tue 13 Oct 2026 16:18:09 +0000 Manifest next update: Fri 16 Oct 2026 17:07:09 +0000 Files and hashes: 1: AS140903.roa (hash: iyz26ug9khgPrNNhJtEuOhWmlszHQlfbJTsEIMCRpnM=) 2: AS136958.roa (hash: HEG2G2FDqpPcwg9U+B72KeFsxwTgTK4fYMDfE+rG2vc=) 3: AS58540.roa (hash: ODEMxdA+rDgGXKZmPBMgK9yomv/d+1QGAeEkWm3Q6yA=) 4: AS4808.roa (hash: nfus4h8QwbxcdSJltah7w99JVhAwpPCoz9XlgVyX9D4=) 5: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl (hash: FTLqKcIymF7vAMR4f3hhd9Gdw7KC3tid9M2776NtWv8=) 6: AS134756.roa (hash: R0qO1qhdZDTQtnkct1FnPpedhyffJKgR3uHLGveHyaU=) 7: AS58563.roa (hash: kYInOTPip8w5PslmevGG8vQjhMgGwaKWoF+4hhPIBAc=) 8: AS58466.roa (hash: pNtrvsIxnKSPSR3qrnhNlUDUeD+0ItvWPxCmkPmSobo=) 9: AS23724.roa (hash: W9hq4noVS3K8oFSoam54kFzfyzZ8KLodeD0jWtdBu+E=) 10: AS38365.roa (hash: GfhbepfPCiBLiW7f7C/pzcTtvnquxDHsuz1kUUcRsRU=) 11: AS56040.roa (hash: W81Ik1UbVtj0SRWqtC3P7xyEWt3IgDbB4QjgkvOz+tY=) 12: AS55967.roa (hash: JWz91HIzRpIvCaetNDaEjl+15GD/QV9ZC2R8TKVFSiA=) 13: AS38283.roa (hash: b+LNtB8BnlfAgJOygGrMMt2yq1yQieV7mM6TBSUOHTg=) 14: AS38627.roa (hash: nFp+8yml9hkEza1wgfZStNJI0UTaVHYBZwksHuv4bH0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 17:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:9d:c4:95:cf:6f:8e:8c:d7:9f:7b:03:cf:e6:52:e8:7c:59:46:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Validity Not Before: Oct 13 16:18:09 2026 GMT Not After : Oct 16 17:07:09 2026 GMT Subject: CN=DA45841DE257F71A5D58D5B67C056BCF8C359FC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c4:38:2c:4a:c7:3b:e9:bb:6b:e0:36:a5:b6: 0e:0f:84:d2:47:81:c9:b9:25:c8:46:0c:3d:d6:ea: 8a:82:47:aa:3a:17:a7:4d:71:4b:7a:60:dd:fa:92: ea:6c:b7:f3:25:c7:0e:28:7e:bc:24:0b:bc:fa:06: d1:75:be:03:6c:b6:ee:cd:19:ce:67:cd:05:98:7b: 31:a3:c7:aa:38:ba:ae:28:4d:86:fb:1b:1c:3d:48: 01:d6:c3:07:b4:a2:5d:40:3a:a6:7f:34:ac:56:77: 37:18:f0:e0:1c:22:04:1d:e5:56:62:48:8c:65:5d: 41:08:e2:cc:f2:18:e5:32:cc:10:b8:97:db:1d:dd: ab:ca:d3:d4:15:23:d0:a3:11:fd:c9:c0:e4:a7:24: 26:a2:89:7b:8d:f6:77:29:eb:e6:df:44:29:4e:24: 2c:99:60:49:ad:d6:69:98:be:a5:b5:b3:10:39:8c: a8:ce:ab:bf:65:be:68:ea:f6:8c:e4:72:cc:2b:2c: db:25:67:b0:02:a3:d2:4f:25:20:07:72:91:dc:f1: 6e:93:c8:6e:8d:c6:8b:33:e9:a7:2f:f0:fc:81:17: 80:1a:96:9d:ae:df:54:3e:e1:00:86:01:55:9d:3d: 03:87:9e:12:a4:7f:fd:d1:b7:34:56:98:00:99:57: 99:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:45:84:1D:E2:57:F7:1A:5D:58:D5:B6:7C:05:6B:CF:8C:35:9F:C7 X509v3 Authority Key Identifier: keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:12:68:f3:5d:a6:4b:4f:b4:43:ad:28:f2:fc:79:7b:d3:52: 46:10:0a:b0:75:31:9b:a8:02:f7:88:2c:bb:b6:d4:d6:19:20: 3c:74:a0:52:25:0d:0a:ca:52:4b:79:ec:40:ab:3f:d7:b4:82: 47:4c:56:87:ab:cf:12:4d:b7:92:7b:2b:4c:71:0a:21:e3:a7: b1:ee:6a:3c:29:7a:e9:d9:b2:dd:5d:33:26:1f:a2:74:f1:d1: 11:63:89:6e:2f:e3:bd:f8:5a:95:7f:ce:20:6f:94:37:39:12: 11:b2:9e:d5:ce:43:69:37:42:cd:f7:14:d5:d8:6f:9c:2b:0f: 31:0c:59:cc:90:2e:cc:be:8a:dd:0b:81:e9:12:72:af:14:79: 3f:fd:ee:77:7c:ec:a9:87:0c:86:b7:3d:cd:36:36:d7:f4:f4: ed:9e:e3:42:0a:71:51:37:26:c7:ec:85:21:ee:d3:a3:e5:10: 25:09:74:f5:4b:50:0c:84:de:58:d7:50:96:5a:3a:01:c3:e6: e1:5e:f5:2b:9a:ce:ef:67:6f:ac:ea:b3:a5:f7:f6:8a:a4:e5: a8:17:11:92:15:53:a8:e9:21:0b:01:0f:ad:dc:63:12:59:1c: 69:d9:b0:c6:7f:76:93:be:56:1d:54:35:84:93:8a:b2:19:a2: 79:0f:09:e6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULp3Elc9vjozXn3sDz+ZS6HxZRnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB OEVCQTcwRTAeFw0yNjEwMTMxNjE4MDlaFw0yNjEwMTYxNzA3MDlaMDMxMTAvBgNV BAMTKERBNDU4NDFERTI1N0Y3MUE1RDU4RDVCNjdDMDU2QkNGOEMzNTlGQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxDgsSsc76btr4Daltg4PhNJH gcm5JchGDD3W6oqCR6o6F6dNcUt6YN36kupst/Mlxw4ofrwkC7z6BtF1vgNstu7N Gc5nzQWYezGjx6o4uq4oTYb7Gxw9SAHWwwe0ol1AOqZ/NKxWdzcY8OAcIgQd5VZi SIxlXUEI4szyGOUyzBC4l9sd3avK09QVI9CjEf3JwOSnJCaiiXuN9ncp6+bfRClO JCyZYEmt1mmYvqW1sxA5jKjOq79lvmjq9ozkcswrLNslZ7ACo9JPJSAHcpHc8W6T yG6Nxosz6acv8PyBF4Aalp2u31Q+4QCGAVWdPQOHnhKkf/3RtzRWmACZV5kjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2kWEHeJX9xpdWNW2fAVrz4w1n8cwHwYDVR0j BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxMTM5MjIvMC9BMTk2NzIyMDZBOURB N0RGNDI5NTM2QzlCRkZBREE5NEE4RUJBNzBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxJo812mS0+0 Q60o8vx5e9NSRhAKsHUxm6gC94gsu7bU1hkgPHSgUiUNCspSS3nsQKs/17SCR0xW h6vPEk23knsrTHEKIeOnse5qPCl66dmy3V0zJh+idPHREWOJbi/jvfhalX/OIG+U NzkSEbKe1c5DaTdCzfcU1dhvnCsPMQxZzJAuzL6K3QuB6RJyrxR5P/3ud3zsqYcM hrc9zTY21/T07Z7jQgpxUTcmx+yFIe7To+UQJQl09UtQDITeWNdQllo6AcPm4V71 K5rO72dvrOqzpff2iqTlqBcRkhVTqOkhCwEPrdxjElkcadmwxn92k75WHVQ1hJOK shmieQ8J5g== -----END CERTIFICATE-----Generated at Wed Oct 14 11:55:29 2026 by rpki-client