$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft File: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft (raw, json) Hash identifier: d8YIGJnmunzNZTCxWfUKVayx/AnepsyBNbjQVy91kpo= Subject key identifier: 71:FE:52:1E:07:F0:ED:2B:56:A3:E4:E4:57:A6:12:95:FB:DB:73:AB Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Certificate serial: 7095094E58691A70C42F28D98438117EEE456880 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft Manifest number: 011E Signing time: Tue 14 Jul 2026 10:01:01 +0000 Manifest this update: Tue 14 Jul 2026 09:56:01 +0000 Manifest next update: Wed 15 Jul 2026 12:04:01 +0000 Files and hashes: 1: AS58540.roa (hash: ODEMxdA+rDgGXKZmPBMgK9yomv/d+1QGAeEkWm3Q6yA=) 2: AS38365.roa (hash: GfhbepfPCiBLiW7f7C/pzcTtvnquxDHsuz1kUUcRsRU=) 3: AS38283.roa (hash: b+LNtB8BnlfAgJOygGrMMt2yq1yQieV7mM6TBSUOHTg=) 4: AS58563.roa (hash: kYInOTPip8w5PslmevGG8vQjhMgGwaKWoF+4hhPIBAc=) 5: AS140903.roa (hash: iyz26ug9khgPrNNhJtEuOhWmlszHQlfbJTsEIMCRpnM=) 6: AS136958.roa (hash: HEG2G2FDqpPcwg9U+B72KeFsxwTgTK4fYMDfE+rG2vc=) 7: AS134756.roa (hash: R0qO1qhdZDTQtnkct1FnPpedhyffJKgR3uHLGveHyaU=) 8: AS23724.roa (hash: W9hq4noVS3K8oFSoam54kFzfyzZ8KLodeD0jWtdBu+E=) 9: AS4808.roa (hash: nfus4h8QwbxcdSJltah7w99JVhAwpPCoz9XlgVyX9D4=) 10: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl (hash: PpilQs8fOaTxaMYX8fX6m2hwWSByAr8tW3CUP179z20=) 11: AS56040.roa (hash: W81Ik1UbVtj0SRWqtC3P7xyEWt3IgDbB4QjgkvOz+tY=) 12: AS58466.roa (hash: pNtrvsIxnKSPSR3qrnhNlUDUeD+0ItvWPxCmkPmSobo=) 13: AS38627.roa (hash: nFp+8yml9hkEza1wgfZStNJI0UTaVHYBZwksHuv4bH0=) 14: AS55967.roa (hash: JWz91HIzRpIvCaetNDaEjl+15GD/QV9ZC2R8TKVFSiA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:95:09:4e:58:69:1a:70:c4:2f:28:d9:84:38:11:7e:ee:45:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Validity Not Before: Jul 14 09:56:01 2026 GMT Not After : Jul 15 12:04:01 2026 GMT Subject: CN=71FE521E07F0ED2B56A3E4E457A61295FBDB73AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:65:a6:b2:e5:e9:77:1d:6c:94:bb:0a:f7:e9: 80:5e:a6:62:99:77:e2:3c:e2:0f:c3:2f:02:d5:7f: 27:21:76:93:a5:78:a6:74:3d:2c:63:e3:67:00:d7: 8c:6c:d7:12:ce:30:91:51:1a:90:2e:72:c9:ce:ee: 8a:2b:85:91:0d:73:ca:35:8f:99:3c:c5:8a:82:31: f6:2d:1b:8f:2e:45:c3:77:1e:fa:ea:43:35:12:20: 95:da:47:c0:63:c2:22:49:22:9c:09:17:75:79:e1: 06:f4:56:ab:05:2f:39:b8:ca:6c:be:f1:87:a5:39: f3:67:01:d8:a3:75:d6:ca:33:d9:d6:f0:35:87:c4: 6f:9c:06:2e:53:f1:71:d9:f8:51:0a:e8:6a:44:a1: 64:17:57:0b:c8:b9:fb:ab:c4:1a:3f:38:a1:43:2e: bd:0c:7c:2b:0d:9c:e3:c3:fd:c8:8f:77:3b:75:f2: c3:12:d7:42:1a:04:8f:ee:2e:f4:6b:06:fb:45:4d: 9c:c8:f4:ef:fa:33:92:72:c2:ba:64:4f:4b:a2:50: 6e:3d:e2:e4:7c:67:20:9f:4a:af:d7:49:73:45:aa: 49:9e:a1:7c:bf:20:6d:c9:0f:a0:2e:57:85:b0:b2: b1:7e:64:aa:72:55:30:f1:5c:ab:20:e5:e0:85:7a: 7d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FE:52:1E:07:F0:ED:2B:56:A3:E4:E4:57:A6:12:95:FB:DB:73:AB X509v3 Authority Key Identifier: keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:9a:fb:62:37:e2:1f:ff:4a:d0:0f:b6:22:4e:b5:54:86:ac: b3:37:17:63:b2:49:b9:b5:39:8b:fe:28:94:99:a3:ee:df:85: be:0f:9b:a5:7b:aa:a6:8d:02:3c:e8:b4:fb:45:6c:eb:81:3b: 10:be:bb:5f:25:b2:89:1a:9d:4e:eb:42:35:c2:32:f6:0e:81: 0f:59:33:cf:aa:fc:f1:8c:75:0a:6c:30:9f:44:5e:66:a5:b0: 33:72:a7:42:16:cf:ad:f9:c4:5d:c0:28:34:56:8b:59:75:10: 61:9b:e5:37:7d:6a:e3:49:2d:5d:31:03:a9:a0:9f:9e:a7:1c: 1a:a2:fe:9b:6e:93:c5:46:e0:1e:dc:0b:e8:98:d4:0f:eb:61: d2:da:28:6b:92:63:81:9a:bc:3a:5e:f7:f6:6d:84:a9:17:c6: 3b:a8:8c:a6:f2:34:2e:12:e5:34:f7:b2:25:69:ce:ba:d7:eb: 97:a9:89:cc:43:84:c6:1e:b8:3b:72:86:2e:46:c0:95:16:48: 8d:60:5f:14:c7:94:c8:db:4f:d6:45:7d:52:91:84:9c:97:74: d6:f7:17:e6:cf:49:bc:82:f0:8b:80:82:fb:68:78:cd:40:46: b8:07:d2:e5:64:55:3a:04:2c:ee:81:37:cc:5a:7d:77:27:1c: 0f:1e:5f:0d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcJUJTlhpGnDELyjZhDgRfu5FaIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB OEVCQTcwRTAeFw0yNjA3MTQwOTU2MDFaFw0yNjA3MTUxMjA0MDFaMDMxMTAvBgNV BAMTKDcxRkU1MjFFMDdGMEVEMkI1NkEzRTRFNDU3QTYxMjk1RkJEQjczQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxZaay5el3HWyUuwr36YBepmKZ d+I84g/DLwLVfychdpOleKZ0PSxj42cA14xs1xLOMJFRGpAucsnO7oorhZENc8o1 j5k8xYqCMfYtG48uRcN3HvrqQzUSIJXaR8BjwiJJIpwJF3V54Qb0VqsFLzm4ymy+ 8YelOfNnAdijddbKM9nW8DWHxG+cBi5T8XHZ+FEK6GpEoWQXVwvIufurxBo/OKFD Lr0MfCsNnOPD/ciPdzt18sMS10IaBI/uLvRrBvtFTZzI9O/6M5JywrpkT0uiUG49 4uR8ZyCfSq/XSXNFqkmeoXy/IG3JD6AuV4WwsrF+ZKpyVTDxXKsg5eCFen1FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcf5SHgfw7StWo+TkV6YSlfvbc6swHwYDVR0j BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxMTM5MjIvMC9BMTk2NzIyMDZBOURB N0RGNDI5NTM2QzlCRkZBREE5NEE4RUJBNzBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5r7YjfiH/9K 0A+2Ik61VIasszcXY7JJubU5i/4olJmj7t+Fvg+bpXuqpo0CPOi0+0Vs64E7EL67 XyWyiRqdTutCNcIy9g6BD1kzz6r88Yx1Cmwwn0ReZqWwM3KnQhbPrfnEXcAoNFaL WXUQYZvlN31q40ktXTEDqaCfnqccGqL+m26TxUbgHtwL6JjUD+th0tooa5JjgZq8 Ol739m2EqRfGO6iMpvI0LhLlNPeyJWnOutfrl6mJzEOExh64O3KGLkbAlRZIjWBf FMeUyNtP1kV9UpGEnJd01vcX5s9JvILwi4CC+2h4zUBGuAfS5WRVOgQs7oE3zFp9 dyccDx5fDQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:09:32 2026 by rpki-client