$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft File: 191E76D74421148B42FA2A7F663270AE7FAD25F9.mft (raw, json) Hash identifier: 0CIoVEtRD2nH6z6cfRU/PfGTVdTGNP5+BKScJaBfLWY= Subject key identifier: 84:4A:AE:20:22:38:1A:E3:45:AA:51:AB:53:FB:62:A5:2C:9E:A9:5F Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9 Certificate issuer: /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9 Certificate serial: 4BB89425DEC3E1FB56A66BA01929AF2910E5DB24 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft Manifest number: 6F Signing time: Sun 12 Apr 2026 14:49:16 +0000 Manifest this update: Sun 12 Apr 2026 14:44:16 +0000 Manifest next update: Mon 13 Apr 2026 18:41:16 +0000 Files and hashes: 1: 191E76D74421148B42FA2A7F663270AE7FAD25F9.crl (hash: 6w5H1d7JW9JDXWFL36oA8oMxdTRg7fQ3Ru69KElreOk=) 2: 323430323a663963303a3a2f34382d3438203d3e20313337373937.roa (hash: Xa71V3zlzwJxLxJVMnOGWGmp2Wl6+BqPl/c74CX5nDA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 18:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b8:94:25:de:c3:e1:fb:56:a6:6b:a0:19:29:af:29:10:e5:db:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9 Validity Not Before: Apr 12 14:44:16 2026 GMT Not After : Apr 13 18:41:16 2026 GMT Subject: CN=844AAE2022381AE345AA51AB53FB62A52C9EA95F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:31:54:73:ba:8b:10:93:8d:18:1b:13:92: 73:b3:c8:44:6e:dc:1c:fb:f2:3c:3e:8f:85:8d:03: dc:d0:20:f8:2c:8c:08:49:2e:74:78:da:51:d0:87: 5c:46:b1:86:b8:e0:b2:0b:b8:e1:d9:be:19:5e:ff: 76:b4:6a:4f:c7:12:7b:32:68:ea:86:5a:f4:c0:33: c4:b7:4e:22:b2:24:0f:be:79:9d:c8:0b:76:68:c1: 68:d0:45:84:4a:e0:e1:2c:ba:54:9f:68:a8:ea:f1: b7:32:47:8e:be:c8:81:fc:6b:97:f8:6f:c7:d6:a9: 6b:7c:5f:20:be:d2:db:d9:85:fe:8d:11:26:e9:9e: 3d:4c:24:7d:f5:54:a7:8d:18:8e:fe:e5:2f:14:11: bf:c0:0e:ae:eb:de:37:cd:8b:0e:7e:21:5a:73:66: d2:34:ad:d5:05:34:55:f9:bd:1a:2e:31:50:eb:4e: 99:16:4b:8e:df:9e:3f:b8:c9:5c:0d:3a:16:5b:37: 7e:31:db:05:c9:d2:dc:f6:88:4d:24:02:cb:69:c9: 67:0c:a9:91:c0:ec:2d:73:9c:a4:4b:38:3c:68:94: f4:10:ba:18:83:49:54:dd:35:75:d7:21:a8:76:22: 7a:c6:b5:6e:55:67:bf:6d:c5:24:5a:0b:4e:9e:6b: 23:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4A:AE:20:22:38:1A:E3:45:AA:51:AB:53:FB:62:A5:2C:9E:A9:5F X509v3 Authority Key Identifier: keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c4:2c:fa:90:5b:e1:08:09:19:34:76:55:8d:cb:d6:bc:7d: a6:87:71:b6:76:39:ca:de:c0:41:f2:d2:04:a5:81:99:6f:14: 37:d2:c5:22:c2:62:7f:c6:79:f7:ac:07:c4:84:b5:56:49:66: 93:04:a1:fc:cc:20:77:a1:ed:67:67:90:29:c4:ab:2c:0f:29: 94:cb:3b:04:91:56:ac:a4:ca:45:54:ea:80:5e:38:5f:1d:c7: 77:ac:35:36:55:72:82:bd:1c:49:fb:dd:29:9d:a6:15:af:6f: 40:66:6e:fc:55:76:d2:a6:af:25:3f:1a:f8:ca:c2:ea:8f:62: f6:8b:95:b4:9e:60:b6:bb:76:ce:b8:82:9f:d0:b4:ab:1f:17: 40:86:63:8f:c3:3b:42:35:08:e7:85:5d:c1:64:3b:4a:09:e0: 69:4c:d5:af:2e:ff:6f:2a:0f:e4:52:2d:e1:92:b1:e0:8c:79: 7c:89:69:22:d4:9a:6e:68:f0:8b:10:a4:6f:d7:14:3f:3a:87: 72:34:2d:0b:d9:0e:de:39:2e:0b:0c:49:f4:7a:44:da:35:d2: e8:3d:fc:60:c8:81:5d:db:e0:88:17:1f:14:51:bb:a6:cc:79: 5c:a6:a1:01:60:58:07:89:ad:08:08:54:c6:cc:cf:45:df:68: 6b:7a:6d:46 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUS7iUJd7D4ftWpmugGSmvKRDl2yQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxRTc2RDc0NDIxMTQ4QjQyRkEyQTdGNjYzMjcwQUU3 RkFEMjVGOTAeFw0yNjA0MTIxNDQ0MTZaFw0yNjA0MTMxODQxMTZaMDMxMTAvBgNV BAMTKDg0NEFBRTIwMjIzODFBRTM0NUFBNTFBQjUzRkI2MkE1MkM5RUE5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChfTFUc7qLEJONGBsTknOzyERu 3Bz78jw+j4WNA9zQIPgsjAhJLnR42lHQh1xGsYa44LILuOHZvhle/3a0ak/HEnsy aOqGWvTAM8S3TiKyJA++eZ3IC3ZowWjQRYRK4OEsulSfaKjq8bcyR46+yIH8a5f4 b8fWqWt8XyC+0tvZhf6NESbpnj1MJH31VKeNGI7+5S8UEb/ADq7r3jfNiw5+IVpz ZtI0rdUFNFX5vRouMVDrTpkWS47fnj+4yVwNOhZbN34x2wXJ0tz2iE0kAstpyWcM qZHA7C1znKRLODxolPQQuhiDSVTdNXXXIah2InrGtW5VZ79txSRaC06eayP3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhEquICI4GuNFqlGrU/tipSyeqV8wHwYDVR0j BBgwFoAUGR5210QhFItC+ip/ZjJwrn+tJfkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzEyNjc4NS8wLzE5MUU3NkQ3NDQyMTE0OEI0MkZBMkE3RjY2MzI3 MEFFN0ZBRDI1RjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTkxRTc2RDc0NDIxMTQ4QjQyRkEyQTdGNjYzMjcwQUU3RkFEMjVGOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxMjY3ODUvMC8xOTFFNzZENzQ0MjEx NDhCNDJGQTJBN0Y2NjMyNzBBRTdGQUQyNUY5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcQs+pBb4QgJ GTR2VY3L1rx9podxtnY5yt7AQfLSBKWBmW8UN9LFIsJif8Z596wHxIS1VklmkwSh /Mwgd6HtZ2eQKcSrLA8plMs7BJFWrKTKRVTqgF44Xx3Hd6w1NlVygr0cSfvdKZ2m Fa9vQGZu/FV20qavJT8a+MrC6o9i9ouVtJ5gtrt2zriCn9C0qx8XQIZjj8M7QjUI 54VdwWQ7SgngaUzVry7/byoP5FIt4ZKx4Ix5fIlpItSabmjwixCkb9cUPzqHcjQt C9kO3jkuCwxJ9HpE2jXS6D38YMiBXdvgiBcfFFG7psx5XKahAWBYB4mtCAhUxszP Rd9oa3ptRg== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:42 2026 by rpki-client