$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft File: 191E76D74421148B42FA2A7F663270AE7FAD25F9.mft (raw, json) Hash identifier: LjlfS9myp1wlfl1Q1Z7nR+KbL10EzrjLKAcopYOzO8E= Subject key identifier: EA:44:42:8A:E8:D6:32:D0:40:75:E3:CB:1F:4F:05:1B:08:AF:88:23 Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9 Certificate issuer: /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9 Certificate serial: 0463157E2AD41B242CF5E645673BABDF3DC52047 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft Manifest number: 012A Signing time: Fri 28 Aug 2026 07:53:36 +0000 Manifest this update: Fri 28 Aug 2026 07:48:36 +0000 Manifest next update: Mon 31 Aug 2026 16:19:36 +0000 Files and hashes: 1: 3130332e3131362e3132312e302f32342d3234203d3e2034383437.roa (hash: bybvQVpDA62zpyPwHa1XWTYZhk2FjGjkQojOKPAlIPY=) 2: 191E76D74421148B42FA2A7F663270AE7FAD25F9.crl (hash: udSobAMl3sLo2oNm+WtxsWrTn9i+p7RF3lb7N1ZgKBA=) 3: 3130332e3131362e3132332e302f32342d3234203d3e2034383437.roa (hash: iusd/geGAkaqNqYv0woWsgccBNM+keeMZWKm1FAoOOM=) 4: 3130332e3131362e3132302e302f32342d3234203d3e2034383437.roa (hash: zB7FMCFhHyOWYUyT241bOpU68Hl2jbAwsIx3PIajOso=) 5: 3130332e3131362e3132302e302f32332d3233203d3e203633363534.roa (hash: ayiRQLB0vCQOVj4IcpJdzMo4ohtXvgd7waElFg36mCA=) 6: 323430323a663963303a3a2f34382d3438203d3e20313337373937.roa (hash: Xa71V3zlzwJxLxJVMnOGWGmp2Wl6+BqPl/c74CX5nDA=) 7: 3130332e3131362e3132302e302f32342d3234203d3e203633363534.roa (hash: sjhYlFRils7TGbe4yrQB1MXoq74ExmSHsG4znfKuu7I=) 8: 3130332e3131362e3132332e302f32342d3234203d3e203633363534.roa (hash: 6OtEuNz2GVGLvEPnp1uI15Y+vgwMkKwikkqR/oRSa24=) 9: 3130332e3131362e3132302e302f32322d3232203d3e203633363534.roa (hash: fLgddK5a5pen10EIOArIO5eS1Bvv0lSS9vSM6d0T0bw=) 10: 3130332e3131362e3132312e302f32342d3234203d3e203633363534.roa (hash: vpD7NEE8qzM+eWphvno3vCArBIi9VdE9XjhBRn48b6k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:63:15:7e:2a:d4:1b:24:2c:f5:e6:45:67:3b:ab:df:3d:c5:20:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9 Validity Not Before: Aug 28 07:48:36 2026 GMT Not After : Aug 31 16:19:36 2026 GMT Subject: CN=EA44428AE8D632D04075E3CB1F4F051B08AF8823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3a:e4:6f:61:e8:20:a9:34:2e:68:9e:e8:c2: c9:1f:7e:91:c6:7b:8e:db:1b:90:83:51:a2:b7:ba: 56:64:33:ce:25:b6:33:e9:27:45:70:1b:83:b0:e8: 01:d5:b0:d9:db:38:fd:f4:e8:27:79:b7:ec:cd:98: dd:74:84:60:e4:ba:ed:2f:12:80:a5:10:89:77:06: 42:38:52:67:07:8f:ea:37:c8:56:47:b5:33:fd:ae: 5e:45:86:a3:51:5b:87:fb:e7:c0:4c:1f:e1:ec:5b: d4:02:9d:69:30:a3:3e:70:76:3a:0a:ca:6b:5f:eb: 5c:e0:1f:3d:c1:39:d6:76:89:0d:69:1d:82:9f:d3: 4b:35:3a:de:f7:2e:6b:9b:99:77:80:f0:e9:05:47: 36:cf:4e:da:03:80:95:98:4b:8b:be:d0:0c:77:75: 39:22:e7:86:7e:b5:ea:37:22:df:e5:36:95:27:8e: 4d:61:d9:f6:af:c9:35:a2:1a:4e:d8:33:41:05:bb: 2a:e3:04:66:d1:38:a8:11:4a:7a:7f:70:ed:8e:13: 0b:49:92:b9:7c:26:76:2b:a6:4a:e6:2f:cf:e5:3e: 8f:fd:59:82:96:3b:6c:b3:56:85:be:12:00:98:29: ba:db:96:4d:87:9e:12:13:35:3a:5f:f8:19:f2:64: 6a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:44:42:8A:E8:D6:32:D0:40:75:E3:CB:1F:4F:05:1B:08:AF:88:23 X509v3 Authority Key Identifier: keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:6a:f8:98:b5:68:08:03:0c:c4:b2:1c:5a:61:72:1d:03:b9: 19:fc:7e:f3:db:d7:50:81:51:93:53:66:56:0d:8a:20:2d:a9: cc:b6:2b:de:e3:52:13:78:f1:77:74:42:1d:f8:93:48:07:dd: 7f:2c:0d:4c:f8:15:03:b4:97:05:54:01:84:73:3f:63:e6:64: f7:d0:1a:69:23:b2:07:c9:ff:c1:a7:ee:bb:14:81:e0:69:a8: fc:57:1e:56:d8:cc:1e:3f:b6:a0:9b:50:ef:db:22:d7:32:37: f2:53:6f:ba:63:70:c8:c3:ec:c1:bd:37:1e:b2:ee:b5:f8:06: 77:30:14:05:b9:48:9b:d8:c4:66:a0:01:dc:b5:34:32:7e:fa: 07:7b:68:3d:32:bf:20:f9:f4:08:d8:3f:33:38:7e:35:01:00: 6c:bd:05:b5:79:60:7d:9d:b3:ca:e6:6d:86:c3:1b:1a:de:8b: 3b:4a:c2:5f:66:32:94:38:f5:5e:9f:42:69:ba:63:86:d8:a0: 16:e0:ed:bb:59:0e:1d:95:a3:f4:67:e5:f4:6a:dc:34:6c:a8: e1:88:8c:b5:c1:a1:7b:6c:3c:97:a4:8f:64:17:33:aa:99:79: bf:a3:6d:4e:40:cb:47:3e:37:36:48:91:80:7f:06:ba:ca:39: 9d:cd:eb:21 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBGMVfirUGyQs9eZFZzur3z3FIEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxRTc2RDc0NDIxMTQ4QjQyRkEyQTdGNjYzMjcwQUU3 RkFEMjVGOTAeFw0yNjA4MjgwNzQ4MzZaFw0yNjA4MzExNjE5MzZaMDMxMTAvBgNV BAMTKEVBNDQ0MjhBRThENjMyRDA0MDc1RTNDQjFGNEYwNTFCMDhBRjg4MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9OuRvYeggqTQuaJ7owskffpHG e47bG5CDUaK3ulZkM84ltjPpJ0VwG4Ow6AHVsNnbOP306Cd5t+zNmN10hGDkuu0v EoClEIl3BkI4UmcHj+o3yFZHtTP9rl5FhqNRW4f758BMH+HsW9QCnWkwoz5wdjoK ymtf61zgHz3BOdZ2iQ1pHYKf00s1Ot73LmubmXeA8OkFRzbPTtoDgJWYS4u+0Ax3 dTki54Z+teo3It/lNpUnjk1h2favyTWiGk7YM0EFuyrjBGbROKgRSnp/cO2OEwtJ krl8JnYrpkrmL8/lPo/9WYKWO2yzVoW+EgCYKbrblk2HnhITNTpf+BnyZGoFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6kRCiujWMtBAdePLH08FGwiviCMwHwYDVR0j BBgwFoAUGR5210QhFItC+ip/ZjJwrn+tJfkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzEyNjc4NS8wLzE5MUU3NkQ3NDQyMTE0OEI0MkZBMkE3RjY2MzI3 MEFFN0ZBRDI1RjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTkxRTc2RDc0NDIxMTQ4QjQyRkEyQTdGNjYzMjcwQUU3RkFEMjVGOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxMjY3ODUvMC8xOTFFNzZENzQ0MjEx NDhCNDJGQTJBN0Y2NjMyNzBBRTdGQUQyNUY5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWr4mLVoCAMM xLIcWmFyHQO5Gfx+89vXUIFRk1NmVg2KIC2pzLYr3uNSE3jxd3RCHfiTSAfdfywN TPgVA7SXBVQBhHM/Y+Zk99AaaSOyB8n/wafuuxSB4Gmo/FceVtjMHj+2oJtQ79si 1zI38lNvumNwyMPswb03HrLutfgGdzAUBblIm9jEZqAB3LU0Mn76B3toPTK/IPn0 CNg/Mzh+NQEAbL0FtXlgfZ2zyuZthsMbGt6LO0rCX2YylDj1Xp9CabpjhtigFuDt u1kOHZWj9Gfl9GrcNGyo4YiMtcGhe2w8l6SPZBczqpl5v6NtTkDLRz43NkiRgH8G uso5nc3rIQ== -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:53 2026 by rpki-client