$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft File: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft (raw, json) Hash identifier: fqYSIQzO+9DwUVn4wV+PcwARQHuVtEkP7GQyIBZ/reo= Subject key identifier: 0E:09:51:D3:E5:96:3F:66:85:64:59:E5:86:F6:CD:24:80:BA:9E:37 Authority key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD Certificate issuer: /CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD Certificate serial: 2E420A11B23F0362B55B777BE4C7228E93164C6F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft Manifest number: EC Signing time: Tue 14 Jul 2026 19:52:03 +0000 Manifest this update: Tue 14 Jul 2026 19:47:03 +0000 Manifest next update: Wed 15 Jul 2026 22:41:03 +0000 Files and hashes: 1: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl (hash: w8ITKx162McYG4kZM4f2CIBy59Sf3BGZ1WW+5QxzY3Q=) 2: 3134342e37392e31302e302f32332d3234203d3e20313531323531.roa (hash: WjMCSVc2nZ6LHlmIFS3fh2fKf0RsOi1ahfbmP+aZL0U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 14:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:42:0a:11:b2:3f:03:62:b5:5b:77:7b:e4:c7:22:8e:93:16:4c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD Validity Not Before: Jul 14 19:47:03 2026 GMT Not After : Jul 15 22:41:03 2026 GMT Subject: CN=0E0951D3E5963F66856459E586F6CD2480BA9E37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d5:0f:a5:c2:29:4c:f9:e4:5a:53:5c:a2:58: cd:48:6d:2f:cf:e3:3b:da:98:cb:84:31:cf:7b:1b: 13:ed:a6:46:f7:19:8f:43:82:f1:59:33:56:87:fe: c3:8b:08:13:a3:89:ed:81:76:c2:53:ee:08:dc:91: 8b:49:0e:3c:e0:9d:d2:59:7c:41:cf:33:49:95:40: f3:99:a4:53:03:8d:8f:66:0f:69:bd:57:aa:99:74: f2:bd:10:6e:04:da:d4:65:f4:46:f1:5d:a7:68:ce: cc:c1:bc:85:ac:4b:f1:15:a6:ea:b4:d1:bf:d7:db: 2d:88:81:70:6d:6e:3d:d4:70:9e:07:57:a6:23:5b: 16:11:21:54:24:27:4f:8a:6f:54:e5:9d:12:50:9c: fa:84:cc:98:72:f5:7b:36:6d:0f:04:3b:07:d3:21: d5:1f:b0:a1:78:9e:1b:67:07:99:09:71:3d:f8:27: 13:86:d6:b0:cb:e5:20:47:e9:67:fa:03:97:23:4d: c6:ee:58:6b:a1:fb:d3:a7:61:09:5a:f5:fb:e4:ac: 0c:33:cc:ae:21:10:bf:ae:ee:a2:31:40:58:9c:c7: c2:51:61:2a:37:da:02:d2:33:70:4e:c3:56:1e:02: 91:e6:af:43:d9:79:59:f9:53:2b:24:67:0e:7d:59: cf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:09:51:D3:E5:96:3F:66:85:64:59:E5:86:F6:CD:24:80:BA:9E:37 X509v3 Authority Key Identifier: keyid:19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:38:10:26:3e:3a:e9:4d:ab:7c:37:54:fc:68:da:cd:30:0b: 90:eb:8b:d6:53:19:41:11:74:03:1b:44:1b:42:b3:08:ef:e4: 43:42:5a:bd:e8:c1:06:1a:b7:f3:7d:08:5f:16:d8:53:45:4f: e1:18:a0:c5:14:40:59:ca:70:eb:9c:85:f2:50:27:95:d6:42: e5:d1:30:ff:ae:6d:90:f6:04:b0:1b:be:df:7c:96:fc:90:32: 1a:8a:28:4e:77:cb:a6:c1:fe:4a:1f:63:37:8d:22:5f:7b:ac: 48:e1:b2:f1:4c:c5:49:12:de:b6:c6:df:80:32:56:72:40:9c: 23:f4:5f:ab:84:2c:f0:51:5d:b8:a0:5d:fe:67:6f:5a:9d:cd: 43:1f:e1:f0:b1:ba:1c:d1:4c:5e:03:f4:37:26:1b:a3:0c:2d: 41:48:69:e3:64:1a:e2:75:b7:e7:42:ba:40:7c:ab:a8:b7:90: 18:20:80:a1:f9:63:fe:a4:10:ca:ce:b4:97:d0:9a:38:8a:91: 4f:90:49:12:0d:e0:76:b3:51:ea:20:b2:6b:c3:6d:3b:8e:5a: 13:57:a7:d3:fb:9e:d3:81:73:e4:8c:08:a2:a0:47:44:9f:90: fd:85:42:ce:b5:53:75:04:3c:34:91:32:56:ca:18:5a:a3:20: 71:b4:c4:2b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULkIKEbI/A2K1W3d75McijpMWTG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2 NUJDNzdBRDAeFw0yNjA3MTQxOTQ3MDNaFw0yNjA3MTUyMjQxMDNaMDMxMTAvBgNV BAMTKDBFMDk1MUQzRTU5NjNGNjY4NTY0NTlFNTg2RjZDRDI0ODBCQTlFMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH1Q+lwilM+eRaU1yiWM1IbS/P 4zvamMuEMc97GxPtpkb3GY9DgvFZM1aH/sOLCBOjie2BdsJT7gjckYtJDjzgndJZ fEHPM0mVQPOZpFMDjY9mD2m9V6qZdPK9EG4E2tRl9EbxXadozszBvIWsS/EVpuq0 0b/X2y2IgXBtbj3UcJ4HV6YjWxYRIVQkJ0+Kb1TlnRJQnPqEzJhy9Xs2bQ8EOwfT IdUfsKF4nhtnB5kJcT34JxOG1rDL5SBH6Wf6A5cjTcbuWGuh+9OnYQla9fvkrAwz zK4hEL+u7qIxQFicx8JRYSo32gLSM3BOw1YeApHmr0PZeVn5UyskZw59Wc9VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDglR0+WWP2aFZFnlhvbNJIC6njcwHwYDVR0j BBgwFoAUGa5VZr+D0Ucv2dm65cxwEmW8d60wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTM5NDE3OS8xLzE5QUU1NTY2QkY4M0QxNDcyRkQ5RDlCQUU1Q0M3 MDEyNjVCQzc3QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2NUJDNzdBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMS8xOUFFNTU2NkJGODNE MTQ3MkZEOUQ5QkFFNUNDNzAxMjY1QkM3N0FELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTgQJj466U2r fDdU/GjazTALkOuL1lMZQRF0AxtEG0KzCO/kQ0JavejBBhq3830IXxbYU0VP4Rig xRRAWcpw65yF8lAnldZC5dEw/65tkPYEsBu+33yW/JAyGoooTnfLpsH+Sh9jN40i X3usSOGy8UzFSRLetsbfgDJWckCcI/Rfq4Qs8FFduKBd/mdvWp3NQx/h8LG6HNFM XgP0NyYbowwtQUhp42Qa4nW350K6QHyrqLeQGCCAoflj/qQQys60l9CaOIqRT5BJ Eg3gdrNR6iCya8NtO45aE1en0/ue04Fz5IwIoqBHRJ+Q/YVCzrVTdQQ8NJEyVsoY WqMgcbTEKw== -----END CERTIFICATE-----Generated at Wed Jul 15 00:20:11 2026 by rpki-client