$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft File: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft (raw, json) Hash identifier: 3Zk28K8zOC/vMGL8dN7qF1aHqSh+LqhV8tWsGbOOqmw= Subject key identifier: E9:54:FC:EA:7E:AB:EF:B9:68:12:53:4D:D5:A5:39:76:CD:53:92:B4 Authority key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD Certificate issuer: /CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD Certificate serial: 33EF2CE229ECE35C16AA995BD7358572D5024A9B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft Manifest number: 46 Signing time: Thu 12 Mar 2026 01:28:39 +0000 Manifest this update: Thu 12 Mar 2026 01:23:39 +0000 Manifest next update: Fri 13 Mar 2026 03:39:39 +0000 Files and hashes: 1: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl (hash: dNO0nf92IGSD2Gcc+NHVYcS1Xh4JNdEG94D8T7h/Bp4=) 2: 3134342e37392e31302e302f32332d3234203d3e20313531323531.roa (hash: WjMCSVc2nZ6LHlmIFS3fh2fKf0RsOi1ahfbmP+aZL0U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 03:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ef:2c:e2:29:ec:e3:5c:16:aa:99:5b:d7:35:85:72:d5:02:4a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD Validity Not Before: Mar 12 01:23:39 2026 GMT Not After : Mar 13 03:39:39 2026 GMT Subject: CN=E954FCEA7EABEFB96812534DD5A53976CD5392B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:11:01:d1:89:52:e4:78:f6:1e:c1:f1:58: be:5d:2f:7d:2c:8d:19:9c:28:14:67:4d:01:dd:02: 84:ac:12:18:79:b8:1d:87:c0:9f:4f:f4:40:a5:73: d8:3f:33:a8:53:c2:3f:37:b6:54:25:be:a5:a4:b2: d9:3e:38:8a:d0:dd:9c:ed:7f:11:84:31:21:73:fd: 3e:c3:9c:ab:92:d6:58:77:52:46:db:2c:b0:07:4b: ea:ac:5f:bb:32:a8:26:2c:8f:04:a2:04:d4:f9:13: 7c:84:6b:f7:e1:24:43:4d:2d:8e:e2:51:e1:53:bf: 15:9c:81:84:bb:3e:35:77:59:77:1c:f9:b5:de:c7: 99:df:a3:4b:87:40:a5:bd:48:ff:9a:d1:9f:91:f1: fe:a8:49:83:b9:ae:cf:1c:0c:2b:d4:c4:29:9f:ae: 20:64:f8:8b:2b:6a:aa:a9:b0:a1:7e:61:f8:63:9d: 5c:0d:b9:2c:fb:56:97:0f:4f:07:06:b6:3b:f3:6f: 84:c2:82:7c:55:22:33:cd:91:65:55:4f:8e:cb:6f: 90:71:d8:8c:95:1b:c1:d2:c5:c3:f7:95:9e:b4:8f: aa:2f:7c:46:64:8f:c4:f2:4c:27:75:b9:2e:c3:f9: 37:83:47:f5:ad:c9:dd:02:bf:23:7a:11:65:ea:62: 93:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:54:FC:EA:7E:AB:EF:B9:68:12:53:4D:D5:A5:39:76:CD:53:92:B4 X509v3 Authority Key Identifier: keyid:19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:38:3d:55:d7:f6:04:d0:b5:3d:26:c5:a0:c0:e5:13:08:d5: 29:74:11:ff:50:4b:8a:9d:a0:cb:ee:58:78:05:24:f7:6a:70: 6f:26:a0:05:64:16:d8:b0:9f:d0:f3:cb:f0:d9:04:83:31:39: ab:d3:a8:bf:44:2d:05:65:e8:e0:ae:cb:85:58:36:4b:60:01: 80:59:e4:eb:f4:75:92:15:a3:bc:18:fe:78:45:ec:68:a6:27: 66:72:fe:bc:f9:72:16:c0:52:ed:40:31:59:5e:fe:1c:3b:2a: c5:82:39:8b:03:39:3a:92:f2:d8:f7:a9:a3:96:56:a6:b8:ea: 64:fa:ed:12:94:c8:3d:04:8c:1a:91:5a:ca:71:47:9a:e0:b3: 70:f2:00:88:a8:84:fb:8b:ef:c4:ce:e6:54:84:10:10:3b:b8: 25:43:12:01:e2:9c:2d:1b:10:9e:a4:39:15:15:44:5e:ff:58: e9:0f:22:cb:3c:1c:17:74:7a:cc:53:3c:5c:c5:e3:af:1b:f1: 2f:50:69:5c:4b:c7:34:5f:a6:d1:0b:7d:c8:f4:b8:74:2a:34: 5a:a4:1e:c1:ae:9f:a9:5d:50:28:e6:7f:f0:23:07:1d:e8:a9: a0:79:03:f2:4b:a3:73:90:5c:54:6e:1a:1b:43:89:0b:66:ab: 84:e5:1f:d9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM+8s4ins41wWqplb1zWFctUCSpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2 NUJDNzdBRDAeFw0yNjAzMTIwMTIzMzlaFw0yNjAzMTMwMzM5MzlaMDMxMTAvBgNV BAMTKEU5NTRGQ0VBN0VBQkVGQjk2ODEyNTM0REQ1QTUzOTc2Q0Q1MzkyQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1REB0YlS5Hj2HsHxWL5dL30s jRmcKBRnTQHdAoSsEhh5uB2HwJ9P9EClc9g/M6hTwj83tlQlvqWkstk+OIrQ3Zzt fxGEMSFz/T7DnKuS1lh3UkbbLLAHS+qsX7syqCYsjwSiBNT5E3yEa/fhJENNLY7i UeFTvxWcgYS7PjV3WXcc+bXex5nfo0uHQKW9SP+a0Z+R8f6oSYO5rs8cDCvUxCmf riBk+IsraqqpsKF+YfhjnVwNuSz7VpcPTwcGtjvzb4TCgnxVIjPNkWVVT47Lb5Bx 2IyVG8HSxcP3lZ60j6ovfEZkj8TyTCd1uS7D+TeDR/Wtyd0CvyN6EWXqYpP1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6VT86n6r77loElNN1aU5ds1TkrQwHwYDVR0j BBgwFoAUGa5VZr+D0Ucv2dm65cxwEmW8d60wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTM5NDE3OS8xLzE5QUU1NTY2QkY4M0QxNDcyRkQ5RDlCQUU1Q0M3 MDEyNjVCQzc3QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2NUJDNzdBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMS8xOUFFNTU2NkJGODNE MTQ3MkZEOUQ5QkFFNUNDNzAxMjY1QkM3N0FELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxTg9Vdf2BNC1 PSbFoMDlEwjVKXQR/1BLip2gy+5YeAUk92pwbyagBWQW2LCf0PPL8NkEgzE5q9Oo v0QtBWXo4K7LhVg2S2ABgFnk6/R1khWjvBj+eEXsaKYnZnL+vPlyFsBS7UAxWV7+ HDsqxYI5iwM5OpLy2Pepo5ZWprjqZPrtEpTIPQSMGpFaynFHmuCzcPIAiKiE+4vv xM7mVIQQEDu4JUMSAeKcLRsQnqQ5FRVEXv9Y6Q8iyzwcF3R6zFM8XMXjrxvxL1Bp XEvHNF+m0Qt9yPS4dCo0WqQewa6fqV1QKOZ/8CMHHeipoHkD8kujc5BcVG4aG0OJ C2arhOUf2Q== -----END CERTIFICATE-----Generated at Thu Mar 12 18:19:29 2026 by rpki-client