$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft File: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft (raw, json) Hash identifier: EmIEYCWcrHNnFFUhORvkmrIVjeIkDbCQnnrnNVkgpQg= Subject key identifier: 9B:48:C9:BE:0D:E1:1F:61:95:E6:49:11:88:CF:51:FE:7D:91:92:08 Authority key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD Certificate issuer: /CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD Certificate serial: 4E28E5D88F335656312FE5F87A4031055483BCEC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft Manifest number: AF Signing time: Fri 29 May 2026 11:37:49 +0000 Manifest this update: Fri 29 May 2026 11:32:49 +0000 Manifest next update: Sat 30 May 2026 14:09:49 +0000 Files and hashes: 1: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl (hash: bVt0CxwECrWKUPPmcERZeSDw0gIn8aO75l2e1Iku2Z8=) 2: 3134342e37392e31302e302f32332d3234203d3e20313531323531.roa (hash: WjMCSVc2nZ6LHlmIFS3fh2fKf0RsOi1ahfbmP+aZL0U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:28:e5:d8:8f:33:56:56:31:2f:e5:f8:7a:40:31:05:54:83:bc:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD Validity Not Before: May 29 11:32:49 2026 GMT Not After : May 30 14:09:49 2026 GMT Subject: CN=9B48C9BE0DE11F6195E6491188CF51FE7D919208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1c:25:be:98:bb:d5:81:3c:6f:5a:b6:ff:ac: ae:ed:fc:a4:7d:15:19:1e:e9:c5:bd:2a:91:28:e7: 87:fb:87:9d:98:54:31:6a:6c:6f:10:63:58:ad:60: 50:d4:67:6d:88:5a:9e:63:c3:06:1f:2b:f8:b4:d0: 60:69:a1:8e:c4:62:e0:4e:5d:16:dd:02:c1:6d:de: d1:ce:c6:a0:8c:38:74:9a:55:66:ce:65:32:03:83: ae:0f:62:b3:3f:85:20:3a:d0:27:1b:cd:52:5b:e9: e3:a0:78:55:e0:26:51:cd:72:f7:42:71:8d:fb:75: bf:3b:ed:f3:99:12:83:20:48:a1:8f:79:7f:07:49: da:f3:1b:f6:28:9d:65:58:3b:11:76:d3:1c:2c:1f: 42:d0:32:08:0e:d4:c0:28:48:53:5d:b6:0e:1a:d9: c3:5f:1c:53:5e:5e:b6:74:ca:42:1f:0a:8c:98:07: e7:ec:dc:5b:6b:d5:39:a5:94:25:a1:d9:99:a3:a3: 6a:4b:ea:87:76:e0:36:ca:6d:53:7c:1f:33:ab:2b: 47:cf:1c:88:c7:7f:3c:33:47:12:53:28:51:b0:ce: 07:cf:bb:37:8e:24:52:d8:dc:90:84:ab:b8:b7:ec: 15:43:5e:ba:c8:35:d7:ab:dd:97:5d:e9:9b:e5:46: 2f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:48:C9:BE:0D:E1:1F:61:95:E6:49:11:88:CF:51:FE:7D:91:92:08 X509v3 Authority Key Identifier: keyid:19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:83:bd:10:f4:16:83:40:41:42:28:06:da:48:a2:d6:e9:70: f2:49:f5:e7:48:2c:0c:6f:71:1b:c3:a6:d3:e3:73:2c:28:dd: 56:4b:b0:1f:a9:6c:b7:3e:81:2a:cf:c2:3c:3f:6d:c7:85:f4: 87:2b:ec:00:7a:32:4e:ba:48:55:3a:9a:27:3f:07:42:8a:fa: 84:e0:8a:bd:60:75:6a:98:9e:91:e1:56:80:b8:e1:24:7a:30: d3:be:ba:d8:f6:01:9d:07:9d:34:40:0a:31:00:63:93:59:d3: 4d:39:72:e3:05:de:4e:58:6e:37:18:fb:c9:d1:6f:62:66:60: ff:92:82:52:9e:f4:3d:0c:91:c0:b2:6e:54:11:85:2e:b6:ed: a7:15:22:b6:e1:cb:82:52:96:1c:c4:ee:a0:1b:f0:06:5a:fa: 8d:b1:85:70:1f:23:71:56:dc:04:bb:53:a7:4e:a7:23:6b:93: ea:09:2b:07:a4:61:c9:54:fa:ad:25:0c:82:cd:54:27:9f:c3: 8c:4d:2d:7f:c8:ff:4c:19:2e:47:3e:79:02:4c:bd:98:1d:fa: 0e:e9:9a:ad:78:62:1a:24:e8:22:b1:16:1d:4c:60:28:ee:f9: b6:5f:f0:05:02:54:8a:23:0e:a3:e6:11:9e:12:99:0c:40:d4: 55:11:f4:c4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTijl2I8zVlYxL+X4ekAxBVSDvOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2 NUJDNzdBRDAeFw0yNjA1MjkxMTMyNDlaFw0yNjA1MzAxNDA5NDlaMDMxMTAvBgNV BAMTKDlCNDhDOUJFMERFMTFGNjE5NUU2NDkxMTg4Q0Y1MUZFN0Q5MTkyMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqHCW+mLvVgTxvWrb/rK7t/KR9 FRke6cW9KpEo54f7h52YVDFqbG8QY1itYFDUZ22IWp5jwwYfK/i00GBpoY7EYuBO XRbdAsFt3tHOxqCMOHSaVWbOZTIDg64PYrM/hSA60CcbzVJb6eOgeFXgJlHNcvdC cY37db877fOZEoMgSKGPeX8HSdrzG/YonWVYOxF20xwsH0LQMggO1MAoSFNdtg4a 2cNfHFNeXrZ0ykIfCoyYB+fs3Ftr1TmllCWh2Zmjo2pL6od24DbKbVN8HzOrK0fP HIjHfzwzRxJTKFGwzgfPuzeOJFLY3JCEq7i37BVDXrrINder3Zdd6ZvlRi+1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUm0jJvg3hH2GV5kkRiM9R/n2RkggwHwYDVR0j BBgwFoAUGa5VZr+D0Ucv2dm65cxwEmW8d60wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTM5NDE3OS8xLzE5QUU1NTY2QkY4M0QxNDcyRkQ5RDlCQUU1Q0M3 MDEyNjVCQzc3QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2NUJDNzdBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMS8xOUFFNTU2NkJGODNE MTQ3MkZEOUQ5QkFFNUNDNzAxMjY1QkM3N0FELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIO9EPQWg0BB QigG2kii1ulw8kn150gsDG9xG8Om0+NzLCjdVkuwH6lstz6BKs/CPD9tx4X0hyvs AHoyTrpIVTqaJz8HQor6hOCKvWB1apiekeFWgLjhJHow07662PYBnQedNEAKMQBj k1nTTTly4wXeTlhuNxj7ydFvYmZg/5KCUp70PQyRwLJuVBGFLrbtpxUituHLglKW HMTuoBvwBlr6jbGFcB8jcVbcBLtTp06nI2uT6gkrB6RhyVT6rSUMgs1UJ5/DjE0t f8j/TBkuRz55Aky9mB36DumarXhiGiToIrEWHUxgKO75tl/wBQJUiiMOo+YRnhKZ DEDUVRH0xA== -----END CERTIFICATE-----Generated at Sat May 30 01:38:09 2026 by rpki-client