$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft File: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft (raw, json) Hash identifier: mITQJU3KGkpbjotwdUavOBRWHFUTKrV8bgsSER25MIo= Subject key identifier: 37:39:44:B2:99:67:70:0B:37:B1:DE:1E:4D:C3:AD:39:DF:4E:37:89 Authority key identifier: E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3 Certificate issuer: /CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3 Certificate serial: 28AAC140AE1630B699884BFFB497BCD37E355FAE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft Manifest number: 27 Signing time: Sun 22 Feb 2026 09:37:30 +0000 Manifest this update: Sun 22 Feb 2026 09:32:30 +0000 Manifest next update: Mon 23 Feb 2026 12:01:30 +0000 Files and hashes: 1: 3130332e3139312e3130322e302f32332d3234203d3e20313436373731.roa (hash: qAdl9Mqv3eghaNLnjs9oT32gnvAkpvMtk+dQyAwDJFg=) 2: 323430303a393565303a3a2f33322d3438203d3e20313436373731.roa (hash: oiFeA5HCtr2Fpw6iWNSFO+M1S+ANQ/Wm7HsdABpTV6Y=) 3: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl (hash: QeyBdChI71Dk2lKuA3dqXTZbsf2sZN8gvPKI5qPIcKA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:aa:c1:40:ae:16:30:b6:99:88:4b:ff:b4:97:bc:d3:7e:35:5f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3 Validity Not Before: Feb 22 09:32:30 2026 GMT Not After : Feb 23 12:01:30 2026 GMT Subject: CN=373944B29967700B37B1DE1E4DC3AD39DF4E3789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2b:d2:81:d4:0e:01:48:33:1b:8f:bf:f2:a3: 50:7c:cd:ab:b3:7a:f2:a2:39:eb:f5:aa:e7:52:48: fa:92:e2:b5:5a:9d:a5:24:09:38:91:fa:52:eb:3b: 1b:a6:2e:dc:50:02:c0:b4:2f:cb:7f:3e:82:c0:79: 42:a4:6c:22:f9:4c:16:f4:03:c3:bc:31:eb:32:68: aa:03:f6:d0:cf:f8:49:be:f3:f3:84:e4:a0:93:43: a5:5e:14:26:a8:d5:d9:45:fe:e4:f0:e8:53:0a:4b: 5a:1d:63:86:bd:26:c8:cd:ab:7f:65:72:35:9e:43: f0:fd:29:00:d3:b5:19:56:73:f2:ac:28:da:a1:2a: 1d:47:aa:09:be:04:b4:1f:c2:4d:8d:50:e2:9f:fe: ec:81:ae:f3:f5:5b:45:f8:64:b4:ad:da:5e:09:3d: 9c:16:96:a0:f6:b4:24:43:78:82:fa:6a:81:aa:df: 8b:84:46:34:21:8b:9e:6b:f0:01:60:35:7c:f9:d8: 79:ed:ca:ef:cf:3c:68:41:1b:0c:f2:00:7c:7f:d0: 99:30:a0:e8:2d:53:72:5a:d9:9c:36:bc:93:b9:ab: 67:11:20:0a:1f:0f:52:19:cb:71:95:1e:8c:36:3e: 6d:f5:9c:94:42:33:27:4c:c3:d3:f7:94:d5:f7:d8: 4b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:39:44:B2:99:67:70:0B:37:B1:DE:1E:4D:C3:AD:39:DF:4E:37:89 X509v3 Authority Key Identifier: keyid:E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f7:ad:9e:96:0f:a5:42:0d:dd:e2:0f:14:02:cc:36:3c:e5: 71:3f:05:24:36:08:ce:b9:23:19:f1:34:0c:93:c9:70:63:4f: 56:a9:81:96:ad:fe:cc:67:77:86:f8:a6:75:2b:bf:2d:b6:3c: 84:56:02:20:bb:c1:76:d5:7c:81:51:d8:e0:ca:80:35:b9:b3: a3:c5:93:3c:4b:f3:96:84:ad:d7:b7:81:fb:c0:fe:1a:08:be: 53:6b:99:b1:2c:bd:82:71:e9:1c:3f:60:fa:ec:93:2c:2b:47: ed:ac:8d:26:c4:62:72:21:f9:82:41:34:f7:f8:2c:ac:b4:48: 2e:ef:49:7a:b1:9e:2d:60:2f:2a:d0:5b:53:07:b4:d9:74:f6: b3:38:f7:87:7a:0f:25:63:46:77:2f:1a:8f:d1:76:4e:29:75: a5:e6:60:fc:29:3d:42:0d:d5:c6:5d:f1:e7:2a:2c:36:41:d7: 57:7d:ac:76:f3:21:97:74:43:3c:38:e0:3f:26:a5:d7:ec:7c: 24:77:6c:f3:2f:8c:20:fa:71:9e:d0:df:fa:7e:a4:bd:29:1f: d8:c1:ff:a9:00:d1:bd:6c:0d:44:2b:3e:9e:ce:df:a0:4e:26: 74:a5:b5:2c:05:74:e1:19:82:86:49:5e:e3:f1:69:36:0b:b9: 34:81:c9:02 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKKrBQK4WMLaZiEv/tJe80341X64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5REFDN0E1MjgyQUYwQjQ0NkUxQzk2NEY3RjQ1MDlB OTYxNzdEMzAeFw0yNjAyMjIwOTMyMzBaFw0yNjAyMjMxMjAxMzBaMDMxMTAvBgNV BAMTKDM3Mzk0NEIyOTk2NzcwMEIzN0IxREUxRTREQzNBRDM5REY0RTM3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaK9KB1A4BSDMbj7/yo1B8zauz evKiOev1qudSSPqS4rVanaUkCTiR+lLrOxumLtxQAsC0L8t/PoLAeUKkbCL5TBb0 A8O8MesyaKoD9tDP+Em+8/OE5KCTQ6VeFCao1dlF/uTw6FMKS1odY4a9JsjNq39l cjWeQ/D9KQDTtRlWc/KsKNqhKh1Hqgm+BLQfwk2NUOKf/uyBrvP1W0X4ZLSt2l4J PZwWlqD2tCRDeIL6aoGq34uERjQhi55r8AFgNXz52Hntyu/PPGhBGwzyAHx/0Jkw oOgtU3Ja2Zw2vJO5q2cRIAofD1IZy3GVHow2Pm31nJRCMydMw9P3lNX32EuNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNzlEsplncAs3sd4eTcOtOd9ON4kwHwYDVR0j BBgwFoAU4Z2selKCrwtEbhyWT39FCalhd9MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 OTE0ODkzOTU1NjQ4NzE2OS8wL0UxOURBQzdBNTI4MkFGMEI0NDZFMUM5NjRGN0Y0 NTA5QTk2MTc3RDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTE5REFDN0E1MjgyQUYwQjQ0NkUxQzk2NEY3RjQ1MDlBOTYxNzdEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjkxNDg5Mzk1NTY0ODcxNjkvMC9FMTlEQUM3QTUyODJB RjBCNDQ2RTFDOTY0RjdGNDUwOUE5NjE3N0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfetnpYPpUIN 3eIPFALMNjzlcT8FJDYIzrkjGfE0DJPJcGNPVqmBlq3+zGd3hvimdSu/LbY8hFYC ILvBdtV8gVHY4MqANbmzo8WTPEvzloSt17eB+8D+Ggi+U2uZsSy9gnHpHD9g+uyT LCtH7ayNJsRiciH5gkE09/gsrLRILu9JerGeLWAvKtBbUwe02XT2szj3h3oPJWNG dy8aj9F2Til1peZg/Ck9Qg3Vxl3x5yosNkHXV32sdvMhl3RDPDjgPyal1+x8JHds 8y+MIPpxntDf+n6kvSkf2MH/qQDRvWwNRCs+ns7foE4mdKW1LAV04RmChkle4/Fp Ngu5NIHJAg== -----END CERTIFICATE-----Generated at Mon Feb 23 02:06:13 2026 by rpki-client