$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft File: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft (raw, json) Hash identifier: QiOt1P9dmwmVPlMW/vE8tf+0vnn5wSKH3XUTIo2za8I= Subject key identifier: A4:8D:A7:21:54:0F:F4:1E:AF:EE:29:A8:2E:BB:0C:7E:83:43:C7:EC Authority key identifier: E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3 Certificate issuer: /CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3 Certificate serial: 7405B0D14EE0977C60E7E2C0B8A1068268688B38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft Manifest number: 6B Signing time: Mon 13 Apr 2026 09:14:17 +0000 Manifest this update: Mon 13 Apr 2026 09:09:17 +0000 Manifest next update: Tue 14 Apr 2026 11:23:17 +0000 Files and hashes: 1: 3130332e3139312e3130322e302f32332d3234203d3e20313436373731.roa (hash: qAdl9Mqv3eghaNLnjs9oT32gnvAkpvMtk+dQyAwDJFg=) 2: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl (hash: UjeWqyt8WgP4fn9qKeHmzcaPmoesz77bedABsZBpJYk=) 3: 323430303a393565303a3a2f33322d3438203d3e20313436373731.roa (hash: oiFeA5HCtr2Fpw6iWNSFO+M1S+ANQ/Wm7HsdABpTV6Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 09:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:05:b0:d1:4e:e0:97:7c:60:e7:e2:c0:b8:a1:06:82:68:68:8b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3 Validity Not Before: Apr 13 09:09:17 2026 GMT Not After : Apr 14 11:23:17 2026 GMT Subject: CN=A48DA721540FF41EAFEE29A82EBB0C7E8343C7EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2d:15:3f:55:5a:cc:87:78:61:f3:bc:a8:ae: 50:e6:3d:8c:d6:d7:ee:1b:aa:8b:d9:d8:02:8b:a3: a4:61:4a:3f:64:f3:db:2e:fb:32:e7:94:75:9f:98: 29:c6:be:b4:ee:92:93:27:c4:e9:d0:d5:93:8e:81: 42:15:87:33:1c:7e:36:e0:e1:e1:5f:3c:20:a1:a3: 5e:06:dc:5f:f8:6b:79:ed:0d:96:fc:99:d4:f3:84: 9e:ee:c5:f7:8d:59:7b:a8:0c:26:82:ba:b9:10:81: b1:7e:19:c1:69:04:1b:9d:71:21:35:c3:8b:7a:72: b8:1a:fe:08:ae:92:66:dc:f0:01:ca:ad:b8:18:08: 95:c4:f1:2d:4e:b0:91:66:90:4a:c1:a8:7c:57:46: 59:4d:94:e5:91:69:dd:80:bf:d7:a1:f7:45:e0:21: 4e:c9:df:8b:b3:bd:83:56:16:b2:90:eb:08:64:6e: 9c:fd:59:35:d3:89:7c:85:a3:a1:b6:67:c0:a1:5a: 8d:64:56:95:7d:d2:13:ed:6f:66:3a:c3:e9:dc:62: c6:a5:04:d1:0c:6e:85:db:cc:3f:93:81:c8:55:c4: 0c:61:5e:40:5e:16:59:81:2b:a4:f2:07:fc:71:21: 30:1d:15:fc:7a:8e:cb:9e:1e:9d:c0:c9:45:b1:67: e7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8D:A7:21:54:0F:F4:1E:AF:EE:29:A8:2E:BB:0C:7E:83:43:C7:EC X509v3 Authority Key Identifier: keyid:E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:78:4f:31:94:76:bf:a0:00:85:b8:f7:4b:e5:61:bc:27:ec: 68:be:ae:67:12:cf:0d:d7:12:75:3c:f0:be:97:7b:b4:f7:49: b8:52:a3:08:b6:f0:63:8c:03:67:db:21:c1:93:b6:5e:67:97: f5:b6:2b:ec:ec:81:d7:28:17:31:87:35:0f:ec:b5:7b:45:d3: 96:2a:64:00:61:f6:c2:6e:9b:95:cd:75:1a:72:83:a6:f6:04: a1:a2:0f:92:ee:39:96:8f:1c:14:dd:90:45:57:68:b8:91:0f: 00:88:62:b3:00:5a:d4:16:ab:e3:2f:17:53:e7:3f:8a:ef:16: bf:b3:eb:5f:f6:8e:16:d9:a1:ec:3a:28:9e:d0:d3:a0:2e:96: f9:b8:b6:2f:b9:ab:2a:03:7f:f4:e2:d6:31:25:53:5c:43:53: 52:4a:d3:a6:2c:6e:b9:6c:2a:33:f5:54:57:d7:c3:a0:49:14: 04:9f:db:70:7f:72:de:ba:dd:17:75:0f:2a:77:82:ee:fc:ed: 66:6b:36:b5:2a:1f:c1:e8:0c:74:ee:f9:16:27:81:23:66:db: b4:31:75:f7:ec:fd:25:fd:9a:25:1b:32:e1:1b:a5:a9:89:3e: d3:7f:cd:bd:61:ca:59:da:e1:56:89:70:3c:31:5e:2e:cf:6e: 53:47:0e:eb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdAWw0U7gl3xg5+LAuKEGgmhoizgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5REFDN0E1MjgyQUYwQjQ0NkUxQzk2NEY3RjQ1MDlB OTYxNzdEMzAeFw0yNjA0MTMwOTA5MTdaFw0yNjA0MTQxMTIzMTdaMDMxMTAvBgNV BAMTKEE0OERBNzIxNTQwRkY0MUVBRkVFMjlBODJFQkIwQzdFODM0M0M3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZLRU/VVrMh3hh87yorlDmPYzW 1+4bqovZ2AKLo6RhSj9k89su+zLnlHWfmCnGvrTukpMnxOnQ1ZOOgUIVhzMcfjbg 4eFfPCCho14G3F/4a3ntDZb8mdTzhJ7uxfeNWXuoDCaCurkQgbF+GcFpBBudcSE1 w4t6crga/giukmbc8AHKrbgYCJXE8S1OsJFmkErBqHxXRllNlOWRad2Av9eh90Xg IU7J34uzvYNWFrKQ6whkbpz9WTXTiXyFo6G2Z8ChWo1kVpV90hPtb2Y6w+ncYsal BNEMboXbzD+TgchVxAxhXkBeFlmBK6TyB/xxITAdFfx6jsueHp3AyUWxZ+dJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpI2nIVQP9B6v7imoLrsMfoNDx+wwHwYDVR0j BBgwFoAU4Z2selKCrwtEbhyWT39FCalhd9MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 OTE0ODkzOTU1NjQ4NzE2OS8wL0UxOURBQzdBNTI4MkFGMEI0NDZFMUM5NjRGN0Y0 NTA5QTk2MTc3RDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTE5REFDN0E1MjgyQUYwQjQ0NkUxQzk2NEY3RjQ1MDlBOTYxNzdEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjkxNDg5Mzk1NTY0ODcxNjkvMC9FMTlEQUM3QTUyODJB RjBCNDQ2RTFDOTY0RjdGNDUwOUE5NjE3N0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXhPMZR2v6AA hbj3S+VhvCfsaL6uZxLPDdcSdTzwvpd7tPdJuFKjCLbwY4wDZ9shwZO2XmeX9bYr 7OyB1ygXMYc1D+y1e0XTlipkAGH2wm6blc11GnKDpvYEoaIPku45lo8cFN2QRVdo uJEPAIhiswBa1Bar4y8XU+c/iu8Wv7PrX/aOFtmh7DoontDToC6W+bi2L7mrKgN/ 9OLWMSVTXENTUkrTpixuuWwqM/VUV9fDoEkUBJ/bcH9y3rrdF3UPKneC7vztZms2 tSofwegMdO75FieBI2bbtDF19+z9Jf2aJRsy4RulqYk+03/NvWHKWdrhVolwPDFe Ls9uU0cO6w== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:39 2026 by rpki-client