$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft File: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft (raw, json) Hash identifier: yjgo0m0FZmYTX2YoIRpcN1fjtKP1YwZreEX0mPIuJB8= Subject key identifier: 3F:B1:49:1C:C0:11:27:28:F2:61:A2:86:3F:E7:98:51:AE:AD:0E:D1 Authority key identifier: E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3 Certificate issuer: /CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3 Certificate serial: 189F3B30A6C2102B057764EA60BCA2D38ECF8B77 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft Manifest number: 0122 Signing time: Fri 28 Aug 2026 06:48:00 +0000 Manifest this update: Fri 28 Aug 2026 06:43:00 +0000 Manifest next update: Mon 31 Aug 2026 11:25:00 +0000 Files and hashes: 1: 3130332e3139312e3130322e302f32332d3234203d3e20313436373731.roa (hash: qAdl9Mqv3eghaNLnjs9oT32gnvAkpvMtk+dQyAwDJFg=) 2: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl (hash: T9/KCqVqWR0UzxGeSXkwEW2wAhxYp6B7qdEiYADHK1Q=) 3: 323430303a393565303a3a2f33322d3438203d3e20313436373731.roa (hash: oiFeA5HCtr2Fpw6iWNSFO+M1S+ANQ/Wm7HsdABpTV6Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:9f:3b:30:a6:c2:10:2b:05:77:64:ea:60:bc:a2:d3:8e:cf:8b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3 Validity Not Before: Aug 28 06:43:00 2026 GMT Not After : Aug 31 11:25:00 2026 GMT Subject: CN=3FB1491CC0112728F261A2863FE79851AEAD0ED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2d:ea:cf:be:83:83:ea:29:19:0e:b7:57:08: 33:ba:0c:ba:61:ce:60:34:9e:a2:0e:0f:74:d6:7a: 0d:43:8d:2b:41:07:e5:88:a5:5e:31:dc:4f:be:27: 2b:f7:3f:4a:e4:41:4d:58:36:04:72:bd:52:4d:ed: 43:ae:ce:8b:a3:3b:b7:93:db:07:07:9c:24:ce:85: 28:06:5d:b2:6a:24:d3:8c:a7:9d:d1:25:08:79:b1: 68:14:85:60:98:26:cd:96:37:12:14:d5:d6:f8:44: 6f:72:ae:52:6a:7d:07:57:fa:37:64:59:c3:20:6c: 1c:8d:a6:e1:ea:c5:ee:52:be:80:74:3e:80:ab:62: 0a:7b:b3:1d:37:c6:1c:3d:68:c6:a6:ca:68:35:95: 42:56:0f:a0:61:b3:00:25:4a:13:03:26:37:42:64: 7b:73:8b:99:20:aa:45:6c:fb:a4:ef:62:91:be:96: ca:05:f1:3b:21:9e:67:5b:b2:4f:ce:c7:e4:bb:ac: e8:53:d5:e8:ad:8e:75:d0:d4:af:3f:ba:98:09:17: db:2a:ec:d8:c9:2d:3d:ec:f3:8f:c3:65:87:07:e7: 5c:6a:b2:5c:ae:83:b5:21:7a:60:04:50:e0:a4:39: f0:d8:d9:8f:23:4e:01:63:a5:c7:bd:5e:63:d0:72: 1c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B1:49:1C:C0:11:27:28:F2:61:A2:86:3F:E7:98:51:AE:AD:0E:D1 X509v3 Authority Key Identifier: keyid:E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:76:94:e1:be:29:d2:73:b4:37:a7:95:d4:9d:96:7f:32:07: d0:b8:c8:dd:2d:0f:c2:a8:ee:02:3b:c6:e7:6c:62:17:52:0a: b0:0f:4d:d8:0a:df:bf:73:47:66:dd:8c:cf:38:68:56:d4:07: 7a:33:59:7c:94:e3:f0:49:fc:11:20:84:08:21:8b:92:03:7c: 85:1d:7f:37:1a:b6:62:4c:0e:d2:8a:19:b7:6d:9a:f2:e5:f8: 84:7d:f7:16:22:4d:d4:ed:5c:d2:54:04:52:12:0d:04:3e:6d: 25:74:85:48:78:1c:c6:73:6d:40:07:37:55:30:69:1e:14:08: 90:80:a3:7e:7b:72:44:7e:a3:7d:d4:0d:17:20:6e:c8:d6:5d: 73:53:0a:ec:c5:f3:82:00:44:e2:a5:a8:c8:d4:37:8e:0a:13: f1:ba:5b:2d:88:89:a1:2c:a3:47:21:14:5b:fd:a3:7d:48:92: bd:37:8a:b8:19:ea:14:c3:2b:6e:27:e6:92:2e:47:c3:67:1b: 08:ca:08:ce:10:a2:7a:d1:da:5c:7f:e3:65:d1:b6:0f:4c:d1: 8c:bb:bd:ba:88:3d:23:fd:bb:c0:73:af:ed:e0:6d:34:54:55: 3c:b7:ee:37:a7:12:99:52:ab:24:d9:d7:8b:12:b9:4b:0c:46: 69:f4:27:97 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGJ87MKbCECsFd2TqYLyi047Pi3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5REFDN0E1MjgyQUYwQjQ0NkUxQzk2NEY3RjQ1MDlB OTYxNzdEMzAeFw0yNjA4MjgwNjQzMDBaFw0yNjA4MzExMTI1MDBaMDMxMTAvBgNV BAMTKDNGQjE0OTFDQzAxMTI3MjhGMjYxQTI4NjNGRTc5ODUxQUVBRDBFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrLerPvoOD6ikZDrdXCDO6DLph zmA0nqIOD3TWeg1DjStBB+WIpV4x3E++Jyv3P0rkQU1YNgRyvVJN7UOuzoujO7eT 2wcHnCTOhSgGXbJqJNOMp53RJQh5sWgUhWCYJs2WNxIU1db4RG9yrlJqfQdX+jdk WcMgbByNpuHqxe5SvoB0PoCrYgp7sx03xhw9aMamymg1lUJWD6BhswAlShMDJjdC ZHtzi5kgqkVs+6TvYpG+lsoF8Tshnmdbsk/Ox+S7rOhT1eitjnXQ1K8/upgJF9sq 7NjJLT3s84/DZYcH51xqslyug7UhemAEUOCkOfDY2Y8jTgFjpce9XmPQchyzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUP7FJHMARJyjyYaKGP+eYUa6tDtEwHwYDVR0j BBgwFoAU4Z2selKCrwtEbhyWT39FCalhd9MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 OTE0ODkzOTU1NjQ4NzE2OS8wL0UxOURBQzdBNTI4MkFGMEI0NDZFMUM5NjRGN0Y0 NTA5QTk2MTc3RDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTE5REFDN0E1MjgyQUYwQjQ0NkUxQzk2NEY3RjQ1MDlBOTYxNzdEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjkxNDg5Mzk1NTY0ODcxNjkvMC9FMTlEQUM3QTUyODJB RjBCNDQ2RTFDOTY0RjdGNDUwOUE5NjE3N0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwnaU4b4p0nO0 N6eV1J2WfzIH0LjI3S0PwqjuAjvG52xiF1IKsA9N2Arfv3NHZt2MzzhoVtQHejNZ fJTj8En8ESCECCGLkgN8hR1/Nxq2YkwO0ooZt22a8uX4hH33FiJN1O1c0lQEUhIN BD5tJXSFSHgcxnNtQAc3VTBpHhQIkICjfntyRH6jfdQNFyBuyNZdc1MK7MXzggBE 4qWoyNQ3jgoT8bpbLYiJoSyjRyEUW/2jfUiSvTeKuBnqFMMrbifmki5Hw2cbCMoI zhCietHaXH/jZdG2D0zRjLu9uog9I/27wHOv7eBtNFRVPLfuN6cSmVKrJNnXixK5 SwxGafQnlw== -----END CERTIFICATE-----Generated at Sat Aug 29 07:02:37 2026 by rpki-client