$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft File: 19C56F6C979C215AF864F9E18F7A8F62631A1268.mft (raw, json) Hash identifier: ufgadRahUDKlqFexcXhZbcZFJg8wW5lWJqxo2ZAy2rQ= Subject key identifier: 8D:A6:7D:50:B1:F5:76:C0:78:2B:13:13:0F:36:C1:F6:67:32:A2:95 Authority key identifier: 19:C5:6F:6C:97:9C:21:5A:F8:64:F9:E1:8F:7A:8F:62:63:1A:12:68 Certificate issuer: /CN=19C56F6C979C215AF864F9E18F7A8F62631A1268 Certificate serial: 38C16EDBB3A9EC886A926E68E82F218D859F91E7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft Manifest number: C9 Signing time: Tue 13 Oct 2026 21:38:16 +0000 Manifest this update: Tue 13 Oct 2026 21:33:16 +0000 Manifest next update: Sat 17 Oct 2026 05:49:16 +0000 Files and hashes: 1: 19C56F6C979C215AF864F9E18F7A8F62631A1268.crl (hash: SRyRqa1SADnkSeNsNSESCYMvvWMqtJuN+kZzf3jBuIo=) 2: 3130332e3135342e33302e302f32332d3233203d3e20313339313431.roa (hash: l7ihaAL2K1gp0WFgFaF5vhfWpS9Haphuut9+xh4iEFI=) 3: 323430363a353263303a3a2f33322d3332203d3e20313339313431.roa (hash: 0VCs7Br2LEypju+8+bG9yDec+3HSZ8IfNVbmHboPoB4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.crl rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 05:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c1:6e:db:b3:a9:ec:88:6a:92:6e:68:e8:2f:21:8d:85:9f:91:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19C56F6C979C215AF864F9E18F7A8F62631A1268 Validity Not Before: Oct 13 21:33:16 2026 GMT Not After : Oct 17 05:49:16 2026 GMT Subject: CN=8DA67D50B1F576C0782B13130F36C1F66732A295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:34:ab:e9:a3:e3:4a:fe:a2:b2:29:82:0d:4d: 6f:da:c7:c0:66:b2:0c:07:69:ee:a5:29:93:6e:a7: 37:31:47:b5:ed:98:39:b9:9e:9d:d7:d2:90:95:48: b9:64:ee:bb:84:4d:32:59:59:33:96:71:6d:3e:f4: f2:6a:a6:8b:eb:f1:ea:56:1a:fe:12:29:c9:72:3c: 8a:37:f0:31:e6:ba:89:36:ee:64:89:35:f6:d2:5a: 22:3e:fd:8a:d8:75:e3:b4:a0:d2:27:64:88:c8:64: a5:6c:45:48:24:a5:f8:f1:6c:9f:9a:27:f5:26:7d: c0:93:66:41:26:48:91:a3:fe:65:5c:cd:92:62:f3: f9:c9:ac:08:ef:8d:da:e7:10:96:b5:0a:00:e3:e1: fc:0e:2d:7d:9a:24:f4:7d:f5:6a:b4:c8:4b:76:28: 2e:9e:c2:5c:fa:28:a1:52:41:40:c5:0d:75:45:a8: 51:db:0e:e0:8a:db:d5:0a:a6:62:5f:32:7b:f1:3d: 22:1a:99:5c:34:96:82:97:6c:af:7f:22:67:fc:af: 62:a9:87:5b:7d:e7:ea:07:84:41:b9:3e:9b:8d:c0: 2a:b1:15:9a:7b:8e:2a:b7:3e:a1:78:30:a1:8d:e9: a1:76:8c:fa:4b:a9:e1:01:f0:bf:f4:a5:fb:14:88: ee:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A6:7D:50:B1:F5:76:C0:78:2B:13:13:0F:36:C1:F6:67:32:A2:95 X509v3 Authority Key Identifier: keyid:19:C5:6F:6C:97:9C:21:5A:F8:64:F9:E1:8F:7A:8F:62:63:1A:12:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:9a:48:8b:c3:b3:64:a2:04:dc:8b:9e:25:2f:b5:41:c1:0a: 56:6c:07:f0:2b:df:7d:25:22:a4:ad:8b:6d:f7:96:d4:4c:2b: dc:50:b2:c5:fd:d2:73:4b:0b:21:99:8e:cf:56:6d:62:f2:7e: 34:e2:d9:ed:34:0a:b0:f9:d4:2d:c2:e9:89:f9:fb:44:59:bb: 73:e1:55:41:1b:6a:b0:01:67:51:9d:d7:94:a4:84:e7:a8:13: 65:57:e7:2c:4f:6b:02:92:a2:74:2b:4f:66:0f:a8:69:cc:b1: e4:0f:4a:10:cc:7b:30:81:5d:a6:79:b2:5c:8d:04:b2:c8:fc: 5d:b4:78:83:81:0e:7d:dd:d4:c3:7c:d3:5f:d4:c0:43:ef:38: cb:ca:3e:66:43:83:de:e8:54:c8:cb:34:4a:b8:b6:35:07:e3: 38:1e:2e:98:b4:fc:e1:71:60:d1:6c:35:f8:0f:5b:4a:41:bf: 67:e5:d8:2b:2f:16:b4:92:d2:d7:59:2b:d9:8a:09:0b:d8:68: dd:8d:95:d0:0e:c7:f5:b5:4d:58:7d:6b:5f:06:0d:ac:ec:f0: 79:19:8c:d7:55:3a:43:22:12:cd:69:ab:f7:50:ef:66:d8:06: 36:5b:63:f0:c3:5a:72:0e:9d:d0:f2:63:2b:73:d3:2d:bd:6b: cc:5d:d6:d1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOMFu27Op7Ihqkm5o6C8hjYWfkecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlDNTZGNkM5NzlDMjE1QUY4NjRGOUUxOEY3QThGNjI2 MzFBMTI2ODAeFw0yNjEwMTMyMTMzMTZaFw0yNjEwMTcwNTQ5MTZaMDMxMTAvBgNV BAMTKDhEQTY3RDUwQjFGNTc2QzA3ODJCMTMxMzBGMzZDMUY2NjczMkEyOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgNKvpo+NK/qKyKYINTW/ax8Bm sgwHae6lKZNupzcxR7XtmDm5np3X0pCVSLlk7ruETTJZWTOWcW0+9PJqpovr8epW Gv4SKclyPIo38DHmuok27mSJNfbSWiI+/YrYdeO0oNInZIjIZKVsRUgkpfjxbJ+a J/UmfcCTZkEmSJGj/mVczZJi8/nJrAjvjdrnEJa1CgDj4fwOLX2aJPR99Wq0yEt2 KC6ewlz6KKFSQUDFDXVFqFHbDuCK29UKpmJfMnvxPSIamVw0loKXbK9/Imf8r2Kp h1t95+oHhEG5PpuNwCqxFZp7jiq3PqF4MKGN6aF2jPpLqeEB8L/0pfsUiO6TAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjaZ9ULH1dsB4KxMTDzbB9mcyopUwHwYDVR0j BBgwFoAUGcVvbJecIVr4ZPnhj3qPYmMaEmgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0ODQ5MzY0MzUzMDI0Mi8wLzE5QzU2RjZDOTc5QzIxNUFGODY0RjlFMThGN0E4 RjYyNjMxQTEyNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTlDNTZGNkM5NzlDMjE1QUY4NjRGOUUxOEY3QThGNjI2MzFBMTI2OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDg0OTM2NDM1MzAyNDIvMC8xOUM1NkY2Qzk3OUMy MTVBRjg2NEY5RTE4RjdBOEY2MjYzMUExMjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwppIi8OzZKIE 3IueJS+1QcEKVmwH8CvffSUipK2LbfeW1Ewr3FCyxf3Sc0sLIZmOz1ZtYvJ+NOLZ 7TQKsPnULcLpifn7RFm7c+FVQRtqsAFnUZ3XlKSE56gTZVfnLE9rApKidCtPZg+o acyx5A9KEMx7MIFdpnmyXI0Essj8XbR4g4EOfd3Uw3zTX9TAQ+84y8o+ZkOD3uhU yMs0Sri2NQfjOB4umLT84XFg0Ww1+A9bSkG/Z+XYKy8WtJLS11kr2YoJC9ho3Y2V 0A7H9bVNWH1rXwYNrOzweRmM11U6QyISzWmr91DvZtgGNltj8MNacg6d0PJjK3PT Lb1rzF3W0Q== -----END CERTIFICATE-----Generated at Wed Oct 14 15:09:49 2026 by rpki-client