
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
File: 191E76D74421148B42FA2A7F663270AE7FAD25F9.mft (raw, json)
Hash identifier: t/CC/Utt0/GWg+vt5Rg1lOKeBvfvZXCRERNmy9TAKgY=
Subject key identifier: 69:73:E0:7D:23:D6:75:80:2C:10:BE:03:D5:31:9B:10:43:D9:AF:44
Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
Certificate issuer: /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Certificate serial: 4F1E6ED6C4DE1C2B03A3FC9E068FB5682B60FD93
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
Manifest number: 013D
Signing time: Sun 11 Oct 2026 04:45:15 +0000
Manifest this update: Sun 11 Oct 2026 04:40:15 +0000
Manifest next update: Wed 14 Oct 2026 14:07:15 +0000
Files and hashes: 1: 191E76D74421148B42FA2A7F663270AE7FAD25F9.crl (hash: pv8o4hPcCx/OMK5xm3WEhVGhPpUlG1CB6K+vw9YT194=)
2: 3130332e3131362e3132312e302f32342d3234203d3e203633363534.roa (hash: vpD7NEE8qzM+eWphvno3vCArBIi9VdE9XjhBRn48b6k=)
3: 3130332e3131362e3132302e302f32342d3234203d3e203633363534.roa (hash: sjhYlFRils7TGbe4yrQB1MXoq74ExmSHsG4znfKuu7I=)
4: 3130332e3131362e3132332e302f32342d3234203d3e203633363534.roa (hash: 6OtEuNz2GVGLvEPnp1uI15Y+vgwMkKwikkqR/oRSa24=)
5: 3130332e3131362e3132312e302f32342d3234203d3e2034383437.roa (hash: bybvQVpDA62zpyPwHa1XWTYZhk2FjGjkQojOKPAlIPY=)
6: 3130332e3131362e3132332e302f32342d3234203d3e2034383437.roa (hash: iusd/geGAkaqNqYv0woWsgccBNM+keeMZWKm1FAoOOM=)
7: 3130332e3131362e3132302e302f32342d3234203d3e2034383437.roa (hash: zB7FMCFhHyOWYUyT241bOpU68Hl2jbAwsIx3PIajOso=)
8: 323430323a663963303a3a2f34382d3438203d3e20313337373937.roa (hash: Xa71V3zlzwJxLxJVMnOGWGmp2Wl6+BqPl/c74CX5nDA=)
9: 3130332e3131362e3132302e302f32322d3232203d3e203633363534.roa (hash: fLgddK5a5pen10EIOArIO5eS1Bvv0lSS9vSM6d0T0bw=)
10: 3130332e3131362e3132302e302f32332d3233203d3e203633363534.roa (hash: ayiRQLB0vCQOVj4IcpJdzMo4ohtXvgd7waElFg36mCA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 14:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:1e:6e:d6:c4:de:1c:2b:03:a3:fc:9e:06:8f:b5:68:2b:60:fd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Validity
Not Before: Oct 11 04:40:15 2026 GMT
Not After : Oct 14 14:07:15 2026 GMT
Subject: CN=6973E07D23D675802C10BE03D5319B1043D9AF44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:23:a4:84:01:12:37:9e:b1:cb:cd:8e:2c:
b8:43:a6:81:41:74:ff:ed:68:73:82:8c:f4:4f:10:
94:2e:43:b3:34:8d:ff:01:ed:1b:b8:1a:4f:77:9e:
a7:72:65:ce:2e:ce:94:ce:53:6b:c1:bb:94:5e:8c:
fb:a9:f7:ae:16:2a:aa:c3:18:a5:7a:eb:d0:8c:36:
af:64:85:01:37:e9:38:8a:9d:dd:dc:9d:96:85:1c:
32:54:3a:e1:e7:5c:4a:02:69:70:ce:0f:ca:ae:ad:
ef:8f:e2:5f:ec:df:49:8f:e2:9f:bf:2c:48:02:7b:
7b:24:c0:51:06:d2:69:dd:6f:19:f9:9b:1e:3e:ad:
5c:f2:10:99:f4:b2:b4:39:0e:1a:f2:54:93:f3:2e:
94:83:ac:d0:2b:d8:0f:50:dc:69:0a:2b:67:1a:b2:
c4:60:9f:88:6c:bc:d4:50:b0:67:12:10:72:7c:8c:
7e:8e:92:05:94:d8:7a:3d:eb:71:e4:20:3b:e7:4c:
63:24:3c:04:0c:f5:33:08:96:65:ed:6b:23:fb:e5:
b9:ea:8c:c1:92:8b:48:f8:25:67:f5:91:6d:f1:f4:
06:34:12:86:59:51:17:58:3d:7d:73:ec:f9:1f:4a:
8e:e9:51:86:20:23:6b:56:7a:86:61:96:2b:26:fb:
7d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:73:E0:7D:23:D6:75:80:2C:10:BE:03:D5:31:9B:10:43:D9:AF:44
X509v3 Authority Key Identifier:
keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:80:97:65:8c:ce:58:6d:61:3d:d6:19:77:6e:b0:e7:fa:24:
b0:4b:6e:60:b0:a3:c4:97:09:97:11:ac:a1:ff:aa:4b:72:94:
88:49:17:45:fc:fc:7e:a4:d8:87:5b:d0:39:d6:bd:ae:59:d1:
6e:9a:e2:f8:2f:34:4e:b9:d9:c3:11:60:f8:13:54:ad:2c:78:
fc:a4:49:64:d9:68:49:22:ba:6b:31:de:82:6f:d5:00:3d:c4:
82:ca:53:c8:ba:b8:77:b8:80:27:ec:a6:ca:e1:cb:3c:46:55:
ca:38:99:51:07:23:ce:da:cf:13:9a:4b:05:62:ea:2b:ba:08:
81:1e:69:e2:ed:da:b9:82:14:b5:56:f1:73:dd:58:d3:cd:b2:
cb:60:47:11:3d:16:4e:0f:8b:4a:a1:76:7b:0c:22:e7:7e:38:
84:d8:a4:1b:9f:cc:7e:d3:58:6e:97:83:64:36:86:08:48:43:
1e:e8:6e:f4:69:00:46:80:18:56:8f:27:e6:a8:c0:92:63:07:
3c:bf:f8:19:41:f4:4c:f2:ae:b1:4e:d0:9a:ca:5b:fc:0c:56:
58:d7:17:ba:85:64:b8:45:04:e4:f6:ec:8a:9a:25:84:18:07:
ae:72:57:dc:78:84:11:6c:78:0a:65:c4:ef:c5:22:73:95:a6:
10:03:22:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 11:38:53 2026 by rpki-client