
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
File: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft (raw, json)
Hash identifier: piSPNeZ/H7J3aINlzGZHYpSxgWicDWqIFq07iGh9Kys=
Subject key identifier: 87:0B:0E:98:32:8C:AF:A0:CD:FA:33:CD:F1:ED:C9:2E:BF:4F:EB:4D
Authority key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD
Certificate issuer: /CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
Certificate serial: 533A35D4261534A27BD6FD30B65CC77A6969763C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
Manifest number: 013C
Signing time: Wed 14 Oct 2026 13:44:12 +0000
Manifest this update: Wed 14 Oct 2026 13:39:12 +0000
Manifest next update: Sat 17 Oct 2026 17:22:12 +0000
Files and hashes: 1: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl (hash: /AiJOBlhpnkyS20E1Byg1chClarj/MO5ACZI5FvZJNA=)
2: 3134342e37392e31302e302f32332d3234203d3e20313531323531.roa (hash: WjMCSVc2nZ6LHlmIFS3fh2fKf0RsOi1ahfbmP+aZL0U=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 14:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:3a:35:d4:26:15:34:a2:7b:d6:fd:30:b6:5c:c7:7a:69:69:76:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
Validity
Not Before: Oct 14 13:39:12 2026 GMT
Not After : Oct 17 17:22:12 2026 GMT
Subject: CN=870B0E98328CAFA0CDFA33CDF1EDC92EBF4FEB4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9e:cb:26:43:07:a1:a3:d9:20:36:49:6f:ea:
a4:10:78:63:df:c0:c5:53:2d:cc:2f:7f:c5:91:53:
16:2a:c5:28:17:cf:0e:cf:c9:09:0a:7a:2f:6e:93:
c6:01:70:98:db:df:e8:e2:e1:fc:e4:52:6f:10:aa:
bb:79:7c:ee:8f:a5:77:61:79:1f:18:28:22:bb:97:
d5:b4:84:d0:36:50:71:c2:44:6c:c5:49:3e:45:a7:
db:4f:97:2e:34:82:34:bc:9f:b4:8c:bd:81:2a:ed:
ce:b9:1b:0d:40:53:66:61:57:b9:50:8a:f1:08:2b:
a4:ff:c1:bc:50:71:b5:9f:f0:20:c6:84:1b:66:e7:
68:18:b7:b9:90:9c:8c:cb:4f:28:53:a0:95:a8:7e:
7e:4b:08:9b:1f:6a:d8:3e:06:8f:8d:dc:26:ab:19:
be:af:da:40:6b:2b:e7:e3:ab:aa:54:0b:72:03:4b:
c7:4d:42:aa:74:20:da:8e:ee:83:0a:aa:96:d7:a7:
3e:51:e8:68:04:47:56:e0:4c:08:3a:3a:33:e3:78:
04:f8:67:60:ff:8e:72:45:29:c4:81:8f:9b:c5:0a:
62:89:44:71:d5:72:74:f9:ea:99:60:fa:03:a1:0d:
47:e3:6c:84:e8:d9:e1:29:d7:7e:ca:95:a5:e6:3f:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0B:0E:98:32:8C:AF:A0:CD:FA:33:CD:F1:ED:C9:2E:BF:4F:EB:4D
X509v3 Authority Key Identifier:
keyid:19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:69:2f:7c:c1:17:63:fa:2b:2c:6d:26:ea:f8:f1:69:c6:d1:
e1:26:35:fc:d4:6c:ad:9b:6b:95:25:e8:ab:57:5b:03:95:25:
29:08:40:16:a6:cd:b2:d0:b3:96:d0:62:b6:79:10:3d:6c:fe:
94:1a:6e:e8:2e:f6:ab:89:4d:8c:e8:91:8f:26:ad:70:b7:0e:
b1:bb:74:29:79:c8:76:f5:7e:15:63:08:17:b7:28:ef:f1:14:
78:7e:53:51:f9:fc:35:99:22:4b:77:a8:fe:79:f3:e0:47:07:
dc:9f:e9:34:3a:08:02:24:ff:ef:1f:1a:fc:de:76:10:90:5b:
20:a5:43:96:6d:da:10:ca:a6:68:a5:2b:7f:1e:02:24:3e:80:
fc:95:8c:d9:ec:34:09:30:17:88:6c:96:26:37:41:e7:81:cc:
ca:94:98:38:95:00:96:c3:89:b6:93:28:c0:bd:e4:83:86:1f:
66:a7:fb:f4:79:c7:73:72:f4:ee:29:75:ea:f2:6d:de:6c:36:
ba:df:87:c7:bb:45:3d:c3:0b:ca:aa:56:50:65:f4:b7:b0:1d:
f6:2f:a2:98:e5:e3:33:fc:f6:fb:46:74:a2:2a:d7:89:c2:3c:
ac:dd:a3:8f:76:df:75:67:bb:ca:6e:2c:dd:2d:5c:f8:aa:97:
9a:85:ac:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:30:16 2026 by rpki-client