
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
File: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft (raw, json)
Hash identifier: scCpq2p6fZQBrkWhXmsedetX/ReyronYqbsnEiCzCV0=
Subject key identifier: 18:4F:BB:49:CC:A7:9F:32:E5:AA:61:39:A0:7F:AA:D8:D6:9C:17:A9
Authority key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD
Certificate issuer: /CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
Certificate serial: 2E9F585C0C24344D6A8BB51D998F86D27B6E15C7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
Manifest number: C3
Signing time: Sat 13 Jun 2026 19:42:11 +0000
Manifest this update: Sat 13 Jun 2026 19:37:11 +0000
Manifest next update: Sun 14 Jun 2026 20:44:11 +0000
Files and hashes: 1: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl (hash: P9/+uGx/dCOWiOodng6i6S5rq63Q/Dls0Qwsi5Lxq30=)
2: 3134342e37392e31302e302f32332d3234203d3e20313531323531.roa (hash: WjMCSVc2nZ6LHlmIFS3fh2fKf0RsOi1ahfbmP+aZL0U=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:9f:58:5c:0c:24:34:4d:6a:8b:b5:1d:99:8f:86:d2:7b:6e:15:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
Validity
Not Before: Jun 13 19:37:11 2026 GMT
Not After : Jun 14 20:44:11 2026 GMT
Subject: CN=184FBB49CCA79F32E5AA6139A07FAAD8D69C17A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:84:7e:d5:50:fe:51:63:24:82:90:f4:a7:68:
23:72:05:47:57:05:d1:b3:40:7d:4f:f9:75:1e:4b:
b8:a1:24:31:c5:09:5e:a1:08:ed:4a:a7:28:62:57:
0d:48:b0:45:73:5d:27:0e:ec:52:03:b6:26:ee:f3:
b3:30:ef:9b:95:52:12:17:42:72:c3:a9:2d:78:f6:
97:90:7e:01:d7:72:00:47:f7:4a:e4:b7:cc:0e:1a:
63:14:11:b3:53:f5:49:76:0a:a2:98:8b:9b:a6:c6:
26:73:64:05:a8:46:a8:c4:72:bb:d0:db:3c:91:1a:
c7:bf:68:f2:78:89:12:f8:aa:24:26:5f:2f:46:30:
55:c4:ba:aa:aa:77:11:e1:8e:60:b1:83:8f:a7:8d:
bd:a3:34:40:b0:8d:22:fb:f8:4e:b8:ed:8b:32:1a:
98:bb:2c:df:dd:ae:a4:0a:0d:03:d1:56:65:87:f0:
0e:3c:21:0c:e7:fc:85:1e:12:48:c0:9e:ac:03:3f:
f5:2a:b9:6f:3d:c1:72:f9:13:ab:06:d9:43:69:0f:
e0:9f:a4:e4:6c:a8:f8:ac:6b:63:37:d2:6a:50:8d:
1b:ff:17:41:7e:1e:e0:2e:85:10:b0:20:22:61:9e:
f5:89:e9:08:dd:99:6a:d1:9a:63:d9:e9:15:16:c0:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4F:BB:49:CC:A7:9F:32:E5:AA:61:39:A0:7F:AA:D8:D6:9C:17:A9
X509v3 Authority Key Identifier:
keyid:19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:62:95:a7:f2:b1:1d:19:6b:19:c8:a5:95:a3:2d:0b:85:d6:
d0:06:85:26:21:e9:22:62:68:95:16:1e:9d:7a:bc:e3:da:07:
20:da:bd:7a:60:a5:9a:98:92:23:b0:4a:7d:f7:7b:73:66:58:
6c:ab:69:27:f8:83:10:93:f0:7b:9b:12:88:05:97:46:60:c1:
90:1f:40:07:2f:f8:6c:8d:2e:bc:32:93:dd:bf:85:d4:66:80:
77:89:6b:c4:ac:13:46:8b:a8:7e:04:13:a6:38:64:81:34:6b:
b5:f9:20:44:e1:0e:ab:03:f3:91:ac:e8:a5:54:f5:00:e6:07:
2b:ba:71:c6:fc:db:d1:7e:48:92:55:c6:dc:a8:70:86:1c:fb:
97:c0:d0:14:c7:5b:86:a9:5c:a7:07:ff:03:ef:4d:a9:37:71:
f5:ef:89:d5:7d:0b:5a:2f:c6:35:96:7b:28:2b:78:85:91:ac:
7b:15:0b:e3:00:b8:22:6d:ea:ed:64:a4:42:8b:e2:e9:6d:24:
c8:88:31:0e:34:1f:e4:2f:bf:d3:0b:b0:58:3b:89:63:8d:7e:
85:16:c8:8b:66:68:06:d0:63:cc:03:bb:23:55:fc:21:92:ed:
70:97:59:8e:cf:04:1c:9c:89:21:fe:2d:2d:a0:9f:fa:29:da:
e3:c6:13:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:23:42 2026 by rpki-client