
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
File: 191E76D74421148B42FA2A7F663270AE7FAD25F9.mft (raw, json)
Hash identifier: +YYmvSh3f382msKg/PbNKWobKFTQWPUoJKYYyVb12Do=
Subject key identifier: 72:B1:30:DD:C9:89:B5:D0:08:E3:33:F1:2C:7C:B5:12:9B:78:D3:9B
Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
Certificate issuer: /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Certificate serial: 025C26182CFCD935D7B6A87F92C4AD315852B524
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
Manifest number: 0136
Signing time: Fri 25 Sep 2026 04:22:27 +0000
Manifest this update: Fri 25 Sep 2026 04:17:27 +0000
Manifest next update: Mon 28 Sep 2026 06:52:27 +0000
Files and hashes: 1: 3130332e3131362e3132302e302f32322d3232203d3e203633363534.roa (hash: fLgddK5a5pen10EIOArIO5eS1Bvv0lSS9vSM6d0T0bw=)
2: 3130332e3131362e3132332e302f32342d3234203d3e203633363534.roa (hash: 6OtEuNz2GVGLvEPnp1uI15Y+vgwMkKwikkqR/oRSa24=)
3: 323430323a663963303a3a2f34382d3438203d3e20313337373937.roa (hash: Xa71V3zlzwJxLxJVMnOGWGmp2Wl6+BqPl/c74CX5nDA=)
4: 191E76D74421148B42FA2A7F663270AE7FAD25F9.crl (hash: nMsAb2IAI1h72UDUHB2zYo3Ur/msmDG+GlPUlS277E4=)
5: 3130332e3131362e3132312e302f32342d3234203d3e2034383437.roa (hash: bybvQVpDA62zpyPwHa1XWTYZhk2FjGjkQojOKPAlIPY=)
6: 3130332e3131362e3132332e302f32342d3234203d3e2034383437.roa (hash: iusd/geGAkaqNqYv0woWsgccBNM+keeMZWKm1FAoOOM=)
7: 3130332e3131362e3132302e302f32342d3234203d3e2034383437.roa (hash: zB7FMCFhHyOWYUyT241bOpU68Hl2jbAwsIx3PIajOso=)
8: 3130332e3131362e3132302e302f32332d3233203d3e203633363534.roa (hash: ayiRQLB0vCQOVj4IcpJdzMo4ohtXvgd7waElFg36mCA=)
9: 3130332e3131362e3132312e302f32342d3234203d3e203633363534.roa (hash: vpD7NEE8qzM+eWphvno3vCArBIi9VdE9XjhBRn48b6k=)
10: 3130332e3131362e3132302e302f32342d3234203d3e203633363534.roa (hash: sjhYlFRils7TGbe4yrQB1MXoq74ExmSHsG4znfKuu7I=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:5c:26:18:2c:fc:d9:35:d7:b6:a8:7f:92:c4:ad:31:58:52:b5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Validity
Not Before: Sep 25 04:17:27 2026 GMT
Not After : Sep 28 06:52:27 2026 GMT
Subject: CN=72B130DDC989B5D008E333F12C7CB5129B78D39B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:c6:5c:ac:ec:25:d6:c4:a8:59:9a:db:ec:
98:f9:e2:05:a2:79:db:13:e8:6c:3f:89:42:21:52:
67:51:89:9b:cf:8f:cf:2e:15:00:6b:d0:c6:25:30:
84:4e:df:75:0c:5f:2d:2c:42:51:88:4d:82:0d:f9:
38:24:06:b3:ab:4b:5c:30:9b:16:00:11:92:ca:b4:
08:9b:9d:cf:cd:34:a7:cd:f1:49:62:74:60:29:06:
2f:29:8e:8d:34:1b:a9:2f:60:1d:64:85:e1:3d:90:
eb:79:49:84:86:c9:35:f8:1c:3c:da:1b:12:fd:4b:
d5:a5:f9:34:55:8f:ce:70:6d:68:b2:3e:a5:f4:d7:
90:26:2c:49:23:07:c2:5a:84:81:64:29:25:3a:7d:
89:24:a4:6d:cb:e6:e1:bf:c8:9b:6a:ed:32:e1:48:
c5:63:52:2e:1d:32:6b:e1:26:a5:6b:c0:f2:12:66:
70:cc:00:22:e8:8e:7b:8a:03:a0:e1:02:bb:93:1c:
f7:37:d7:7e:06:03:83:66:f1:33:2c:ee:7d:87:79:
d0:39:63:21:42:69:53:e1:16:5f:81:6e:38:78:ad:
33:e8:ee:0b:b7:61:22:21:67:0a:ea:0b:d9:50:3c:
fa:f5:a2:f2:54:ec:2a:d4:82:12:43:7d:54:cc:b9:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B1:30:DD:C9:89:B5:D0:08:E3:33:F1:2C:7C:B5:12:9B:78:D3:9B
X509v3 Authority Key Identifier:
keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1d:71:db:71:db:45:be:bb:ff:13:cd:7a:76:ed:46:5a:2a:
06:c2:6c:e7:60:cd:ab:4a:a1:00:60:2b:43:e2:61:c8:ac:53:
2f:b4:c3:28:08:6e:21:a2:aa:bd:6b:97:bf:5e:18:f0:a2:3e:
c3:1d:0b:0f:51:b5:35:08:29:91:50:7d:44:02:75:c6:be:d7:
25:5b:9c:4e:46:bf:de:b2:1c:58:75:aa:44:1e:5c:79:b9:33:
8a:65:6c:e1:f9:fa:31:1f:16:31:b7:92:77:95:cd:e5:64:8e:
a7:4a:17:34:7b:70:c0:ad:4e:d5:f5:51:df:8f:2c:d3:6c:df:
60:70:f8:c9:f3:41:33:f7:01:f2:b8:14:91:ba:c1:b9:25:19:
08:d9:91:73:50:9b:23:52:85:59:86:17:c5:e1:bb:5a:3d:87:
a9:74:68:78:2e:02:51:a9:6f:07:07:ed:09:85:7f:71:15:86:
07:8d:2e:bd:e4:6c:3a:67:ab:79:76:10:e2:ae:76:e0:ff:c5:
5a:2a:7f:b8:ec:87:b0:2b:59:e5:5b:af:f0:77:1e:05:0e:a1:
ca:ab:a5:85:22:85:9d:4b:cc:9a:f6:50:c5:1d:c6:3a:b9:58:
95:1b:64:c4:1b:e2:5f:be:fe:70:a3:45:c3:4d:34:8e:64:b7:
e3:dc:23:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:31:44 2026 by rpki-client