
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
File: 191E76D74421148B42FA2A7F663270AE7FAD25F9.mft (raw, json)
Hash identifier: BfwYnqMyaqfZbxLTGEj9VrhD73L7vAF2MNKbnl+XHyY=
Subject key identifier: DC:C9:D4:9E:34:26:07:AF:14:57:C9:9C:38:64:9B:1F:71:81:7C:EF
Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
Certificate issuer: /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Certificate serial: 4E05D3C786544E4E906C75BCC12F9B5E81179F57
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
Manifest number: 9A
Signing time: Tue 12 May 2026 21:05:46 +0000
Manifest this update: Tue 12 May 2026 21:00:46 +0000
Manifest next update: Wed 13 May 2026 22:41:46 +0000
Files and hashes: 1: 3130332e3131362e3132302e302f32332d3233203d3e203633363534.roa (hash: ayiRQLB0vCQOVj4IcpJdzMo4ohtXvgd7waElFg36mCA=)
2: 3130332e3131362e3132302e302f32342d3234203d3e2034383437.roa (hash: zB7FMCFhHyOWYUyT241bOpU68Hl2jbAwsIx3PIajOso=)
3: 3130332e3131362e3132332e302f32342d3234203d3e2034383437.roa (hash: iusd/geGAkaqNqYv0woWsgccBNM+keeMZWKm1FAoOOM=)
4: 3130332e3131362e3132332e302f32342d3234203d3e203633363534.roa (hash: 6OtEuNz2GVGLvEPnp1uI15Y+vgwMkKwikkqR/oRSa24=)
5: 3130332e3131362e3132302e302f32342d3234203d3e203633363534.roa (hash: sjhYlFRils7TGbe4yrQB1MXoq74ExmSHsG4znfKuu7I=)
6: 191E76D74421148B42FA2A7F663270AE7FAD25F9.crl (hash: nmq69bNPKLFe85t5mWCJgnXLvZv8mi/iwQDeg9fT3HI=)
7: 3130332e3131362e3132302e302f32322d3232203d3e203633363534.roa (hash: fLgddK5a5pen10EIOArIO5eS1Bvv0lSS9vSM6d0T0bw=)
8: 3130332e3131362e3132312e302f32342d3234203d3e2034383437.roa (hash: bybvQVpDA62zpyPwHa1XWTYZhk2FjGjkQojOKPAlIPY=)
9: 3130332e3131362e3132312e302f32342d3234203d3e203633363534.roa (hash: vpD7NEE8qzM+eWphvno3vCArBIi9VdE9XjhBRn48b6k=)
10: 323430323a663963303a3a2f34382d3438203d3e20313337373937.roa (hash: Xa71V3zlzwJxLxJVMnOGWGmp2Wl6+BqPl/c74CX5nDA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:05:d3:c7:86:54:4e:4e:90:6c:75:bc:c1:2f:9b:5e:81:17:9f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Validity
Not Before: May 12 21:00:46 2026 GMT
Not After : May 13 22:41:46 2026 GMT
Subject: CN=DCC9D49E342607AF1457C99C38649B1F71817CEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:48:90:f8:2c:a6:48:fa:66:ff:31:be:07:04:
ba:02:91:71:64:2c:d6:46:94:48:5c:45:f6:e7:50:
52:79:73:44:84:b7:60:42:80:a3:12:70:4f:0d:a5:
e4:41:91:89:a1:d4:23:44:68:32:cc:d0:29:01:f7:
ee:c8:65:7d:3e:b1:81:4a:fe:ef:33:84:10:d5:86:
74:7e:f6:3a:29:19:c4:40:9f:86:49:f8:70:a4:e0:
5f:45:55:d1:75:35:eb:bf:8d:2f:dd:0d:23:a1:46:
29:1a:63:59:ae:0f:96:14:d6:e3:4e:d3:ba:c6:38:
e5:95:fb:66:34:35:f9:00:8f:dc:af:52:76:ed:bd:
97:f4:07:cc:65:50:a9:bd:0b:a1:90:f4:85:22:03:
fb:8b:0b:62:63:db:b3:22:69:02:57:e8:ea:f5:05:
b9:06:8b:52:aa:97:21:c3:3a:aa:fc:33:3c:7b:d1:
a3:08:3c:b2:f4:6f:ee:0b:0e:c9:5d:32:2b:7b:e0:
aa:a2:92:01:e9:3d:3a:34:d9:2c:1f:e3:3e:55:c4:
ac:d7:1d:7e:b1:70:41:ff:a8:af:9f:7c:4d:63:e1:
7d:38:7f:82:8b:66:05:ab:a2:2d:0b:1e:71:b4:d9:
ed:40:eb:f9:e1:bd:ad:d4:8c:8b:c9:ab:5f:c5:84:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C9:D4:9E:34:26:07:AF:14:57:C9:9C:38:64:9B:1F:71:81:7C:EF
X509v3 Authority Key Identifier:
keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a7:1e:b3:8e:31:44:41:ea:20:89:4d:9c:8d:9e:c7:c3:c6:
09:96:d0:4e:73:6f:8f:92:b5:5a:ab:68:ca:a0:89:45:85:39:
43:f8:e8:8c:6e:21:dc:11:03:66:7a:36:31:67:c5:e5:a4:19:
29:1f:01:f0:2f:5f:9a:b1:d4:6c:5e:61:b2:ea:35:44:b1:dc:
49:14:a4:79:65:31:82:ac:31:97:d9:e0:a4:a9:f7:52:6b:18:
c5:77:a4:fd:0e:b9:dd:ef:49:61:81:95:cc:bb:17:39:f0:23:
c4:12:73:30:be:45:f7:cd:c2:4d:8f:98:34:2f:8b:67:91:e2:
e8:3c:45:77:7a:44:c1:84:34:53:91:e8:9a:c2:53:c7:93:f6:
55:da:71:6d:e9:e1:8e:b4:7d:e0:d2:97:46:a3:df:fc:72:46:
96:55:7e:9e:b4:72:bd:55:f8:96:9d:42:60:46:b4:6b:25:d8:
ea:73:ab:07:2f:88:11:38:4d:7f:70:54:f1:a3:c4:17:59:7f:
26:9c:7a:d9:d0:5b:26:37:9f:0a:4b:f2:fd:e4:32:f6:3b:fa:
13:25:7e:24:3b:93:ac:97:8a:54:df:b9:53:20:1a:24:90:0a:
41:0b:eb:ce:2b:a3:05:aa:c9:23:72:3a:26:ff:e3:0d:31:2a:
58:f5:06:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:35 2026 by rpki-client