
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
File: 191E76D74421148B42FA2A7F663270AE7FAD25F9.mft (raw, json)
Hash identifier: HGxxVh3UJdDD5WgleqGphH4jq7kY4pd4+J7uFe24HUM=
Subject key identifier: 12:5D:60:61:E6:F5:DA:98:1F:1C:CD:C4:A0:00:A0:67:C0:43:A6:B6
Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
Certificate issuer: /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Certificate serial: 2464B5F662BD6CE4009B766F48016862A394BCFD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
Manifest number: FA
Signing time: Thu 23 Jul 2026 17:29:12 +0000
Manifest this update: Thu 23 Jul 2026 17:24:12 +0000
Manifest next update: Fri 24 Jul 2026 19:56:12 +0000
Files and hashes: 1: 3130332e3131362e3132332e302f32342d3234203d3e2034383437.roa (hash: iusd/geGAkaqNqYv0woWsgccBNM+keeMZWKm1FAoOOM=)
2: 3130332e3131362e3132302e302f32342d3234203d3e203633363534.roa (hash: sjhYlFRils7TGbe4yrQB1MXoq74ExmSHsG4znfKuu7I=)
3: 3130332e3131362e3132302e302f32322d3232203d3e203633363534.roa (hash: fLgddK5a5pen10EIOArIO5eS1Bvv0lSS9vSM6d0T0bw=)
4: 191E76D74421148B42FA2A7F663270AE7FAD25F9.crl (hash: 8M22oBc4MPkmkxLCc5rvw6eCkfnOO7vzn7rFjLleY+o=)
5: 3130332e3131362e3132302e302f32332d3233203d3e203633363534.roa (hash: ayiRQLB0vCQOVj4IcpJdzMo4ohtXvgd7waElFg36mCA=)
6: 3130332e3131362e3132332e302f32342d3234203d3e203633363534.roa (hash: 6OtEuNz2GVGLvEPnp1uI15Y+vgwMkKwikkqR/oRSa24=)
7: 3130332e3131362e3132302e302f32342d3234203d3e2034383437.roa (hash: zB7FMCFhHyOWYUyT241bOpU68Hl2jbAwsIx3PIajOso=)
8: 3130332e3131362e3132312e302f32342d3234203d3e2034383437.roa (hash: bybvQVpDA62zpyPwHa1XWTYZhk2FjGjkQojOKPAlIPY=)
9: 323430323a663963303a3a2f34382d3438203d3e20313337373937.roa (hash: Xa71V3zlzwJxLxJVMnOGWGmp2Wl6+BqPl/c74CX5nDA=)
10: 3130332e3131362e3132312e302f32342d3234203d3e203633363534.roa (hash: vpD7NEE8qzM+eWphvno3vCArBIi9VdE9XjhBRn48b6k=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:56:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:64:b5:f6:62:bd:6c:e4:00:9b:76:6f:48:01:68:62:a3:94:bc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Validity
Not Before: Jul 23 17:24:12 2026 GMT
Not After : Jul 24 19:56:12 2026 GMT
Subject: CN=125D6061E6F5DA981F1CCDC4A000A067C043A6B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:c4:48:12:ba:37:4b:f4:49:be:76:f7:cf:
39:7f:95:9e:f5:84:0b:97:f1:19:d5:b0:b5:ed:b2:
a2:1a:5e:da:5d:9a:4e:eb:ae:0f:56:b0:d5:d0:5b:
6c:c5:04:06:67:09:60:eb:04:c3:c2:08:2b:9e:05:
3a:b6:b6:de:43:73:75:27:c9:e7:2e:7e:7c:a3:80:
de:23:65:0e:f6:2c:5d:95:fb:d6:0f:2f:65:e8:f9:
3c:3c:99:78:67:ee:80:3a:19:97:b0:e7:73:50:15:
8c:fb:ab:98:ca:66:cb:63:21:39:43:c0:d8:d0:d1:
a8:f6:13:2e:78:59:42:35:bc:15:33:69:ec:36:c4:
df:48:89:7f:ad:c5:40:e5:67:ec:92:9f:6e:86:6c:
b3:1c:5d:18:c5:98:92:88:fc:70:e1:4c:db:52:af:
9b:b0:73:cc:0b:8f:0d:f9:47:8c:1e:c5:c9:00:e9:
54:c5:73:28:6b:86:74:a5:b4:22:6a:4a:3b:d2:1b:
3b:24:cb:ee:dc:b0:77:d1:3b:11:65:5c:c5:5e:8c:
d2:ef:4d:e0:7d:47:e7:aa:b2:2c:36:7c:72:0f:dc:
2c:e4:37:ce:e2:2a:a1:cb:74:a8:00:52:82:6b:80:
71:4f:b6:84:aa:d0:7c:1c:bf:57:3a:4c:a2:f3:2c:
f9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5D:60:61:E6:F5:DA:98:1F:1C:CD:C4:A0:00:A0:67:C0:43:A6:B6
X509v3 Authority Key Identifier:
keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:27:ef:01:d3:71:cc:3e:96:47:09:96:aa:3a:b6:2f:97:82:
8e:c6:ca:5a:75:06:34:1a:32:3b:7f:3b:ba:70:8a:de:45:87:
8f:42:84:48:95:c8:36:b7:4a:ad:54:03:e0:39:ce:0b:62:d4:
3f:fb:89:51:d5:29:10:e7:e0:9c:7f:99:13:88:47:e9:95:74:
9a:25:3c:47:a7:70:53:ab:5e:01:45:06:10:a4:b3:82:57:0b:
c9:58:0a:1e:31:07:e2:43:37:d0:72:16:bc:0f:14:32:11:1b:
0c:66:d4:72:05:77:ab:4f:4f:a9:09:ae:05:2e:57:bd:dc:22:
f4:3f:3b:89:2a:9f:96:40:84:b2:37:6c:f9:21:50:4e:99:11:
3a:60:09:6e:99:57:8d:b8:ae:bd:34:b4:cf:c5:9b:ea:99:cc:
c6:86:c5:77:00:94:74:f5:96:5f:d2:92:eb:45:2f:e8:a8:8e:
47:dc:0b:73:c1:c9:3e:dd:fe:15:48:bc:ca:0b:92:43:d4:4e:
08:e4:94:5f:6d:33:e1:4e:b7:12:22:e9:5f:75:fc:a8:d6:f2:
e8:99:be:23:ea:c9:e5:1f:ac:96:e9:b9:b6:aa:5e:37:02:5b:
4d:7b:ac:7c:55:c7:0f:3b:eb:73:60:82:0a:eb:bd:ac:ef:31:
55:d0:08:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:58 2026 by rpki-client