
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
File: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft (raw, json)
Hash identifier: cXpNJuh6w0YwX9WpF+P+kLh59y2nNP67anTZ9trYSTk=
Subject key identifier: B3:6B:ED:A5:C2:A1:8C:EA:0F:32:B3:5D:B5:2B:8C:5E:B5:1E:30:63
Authority key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD
Certificate issuer: /CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
Certificate serial: 2D68D4CD5EF7BCE4EB26F26C8B46B364B137FE9A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
Manifest number: F9
Signing time: Fri 24 Jul 2026 19:57:00 +0000
Manifest this update: Fri 24 Jul 2026 19:52:00 +0000
Manifest next update: Sat 25 Jul 2026 20:45:00 +0000
Files and hashes: 1: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl (hash: HgQ+4F4zKBhcPmpqL0WsF4KLVzw48f/XFazbM/ZY6Wo=)
2: 3134342e37392e31302e302f32332d3234203d3e20313531323531.roa (hash: WjMCSVc2nZ6LHlmIFS3fh2fKf0RsOi1ahfbmP+aZL0U=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 20:32:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:68:d4:cd:5e:f7:bc:e4:eb:26:f2:6c:8b:46:b3:64:b1:37:fe:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
Validity
Not Before: Jul 24 19:52:00 2026 GMT
Not After : Jul 25 20:45:00 2026 GMT
Subject: CN=B36BEDA5C2A18CEA0F32B35DB52B8C5EB51E3063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:19:44:49:e4:8c:a1:1a:29:c8:e9:06:81:6d:
07:4e:8e:07:b6:08:7a:76:79:eb:f5:be:b6:ec:ed:
ee:7f:61:5b:a3:65:c6:8e:6c:eb:ae:29:7e:3f:31:
be:e9:48:f5:0d:5b:34:1d:f7:5f:5c:bf:a8:d3:23:
50:4c:f3:d0:87:9d:e6:29:97:06:82:0c:5e:f2:74:
5a:fd:b9:0d:b1:b9:11:03:27:26:5c:d8:ff:58:4c:
36:d9:0d:72:8a:f9:30:c7:4f:af:3a:41:f4:0a:f6:
83:ff:d9:a1:c8:9b:2b:93:64:bf:11:e3:dd:a3:6e:
fc:cf:f4:81:91:dd:05:f5:cd:d7:8b:b9:06:07:7f:
52:96:56:43:a6:d3:09:72:6c:5e:d4:c7:1a:08:9d:
38:a8:19:41:fe:44:24:0f:bd:78:c7:82:30:df:f2:
47:ac:51:b0:0c:ee:ff:44:6b:1f:0d:ea:3a:3b:83:
dd:bd:29:c7:d6:b5:4d:3f:aa:01:b0:42:bd:be:63:
c4:81:f6:87:1b:bb:be:0a:5c:e7:7b:87:e2:88:4f:
a0:6e:34:2a:a1:74:0a:03:36:a4:fa:97:68:8d:0c:
5f:c6:f7:1a:a8:26:a1:79:2d:d3:04:78:3b:64:11:
2e:05:99:b8:f1:2f:39:06:80:bf:32:b2:eb:17:a0:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6B:ED:A5:C2:A1:8C:EA:0F:32:B3:5D:B5:2B:8C:5E:B5:1E:30:63
X509v3 Authority Key Identifier:
keyid:19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c5:dc:cb:15:5e:4e:60:e2:86:14:96:db:10:ce:b5:ec:ab:
12:c9:8b:6e:4b:fc:1f:05:26:4c:e7:c4:9e:12:81:aa:30:82:
38:10:08:13:a3:b9:12:ac:b5:44:40:0b:22:24:b3:64:98:51:
16:f2:ad:30:6c:04:1c:d9:ad:25:64:17:ef:d3:a0:98:30:5f:
e3:73:7e:4b:36:d9:e1:1e:63:40:f3:08:0e:ac:dc:a4:4c:f8:
aa:ee:ce:3f:3e:6a:a0:27:73:dc:93:c2:c4:37:5d:e1:37:7a:
dd:74:a0:bb:24:ed:0e:04:99:90:f1:35:86:83:c5:73:dd:cf:
b0:5d:62:ff:00:a0:b6:29:b5:99:00:90:14:1d:f0:64:54:b7:
30:73:40:21:86:39:8c:ce:1d:e7:e7:f9:eb:2f:b5:de:0f:1b:
b5:e0:29:93:16:80:c2:ce:90:8c:79:a6:63:89:66:bb:8e:e0:
88:c6:d5:db:f1:fa:5b:df:c9:30:b6:a6:8e:33:3b:46:73:a5:
62:16:f7:dd:b4:5f:9c:31:e4:84:e8:ec:8c:86:ac:0d:de:92:
67:33:6e:7d:db:5f:41:3b:86:75:ee:1d:0e:e5:c8:bd:68:c2:
4b:28:19:06:eb:da:ca:1c:11:40:83:0e:03:95:13:5a:74:e4:
82:ae:24:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:38:53 2026 by rpki-client