
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
File: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft (raw, json)
Hash identifier: MfTPHAFQVA2nwDi/RWw/N9JkF84UZLCBvBtlcXjPR4A=
Subject key identifier: 77:5B:9D:98:C4:3E:B5:CC:C0:23:12:67:14:77:83:45:6E:A8:2D:42
Authority key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD
Certificate issuer: /CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
Certificate serial: 19A1B908BF88CA41016D0D40453B53AEBFF25CE5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
Manifest number: 98
Signing time: Tue 12 May 2026 22:15:48 +0000
Manifest this update: Tue 12 May 2026 22:10:48 +0000
Manifest next update: Thu 14 May 2026 00:11:48 +0000
Files and hashes: 1: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl (hash: ldKK8TsR5ohybzAQas+gXy3lvE6uXTTE8kmwuQlb+CA=)
2: 3134342e37392e31302e302f32332d3234203d3e20313531323531.roa (hash: WjMCSVc2nZ6LHlmIFS3fh2fKf0RsOi1ahfbmP+aZL0U=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a1:b9:08:bf:88:ca:41:01:6d:0d:40:45:3b:53:ae:bf:f2:5c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
Validity
Not Before: May 12 22:10:48 2026 GMT
Not After : May 14 00:11:48 2026 GMT
Subject: CN=775B9D98C43EB5CCC0231267147783456EA82D42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:d0:5b:cf:b7:80:d1:4f:1a:85:f6:19:4d:
e6:fe:ae:22:48:75:0e:4b:3f:91:f2:5f:53:df:3d:
fa:47:39:e0:44:de:8f:c7:e6:0a:b7:0e:85:20:21:
7e:c6:7c:9d:69:f8:21:36:ae:d3:77:46:8c:25:56:
ff:02:df:8c:c4:63:66:ed:73:1b:19:44:01:93:e7:
41:4b:7f:e3:b2:0c:4c:c4:54:f0:31:96:d5:dd:5e:
9c:ee:f1:43:5d:62:9a:e2:58:54:82:62:e8:05:62:
eb:8a:da:00:62:37:76:ab:41:55:37:88:a8:9c:e9:
a0:16:65:df:9e:59:c7:39:96:a5:dd:d1:56:41:99:
2e:99:95:8a:8a:4b:37:58:b1:b9:49:24:10:03:ea:
5d:c0:c0:80:c0:ad:15:93:62:ac:f0:5e:8d:2d:73:
eb:72:a9:01:30:54:de:b3:91:3c:6e:8c:0a:cc:be:
a0:df:e5:66:11:88:79:e9:57:85:ce:0a:03:27:52:
3e:a8:f3:72:54:92:d0:bd:6c:7a:94:08:04:ca:a1:
b5:3c:c9:ab:cc:32:29:ee:d4:7b:aa:5c:1c:46:e2:
3f:10:99:9d:be:66:28:61:26:94:44:ac:ae:24:fa:
2b:6a:08:fd:4d:59:16:c1:2f:0c:bf:31:d8:9a:9f:
1d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5B:9D:98:C4:3E:B5:CC:C0:23:12:67:14:77:83:45:6E:A8:2D:42
X509v3 Authority Key Identifier:
keyid:19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:80:db:c3:6f:b0:e0:6f:53:8c:4b:c8:4a:0f:59:0b:ae:46:
e7:09:33:ed:92:a0:83:5e:ab:0b:bd:48:91:27:f1:96:98:82:
99:0f:92:a2:ed:c8:06:e6:ea:96:b6:28:64:c8:80:36:ec:5d:
23:19:53:c0:37:03:0f:5b:5d:15:08:c8:50:8a:c4:a7:0d:80:
22:2b:8d:91:7e:99:4f:8b:39:66:e0:c1:9a:9b:31:b8:e1:95:
68:9f:88:f2:7a:7a:a3:f6:bd:c0:c8:dd:0c:4d:ab:b1:0a:f6:
85:eb:25:00:d5:ef:1e:ea:5d:e1:c6:46:07:b7:e0:fa:9b:5f:
cf:0f:1d:63:4e:dd:43:02:c7:9c:25:c9:d3:77:27:e6:56:2e:
82:d0:71:ee:7b:3b:f0:25:1c:2f:9e:2d:61:40:0b:d9:9c:1e:
33:9b:c3:74:2d:fd:75:b5:3f:73:05:cc:ab:8b:f1:09:61:52:
45:e9:0e:01:33:8b:ac:f1:54:82:16:54:85:ce:49:f1:2f:73:
fb:cc:28:b7:65:45:b2:d3:88:5d:58:3c:d5:fe:46:d5:b0:fb:
96:a8:26:e4:6a:9e:dd:ec:53:a9:32:92:25:a9:a5:00:37:6f:
c3:0f:ce:88:de:73:fc:be:a3:9c:73:6b:cc:20:a2:f0:e2:41:
8b:77:91:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:48:41 2026 by rpki-client