
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
File: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft (raw, json)
Hash identifier: yg4pLtnZ5pfq0RHV6tKNbBI3bO6KaeXGuIZ3gVlIUCc=
Subject key identifier: DB:E5:7F:BF:71:41:C9:96:B3:CB:13:FC:88:58:11:FF:E3:C7:7F:BC
Authority key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD
Certificate issuer: /CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
Certificate serial: 0AA27F166DF48A805ED30466EEBB44369F60B7B4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
Manifest number: 013B
Signing time: Mon 12 Oct 2026 10:56:52 +0000
Manifest this update: Mon 12 Oct 2026 10:51:52 +0000
Manifest next update: Thu 15 Oct 2026 13:41:52 +0000
Files and hashes: 1: 3134342e37392e31302e302f32332d3234203d3e20313531323531.roa (hash: WjMCSVc2nZ6LHlmIFS3fh2fKf0RsOi1ahfbmP+aZL0U=)
2: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl (hash: XAZl5xzriAIARDXUhIx0SESjR0o3PuBbGgGPvki/1Ik=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 10:58:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:a2:7f:16:6d:f4:8a:80:5e:d3:04:66:ee:bb:44:36:9f:60:b7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
Validity
Not Before: Oct 12 10:51:52 2026 GMT
Not After : Oct 15 13:41:52 2026 GMT
Subject: CN=DBE57FBF7141C996B3CB13FC885811FFE3C77FBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:ec:d5:b3:ef:d3:a2:ac:e6:c8:9d:e6:65:
ca:3f:cd:d1:07:8a:9f:ae:24:05:96:57:8d:5e:e5:
2d:ea:6a:92:80:e7:26:bd:a6:17:1d:ef:d4:78:3d:
59:c2:80:17:cf:26:50:dd:72:4b:cb:e1:9e:63:e4:
8c:e7:44:86:e6:21:73:b3:23:12:1b:cc:cb:bd:41:
a9:66:e2:6d:d4:96:d2:fd:20:b9:23:41:4d:1f:93:
59:ff:fa:e6:54:64:c2:ee:ab:00:f8:7d:55:cc:cc:
56:43:ca:30:9d:ca:80:01:2e:73:6e:03:16:4f:be:
73:02:3c:67:e5:36:fb:27:d6:f6:99:d3:6b:42:35:
7e:09:4b:f1:bc:ad:28:25:08:b1:96:57:fb:5e:1b:
47:71:19:ca:ad:b3:20:73:68:92:ab:71:23:44:de:
c3:02:34:65:6b:d7:22:38:8e:01:4b:19:3a:e6:91:
7a:28:39:0f:89:6e:26:2b:36:41:a5:4d:09:ea:73:
f5:af:82:78:89:61:9d:6c:29:0b:3c:20:c3:c8:ea:
46:fc:59:0d:11:e8:f4:9d:1f:fb:9f:14:a2:46:01:
6a:69:5b:9d:c6:85:0b:2f:4b:91:d4:b9:47:eb:94:
a8:a5:84:72:dc:8f:87:92:f2:bc:96:6c:36:a4:53:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E5:7F:BF:71:41:C9:96:B3:CB:13:FC:88:58:11:FF:E3:C7:7F:BC
X509v3 Authority Key Identifier:
keyid:19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2a:a6:b1:1a:8a:94:bc:c6:fc:2d:7f:1f:72:71:20:7b:46:
5b:1c:c4:ee:7b:7d:48:b2:ab:ca:9b:9d:e4:96:f8:56:2a:cc:
98:0c:c5:ed:7b:91:b3:96:39:06:d2:04:1c:37:38:3f:69:6e:
31:43:9a:18:5a:ce:16:6a:fa:01:06:7b:ac:a9:fc:a4:64:90:
4f:0e:6a:b0:7a:ca:56:50:21:73:2c:b1:b6:04:10:0a:20:93:
1e:33:52:cc:23:54:76:40:83:fd:9d:db:d5:6b:3e:bd:3a:1d:
f4:07:b8:70:f3:23:28:5b:94:70:7d:d9:5c:19:8b:9e:3f:fa:
24:2b:ea:f8:bf:26:bb:08:fe:f7:4d:50:4f:ae:fb:6f:45:b8:
0f:83:3b:ec:be:3a:db:10:8a:35:0c:eb:d6:cd:cb:cf:2c:d1:
6d:80:fe:14:e8:6c:be:5e:12:08:83:eb:11:75:9b:34:22:84:
1f:b4:b8:bd:68:6b:b6:87:80:e2:c3:a9:e7:d9:56:97:5a:d5:
85:f3:e7:31:54:bc:4e:cb:b0:c7:d7:23:77:66:99:61:4c:02:
ee:85:c9:a2:9f:d5:a1:ba:61:7e:a0:d9:c2:2a:e5:34:1f:cb:
46:0b:7e:ed:2e:41:9b:83:fe:23:fd:a0:65:6d:00:71:49:58:
11:cb:29:52
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUCqJ/Fm30ioBe0wRm7rtENp9gt7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2
NUJDNzdBRDAeFw0yNjEwMTIxMDUxNTJaFw0yNjEwMTUxMzQxNTJaMDMxMTAvBgNV
BAMTKERCRTU3RkJGNzE0MUM5OTZCM0NCMTNGQzg4NTgxMUZGRTNDNzdGQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL1OzVs+/ToqzmyJ3mZco/zdEH
ip+uJAWWV41e5S3qapKA5ya9phcd79R4PVnCgBfPJlDdckvL4Z5j5IznRIbmIXOz
IxIbzMu9Qalm4m3UltL9ILkjQU0fk1n/+uZUZMLuqwD4fVXMzFZDyjCdyoABLnNu
AxZPvnMCPGflNvsn1vaZ02tCNX4JS/G8rSglCLGWV/teG0dxGcqtsyBzaJKrcSNE
3sMCNGVr1yI4jgFLGTrmkXooOQ+JbiYrNkGlTQnqc/WvgniJYZ1sKQs8IMPI6kb8
WQ0R6PSdH/ufFKJGAWppW53GhQsvS5HUuUfrlKilhHLcj4eS8ryWbDakU9PBAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU2+V/v3FByZazyxP8iFgR/+PHf7wwHwYDVR0j
BBgwFoAUGa5VZr+D0Ucv2dm65cxwEmW8d60wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTM5NDE3OS8xLzE5QUU1NTY2QkY4M0QxNDcyRkQ5RDlCQUU1Q0M3
MDEyNjVCQzc3QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2NUJDNzdBRC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMS8xOUFFNTU2NkJGODNE
MTQ3MkZEOUQ5QkFFNUNDNzAxMjY1QkM3N0FELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCqmsRqKlLzG
/C1/H3JxIHtGWxzE7nt9SLKrypud5Jb4VirMmAzF7XuRs5Y5BtIEHDc4P2luMUOa
GFrOFmr6AQZ7rKn8pGSQTw5qsHrKVlAhcyyxtgQQCiCTHjNSzCNUdkCD/Z3b1Ws+
vTod9Ae4cPMjKFuUcH3ZXBmLnj/6JCvq+L8muwj+901QT677b0W4D4M77L462xCK
NQzr1s3LzyzRbYD+FOhsvl4SCIPrEXWbNCKEH7S4vWhrtoeA4sOp59lWl1rVhfPn
MVS8Tsuwx9cjd2aZYUwC7oXJop/VobphfqDZwirlNB/LRgt+7S5Bm4P+I/2gZW0A
cUlYEcspUg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:05:36 2026 by rpki-client