
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
File: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft (raw, json)
Hash identifier: XPKErbek9l7dIMpl1otkrCU1JnDe1nyJtqyWSDsPrAI=
Subject key identifier: BC:5B:94:42:7F:19:5C:01:A1:3B:5A:51:23:B1:38:16:0E:04:41:97
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 06A84C405E94CC7FC3175E1B4A1590508E97727B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
Manifest number: 015A
Signing time: Fri 28 Aug 2026 06:48:24 +0000
Manifest this update: Fri 28 Aug 2026 06:43:24 +0000
Manifest next update: Mon 31 Aug 2026 10:57:24 +0000
Files and hashes: 1: AS58563.roa (hash: kYInOTPip8w5PslmevGG8vQjhMgGwaKWoF+4hhPIBAc=)
2: AS56040.roa (hash: W81Ik1UbVtj0SRWqtC3P7xyEWt3IgDbB4QjgkvOz+tY=)
3: AS38627.roa (hash: nFp+8yml9hkEza1wgfZStNJI0UTaVHYBZwksHuv4bH0=)
4: AS38365.roa (hash: GfhbepfPCiBLiW7f7C/pzcTtvnquxDHsuz1kUUcRsRU=)
5: AS140903.roa (hash: iyz26ug9khgPrNNhJtEuOhWmlszHQlfbJTsEIMCRpnM=)
6: AS55967.roa (hash: JWz91HIzRpIvCaetNDaEjl+15GD/QV9ZC2R8TKVFSiA=)
7: AS58540.roa (hash: ODEMxdA+rDgGXKZmPBMgK9yomv/d+1QGAeEkWm3Q6yA=)
8: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl (hash: 5lY/bVJ429vqyd/1rjMHnpTahDpu/LR8YHwqaGFJIX4=)
9: AS134756.roa (hash: R0qO1qhdZDTQtnkct1FnPpedhyffJKgR3uHLGveHyaU=)
10: AS58466.roa (hash: pNtrvsIxnKSPSR3qrnhNlUDUeD+0ItvWPxCmkPmSobo=)
11: AS4808.roa (hash: nfus4h8QwbxcdSJltah7w99JVhAwpPCoz9XlgVyX9D4=)
12: AS38283.roa (hash: b+LNtB8BnlfAgJOygGrMMt2yq1yQieV7mM6TBSUOHTg=)
13: AS23724.roa (hash: W9hq4noVS3K8oFSoam54kFzfyzZ8KLodeD0jWtdBu+E=)
14: AS136958.roa (hash: HEG2G2FDqpPcwg9U+B72KeFsxwTgTK4fYMDfE+rG2vc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 10:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a8:4c:40:5e:94:cc:7f:c3:17:5e:1b:4a:15:90:50:8e:97:72:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Aug 28 06:43:24 2026 GMT
Not After : Aug 31 10:57:24 2026 GMT
Subject: CN=BC5B94427F195C01A13B5A5123B138160E044197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:1d:cf:3c:85:13:43:eb:5c:40:1b:2a:c9:
6d:96:23:c7:41:34:12:26:72:68:7e:77:e2:79:f8:
04:e2:31:9a:72:77:b4:c1:3e:54:bf:8c:5f:43:4b:
1b:3f:e1:ce:74:3c:7d:22:5e:94:66:c8:c0:06:bd:
86:54:01:3d:fd:0a:8f:b1:d1:78:e4:78:aa:2c:5c:
2b:ed:8a:d9:44:0e:15:76:d0:cb:01:73:ee:6e:7d:
3c:d9:8e:49:11:b9:f3:c6:13:b2:db:e7:4a:e6:9a:
1d:8d:7d:36:d2:da:8d:07:cb:9d:57:8c:c2:60:d2:
d3:d2:b9:82:53:d7:70:7b:b3:2a:8c:3f:ef:84:f9:
8f:e3:72:06:da:5c:97:8d:fc:76:7c:76:ed:89:32:
1f:9a:c9:16:d2:ee:fb:a3:a0:40:19:a5:93:6a:f3:
78:c4:98:5f:d2:cc:f7:6b:be:7c:98:4c:72:8a:55:
60:9e:7f:f5:d2:7c:a7:9c:3e:b8:b2:3d:0a:f8:ad:
a5:b3:56:78:72:50:14:cb:de:44:dd:16:9b:9c:ae:
ec:43:89:98:00:94:06:a8:c9:55:12:2d:f4:ee:73:
2c:ef:1b:62:01:6b:81:31:1d:2a:94:37:af:86:c0:
3a:dc:f7:90:b5:7f:d6:3d:ae:2f:0b:87:a8:9d:ed:
85:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5B:94:42:7F:19:5C:01:A1:3B:5A:51:23:B1:38:16:0E:04:41:97
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f3:27:87:cb:96:6d:f6:33:4f:ad:91:02:cb:25:e2:c6:93:
ea:dd:78:ea:d0:cc:04:0c:f2:a2:85:a9:db:d0:a6:64:e6:6c:
e7:e5:37:50:e1:1e:ae:92:09:f1:02:43:6a:e4:54:d7:94:23:
d5:3a:7c:91:94:c7:62:7f:ba:ae:0c:e6:de:3b:15:cb:af:6f:
65:df:34:00:2d:f1:14:ce:ca:8b:9a:79:cb:3f:c6:e2:a9:24:
bb:2b:00:53:e0:54:f7:b3:d3:98:2a:73:bd:7d:07:81:69:61:
d0:ee:da:f2:fc:7e:cc:c6:67:3a:f8:86:ce:c0:1e:72:9d:1b:
d2:51:a2:3e:7a:d0:0e:32:d9:51:d8:33:2c:f5:07:f6:12:43:
a8:13:1b:cb:51:eb:25:90:d7:09:52:79:a9:fe:4b:32:7b:9d:
67:da:16:a4:eb:19:bf:97:b2:da:09:39:c9:e0:dd:11:85:ed:
51:a4:59:ad:e8:78:dd:3b:3e:10:06:5f:51:8f:53:1e:9e:cd:
4b:75:7b:96:fc:36:d4:28:9b:ca:9c:5d:b1:34:53:b8:9b:17:
02:41:de:fc:bc:3d:2f:c8:41:fb:60:43:d5:cd:53:3b:f4:27:
75:33:e3:bc:2f:8f:59:07:b9:7a:7b:58:d1:02:b3:e1:67:06:
1a:eb:8f:cd
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUBqhMQF6UzH/DF14bShWQUI6XcnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB
OEVCQTcwRTAeFw0yNjA4MjgwNjQzMjRaFw0yNjA4MzExMDU3MjRaMDMxMTAvBgNV
BAMTKEJDNUI5NDQyN0YxOTVDMDFBMTNCNUE1MTIzQjEzODE2MEUwNDQxOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVh3PPIUTQ+tcQBsqyW2WI8dB
NBImcmh+d+J5+ATiMZpyd7TBPlS/jF9DSxs/4c50PH0iXpRmyMAGvYZUAT39Co+x
0XjkeKosXCvtitlEDhV20MsBc+5ufTzZjkkRufPGE7Lb50rmmh2NfTbS2o0Hy51X
jMJg0tPSuYJT13B7syqMP++E+Y/jcgbaXJeN/HZ8du2JMh+ayRbS7vujoEAZpZNq
83jEmF/SzPdrvnyYTHKKVWCef/XSfKecPriyPQr4raWzVnhyUBTL3kTdFpucruxD
iZgAlAaoyVUSLfTucyzvG2IBa4ExHSqUN6+GwDrc95C1f9Y9ri8Lh6id7YVZAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUvFuUQn8ZXAGhO1pRI7E4Fg4EQZcwHwYDVR0j
BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE
QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxMTM5MjIvMC9BMTk2NzIyMDZBOURB
N0RGNDI5NTM2QzlCRkZBREE5NEE4RUJBNzBFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfMnh8uWbfYz
T62RAssl4saT6t146tDMBAzyooWp29CmZOZs5+U3UOEerpIJ8QJDauRU15Qj1Tp8
kZTHYn+6rgzm3jsVy69vZd80AC3xFM7Ki5p5yz/G4qkkuysAU+BU97PTmCpzvX0H
gWlh0O7a8vx+zMZnOviGzsAecp0b0lGiPnrQDjLZUdgzLPUH9hJDqBMby1HrJZDX
CVJ5qf5LMnudZ9oWpOsZv5ey2gk5yeDdEYXtUaRZreh43Ts+EAZfUY9THp7NS3V7
lvw21CibypxdsTRTuJsXAkHe/Lw9L8hB+2BD1c1TO/QndTPjvC+PWQe5entY0QKz
4WcGGuuPzQ==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:19:50 2026 by rpki-client