
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
File: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft (raw, json)
Hash identifier: rWwqPTq0VqMnVU5VfyXrbhYr0dxD4H07eOwXgZtk80k=
Subject key identifier: 91:FB:1D:16:47:28:B0:09:BE:00:97:10:AE:57:E3:09:36:1D:F4:A0
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 39FCA772C0829D6A1EF14F861648C52AEB642FE7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
Manifest number: 2E
Signing time: Sun 22 Feb 2026 06:42:30 +0000
Manifest this update: Sun 22 Feb 2026 06:37:30 +0000
Manifest next update: Mon 23 Feb 2026 09:16:30 +0000
Files and hashes: 1: 3130312e3234372e302e302f31372d3234203d3e203338333635.roa (hash: qz7UatHFJqPS4ZsqhU/SG7lARONSPfeJMor5+B2g+QI=)
2: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl (hash: f1+dNQC3zfKdlWqKwyb1amtSLC+B1ZVShdFUz4XhxTQ=)
3: 3131372e35382e302e302f31372d3234203d3e203338333635.roa (hash: VfFusDOOP1s8pzFyN3+E2jV1enMlvrNxUhUAZ+Dvbm4=)
4: 3138322e36312e3230302e302f32312d3234203d3e203338333635.roa (hash: WgV1yeo5WF52dTxG62HFDsVXOy6MY22rby9YB14g5EM=)
5: 34322e3139392e302e302f31362d3234203d3e203338333635.roa (hash: 7KEjERmB4Z/A9sqOzm5s/N9mbMV9i8uoubqBMFMghAM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:fc:a7:72:c0:82:9d:6a:1e:f1:4f:86:16:48:c5:2a:eb:64:2f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Feb 22 06:37:30 2026 GMT
Not After : Feb 23 09:16:30 2026 GMT
Subject: CN=91FB1D164728B009BE009710AE57E309361DF4A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:25:c8:c5:d5:00:7a:08:67:f0:bd:3c:a3:
3b:66:d1:b2:ee:1a:d6:5a:27:aa:fe:16:58:64:fa:
a7:af:b3:14:a3:38:16:41:f1:48:93:b1:74:a9:de:
d5:44:08:50:69:17:4b:ed:49:2d:86:db:af:d3:af:
62:a1:03:fa:a0:59:ec:da:48:96:f8:e3:5d:23:bb:
0c:90:85:b8:a4:d2:05:6e:4c:96:9f:af:c0:62:22:
7b:dc:58:df:b5:7f:b4:a8:47:65:c9:bb:c9:2d:71:
fe:fa:85:20:52:37:66:8a:bd:80:43:59:d3:70:65:
6d:d8:85:10:e8:ea:7e:6e:6f:ce:70:65:c3:05:2d:
68:eb:ae:46:80:8a:33:cd:d4:17:39:4a:2b:f8:0a:
6e:9b:0b:46:70:d6:ac:e3:6c:8c:c4:7e:3e:b5:13:
a7:72:b1:24:d2:a8:0b:0b:f9:c2:eb:45:22:05:66:
93:f1:58:4f:71:31:a1:c8:13:26:86:52:9b:41:a9:
1f:de:46:85:aa:50:b3:55:70:c8:2c:6e:80:26:64:
fa:75:52:e1:0a:ca:e2:fe:c9:2c:e2:78:de:a8:72:
e7:b3:62:81:a5:2a:2b:fd:4f:31:6c:f8:bc:54:2a:
e5:ec:c5:d3:ec:46:90:fc:97:c7:c8:f7:8a:e7:17:
e4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FB:1D:16:47:28:B0:09:BE:00:97:10:AE:57:E3:09:36:1D:F4:A0
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7e:75:96:09:00:71:c7:69:04:c0:28:8e:cb:cd:6b:0a:c1:
85:c3:38:22:69:a7:5e:3c:f2:b4:80:67:80:8f:d0:db:19:91:
06:a6:1a:75:52:5d:de:f7:00:63:8e:8d:a2:94:91:0d:d2:19:
95:48:c1:50:c5:8c:a1:07:91:47:68:86:aa:95:dc:fd:f6:49:
9c:fe:9b:f8:2d:ed:71:25:db:f4:94:d8:f0:d5:ff:c9:1d:6a:
18:ca:7e:28:3c:60:3e:ca:27:5e:dd:72:14:79:d9:8d:16:1e:
18:2e:6e:ad:92:a2:c7:8d:95:de:03:a5:93:70:fc:3a:8f:a5:
10:7a:72:a0:df:0d:78:02:99:4e:d0:20:3f:98:65:36:4b:f9:
65:8d:2b:f1:66:ac:8c:fa:3d:22:6b:7e:43:7d:11:9f:a6:61:
60:fe:7f:2e:b5:5c:5f:44:60:3e:38:24:a5:21:a0:5d:17:3b:
14:77:8b:3d:5c:35:f7:31:bf:e4:ca:6f:b0:8c:9a:85:db:f0:
d6:70:95:36:bd:bc:71:a7:29:d4:82:e8:77:74:b1:d0:a7:77:
b9:ee:1c:70:a7:9b:43:ac:a9:fb:20:bc:57:6a:43:24:0c:db:
8e:7d:f6:43:ed:2c:c8:c8:7a:b6:4f:e0:f8:d2:d8:0c:3d:49:
82:c4:de:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:11:41 2026 by rpki-client