
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
File: 191E76D74421148B42FA2A7F663270AE7FAD25F9.mft (raw, json)
Hash identifier: A9rAzXFzRSAdB1X8N1wW1gJpptuvVDr8cfYiTqY9TEk=
Subject key identifier: 1A:7A:6F:8C:C7:B2:1C:18:18:45:0E:6C:CE:1C:3C:57:73:D9:15:B3
Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
Certificate issuer: /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Certificate serial: 2A203EA1677EA4DB77B8CD74C2C090B1816B491D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
Manifest number: EE
Signing time: Tue 14 Jul 2026 16:11:37 +0000
Manifest this update: Tue 14 Jul 2026 16:06:37 +0000
Manifest next update: Wed 15 Jul 2026 19:48:37 +0000
Files and hashes: 1: 3130332e3131362e3132332e302f32342d3234203d3e203633363534.roa (hash: 6OtEuNz2GVGLvEPnp1uI15Y+vgwMkKwikkqR/oRSa24=)
2: 3130332e3131362e3132302e302f32342d3234203d3e203633363534.roa (hash: sjhYlFRils7TGbe4yrQB1MXoq74ExmSHsG4znfKuu7I=)
3: 3130332e3131362e3132332e302f32342d3234203d3e2034383437.roa (hash: iusd/geGAkaqNqYv0woWsgccBNM+keeMZWKm1FAoOOM=)
4: 3130332e3131362e3132302e302f32322d3232203d3e203633363534.roa (hash: fLgddK5a5pen10EIOArIO5eS1Bvv0lSS9vSM6d0T0bw=)
5: 3130332e3131362e3132302e302f32332d3233203d3e203633363534.roa (hash: ayiRQLB0vCQOVj4IcpJdzMo4ohtXvgd7waElFg36mCA=)
6: 3130332e3131362e3132312e302f32342d3234203d3e2034383437.roa (hash: bybvQVpDA62zpyPwHa1XWTYZhk2FjGjkQojOKPAlIPY=)
7: 3130332e3131362e3132302e302f32342d3234203d3e2034383437.roa (hash: zB7FMCFhHyOWYUyT241bOpU68Hl2jbAwsIx3PIajOso=)
8: 191E76D74421148B42FA2A7F663270AE7FAD25F9.crl (hash: PavlvAMnAxhI3tujkW+IL8Wzbz8ptcJabNgD9xCCs2w=)
9: 3130332e3131362e3132312e302f32342d3234203d3e203633363534.roa (hash: vpD7NEE8qzM+eWphvno3vCArBIi9VdE9XjhBRn48b6k=)
10: 323430323a663963303a3a2f34382d3438203d3e20313337373937.roa (hash: Xa71V3zlzwJxLxJVMnOGWGmp2Wl6+BqPl/c74CX5nDA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 19:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:20:3e:a1:67:7e:a4:db:77:b8:cd:74:c2:c0:90:b1:81:6b:49:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Validity
Not Before: Jul 14 16:06:37 2026 GMT
Not After : Jul 15 19:48:37 2026 GMT
Subject: CN=1A7A6F8CC7B21C1818450E6CCE1C3C5773D915B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:68:51:29:d6:0d:9d:b1:c6:b8:7e:ce:d7:
8b:19:30:83:43:24:cd:c1:d2:e8:1a:37:9d:43:56:
69:e4:87:5f:ad:81:28:d4:6c:5c:ba:ec:bf:e0:37:
4e:d7:c8:b8:32:99:84:b7:4e:ae:f1:df:78:95:75:
1f:83:52:70:7f:e5:ab:cb:52:17:04:96:fb:41:4e:
05:e5:5e:2b:26:dc:df:cd:b1:aa:76:9e:54:df:d5:
9f:a0:7c:93:9f:9c:a9:e5:b2:0a:83:c0:de:e7:f5:
b0:42:c1:6a:15:31:64:7c:2c:6e:c8:0b:09:20:f7:
2f:e2:8f:2a:43:f8:3f:a9:79:2f:c6:10:4e:d6:d4:
0e:93:96:f1:ec:25:b8:c7:c1:4d:db:fb:eb:19:41:
6d:f5:ce:51:2e:2b:5f:af:2c:0d:cf:9b:d9:94:aa:
1b:1b:5a:2e:f9:e5:90:ac:7b:95:67:cc:ad:0e:84:
74:6a:9a:31:0f:90:96:62:a7:a8:2f:c4:85:81:eb:
c0:cb:46:29:9e:f2:3b:98:7e:1d:79:0f:85:3a:87:
c2:d2:e8:e1:2d:10:e7:68:8f:0c:67:90:48:dd:39:
c3:c1:bc:60:d7:25:d9:81:6f:10:15:4b:a7:64:77:
e3:6e:d1:d7:00:50:52:11:02:32:b9:ff:04:c7:5c:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:6F:8C:C7:B2:1C:18:18:45:0E:6C:CE:1C:3C:57:73:D9:15:B3
X509v3 Authority Key Identifier:
keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ee:13:be:39:57:52:a0:5b:3e:b3:70:c2:2a:c0:b9:43:fb:
39:bb:b7:c5:3d:57:dc:02:28:eb:ca:a2:30:59:4e:fa:ce:72:
b3:9e:21:b0:9b:05:4f:f4:f7:ca:18:8e:87:9a:0b:cf:42:fa:
ba:4c:41:1a:5f:1d:a0:3f:d9:3e:60:42:78:2c:00:d5:0c:57:
6a:72:8c:d3:09:5d:8b:32:25:94:25:e7:52:31:a1:73:b8:3b:
a4:f7:6c:19:6e:e2:34:0c:33:8c:dc:8c:6b:57:77:24:75:69:
d1:58:86:cc:91:d4:d6:13:ce:7e:db:b0:4f:4d:06:e0:05:63:
f1:44:97:5b:1f:e6:8d:7d:e4:7e:2c:1a:63:95:83:39:cf:8a:
5f:ff:20:be:06:56:50:95:3f:40:4a:18:cb:5d:be:fb:d0:78:
4b:e9:79:59:6b:b1:47:bf:d6:57:a0:c3:fe:3c:eb:2b:37:55:
77:f9:1b:0e:1d:7d:00:93:21:2d:1f:ad:46:7a:66:d3:fc:2b:
b5:4b:4c:99:cb:ba:cd:6f:b5:d2:98:e0:b1:9b:c2:9e:6a:b1:
d3:7b:57:23:08:26:5b:5a:42:0c:5f:b4:4d:e0:e3:15:77:94:
a0:52:7a:d4:ba:9d:f8:69:c4:d4:2d:9e:29:86:77:9e:f1:60:
c5:70:2f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 19:58:10 2026 by rpki-client