
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
File: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft (raw, json)
Hash identifier: MsLQsvD4bBUzvZ0GA19t/Lj2lGlyJw0ffX3z22M+ar4=
Subject key identifier: A6:28:35:35:16:A0:B4:AF:06:DF:80:47:C1:D3:8B:C3:FF:B8:5F:D3
Authority key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD
Certificate issuer: /CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
Certificate serial: 1AADFC80BC6ECA997D3B4FF42C8798047D0A8F2A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
Manifest number: 0127
Signing time: Fri 28 Aug 2026 06:48:04 +0000
Manifest this update: Fri 28 Aug 2026 06:43:04 +0000
Manifest next update: Mon 31 Aug 2026 17:58:04 +0000
Files and hashes: 1: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl (hash: ZIZkl8/1fWjf/80yfVdKnDfoGvw+khsDuJkjxyX11LM=)
2: 3134342e37392e31302e302f32332d3234203d3e20313531323531.roa (hash: WjMCSVc2nZ6LHlmIFS3fh2fKf0RsOi1ahfbmP+aZL0U=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 13:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ad:fc:80:bc:6e:ca:99:7d:3b:4f:f4:2c:87:98:04:7d:0a:8f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
Validity
Not Before: Aug 28 06:43:04 2026 GMT
Not After : Aug 31 17:58:04 2026 GMT
Subject: CN=A628353516A0B4AF06DF8047C1D38BC3FFB85FD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:09:ca:ce:4b:d0:8e:9e:40:0d:c3:00:0e:6d:
d9:18:4b:6e:8a:3e:9a:78:8a:cd:13:60:68:3d:2e:
55:e7:35:eb:6b:ea:d7:aa:cb:b5:b0:20:8e:b5:a1:
7d:06:ba:27:b3:c2:40:a5:de:a2:e6:b5:2f:32:24:
74:ea:6a:b4:93:00:b8:76:07:ff:e9:08:b5:ef:4e:
c8:5e:76:69:ce:ea:43:e6:b1:a6:0e:84:6d:50:ef:
22:20:fc:27:a7:91:f4:fb:2a:45:ee:dd:14:75:f7:
80:21:eb:cf:f1:2a:87:a6:60:d8:b2:4d:84:53:14:
91:4f:e7:82:c6:73:40:23:96:5a:54:4c:77:b2:5b:
7e:ea:c8:95:eb:4d:7c:1d:6f:b0:d2:4e:68:32:04:
85:e4:4b:ca:89:08:0d:7d:dc:db:b1:c7:e3:ca:a4:
82:f8:26:20:a3:e9:9e:86:11:e9:21:ef:69:55:86:
81:f5:32:f9:32:44:48:a7:29:d7:55:da:fe:c9:65:
12:58:ec:13:86:2e:02:18:11:1c:d2:fa:72:0e:6e:
e1:12:78:09:48:50:a2:4c:88:86:de:8b:e0:26:b8:
12:37:57:e7:0e:36:69:76:09:59:0d:e4:9e:fd:1b:
ad:6a:4c:11:d9:ab:93:6c:99:e7:d9:30:86:e0:8d:
6e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:28:35:35:16:A0:B4:AF:06:DF:80:47:C1:D3:8B:C3:FF:B8:5F:D3
X509v3 Authority Key Identifier:
keyid:19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e8:e4:27:ff:ff:ce:94:fe:78:ae:4c:b3:6d:78:a4:50:87:
b2:55:b8:2b:0b:4e:6f:c7:39:be:78:42:fa:52:72:2b:76:b2:
c5:de:57:08:2b:63:56:55:77:61:cd:5b:7b:09:6b:26:4b:f8:
1a:87:3c:c0:02:fb:06:36:40:20:29:86:76:b4:d8:2a:a2:66:
65:c2:df:86:e3:3e:6d:e4:79:7e:97:f7:6a:a3:90:24:63:55:
2f:77:bb:c9:d7:e6:dd:79:36:50:d3:9b:aa:59:0f:21:30:42:
21:e8:6a:02:eb:c7:18:6c:c3:8c:a7:16:c1:1c:ca:9a:af:eb:
c0:f2:a7:21:21:b3:69:0f:b1:89:20:7b:28:26:6d:8d:ff:d4:
61:92:d8:2e:fa:4c:f7:f9:7b:bc:d4:58:48:cd:f3:62:b9:d1:
58:3d:70:cc:95:75:cd:e1:be:ef:88:9c:f7:49:5b:14:f8:18:
d2:b3:fb:9d:8e:74:05:56:1b:5a:1c:14:ff:3c:8b:af:1a:42:
c5:68:a5:07:4a:c6:54:a0:cd:c0:a2:22:08:0b:c4:d1:96:51:
c5:97:c3:80:0c:0c:94:00:00:e1:15:97:78:15:5f:18:4a:83:
f6:eb:71:22:5d:60:d2:a4:3a:15:1b:ec:61:4d:31:47:6d:a6:
31:87:a6:94
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUGq38gLxuypl9O0/0LIeYBH0KjyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2
NUJDNzdBRDAeFw0yNjA4MjgwNjQzMDRaFw0yNjA4MzExNzU4MDRaMDMxMTAvBgNV
BAMTKEE2MjgzNTM1MTZBMEI0QUYwNkRGODA0N0MxRDM4QkMzRkZCODVGRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLCcrOS9COnkANwwAObdkYS26K
Ppp4is0TYGg9LlXnNetr6teqy7WwII61oX0GuiezwkCl3qLmtS8yJHTqarSTALh2
B//pCLXvTshedmnO6kPmsaYOhG1Q7yIg/CenkfT7KkXu3RR194Ah68/xKoemYNiy
TYRTFJFP54LGc0AjllpUTHeyW37qyJXrTXwdb7DSTmgyBIXkS8qJCA193Nuxx+PK
pIL4JiCj6Z6GEekh72lVhoH1MvkyREinKddV2v7JZRJY7BOGLgIYERzS+nIObuES
eAlIUKJMiIbei+AmuBI3V+cONml2CVkN5J79G61qTBHZq5NsmefZMIbgjW7jAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUpig1NRagtK8G34BHwdOLw/+4X9MwHwYDVR0j
BBgwFoAUGa5VZr+D0Ucv2dm65cxwEmW8d60wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTM5NDE3OS8xLzE5QUU1NTY2QkY4M0QxNDcyRkQ5RDlCQUU1Q0M3
MDEyNjVCQzc3QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2NUJDNzdBRC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMS8xOUFFNTU2NkJGODNE
MTQ3MkZEOUQ5QkFFNUNDNzAxMjY1QkM3N0FELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWujkJ///zpT+
eK5Ms214pFCHslW4KwtOb8c5vnhC+lJyK3ayxd5XCCtjVlV3Yc1bewlrJkv4Goc8
wAL7BjZAICmGdrTYKqJmZcLfhuM+beR5fpf3aqOQJGNVL3e7ydfm3Xk2UNObqlkP
ITBCIehqAuvHGGzDjKcWwRzKmq/rwPKnISGzaQ+xiSB7KCZtjf/UYZLYLvpM9/l7
vNRYSM3zYrnRWD1wzJV1zeG+74ic90lbFPgY0rP7nY50BVYbWhwU/zyLrxpCxWil
B0rGVKDNwKIiCAvE0ZZRxZfDgAwMlAAA4RWXeBVfGEqD9utxIl1g0qQ6FRvsYU0x
R22mMYemlA==
-----END CERTIFICATE-----
Generated at Sat Aug 29 07:09:27 2026 by rpki-client