
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft
File: 19C56F6C979C215AF864F9E18F7A8F62631A1268.mft (raw, json)
Hash identifier: 0ec3Rbc2Zd8GgCQBEoEIeeyvBWWv+Rc3XtX2YN0yMyI=
Subject key identifier: 4F:50:FD:18:B7:00:28:18:75:A3:18:03:49:4A:3A:3E:59:09:51:55
Authority key identifier: 19:C5:6F:6C:97:9C:21:5A:F8:64:F9:E1:8F:7A:8F:62:63:1A:12:68
Certificate issuer: /CN=19C56F6C979C215AF864F9E18F7A8F62631A1268
Certificate serial: 256EFFA11199E556820D723B71A2574592D2428D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft
Manifest number: 3A
Signing time: Fri 29 May 2026 09:47:46 +0000
Manifest this update: Fri 29 May 2026 09:42:46 +0000
Manifest next update: Sat 30 May 2026 12:09:46 +0000
Files and hashes: 1: 323430363a353263303a3a2f33322d3332203d3e20313339313431.roa (hash: 0VCs7Br2LEypju+8+bG9yDec+3HSZ8IfNVbmHboPoB4=)
2: 3130332e3135342e33302e302f32332d3233203d3e20313339313431.roa (hash: l7ihaAL2K1gp0WFgFaF5vhfWpS9Haphuut9+xh4iEFI=)
3: 19C56F6C979C215AF864F9E18F7A8F62631A1268.crl (hash: WPK2Jfi0ZRYV0Wl04F623zm3kXomwNk+NU+V2Hl/vhc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.crl
rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 12:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:6e:ff:a1:11:99:e5:56:82:0d:72:3b:71:a2:57:45:92:d2:42:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19C56F6C979C215AF864F9E18F7A8F62631A1268
Validity
Not Before: May 29 09:42:46 2026 GMT
Not After : May 30 12:09:46 2026 GMT
Subject: CN=4F50FD18B700281875A31803494A3A3E59095155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:73:20:f8:19:34:1c:d7:1b:1b:8f:28:a0:
e6:36:f8:35:14:67:86:9b:51:cb:8f:44:78:e6:91:
4a:99:a9:db:7c:10:77:d0:7d:88:67:23:ab:9b:fd:
ae:5e:8e:c3:1f:2e:56:be:88:23:31:c5:e3:2b:00:
46:1f:b1:51:f4:69:8f:60:cf:78:13:9f:59:4c:8d:
82:1a:b3:7f:cc:d6:11:55:5b:72:6f:f7:87:6e:3a:
18:10:ac:50:a3:98:c0:3a:a4:87:d8:06:f0:d2:05:
51:5c:86:89:8e:02:f1:d5:b0:d2:d9:df:84:71:59:
47:1c:a4:c0:71:18:21:e0:55:36:96:33:ba:84:00:
50:64:d7:35:5d:a7:11:5d:9d:a8:27:27:6c:11:52:
b4:57:a0:62:be:be:45:f1:f5:91:3a:a2:a2:c0:7b:
f4:fd:7a:ce:20:0c:bd:43:cf:3f:16:89:54:1a:5d:
85:91:20:9a:6b:7b:0f:8e:41:ae:30:eb:24:b7:c8:
b9:89:8b:c8:63:54:e1:d3:f5:7c:5a:98:17:b3:cc:
66:ae:38:dd:ef:ea:33:f1:f7:76:a8:b1:c8:dd:cd:
36:52:e8:8a:50:49:89:fd:f8:89:15:d6:36:39:51:
48:3c:60:97:bc:b0:49:3e:06:89:a2:38:d3:d9:99:
9a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:50:FD:18:B7:00:28:18:75:A3:18:03:49:4A:3A:3E:59:09:51:55
X509v3 Authority Key Identifier:
keyid:19:C5:6F:6C:97:9C:21:5A:F8:64:F9:E1:8F:7A:8F:62:63:1A:12:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6d:f4:e4:d8:29:bf:c8:8c:1a:d7:39:da:ee:cd:78:3c:dd:
b1:21:ad:fe:8f:d3:2b:9a:bf:2b:c3:59:0e:68:c7:99:2e:ef:
ec:76:b8:a8:3d:36:5b:46:d8:6e:e0:d4:45:75:3f:7c:d1:0e:
2c:d4:92:69:fd:45:93:5f:88:80:8e:51:a3:07:d6:fd:b0:21:
96:67:e3:76:b9:9c:87:ad:96:5a:5b:77:fe:14:64:61:4e:cc:
77:42:cd:fb:82:cf:cf:d2:22:5e:53:31:02:dc:5c:ec:65:a7:
8b:57:68:f5:94:b2:b5:26:c2:ba:ad:60:79:74:1a:32:37:a4:
a3:04:fd:cd:30:a4:b8:a1:df:27:78:51:62:15:ea:a5:e6:d5:
7d:6f:0a:e6:d2:18:a3:db:b6:a0:6d:c0:ca:2f:62:4e:8f:98:
b2:2a:90:81:c1:28:a5:2b:92:0d:84:d2:53:27:78:66:a6:da:
79:ec:d2:b7:9c:91:ac:72:fe:ff:40:47:47:5c:f1:9a:10:76:
d8:48:45:33:71:ad:6f:bb:d7:7e:60:60:d4:6d:66:d7:2c:63:
62:21:18:7f:cd:41:c7:20:eb:72:fc:6c:fb:65:f2:9c:96:7b:
21:e1:1a:e6:50:34:ed:ed:d1:e0:ef:42:12:76:3d:ad:a0:f0:
6a:f1:8b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:56 2026 by rpki-client