
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
File: 196F2188A356D1C42D39F6D165719B596B4CD91E.mft (raw, json)
Hash identifier: IorrZ2CwEGdnloKj6adWIs0hJaNhu21lBQ1Aw/+TMJY=
Subject key identifier: 28:36:3F:93:2C:89:B0:52:3C:64:01:09:78:C8:CE:20:71:F3:A9:88
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 64FEA5F4960DE2206C5F15EE6C709FA32E721977
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
Manifest number: 3E
Signing time: Sat 23 May 2026 04:09:32 +0000
Manifest this update: Sat 23 May 2026 04:04:32 +0000
Manifest next update: Sun 24 May 2026 06:28:32 +0000
Files and hashes: 1: AS135089.roa (hash: cKKdM3xi67SHlnySyWw/vmXk0YYWlsztydo6AXzCqZY=)
2: AS140332.roa (hash: nZTxLWKRnE8gSAElrjAZZQG3HmmH9XrcoDC2eR0LncM=)
3: AS140352.roa (hash: jRTbq8NTkeZBjE64BtLVWJSTWerQ/q42x7wI3AlA7UU=)
4: AS63838.roa (hash: NZeLcs1jZ28Lc2ff+QvRbU5TQdg2x97X1gvHxgny4bg=)
5: AS141025.roa (hash: LHAqQm52MaqVhhxFjktYUPS6fHfSjNBht88OOuRgq9M=)
6: AS58466.roa (hash: qeQ2MPSNFA0ts+KbC9+H4K3OJyBI9REybfV17P8d72I=)
7: AS63835.roa (hash: We1Yi4gGj0m9fGazuJD/4ln6hd54/RLMLiLdCRV22WA=)
8: AS140328.roa (hash: Ou86lzek9haC5zfs2BB5Xn33RxYs5bvHFD7y/BpM14Y=)
9: AS139587.roa (hash: prrQ+OtKE4s7QLbBgFBCysz928NLuorYK29ikjwJW7Q=)
10: AS151823.roa (hash: kvG3DrVAhalacaEHIMUHDPU07nvbED0yPJQLYyhzOn0=)
11: AS58772.roa (hash: kx4RhmGrzOOUr45ZoeJPu9aGpIC95W+WFN754d5kW+s=)
12: AS134765.roa (hash: PI3XJZV9Gvqg7s853dmhiLV3A1G2HYh3JP/LMpmGFGE=)
13: AS140336.roa (hash: Qq697X/0B2nM0qnnmn2N2IEYCIO1RVqJv6XuLtDhohs=)
14: AS149979.roa (hash: SC/pqKQelXNWlJcq2KfQpJ7QXf2/XfDGkpaGBBR8eMQ=)
15: AS134419.roa (hash: 6kjK7wvQRtepgx4++wpt14d5gfvkC68BWnT11fye1fE=)
16: AS134762.roa (hash: fJEoHZQ7eF80YODvDYeFB4CkeeBCT2EZk5ttrDyOqos=)
17: AS137687.roa (hash: k4BGFgkaRDoilUAPvTNU3ruCguYZ6DRDvttND+TlxyI=)
18: AS17799.roa (hash: g2Djm8WXZwoSTECHukd/9kOsslaL7weICZ2V4E4Q7UQ=)
19: AS139721.roa (hash: drIwOEG+sr7m1/uWxpU5rVn7GNz8D+YQmtGfybayoHA=)
20: AS138570.roa (hash: nrdkVOwSyeGAK0nJjdCDQvXzQwknew2qpaCfdt3Z8ds=)
21: AS4812.roa (hash: he0g35yOzeW3YHyPY6RIZwjtLacndzGqf+Fo674CEBA=)
22: AS134766.roa (hash: pNzDKGxemP1Xvdb3fHOs1/tP7/HoxVoMG4hrfVx8L/I=)
23: AS140333.roa (hash: uQ5NZ7rXw3lJGt0Qb+/0vw8AOdrHd08iVwTU3/U9i6M=)
24: AS140356.roa (hash: bKVD/v9nXkSNeZC4Qz9KyyUcVD/nkoRKaZgDWuNIhjQ=)
25: AS140337.roa (hash: vioUo18XCoKuaqdX7UXr3tYY2pJHwIjjPDTzya3HtzM=)
26: AS134767.roa (hash: /eutHKTXsG2gEjcQMICv4ZFPWxB1UaI/dA5QBet7QYk=)
27: AS133774.roa (hash: 3NM7s3Cja1Xll/QQjc5SiyiDzFwWMiTOUSVBbUJ8bso=)
28: AS140334.roa (hash: tGAZhEiW3AYg99a5hyCb0T5nayNtSS7U6MNljVSAoXA=)
29: AS139019.roa (hash: etkICKBpW//5a5PWUpM7YPP3md1jCAOYWUmmt1Oh0uw=)
30: AS58543.roa (hash: P33z0s0VRR8UX2+hHP4ZwvuoZ31VWO0z8HG/MVPYsHw=)
31: AS134763.roa (hash: Ww9NSXIL0OzaX/BayBMfy+uLKJCPHhl2dyeamaU/Czc=)
32: AS140345.roa (hash: aTNeIFbxDYgcV+qt3ZF9kKyddI8IIvLtXeLjDlooUiw=)
33: AS140335.roa (hash: kOF7Hn/3KHiFh8JogxTKiuyoqfYY+6tqHztZ3gDXcTg=)
34: 196F2188A356D1C42D39F6D165719B596B4CD91E.crl (hash: GITuVwUKaxoTiBlEXWBFmJqGjU4vEQNoh5t/XMQqG4g=)
35: AS139018.roa (hash: qHdj4YkhIDS8+vUqPfmXBXYSQD82J9eAAFgGiRFcKMM=)
36: AS4811.roa (hash: OLQn0pH4A1jjSXlAS7OUehLf7vfTpXTl31VWqofbKXU=)
37: AS23724.roa (hash: 5IOYLL3UAoyiRrSc1Skq811ooo0XrYVbdXquwGKCFFQ=)
38: AS140355.roa (hash: wujpWd+tv7kJvRuWWccQM8OYwUVSBUkBAdFoCYJTh9o=)
39: AS140331.roa (hash: TszLUCsEUIAdUDxmbNtiMS0c/rbh9RvLRMgkccMkM2U=)
40: AS140330.roa (hash: n627QHhoCxhotTZ+cVAy3tv03QXo9Ot5pyO4JrsiPlw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 06:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:fe:a5:f4:96:0d:e2:20:6c:5f:15:ee:6c:70:9f:a3:2e:72:19:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 23 04:04:32 2026 GMT
Not After : May 24 06:28:32 2026 GMT
Subject: CN=28363F932C89B0523C64010978C8CE2071F3A988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:21:d7:f3:c2:e4:4f:b7:fe:91:b0:9e:ab:
a3:b6:ed:d1:e5:bf:af:73:cb:83:09:eb:ef:0c:b1:
ea:bf:98:8f:14:1b:f4:68:d4:7a:9b:16:97:94:1a:
52:1c:91:73:2a:38:8f:21:d9:63:0c:8d:20:bb:ac:
db:5a:5d:6d:27:90:b9:55:f1:f4:78:e9:b2:ba:e1:
43:77:e2:80:34:c4:79:ee:5b:99:d6:b0:06:bc:04:
f6:58:15:e9:cb:9f:13:eb:25:c5:0c:42:1f:c1:81:
e2:56:99:27:01:53:20:72:fe:5c:4d:59:4d:56:6c:
8e:d2:dd:78:e6:49:1e:de:01:38:1a:79:90:26:dd:
42:bc:44:57:8e:1e:22:28:9d:df:b2:ce:a5:43:d5:
a9:c3:a3:8b:59:c2:b1:f1:e4:c3:09:a2:8f:55:26:
b6:54:75:65:fb:27:85:62:e4:b4:69:ce:89:a6:95:
8b:d3:d4:81:c0:2e:6e:e6:aa:5e:f2:ad:79:7d:e0:
ce:1b:8e:7c:84:21:b1:be:06:c1:12:58:c9:c9:5d:
76:2e:b5:55:8c:75:95:3e:7b:92:85:fd:1d:08:f0:
63:b3:f8:a1:9f:6c:a3:32:eb:1b:c6:7b:5d:8d:60:
e6:24:db:12:57:2c:91:de:df:c7:e0:0f:a1:7d:b9:
bb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:36:3F:93:2C:89:B0:52:3C:64:01:09:78:C8:CE:20:71:F3:A9:88
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e8:14:e0:7c:c5:d1:d9:20:e4:eb:67:d0:36:8d:7b:2f:f5:
11:f9:bb:56:6f:fd:3e:bc:98:b9:c4:5f:d3:d6:f8:e6:a8:06:
49:22:92:62:ef:72:fc:48:10:23:da:72:ea:42:84:67:ee:2a:
f9:70:56:7b:6b:3b:2e:97:61:f8:73:74:b0:1a:64:18:45:5e:
2d:9b:bc:f8:78:78:93:3d:e3:0d:2f:87:5c:d6:d3:b6:1c:8b:
e1:a4:1c:57:aa:fb:db:cd:3e:60:05:f7:ff:80:08:ae:a2:6c:
da:ca:6e:9c:2f:c0:0e:45:87:3a:31:16:31:ef:70:be:b7:19:
cb:83:da:12:a7:67:7e:9b:50:4c:ec:c3:8c:be:78:93:43:4a:
54:ef:f6:81:f3:37:10:76:dd:19:70:8f:85:d1:b8:af:ee:4b:
33:ce:83:cb:08:9c:7f:d3:b9:bf:f3:68:f9:44:9d:ca:d7:2b:
25:e7:c2:87:f0:16:8a:b4:54:50:34:3d:27:c3:81:83:77:64:
dc:30:6f:b3:bc:54:e4:58:bf:c3:38:e9:e1:0b:65:32:8a:e7:
3a:40:df:0d:b9:0d:96:68:1c:ac:5c:ca:d4:54:25:ce:24:9f:
d9:65:bd:a6:8b:52:96:29:9d:55:cb:bc:1d:fb:24:a3:25:0d:
cb:9e:19:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 06:24:25 2026 by rpki-client