
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
File: AE487B72C4F38EA548F6721BB60B773705BD9515.mft (raw, json)
Hash identifier: VYpPJDLrCVPyytOKj31PS4rQ5pE9eR6N9PadQ6NZ4ZU=
Subject key identifier: 78:83:83:43:F7:61:C2:0C:CB:59:06:BD:F1:E9:45:B4:84:FF:DB:0F
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 374932616D4A699DAE014AA7850CC32E7524E468
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
Manifest number: 76
Signing time: Fri 17 Apr 2026 13:54:43 +0000
Manifest this update: Fri 17 Apr 2026 13:49:43 +0000
Manifest next update: Sat 18 Apr 2026 14:01:43 +0000
Files and hashes: 1: 323430333a383038303a3a2f33322d3634203d3e203137393634.roa (hash: piQDqbo6ovz4X+QtGKO2nAVFYTFJJbefb5lvlP5mnSU=)
2: 323430333a383038303a3130313a3a2f34382d3438203d3e2034383437.roa (hash: kyxkLgkSkLdtiphgwfgYitM4gd3kF0CU9WboqJpH+Kg=)
3: 323430333a383838303a3a2f33322d3634203d3e203137393634.roa (hash: +pvZ0/1DLgneMPaWbyvqBXYh1zOEumfoQPnHJUD/aYo=)
4: AE487B72C4F38EA548F6721BB60B773705BD9515.crl (hash: KV6wIO2w4hAzsPvpVwzlSCzpg3mPQ/8WOBXtRReAhN4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 14:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:49:32:61:6d:4a:69:9d:ae:01:4a:a7:85:0c:c3:2e:75:24:e4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Apr 17 13:49:43 2026 GMT
Not After : Apr 18 14:01:43 2026 GMT
Subject: CN=78838343F761C20CCB5906BDF1E945B484FFDB0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:8a:f5:22:66:4f:a3:af:6a:65:b9:ee:67:
d1:7a:e5:2d:df:f8:cd:13:50:27:77:67:58:2e:6b:
eb:4e:55:6f:a3:77:fc:76:59:40:fc:14:6e:d5:e6:
07:f0:fb:e9:5a:d1:dc:91:2d:e2:fe:2c:c7:c4:72:
36:17:5b:ce:66:7a:0a:96:2d:2f:50:7a:7e:76:ad:
e8:5b:52:11:8e:75:bf:47:d2:4f:de:ce:e6:e9:99:
31:fe:67:3e:f0:cb:0c:14:6d:62:73:d7:3e:1b:7a:
e5:88:ac:d8:a8:39:5a:ee:62:ef:fd:f2:a9:86:c6:
c1:7b:7b:2d:ac:18:a6:47:44:7a:8e:22:bd:96:59:
06:00:1b:e7:1a:b5:a9:3d:ca:a8:14:72:14:1e:6f:
34:59:c6:5d:f3:e8:33:ba:a9:b1:23:94:f1:d6:e7:
30:00:99:8b:a5:99:fc:30:81:0c:44:29:d7:be:af:
1b:2f:b0:95:6d:1e:5c:26:3f:d7:05:86:b7:af:e9:
bf:60:10:86:70:7f:04:4e:1e:54:48:51:3f:eb:1c:
29:6c:03:51:a5:cb:d9:e8:20:7f:b1:85:00:08:81:
e8:80:a5:ec:42:c0:19:e5:21:62:e1:6c:81:af:50:
7e:ef:20:6f:f1:87:5c:30:fe:b6:38:63:b8:32:f6:
06:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:83:83:43:F7:61:C2:0C:CB:59:06:BD:F1:E9:45:B4:84:FF:DB:0F
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:22:bd:f0:01:d8:cb:55:ff:45:f8:02:35:46:3e:29:9e:0c:
cc:a0:82:68:40:da:74:9b:ff:e2:7b:d5:f1:9a:4c:ea:73:af:
aa:c0:09:7e:15:b8:0b:23:bd:b9:d3:94:2b:df:4a:9d:1f:e4:
5c:02:69:6c:f4:8c:de:e9:11:cb:6d:49:17:dc:14:77:e2:56:
f9:27:d6:69:6b:95:46:dd:4a:0a:0e:63:bf:87:3c:18:b3:9b:
f5:c3:0a:8e:f6:0c:98:8b:3f:44:dd:81:64:3d:4a:18:ca:0c:
59:e2:c2:85:53:4e:5c:8e:85:9e:46:c2:b3:71:7b:c9:f4:e1:
c6:8c:a9:5c:f0:eb:cf:85:bf:e7:78:ad:05:8f:a6:ed:bf:5a:
db:ee:fa:a6:c3:6a:b4:e5:af:01:43:a9:ff:51:81:61:62:65:
2a:61:95:14:14:ec:60:af:0d:11:cf:3d:41:7b:8a:1f:9f:d4:
6b:af:ae:9f:d6:e5:b7:c7:1b:76:12:c8:ad:6e:a6:2f:47:4e:
f4:c3:10:ac:64:40:2a:22:1a:75:20:72:a5:09:2d:bc:6f:d8:
7d:a3:5b:05:8f:30:b5:c2:6d:00:ba:76:b7:07:5f:ae:2f:32:
a1:95:e6:81:64:38:46:52:67:e1:c1:00:1f:f9:c6:ec:07:ad:
75:9e:89:e5
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUN0kyYW1KaZ2uAUqnhQzDLnUk5GgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw
NUJEOTUxNTAeFw0yNjA0MTcxMzQ5NDNaFw0yNjA0MTgxNDAxNDNaMDMxMTAvBgNV
BAMTKDc4ODM4MzQzRjc2MUMyMENDQjU5MDZCREYxRTk0NUI0ODRGRkRCMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUF4r1ImZPo69qZbnuZ9F65S3f
+M0TUCd3Z1gua+tOVW+jd/x2WUD8FG7V5gfw++la0dyRLeL+LMfEcjYXW85megqW
LS9Qen52rehbUhGOdb9H0k/ezubpmTH+Zz7wywwUbWJz1z4beuWIrNioOVruYu/9
8qmGxsF7ey2sGKZHRHqOIr2WWQYAG+catak9yqgUchQebzRZxl3z6DO6qbEjlPHW
5zAAmYulmfwwgQxEKde+rxsvsJVtHlwmP9cFhrev6b9gEIZwfwROHlRIUT/rHCls
A1Gly9noIH+xhQAIgeiApexCwBnlIWLhbIGvUH7vIG/xh1ww/rY4Y7gy9gaTAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUeIODQ/dhwgzLWQa98elFtIT/2w8wHwYDVR0j
BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3
NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc5NDM5MzkvMC9BRTQ4N0I3MkM0RjM4
RUE1NDhGNjcyMUJCNjBCNzczNzA1QkQ5NTE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCK98AHYy1X/
RfgCNUY+KZ4MzKCCaEDadJv/4nvV8ZpM6nOvqsAJfhW4CyO9udOUK99KnR/kXAJp
bPSM3ukRy21JF9wUd+JW+SfWaWuVRt1KCg5jv4c8GLOb9cMKjvYMmIs/RN2BZD1K
GMoMWeLChVNOXI6FnkbCs3F7yfThxoypXPDrz4W/53itBY+m7b9a2+76psNqtOWv
AUOp/1GBYWJlKmGVFBTsYK8NEc89QXuKH5/Ua6+un9blt8cbdhLIrW6mL0dO9MMQ
rGRAKiIadSBypQktvG/YfaNbBY8wtcJtALp2twdfri8yoZXmgWQ4RlJn4cEAH/nG
7AetdZ6J5Q==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:31:41 2026 by rpki-client