
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft
File: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft (raw, json)
Hash identifier: T7pFoWsl0V/8RMGpgRVh/tdFuMbNOzHD1VSF6oAR9SA=
Subject key identifier: FF:45:9E:C6:FD:C8:E3:65:FE:74:DA:51:6C:F2:C2:F3:E6:8E:4D:45
Authority key identifier: AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41
Certificate issuer: /CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341
Certificate serial: 5966D8F932E49DE263E17FFF63B04A8215262AC7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft
Manifest number: B7
Signing time: Sat 13 Jun 2026 09:11:39 +0000
Manifest this update: Sat 13 Jun 2026 09:06:39 +0000
Manifest next update: Sun 14 Jun 2026 12:20:39 +0000
Files and hashes: 1: 34352e3132312e39362e302f32322d3234203d3e20333939313338.roa (hash: gYT3dtPIakPTs4f1hCUuM5xGvtdVmK2naUkADh3L9I8=)
2: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl (hash: 5wlAQKQAHlP6q/3giOP60O+OeapXlOM+XzBdfCveksk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl
rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:66:d8:f9:32:e4:9d:e2:63:e1:7f:ff:63:b0:4a:82:15:26:2a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341
Validity
Not Before: Jun 13 09:06:39 2026 GMT
Not After : Jun 14 12:20:39 2026 GMT
Subject: CN=FF459EC6FDC8E365FE74DA516CF2C2F3E68E4D45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:96:15:54:42:e2:d2:bd:44:59:2e:f3:60:e0:
86:da:52:a9:40:63:e5:24:db:e6:e1:f2:92:d3:ca:
91:fb:c6:2d:57:13:6d:ce:62:43:d0:eb:ba:a0:d4:
01:3a:be:a1:5c:1a:e2:a6:86:e1:9b:c3:d2:b4:e3:
5c:4c:96:eb:57:0a:4a:80:19:60:23:dc:51:8f:37:
a2:0b:a0:da:1a:17:97:f5:98:51:96:6f:43:22:5c:
8a:8a:7a:f1:61:32:94:18:f8:42:3c:ac:7e:0f:3f:
82:ab:37:4a:d3:24:23:f0:68:db:cb:89:28:71:28:
d6:3d:4e:94:f3:02:70:ce:af:ff:1a:80:49:fb:64:
93:79:f0:50:a3:38:f9:0e:97:d4:bc:29:a3:41:a6:
e9:fb:2d:cf:16:94:74:ee:4e:d6:9f:af:5f:9c:28:
c6:44:19:9f:07:31:c0:8c:cb:01:f8:c1:c6:ed:d2:
e4:e3:96:cb:05:e7:f3:ab:c4:d4:dd:91:53:8b:ad:
e2:1f:f1:44:61:d5:72:48:af:fa:ca:d2:19:99:6f:
36:c2:d5:5a:41:11:b4:10:ae:dd:ea:19:34:e1:3b:
af:67:e3:98:6d:e5:3f:b9:8f:55:ee:2a:6b:cb:d4:
0b:98:7d:37:28:9a:1f:c4:1c:70:c3:7b:3b:04:df:
d6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:45:9E:C6:FD:C8:E3:65:FE:74:DA:51:6C:F2:C2:F3:E6:8E:4D:45
X509v3 Authority Key Identifier:
keyid:AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:80:9e:61:fd:7d:a6:6b:6e:b8:c1:2d:c0:91:b8:69:48:d8:
4a:c8:b7:58:68:54:21:e0:d5:b9:e4:0d:3e:8c:88:72:17:c7:
2d:6d:84:d2:34:ef:e7:41:72:4e:15:b2:1c:2b:31:ce:96:e4:
b3:f8:fd:b7:16:3b:88:d5:6c:2f:d8:58:d5:37:53:33:43:b0:
57:f3:3c:45:0b:a9:a3:f6:fa:3a:77:af:bf:6d:94:40:fb:86:
ea:a7:ad:1e:50:bf:36:f4:c3:97:2b:a3:26:30:54:32:fd:e0:
50:88:60:6f:c5:a9:b0:18:5f:f8:79:35:fd:4c:95:e7:6d:3a:
75:b4:72:61:f2:b1:56:df:03:47:48:c4:50:dd:be:14:7e:a4:
1f:0c:2e:a5:3a:86:cd:ee:a1:55:2f:ec:e5:5c:5f:8a:bc:dc:
b2:65:89:90:ed:61:d3:85:53:fa:0a:a1:ae:6c:39:c6:41:37:
96:37:8e:9b:c7:4c:1f:88:cb:10:32:5a:7b:c3:03:f4:cd:7a:
ec:0d:6e:9a:6c:f4:74:7a:c4:64:19:f9:59:7b:92:9e:81:63:
61:e6:ac:13:ae:bf:88:96:51:95:f6:24:e1:ac:32:6d:a9:19:
ad:6c:5e:34:00:f9:63:dd:cf:84:e9:80:e3:a7:54:7c:0b:9f:
aa:25:97:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:45:29 2026 by rpki-client