
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
File: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft (raw, json)
Hash identifier: gD656sJUIHEtvtQRw92KfIHx+gXV1zi/lkTVrtfEQ+U=
Subject key identifier: 1D:71:67:2C:86:0F:8A:0A:59:1E:62:9D:5B:07:F9:85:67:AD:90:BC
Authority key identifier: AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9
Certificate issuer: /CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
Certificate serial: 589921AB8BBA110B6CE743EED8DC2B03B2FC9125
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
Manifest number: 5A
Signing time: Sat 13 Jun 2026 18:22:05 +0000
Manifest this update: Sat 13 Jun 2026 18:17:05 +0000
Manifest next update: Sun 14 Jun 2026 19:21:05 +0000
Files and hashes: 1: 34332e3234302e3232302e302f32322d3234203d3e203538353139.roa (hash: vSeQnc0mmTH3jj/CmKx/qvwuVCC4G3xToac39RSw2JM=)
2: 3231312e3130312e3234342e302f32322d3234203d3e203538353139.roa (hash: /uXfkAccy3v3a9BHA09vw6dKcshdQs/6n+DUQ8IYKi8=)
3: 3130332e3136332e34362e302f32332d3234203d3e203538353139.roa (hash: tnfkAsqQvcqpL20P+LPe4F4kwN7iekWJ1PPQsYyrYg8=)
4: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl (hash: RMO5P87KR59tDCTa7y2eK87wiuvZv9jbdcme1UZnP48=)
5: 3231312e3130312e3233322e302f32312d3234203d3e203538353139.roa (hash: iVNiE9bxsTL+DkppA0g1irY1nuYRs9Q3qr7qbEuyfxk=)
6: 3130332e33362e3232302e302f32322d3234203d3e203538353139.roa (hash: cpYrgo4yAI6Z4974RFpP1Ve2Wg+ZBptUjAdisTeBGyw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:99:21:ab:8b:ba:11:0b:6c:e7:43:ee:d8:dc:2b:03:b2:fc:91:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
Validity
Not Before: Jun 13 18:17:05 2026 GMT
Not After : Jun 14 19:21:05 2026 GMT
Subject: CN=1D71672C860F8A0A591E629D5B07F98567AD90BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2e:cc:a7:4e:4c:7a:23:af:fa:cc:d0:c3:17:
b3:4c:bd:18:20:6c:1b:15:26:0c:a8:d7:b2:cf:98:
34:45:1d:d5:6e:a5:6a:bd:fe:fa:af:ee:ad:ae:ce:
97:bf:72:2f:15:d8:2d:f4:aa:78:96:5c:49:15:c7:
db:12:c3:93:fb:19:29:9b:51:95:d0:dd:2c:ea:97:
8c:9c:3d:d9:1e:ac:2b:da:12:be:cf:c5:39:b5:8f:
c0:5e:f5:00:94:a4:56:b5:ab:a4:ae:27:80:63:d5:
dd:14:e9:69:6f:a5:03:dd:58:1d:fe:a6:75:8e:43:
27:19:4e:95:7f:19:4d:e5:bd:7c:32:98:4e:e5:44:
f8:9b:f5:44:e6:a9:1b:35:a2:f0:5e:9d:7d:24:50:
e7:e8:85:fa:98:2f:f9:b3:2f:06:54:c9:1a:3f:8a:
78:86:b1:94:b5:d2:25:26:83:ef:e0:79:4e:a9:36:
7a:88:5a:17:fa:db:d7:cc:11:95:95:6c:44:6c:db:
0c:d1:ac:e7:e8:f9:85:23:01:f3:64:87:da:99:0d:
67:ce:c2:86:0b:f0:1f:84:e2:f4:c6:c4:cb:70:24:
be:f3:ee:af:19:33:c5:ca:95:d2:38:c5:90:4c:af:
77:18:62:95:67:f9:59:53:9b:4e:30:26:c4:ac:ed:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:71:67:2C:86:0F:8A:0A:59:1E:62:9D:5B:07:F9:85:67:AD:90:BC
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1e:4c:48:6a:53:a1:f9:b6:1a:44:68:d1:ae:aa:03:5d:1a:
c3:d9:98:c8:80:11:83:be:9d:8c:ed:3b:33:39:fb:50:16:f7:
b0:dd:30:90:b8:78:9a:7e:9e:76:03:0d:f0:fa:03:51:41:d4:
47:33:68:81:53:ac:a2:84:76:aa:2a:2c:60:76:07:85:5c:70:
8f:65:58:5f:4c:be:67:d6:b4:ad:73:ae:38:e5:be:d7:70:2e:
1a:36:d3:46:b6:37:e1:1d:95:79:ac:0c:54:e7:c7:2b:56:95:
31:09:53:e8:32:e0:0b:ea:7c:e3:7a:ba:5c:1d:fe:58:38:15:
ad:f8:2d:2c:db:85:59:23:1a:78:de:8c:42:7b:b0:da:42:60:
ff:1d:b8:32:fd:70:a8:74:50:c7:5f:1c:41:92:27:7e:a2:97:
bb:84:9c:a8:a0:97:05:56:e3:07:07:d6:57:8a:23:74:c7:77:
12:e4:6f:00:39:83:fe:fc:7e:79:3e:7a:40:be:a3:42:ca:0d:
22:f8:5d:3c:ef:2c:00:67:8d:09:df:56:26:7b:e0:89:68:65:
ee:fe:ff:fe:a3:7d:82:1f:c5:e2:33:be:9e:14:12:d9:cf:9c:
5a:a4:e2:ed:42:23:1a:44:de:ca:7e:06:84:81:76:93:5a:d9:
6e:13:df:73
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUWJkhq4u6EQts50Pu2NwrA7L8kSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU0QUQyN0QzM0Y5RDY0QjdGQTIxODRDNkMwMzBBN0I4
MDkxRTlFOTAeFw0yNjA2MTMxODE3MDVaFw0yNjA2MTQxOTIxMDVaMDMxMTAvBgNV
BAMTKDFENzE2NzJDODYwRjhBMEE1OTFFNjI5RDVCMDdGOTg1NjdBRDkwQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDULsynTkx6I6/6zNDDF7NMvRgg
bBsVJgyo17LPmDRFHdVupWq9/vqv7q2uzpe/ci8V2C30qniWXEkVx9sSw5P7GSmb
UZXQ3Szql4ycPdkerCvaEr7PxTm1j8Be9QCUpFa1q6SuJ4Bj1d0U6WlvpQPdWB3+
pnWOQycZTpV/GU3lvXwymE7lRPib9UTmqRs1ovBenX0kUOfohfqYL/mzLwZUyRo/
iniGsZS10iUmg+/geU6pNnqIWhf629fMEZWVbERs2wzRrOfo+YUjAfNkh9qZDWfO
woYL8B+E4vTGxMtwJL7z7q8ZM8XKldI4xZBMr3cYYpVn+VlTm04wJsSs7TXJAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUHXFnLIYPigpZHmKdWwf5hWetkLwwHwYDVR0j
BBgwFoAUrkrSfTP51kt/ohhMbAMKe4CR6ekwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDQ4ODgyMjY4NDU4MTg5MC8wL0FFNEFEMjdEMzNGOUQ2NEI3RkEyMTg0QzZDMDMw
QTdCODA5MUU5RTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUU0QUQyN0QzM0Y5RDY0QjdGQTIxODRDNkMwMzBBN0I4MDkxRTlFOS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ0ODg4MjI2ODQ1ODE4OTAvMC9BRTRBRDI3RDMzRjlE
NjRCN0ZBMjE4NEM2QzAzMEE3QjgwOTFFOUU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYx5MSGpTofm2
GkRo0a6qA10aw9mYyIARg76djO07Mzn7UBb3sN0wkLh4mn6edgMN8PoDUUHURzNo
gVOsooR2qiosYHYHhVxwj2VYX0y+Z9a0rXOuOOW+13AuGjbTRrY34R2VeawMVOfH
K1aVMQlT6DLgC+p843q6XB3+WDgVrfgtLNuFWSMaeN6MQnuw2kJg/x24Mv1wqHRQ
x18cQZInfqKXu4ScqKCXBVbjBwfWV4ojdMd3EuRvADmD/vx+eT56QL6jQsoNIvhd
PO8sAGeNCd9WJnvgiWhl7v7//qN9gh/F4jO+nhQS2c+cWqTi7UIjGkTeyn4GhIF2
k1rZbhPfcw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:03:19 2026 by rpki-client