
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
File: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft (raw, json)
Hash identifier: dktG2kSMk2IbF3PXm98JTsPyPwvRwAM9xNwbK1Cn/wU=
Subject key identifier: B7:89:EE:8C:B3:2C:F0:93:0C:02:16:90:4B:F1:F6:8B:A3:B4:4E:10
Authority key identifier: AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9
Certificate issuer: /CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
Certificate serial: 4898423939A654DE67228D666EAD29A8BA9F7DA5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
Manifest number: 96
Signing time: Tue 28 Jul 2026 20:27:41 +0000
Manifest this update: Tue 28 Jul 2026 20:22:41 +0000
Manifest next update: Wed 29 Jul 2026 21:53:41 +0000
Files and hashes: 1: 3130332e3136332e34362e302f32332d3234203d3e203538353139.roa (hash: tnfkAsqQvcqpL20P+LPe4F4kwN7iekWJ1PPQsYyrYg8=)
2: 3231312e3130312e3233322e302f32312d3234203d3e203538353139.roa (hash: iVNiE9bxsTL+DkppA0g1irY1nuYRs9Q3qr7qbEuyfxk=)
3: 3130332e33362e3232302e302f32322d3234203d3e203538353139.roa (hash: cpYrgo4yAI6Z4974RFpP1Ve2Wg+ZBptUjAdisTeBGyw=)
4: 3231312e3130312e3234342e302f32322d3234203d3e203538353139.roa (hash: /uXfkAccy3v3a9BHA09vw6dKcshdQs/6n+DUQ8IYKi8=)
5: 34332e3234302e3232302e302f32322d3234203d3e203538353139.roa (hash: vSeQnc0mmTH3jj/CmKx/qvwuVCC4G3xToac39RSw2JM=)
6: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl (hash: 7VMtebsNVg5h5T9QDt4SXdciyAOrbgbGbP6r45hGL8U=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:98:42:39:39:a6:54:de:67:22:8d:66:6e:ad:29:a8:ba:9f:7d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
Validity
Not Before: Jul 28 20:22:41 2026 GMT
Not After : Jul 29 21:53:41 2026 GMT
Subject: CN=B789EE8CB32CF0930C0216904BF1F68BA3B44E10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:29:a2:cb:34:bd:c7:5e:a2:dc:92:5d:1e:
b0:60:f5:33:98:6e:a7:57:2c:f4:33:d6:78:28:7c:
84:36:fa:cf:9c:4d:be:84:e0:7a:e9:5c:2f:81:81:
38:e5:49:0b:e7:fc:df:57:62:37:bf:4a:f8:8a:35:
a6:69:df:84:94:c3:85:99:65:f3:58:2d:ab:89:c5:
49:47:ea:46:0c:f1:83:08:36:15:ee:b1:11:1e:72:
28:7a:98:78:a3:ee:15:80:b7:7c:70:34:95:9f:92:
35:cf:a5:bf:5e:40:ac:3f:18:e5:d4:cd:6a:81:78:
d8:73:45:fe:dd:bd:bf:c9:82:43:9f:32:e2:22:0e:
d8:37:a6:94:54:98:8e:1c:1b:db:7c:32:e7:fc:a2:
33:94:ff:58:1b:60:2c:da:de:a7:9a:14:1a:b5:83:
f7:ef:0b:3d:0f:84:ac:7b:a3:24:2e:a3:e6:11:6b:
17:7a:5e:41:6d:66:06:62:82:c0:9e:4c:40:ce:8a:
d1:7b:d9:0e:90:00:40:42:bb:15:68:4e:dd:2b:2c:
86:41:c2:05:f9:62:64:35:cd:2f:ad:f0:8c:be:e6:
f7:9c:b1:1f:6b:c9:72:8f:cd:89:cf:3f:79:88:fb:
48:cd:09:45:3d:86:c7:56:29:74:bf:de:86:3b:a3:
19:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:89:EE:8C:B3:2C:F0:93:0C:02:16:90:4B:F1:F6:8B:A3:B4:4E:10
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e8:ee:95:04:8c:31:5c:f8:15:d6:0e:d4:df:76:b2:98:be:
1a:94:b2:46:11:6a:69:76:88:67:d7:7e:48:8c:08:fd:dd:45:
fc:0a:e0:06:cc:25:32:d5:8b:0b:3c:1c:d6:18:03:72:26:0d:
5e:a1:49:05:34:5f:10:63:61:dc:1d:44:10:4c:7b:a2:1c:e1:
ba:5c:45:21:41:1f:aa:8d:3e:3c:ed:76:72:ae:e9:df:f0:01:
39:2d:5a:ee:4c:58:be:ad:f2:59:10:cf:84:68:75:82:f2:a0:
8f:b7:41:ef:ea:3e:ee:65:36:e2:66:b5:92:62:da:24:75:e8:
85:7b:99:c3:1d:8a:23:f2:2e:9d:20:75:01:3e:05:db:4e:b8:
ff:b9:6d:5c:32:89:0b:b4:a0:5f:88:5f:59:8f:35:7f:76:08:
be:9b:6c:16:97:19:ab:74:f2:e0:43:2c:c1:11:36:6e:b3:3b:
46:c0:e4:42:1a:ce:45:c7:d1:3f:59:97:ca:75:d9:44:c7:d8:
ed:55:06:53:93:0b:c8:7f:88:91:10:e6:d4:ff:b7:f3:a6:a2:
88:9a:6f:fa:c5:8e:05:d2:17:e2:7e:e4:c5:21:32:31:86:f6:
89:1b:df:29:ce:f5:d7:cd:1a:fc:64:51:29:c7:a0:b5:3a:a6:
21:dc:ef:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:51:53 2026 by rpki-client