
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
File: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft (raw, json)
Hash identifier: nEHPeVW5e/fkKlxYs9diRUn8gcxnNaZ1fhgWUg1dOII=
Subject key identifier: FE:0F:D1:2D:CD:C4:DD:B1:00:F7:F2:11:BB:72:2A:1A:95:FF:35:ED
Authority key identifier: AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9
Certificate issuer: /CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
Certificate serial: 3D1AA0717F80B73D2EF25CA48FB3905291E3C9C3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
Manifest number: D3
Signing time: Sun 11 Oct 2026 16:00:42 +0000
Manifest this update: Sun 11 Oct 2026 15:55:42 +0000
Manifest next update: Wed 14 Oct 2026 22:08:42 +0000
Files and hashes: 1: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl (hash: TIYuSth+P697AWrEBTsR9Lbe6LO30j+cI6Vyt44i63A=)
2: 3130332e33362e3232302e302f32322d3234203d3e203538353139.roa (hash: cpYrgo4yAI6Z4974RFpP1Ve2Wg+ZBptUjAdisTeBGyw=)
3: 3130332e3136332e34362e302f32332d3234203d3e203538353139.roa (hash: tnfkAsqQvcqpL20P+LPe4F4kwN7iekWJ1PPQsYyrYg8=)
4: 3231312e3130312e3234342e302f32322d3234203d3e203538353139.roa (hash: /uXfkAccy3v3a9BHA09vw6dKcshdQs/6n+DUQ8IYKi8=)
5: 34332e3234302e3232302e302f32322d3234203d3e203538353139.roa (hash: vSeQnc0mmTH3jj/CmKx/qvwuVCC4G3xToac39RSw2JM=)
6: 3231312e3130312e3233322e302f32312d3234203d3e203538353139.roa (hash: iVNiE9bxsTL+DkppA0g1irY1nuYRs9Q3qr7qbEuyfxk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 22:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:1a:a0:71:7f:80:b7:3d:2e:f2:5c:a4:8f:b3:90:52:91:e3:c9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
Validity
Not Before: Oct 11 15:55:42 2026 GMT
Not After : Oct 14 22:08:42 2026 GMT
Subject: CN=FE0FD12DCDC4DDB100F7F211BB722A1A95FF35ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:98:89:36:0b:00:ef:3c:94:d4:59:1a:f5:11:
f2:ff:2a:26:4e:77:56:00:9a:76:7a:17:bd:0a:f2:
b2:4f:71:79:97:9d:8f:d7:00:cd:b7:29:93:e8:8f:
e8:da:fd:bc:b6:cb:2f:0f:80:4e:6a:a7:23:73:97:
bc:48:07:53:c5:b5:40:3c:60:95:48:26:5b:24:15:
ef:e8:bf:0c:2d:92:2d:ab:f1:a3:9a:bb:77:a7:91:
95:78:a1:f8:e8:8a:36:91:6a:7f:a3:54:76:86:d7:
75:08:bf:64:63:0c:16:0f:78:6f:24:b6:90:19:9a:
71:9c:41:41:22:ce:3a:3d:15:fd:b8:ca:86:4b:79:
1b:52:ae:e5:34:2c:aa:27:c3:cf:71:9d:d9:8b:50:
de:af:f8:1e:09:16:3b:9d:30:80:2b:c0:b7:c7:63:
c3:72:d3:96:4a:b2:6d:21:09:50:2c:49:08:a5:bc:
8a:8a:c4:7b:8f:1a:af:e0:25:8b:1e:44:27:e1:c7:
7e:d1:29:91:cd:01:83:95:02:53:08:fe:3e:71:7d:
af:58:54:a4:1d:47:3a:88:f1:1c:03:d4:05:30:52:
41:6e:24:f9:55:7c:09:2d:32:ae:75:43:51:49:2f:
27:34:d6:c9:3b:a5:5c:d2:b7:f6:ab:3e:f0:34:51:
4c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0F:D1:2D:CD:C4:DD:B1:00:F7:F2:11:BB:72:2A:1A:95:FF:35:ED
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:46:1d:52:fb:09:e7:f8:f1:61:8d:e6:f0:ed:a4:ad:7a:5a:
3a:50:15:6c:c0:b7:90:5b:09:a7:1c:22:27:d4:07:8f:f1:f1:
30:1e:3d:bb:65:4f:fd:57:8f:86:aa:96:6c:82:08:22:b0:df:
eb:76:7d:10:db:ca:da:13:f7:47:87:6a:2c:fd:3b:d1:56:78:
2c:b6:d1:d5:c0:a2:d0:31:d1:63:6e:59:9a:32:38:fc:93:22:
76:42:11:2d:5d:2c:66:f8:57:35:70:64:52:e8:6f:48:79:5c:
1b:18:4c:89:75:9d:27:d5:ba:73:92:fc:c7:e3:0e:3c:56:d1:
a0:95:15:34:81:57:45:5c:8d:4b:58:f5:e4:cd:29:de:c9:ef:
fa:da:15:74:33:19:0a:81:79:fb:e2:4e:e8:38:be:91:8c:f3:
38:27:08:3e:4f:68:91:4b:5e:04:aa:d9:42:9b:d5:9e:36:7e:
85:d9:96:78:ad:d1:29:54:58:15:ad:0c:c6:bf:06:4c:c3:f4:
a4:e2:c8:f9:b5:c2:ea:d9:c7:7e:f7:2a:56:05:00:14:17:c9:
ca:f7:47:d9:35:33:17:e0:59:37:ca:50:12:f0:ac:0e:81:3e:
8e:67:98:6b:61:b0:be:d9:26:14:5b:9d:e2:e2:28:89:ee:f5:
fa:42:12:b2
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUPRqgcX+Atz0u8lykj7OQUpHjycMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU0QUQyN0QzM0Y5RDY0QjdGQTIxODRDNkMwMzBBN0I4
MDkxRTlFOTAeFw0yNjEwMTExNTU1NDJaFw0yNjEwMTQyMjA4NDJaMDMxMTAvBgNV
BAMTKEZFMEZEMTJEQ0RDNEREQjEwMEY3RjIxMUJCNzIyQTFBOTVGRjM1RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmIk2CwDvPJTUWRr1EfL/KiZO
d1YAmnZ6F70K8rJPcXmXnY/XAM23KZPoj+ja/by2yy8PgE5qpyNzl7xIB1PFtUA8
YJVIJlskFe/ovwwtki2r8aOau3enkZV4ofjoijaRan+jVHaG13UIv2RjDBYPeG8k
tpAZmnGcQUEizjo9Ff24yoZLeRtSruU0LKonw89xndmLUN6v+B4JFjudMIArwLfH
Y8Ny05ZKsm0hCVAsSQilvIqKxHuPGq/gJYseRCfhx37RKZHNAYOVAlMI/j5xfa9Y
VKQdRzqI8RwD1AUwUkFuJPlVfAktMq51Q1FJLyc01sk7pVzSt/arPvA0UUxBAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU/g/RLc3E3bEA9/IRu3IqGpX/Ne0wHwYDVR0j
BBgwFoAUrkrSfTP51kt/ohhMbAMKe4CR6ekwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDQ4ODgyMjY4NDU4MTg5MC8wL0FFNEFEMjdEMzNGOUQ2NEI3RkEyMTg0QzZDMDMw
QTdCODA5MUU5RTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUU0QUQyN0QzM0Y5RDY0QjdGQTIxODRDNkMwMzBBN0I4MDkxRTlFOS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ0ODg4MjI2ODQ1ODE4OTAvMC9BRTRBRDI3RDMzRjlE
NjRCN0ZBMjE4NEM2QzAzMEE3QjgwOTFFOUU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUYdUvsJ5/jx
YY3m8O2krXpaOlAVbMC3kFsJpxwiJ9QHj/HxMB49u2VP/VePhqqWbIIIIrDf63Z9
ENvK2hP3R4dqLP070VZ4LLbR1cCi0DHRY25ZmjI4/JMidkIRLV0sZvhXNXBkUuhv
SHlcGxhMiXWdJ9W6c5L8x+MOPFbRoJUVNIFXRVyNS1j15M0p3snv+toVdDMZCoF5
++JO6Di+kYzzOCcIPk9okUteBKrZQpvVnjZ+hdmWeK3RKVRYFa0Mxr8GTMP0pOLI
+bXC6tnHfvcqVgUAFBfJyvdH2TUzF+BZN8pQEvCsDoE+jmeYa2GwvtkmFFud4uIo
ie71+kISsg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 16:13:23 2026 by rpki-client