
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
File: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft (raw, json)
Hash identifier: QHYOcuJtCMQ+jDINcsgQAQNqNI7uV9s3wRP9OaU1U5k=
Subject key identifier: 00:84:61:8D:EA:B5:0E:57:1D:43:D4:A2:21:FE:E7:E1:5C:0E:30:9F
Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Certificate serial: 7075DC8977B4513A79CFCC9205FADD9DD285A66F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
Manifest number: 6A
Signing time: Tue 28 Jul 2026 13:16:51 +0000
Manifest this update: Tue 28 Jul 2026 13:11:51 +0000
Manifest next update: Wed 29 Jul 2026 15:05:51 +0000
Files and hashes: 1: 323430323a616663303a3a2f33322d3332203d3e2034363131.roa (hash: f3GHixVb1HwjhyVU8K4swaXzIGI0Hioddav5kM0XXUw=)
2: 3130332e36362e33342e302f32342d3234203d3e2034363131.roa (hash: tjZDTuEgQlRXpFbbaG0NArZJgDuaiVOSE05Z7p9qiAI=)
3: 3130332e36362e33352e302f32342d3234203d3e2034363131.roa (hash: gY+qMgWgJvHs6SDZmlGFp+AAc3uGBrjBkD6f9uzt130=)
4: 3230322e3132332e3130372e302f32342d3234203d3e2034363131.roa (hash: 3tbE64n/dii7GNRtLZg5K6aHAbP1egLJB2VvyhZEfFU=)
5: 3230322e3132332e3131302e302f32342d3234203d3e2034363131.roa (hash: 155iifkZEs6RHAaqhrEQCAQN53twEduDtnNVPAqFrTI=)
6: 3130332e3232382e3133392e302f32342d3234203d3e2034363131.roa (hash: QdeAkUPnqLpZiSPqBIxzU0fpw+Eqvq8f9jvgOeoo9mg=)
7: 3130332e3232382e3133372e302f32342d3234203d3e2034363131.roa (hash: QQ4ATBeNE3ml6YUNfv/6tpe2Kv/BmFijIHp4Rv9IGTo=)
8: 3130332e3232382e3133382e302f32342d3234203d3e2034363131.roa (hash: yTCamlVpkLTaQtiao0McbVEofmqZPgYyOVfZcUXNIMg=)
9: 3130332e36362e33322e302f32342d3234203d3e2034363131.roa (hash: pGPnNL8I17M9sBQn6scU0wF53hsmAZju26aVp9ckSkQ=)
10: 3230332e3139322e382e302f32342d3234203d3e2034363131.roa (hash: ExwddNKPU24UIMMf46gIGo0/55R/RolIT8ID+4HvTfo=)
11: 3230332e3139322e322e302f32342d3234203d3e2034363131.roa (hash: 5kRdUKU+ZXXchqJyoqf+wUpdIG1fnufxQH0iQlauhG0=)
12: 3230332e3139322e312e302f32342d3234203d3e2034363131.roa (hash: 0KdLEVUiybk5V4n+f+0dKRmU6UVh7v523bGbqNGXd8I=)
13: 3230332e3139322e392e302f32342d3234203d3e2034363131.roa (hash: Uy+BapU0I48WC0bWQ2ZydXi48JznYrjW62PXNe53HUM=)
14: 3130332e36362e33332e302f32342d3234203d3e2034363131.roa (hash: n5yRgo6J2D5FtGrXkvOOKqNrGph1QpbzvpT/k6W4Gyg=)
15: 3230332e3139322e362e302f32342d3234203d3e2034363131.roa (hash: CRUJkzzmVRsaFDZOKPvn/CRKcvAx+oeYntLvx9WwCyk=)
16: 3230332e3139322e342e302f32342d3234203d3e2034363131.roa (hash: 17kgFGc3cSe7uHyaAKqp7oAC5dXyj9elPuMYbCDiwxE=)
17: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl (hash: qaeXXzXmWBlRvBO32Fm/lP2/TljZkSFsFKcMecgiymY=)
18: 3230332e3139322e31302e302f32342d3234203d3e2034363131.roa (hash: B5g+2JRh5TgR/UTOSPrdbR+qCyH6GJDVipqqxDIoaCk=)
19: 3130332e3232382e3133362e302f32342d3234203d3e2034363131.roa (hash: gi5/C7Ig+PLVimVU9eNIn1aKpNA5wgBO2EvkhiKLFtQ=)
20: 3230332e3139322e372e302f32342d3234203d3e2034363131.roa (hash: SDHyN9XXrw0odzkF0QeNY9cKYZ9QdH1ieH7qxu1iHl8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:75:dc:89:77:b4:51:3a:79:cf:cc:92:05:fa:dd:9d:d2:85:a6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Validity
Not Before: Jul 28 13:11:51 2026 GMT
Not After : Jul 29 15:05:51 2026 GMT
Subject: CN=0084618DEAB50E571D43D4A221FEE7E15C0E309F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:b3:20:7d:05:74:1a:4c:b0:6d:9e:81:b4:
2d:06:17:30:e3:87:ed:a9:01:ec:84:08:3e:84:35:
72:67:8c:42:4c:74:24:7f:6d:dc:ce:d1:f0:ec:03:
ba:f4:b8:fd:b2:5e:2f:36:8a:92:57:8f:cc:83:75:
98:f2:a3:0d:ab:2d:08:6e:7f:63:d0:fa:46:83:30:
9f:d0:08:0c:48:03:36:e5:50:e9:42:7f:36:cf:15:
c4:09:be:c6:a2:89:e2:32:e6:97:f0:e3:40:62:41:
ef:9e:32:c6:f0:82:46:b8:bc:9e:65:42:47:4c:54:
c4:6b:9a:9e:48:07:a5:0c:57:d3:38:89:d9:06:83:
9a:c9:4b:5a:f1:97:fb:a8:5c:fa:fd:2e:f5:32:41:
c3:f7:0a:ac:0f:5b:5e:77:90:b2:2a:3b:a1:4f:95:
34:ac:52:51:15:26:08:a3:96:4e:c2:f7:42:c8:2a:
c1:76:07:37:43:78:9c:30:6c:62:e1:e2:4e:12:2e:
2b:c2:2e:bb:eb:14:ad:9f:1c:80:ca:f8:be:8e:d7:
ba:42:3b:00:38:98:cb:19:97:8e:66:9a:ee:cf:4a:
c1:dc:b7:9a:5b:4e:43:06:d8:cb:ed:ab:21:e8:db:
b8:dd:cb:ce:9d:3f:60:b2:32:5c:72:a8:52:62:51:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:84:61:8D:EA:B5:0E:57:1D:43:D4:A2:21:FE:E7:E1:5C:0E:30:9F
X509v3 Authority Key Identifier:
keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:70:dd:71:0c:7b:28:42:ad:88:a3:05:6f:cc:65:41:a1:8f:
1a:57:82:53:89:30:13:3f:a2:cc:3e:4a:a1:c9:c0:af:4c:a0:
8c:39:62:9e:c9:6f:6a:c3:38:33:d7:e9:d5:f2:2b:77:85:90:
3c:7b:c5:fa:93:a4:c2:ba:61:1a:91:5d:68:64:21:56:c2:28:
94:78:77:61:e2:1d:3a:7c:4d:ab:01:b1:5d:bf:0e:49:c9:f0:
09:f3:be:75:be:06:d1:6e:85:cf:fe:ec:ae:46:11:8e:ef:ac:
de:61:13:26:1d:3a:b9:f6:4f:05:86:f2:2b:23:22:60:0c:ae:
2e:10:41:99:72:21:20:08:67:ff:7a:7d:e0:50:ce:c2:c7:d7:
84:29:d0:48:39:11:53:4f:08:cd:3a:1e:7a:ad:66:f4:fb:c5:
d1:45:51:b1:bf:19:7e:26:94:48:08:4c:97:34:8f:69:4c:32:
6f:04:28:4c:2a:22:9f:c5:aa:4d:78:37:4a:73:17:14:5d:d0:
b2:55:4f:b2:fc:b0:a4:0b:71:66:b3:4a:13:28:b7:33:2a:6f:
92:84:08:90:af:33:30:af:a3:56:67:ed:47:96:ba:a1:05:f2:
7f:8a:72:cf:e0:b9:fe:a7:dd:ec:9e:ec:9d:24:c4:be:bd:19:
07:5e:fc:ea
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUcHXciXe0UTp5z8ySBfrdndKFpm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJD
QUREMEFGQjAeFw0yNjA3MjgxMzExNTFaFw0yNjA3MjkxNTA1NTFaMDMxMTAvBgNV
BAMTKDAwODQ2MThERUFCNTBFNTcxRDQzRDRBMjIxRkVFN0UxNUMwRTMwOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn9bMgfQV0GkywbZ6BtC0GFzDj
h+2pAeyECD6ENXJnjEJMdCR/bdzO0fDsA7r0uP2yXi82ipJXj8yDdZjyow2rLQhu
f2PQ+kaDMJ/QCAxIAzblUOlCfzbPFcQJvsaiieIy5pfw40BiQe+eMsbwgka4vJ5l
QkdMVMRrmp5IB6UMV9M4idkGg5rJS1rxl/uoXPr9LvUyQcP3CqwPW153kLIqO6FP
lTSsUlEVJgijlk7C90LIKsF2BzdDeJwwbGLh4k4SLivCLrvrFK2fHIDK+L6O17pC
OwA4mMsZl45mmu7PSsHct5pbTkMG2MvtqyHo27jdy86dP2CyMlxyqFJiUblJAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUAIRhjeq1DlcdQ9SiIf7n4VwOMJ8wHwYDVR0j
BBgwFoAUSvXdk5jrwz6gyuBB1/Uu4srdCvswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjM5ODM4ODE4NzgyNDE0Ny8wLzRBRjVERDkzOThFQkMzM0VBMENBRTA0MUQ3RjUy
RUUyQ0FERDBBRkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJDQUREMEFGQi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDYzOTgzODgxODc4MjQxNDcvMC80QUY1REQ5Mzk4RUJD
MzNFQTBDQUUwNDFEN0Y1MkVFMkNBREQwQUZCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXDdcQx7KEKt
iKMFb8xlQaGPGleCU4kwEz+izD5KocnAr0ygjDlinslvasM4M9fp1fIrd4WQPHvF
+pOkwrphGpFdaGQhVsIolHh3YeIdOnxNqwGxXb8OScnwCfO+db4G0W6Fz/7srkYR
ju+s3mETJh06ufZPBYbyKyMiYAyuLhBBmXIhIAhn/3p94FDOwsfXhCnQSDkRU08I
zToeeq1m9PvF0UVRsb8ZfiaUSAhMlzSPaUwybwQoTCoin8WqTXg3SnMXFF3QslVP
svywpAtxZrNKEyi3MypvkoQIkK8zMK+jVmftR5a6oQXyf4pyz+C5/qfd7J7snSTE
vr0ZB1786g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:57:06 2026 by rpki-client