
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft
File: AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft (raw, json)
Hash identifier: gnPfmMjIE14Tt3VmfS+NVRmFfuGE9F3GI+PC+3g0oeI=
Subject key identifier: 19:E9:03:CF:50:21:EA:E1:D4:15:60:77:EA:58:20:B9:B1:C1:0E:A3
Authority key identifier: AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3
Certificate issuer: /CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3
Certificate serial: 78B9638697E4F05AF7D23434B9063DD7C676E9F4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft
Manifest number: 25
Signing time: Sat 13 Jun 2026 10:16:44 +0000
Manifest this update: Sat 13 Jun 2026 10:11:44 +0000
Manifest next update: Sun 14 Jun 2026 12:14:44 +0000
Files and hashes: 1: AS0.roa (hash: Tnh8WMSLJSGCaAxb/VZeyXb0gUX1GKQVaIvE4qh0adg=)
2: AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl (hash: gzi9Y+X0spVft+BH/tu1IAkZRRlSe5RYPyMQ+E2/LqU=)
3: AS4847.roa (hash: x6CsxrXJP/tLvJGx1fHtjAL40INQgOCEUORhIbque/Q=)
4: AS4808.roa (hash: TPs4K1IwuFBCZlPJPwsrxBKlLQX+ki67IEXGfZAOXrc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl
rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b9:63:86:97:e4:f0:5a:f7:d2:34:34:b9:06:3d:d7:c6:76:e9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3
Validity
Not Before: Jun 13 10:11:44 2026 GMT
Not After : Jun 14 12:14:44 2026 GMT
Subject: CN=19E903CF5021EAE1D4156077EA5820B9B1C10EA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:2e:9b:df:84:97:00:e8:f9:9e:29:73:06:
46:f2:5d:f3:3f:a7:6f:48:b9:1c:f7:46:6c:b3:33:
de:bb:ef:88:0a:97:52:94:39:b2:cb:7f:fc:6b:85:
49:df:6c:7e:0f:8f:df:a7:2a:98:fa:b8:6d:b4:84:
35:4a:d6:17:cc:d6:a2:e4:30:2f:89:f0:49:e4:58:
34:e8:fc:49:b7:a2:37:e6:26:23:68:21:62:08:c9:
80:aa:33:3c:6c:a9:75:20:7b:78:21:de:25:44:fb:
67:a2:5f:74:b1:23:fb:dd:57:87:8e:c1:99:cc:6e:
bf:3b:7a:54:ab:e8:9a:5b:8c:04:bb:e7:58:d7:c2:
08:38:31:26:f9:38:4e:fb:7a:36:91:6c:97:07:8c:
be:48:ae:ba:98:21:26:c2:ea:90:f6:84:8b:9d:4e:
d7:a5:a9:70:82:49:b9:59:68:3e:a9:9f:70:8c:ac:
32:47:cb:08:1d:de:3a:47:8d:ff:b4:88:5d:17:20:
4a:f4:0f:1d:de:0f:ae:e6:d7:9d:e7:8c:e8:ad:cf:
53:49:8f:66:69:5f:c6:24:45:72:93:7f:41:cb:28:
d1:7a:e5:8b:2e:97:47:48:1c:b2:74:d1:2b:aa:77:
87:04:e8:15:66:63:6d:1b:db:08:30:70:5b:87:1c:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E9:03:CF:50:21:EA:E1:D4:15:60:77:EA:58:20:B9:B1:C1:0E:A3
X509v3 Authority Key Identifier:
keyid:AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2b:55:1b:4d:e0:f0:46:22:6e:91:97:19:2e:98:d2:9c:83:
c1:59:53:f1:41:6b:b8:9b:92:71:bc:24:70:d1:88:00:f1:81:
93:dc:8d:a9:e4:28:1d:4b:51:05:60:54:73:a8:e9:f7:46:2c:
c4:9a:f2:5e:21:a7:f6:7c:ea:46:12:8b:0f:eb:df:e2:c3:0a:
35:9b:aa:6b:be:3d:b8:8a:27:0c:f0:0c:5e:5c:29:c2:2b:3f:
00:da:c6:7b:bb:4f:6b:b7:27:38:4d:5a:0d:ec:75:2a:0b:f5:
e8:18:54:b7:0d:06:be:1f:f6:5f:23:72:06:8d:51:11:64:dd:
66:47:cf:ab:1e:64:ff:d4:9c:2f:04:ba:93:49:87:84:4d:7a:
1c:c4:88:5c:ac:78:f9:79:60:67:ca:42:30:a1:63:2e:e9:14:
d3:7f:79:f4:f2:51:5d:75:1a:7e:40:57:03:99:24:68:54:61:
1a:c8:b4:9e:f5:87:bd:1b:5b:9e:1d:26:60:a9:02:ff:c2:1a:
e0:b4:05:fd:62:9a:e3:30:01:44:e2:0d:33:57:81:5a:8b:71:
78:33:84:b5:dc:eb:f6:3d:a0:88:80:b6:8d:6a:85:79:99:38:
ed:30:d4:46:6f:ef:81:ce:d9:76:2c:e5:10:87:b5:86:d7:ea:
0d:7d:31:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:04:52 2026 by rpki-client