
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft
File: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft (raw, json)
Hash identifier: QIYr6Qd6BfrTsJI+6mH1ZtX6RPCxnX6bXQhsIfmwSvk=
Subject key identifier: C7:E3:55:F8:28:72:A7:B6:E3:40:09:33:DC:A0:D7:B2:97:1C:CF:E2
Authority key identifier: AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6
Certificate issuer: /CN=AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6
Certificate serial: 3DFA6F898B09AEC11EDEB8FDF7620BD8E21A2B85
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft
Manifest number: F9
Signing time: Fri 24 Jul 2026 19:26:57 +0000
Manifest this update: Fri 24 Jul 2026 19:21:57 +0000
Manifest next update: Sat 25 Jul 2026 22:47:57 +0000
Files and hashes: 1: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl (hash: gVRF9Z4NjbnVPowpgJHNUxIfLM0oMME0KDfxloD0MC0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 20:32:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:fa:6f:89:8b:09:ae:c1:1e:de:b8:fd:f7:62:0b:d8:e2:1a:2b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6
Validity
Not Before: Jul 24 19:21:57 2026 GMT
Not After : Jul 25 22:47:57 2026 GMT
Subject: CN=C7E355F82872A7B6E3400933DCA0D7B2971CCFE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:24:e0:ad:d5:03:92:e7:dc:fd:5d:4f:ed:26:
c3:f3:d9:ca:f6:11:7c:ce:c9:ef:f8:b4:4d:72:9c:
7c:86:63:ab:90:27:fa:98:c6:d6:08:fc:c6:fb:fa:
f2:7b:49:44:24:c3:f6:4d:04:81:d9:0b:7c:2f:20:
c6:0e:53:0b:e4:99:2c:94:ba:b1:38:dc:a2:c2:52:
bf:d2:41:78:b9:48:95:9f:40:d9:1f:9e:f4:be:66:
68:86:c1:ba:68:f6:01:d1:b5:4e:5e:e3:44:de:2f:
1d:f0:87:c2:3a:ba:f5:db:dd:bc:76:89:7a:d1:a1:
36:8f:68:95:da:b6:71:65:76:3a:07:a7:f8:67:13:
14:0b:a3:52:b4:25:90:39:34:86:c3:91:c3:13:97:
fb:9b:88:a9:f9:31:03:1c:70:a9:a4:3f:85:ad:f7:
63:49:01:46:fd:4a:5f:2f:ae:72:3e:63:be:85:99:
02:2e:51:e0:5c:f6:42:3e:2e:50:f6:76:77:f3:fa:
48:89:69:f2:6f:6e:8a:89:0d:2f:04:d8:0e:65:e8:
d8:98:fd:68:5e:d7:d7:14:fa:85:c3:eb:80:47:35:
9e:16:1f:ee:0b:8c:ff:89:8a:40:f3:8e:de:bb:53:
c8:5b:e4:b8:e7:ef:5c:de:28:63:70:b7:b4:0b:5c:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E3:55:F8:28:72:A7:B6:E3:40:09:33:DC:A0:D7:B2:97:1C:CF:E2
X509v3 Authority Key Identifier:
keyid:AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ce:db:ee:cf:76:ed:ff:f0:ff:2a:60:04:80:5b:94:30:ac:
16:8c:e0:cd:2d:57:46:34:fe:d3:15:e0:7d:0c:6d:71:89:29:
9d:fb:34:70:0b:16:66:4e:b4:c5:f6:c1:d5:a1:88:94:bb:d0:
f4:45:56:b9:a7:bf:36:79:54:02:9b:41:78:8b:e6:71:b6:c5:
0a:32:3c:a4:8d:28:f1:b4:26:ae:5b:64:41:58:d1:d9:0b:e9:
e6:4c:fd:4d:f7:0b:02:47:69:28:10:cd:6c:56:29:1a:f9:6d:
0a:35:51:a6:a1:84:b6:f7:27:35:15:44:38:b4:f1:bb:ef:8f:
56:1e:30:4e:ff:c5:b0:46:f9:cf:af:81:c2:d3:b1:ae:02:14:
35:06:8d:ef:23:31:19:23:81:04:8b:8f:1d:8b:08:fb:00:09:
bb:1e:60:b7:5d:cb:dd:97:b1:b3:71:9d:df:1b:e8:e5:d9:e9:
65:a8:f8:68:ad:ad:5c:d4:f0:71:16:db:80:56:28:0c:f3:63:
ce:33:4e:23:b6:24:bc:71:17:3e:ac:50:58:75:fb:76:65:90:
59:66:2b:ee:3e:c0:5c:9d:b8:cf:0f:ed:aa:4b:29:ba:d7:3c:
3e:c7:75:91:55:22:d8:3a:2f:20:01:28:1d:4a:1a:8b:c0:f3:
c1:48:1f:41
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUPfpviYsJrsEe3rj992IL2OIaK4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVFMTk5MUU2NjlBNkIwQzk3RThBMURDOUM5NjU3NTYz
QzFGNzNDNjAeFw0yNjA3MjQxOTIxNTdaFw0yNjA3MjUyMjQ3NTdaMDMxMTAvBgNV
BAMTKEM3RTM1NUY4Mjg3MkE3QjZFMzQwMDkzM0RDQTBEN0IyOTcxQ0NGRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaJOCt1QOS59z9XU/tJsPz2cr2
EXzOye/4tE1ynHyGY6uQJ/qYxtYI/Mb7+vJ7SUQkw/ZNBIHZC3wvIMYOUwvkmSyU
urE43KLCUr/SQXi5SJWfQNkfnvS+ZmiGwbpo9gHRtU5e40TeLx3wh8I6uvXb3bx2
iXrRoTaPaJXatnFldjoHp/hnExQLo1K0JZA5NIbDkcMTl/ubiKn5MQMccKmkP4Wt
92NJAUb9Sl8vrnI+Y76FmQIuUeBc9kI+LlD2dnfz+kiJafJvboqJDS8E2A5l6NiY
/Whe19cU+oXD64BHNZ4WH+4LjP+JikDzjt67U8hb5Ljn71zeKGNwt7QLXDOlAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUx+NV+Chyp7bjQAkz3KDXspccz+IwHwYDVR0j
BBgwFoAUruGZHmaaawyX6KHcnJZXVjwfc8YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODYxNTY4Mi8xL0FFRTE5OTFFNjY5QTZCMEM5N0U4QTFEQzlDOTY1
NzU2M0MxRjczQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQUVFMTk5MUU2NjlBNkIwQzk3RThBMURDOUM5NjU3NTYzQzFGNzNDNi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMS9BRUUxOTkxRTY2OUE2
QjBDOTdFOEExREM5Qzk2NTc1NjNDMUY3M0M2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWc7b7s927f/w
/ypgBIBblDCsFozgzS1XRjT+0xXgfQxtcYkpnfs0cAsWZk60xfbB1aGIlLvQ9EVW
uae/NnlUAptBeIvmcbbFCjI8pI0o8bQmrltkQVjR2Qvp5kz9TfcLAkdpKBDNbFYp
GvltCjVRpqGEtvcnNRVEOLTxu++PVh4wTv/FsEb5z6+BwtOxrgIUNQaN7yMxGSOB
BIuPHYsI+wAJux5gt13L3Zexs3Gd3xvo5dnpZaj4aK2tXNTwcRbbgFYoDPNjzjNO
I7YkvHEXPqxQWHX7dmWQWWYr7j7AXJ24zw/tqksputc8Psd1kVUi2DovIAEoHUoa
i8DzwUgfQQ==
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:11:39 2026 by rpki-client