
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
File: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft (raw, json)
Hash identifier: w5Q6hmPgqeeJEFkf4DDVdeIfFbvQ3LqcfA7JY7bcE2E=
Subject key identifier: AC:48:F2:84:9B:32:71:50:CF:32:FE:28:2E:1C:F1:3C:D3:DF:36:37
Authority key identifier: AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9
Certificate issuer: /CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
Certificate serial: 50BE0C53B17ED1C8A945D56BF0A6C5E8A48CA666
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
Manifest number: 91
Signing time: Fri 24 Jul 2026 20:37:04 +0000
Manifest this update: Fri 24 Jul 2026 20:32:04 +0000
Manifest next update: Sat 25 Jul 2026 23:06:04 +0000
Files and hashes: 1: 34332e3234302e3232302e302f32322d3234203d3e203538353139.roa (hash: vSeQnc0mmTH3jj/CmKx/qvwuVCC4G3xToac39RSw2JM=)
2: 3130332e33362e3232302e302f32322d3234203d3e203538353139.roa (hash: cpYrgo4yAI6Z4974RFpP1Ve2Wg+ZBptUjAdisTeBGyw=)
3: 3231312e3130312e3233322e302f32312d3234203d3e203538353139.roa (hash: iVNiE9bxsTL+DkppA0g1irY1nuYRs9Q3qr7qbEuyfxk=)
4: 3130332e3136332e34362e302f32332d3234203d3e203538353139.roa (hash: tnfkAsqQvcqpL20P+LPe4F4kwN7iekWJ1PPQsYyrYg8=)
5: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl (hash: qhNFmtbzmJtUbMDRtLpYSM5UyiBvTPoNvwroAtBTZqU=)
6: 3231312e3130312e3234342e302f32322d3234203d3e203538353139.roa (hash: /uXfkAccy3v3a9BHA09vw6dKcshdQs/6n+DUQ8IYKi8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 22:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:be:0c:53:b1:7e:d1:c8:a9:45:d5:6b:f0:a6:c5:e8:a4:8c:a6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
Validity
Not Before: Jul 24 20:32:04 2026 GMT
Not After : Jul 25 23:06:04 2026 GMT
Subject: CN=AC48F2849B327150CF32FE282E1CF13CD3DF3637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:37:26:6e:09:64:ae:f3:43:35:b4:e2:8a:
5e:e8:bd:a4:b2:c4:3d:98:ca:05:5d:09:fd:c4:2c:
ac:1c:94:55:b5:64:a7:05:7f:bf:4b:ea:04:c3:e3:
1f:57:20:df:f4:ff:ee:33:2a:3f:1e:a0:e1:a1:35:
b6:0a:0e:a7:8c:82:d9:52:36:04:a0:07:f3:3c:2e:
55:1d:66:ef:7a:a8:f2:f6:76:9e:50:63:c6:37:07:
e1:16:72:82:35:0f:e2:c4:7c:87:0d:5c:73:70:7d:
02:b6:97:0b:1a:49:3d:a9:ce:a8:7f:49:93:38:d0:
2e:a4:ef:ab:3b:9f:da:55:5a:28:37:a3:16:73:19:
51:6a:9b:a0:c7:45:3a:c4:3b:a1:e0:55:99:a2:3b:
10:2f:de:1f:52:7b:93:9f:10:b3:9c:bb:08:42:81:
7a:0b:35:85:46:5b:72:29:7a:c2:4f:33:e7:80:04:
f1:14:d2:86:73:52:3f:cf:71:50:79:9b:19:ad:4d:
19:c6:d8:63:ae:bc:ec:20:ea:5b:b7:ec:48:9a:3b:
c0:03:a8:4e:1c:f1:83:dd:42:40:2e:02:26:5d:79:
2c:ef:26:c1:4b:ba:58:ca:4b:03:1b:f3:e8:1f:34:
73:69:2e:ed:5c:19:18:cc:17:79:fe:0a:57:dc:4e:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:48:F2:84:9B:32:71:50:CF:32:FE:28:2E:1C:F1:3C:D3:DF:36:37
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:38:a3:fb:47:31:1d:ae:6c:47:94:0d:c3:1c:12:48:ab:19:
d3:bf:b3:26:1d:15:14:ff:ff:1d:e2:88:33:27:15:b4:e6:24:
58:07:2d:6b:47:24:2a:83:95:93:64:09:68:78:e5:a4:de:b4:
6d:66:2f:80:2c:3e:f3:c8:bc:80:50:a5:61:00:70:94:57:99:
f4:e2:63:03:62:7b:7e:a4:4a:3e:64:5a:a8:6c:c5:db:b3:b3:
ea:af:42:ef:cc:46:b2:4b:b8:18:58:e7:52:52:92:58:71:c1:
59:c8:11:8b:3f:1f:2e:d5:c0:13:38:aa:20:1a:a4:8a:e0:27:
99:8c:16:86:5a:c2:61:f3:fb:b7:ab:1f:ec:7c:85:f7:5a:c8:
48:40:36:e5:52:3a:f1:53:75:29:2d:b4:55:18:05:ed:51:d2:
5f:95:06:65:65:82:70:b0:3a:b6:e1:2c:a1:62:0d:24:06:23:
cd:5a:b0:91:b4:1d:32:d8:cf:b5:c9:3a:92:47:2c:e3:a0:4b:
85:b2:de:3c:50:16:3f:47:00:35:bd:87:6e:df:bd:f4:b6:06:
2d:41:83:14:53:16:57:50:e9:c4:03:3c:86:13:a6:03:9b:f0:
77:13:f1:17:ae:16:0a:cb:e4:96:16:d1:f1:f1:e2:a5:24:93:
cb:91:42:57
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUUL4MU7F+0cipRdVr8KbF6KSMpmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU0QUQyN0QzM0Y5RDY0QjdGQTIxODRDNkMwMzBBN0I4
MDkxRTlFOTAeFw0yNjA3MjQyMDMyMDRaFw0yNjA3MjUyMzA2MDRaMDMxMTAvBgNV
BAMTKEFDNDhGMjg0OUIzMjcxNTBDRjMyRkUyODJFMUNGMTNDRDNERjM2MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyLjcmbglkrvNDNbTiil7ovaSy
xD2YygVdCf3ELKwclFW1ZKcFf79L6gTD4x9XIN/0/+4zKj8eoOGhNbYKDqeMgtlS
NgSgB/M8LlUdZu96qPL2dp5QY8Y3B+EWcoI1D+LEfIcNXHNwfQK2lwsaST2pzqh/
SZM40C6k76s7n9pVWig3oxZzGVFqm6DHRTrEO6HgVZmiOxAv3h9Se5OfELOcuwhC
gXoLNYVGW3IpesJPM+eABPEU0oZzUj/PcVB5mxmtTRnG2GOuvOwg6lu37EiaO8AD
qE4c8YPdQkAuAiZdeSzvJsFLuljKSwMb8+gfNHNpLu1cGRjMF3n+ClfcTh3NAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUrEjyhJsycVDPMv4oLhzxPNPfNjcwHwYDVR0j
BBgwFoAUrkrSfTP51kt/ohhMbAMKe4CR6ekwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDQ4ODgyMjY4NDU4MTg5MC8wL0FFNEFEMjdEMzNGOUQ2NEI3RkEyMTg0QzZDMDMw
QTdCODA5MUU5RTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUU0QUQyN0QzM0Y5RDY0QjdGQTIxODRDNkMwMzBBN0I4MDkxRTlFOS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ0ODg4MjI2ODQ1ODE4OTAvMC9BRTRBRDI3RDMzRjlE
NjRCN0ZBMjE4NEM2QzAzMEE3QjgwOTFFOUU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzij+0cxHa5s
R5QNwxwSSKsZ07+zJh0VFP//HeKIMycVtOYkWActa0ckKoOVk2QJaHjlpN60bWYv
gCw+88i8gFClYQBwlFeZ9OJjA2J7fqRKPmRaqGzF27Oz6q9C78xGsku4GFjnUlKS
WHHBWcgRiz8fLtXAEziqIBqkiuAnmYwWhlrCYfP7t6sf7HyF91rISEA25VI68VN1
KS20VRgF7VHSX5UGZWWCcLA6tuEsoWINJAYjzVqwkbQdMtjPtck6kkcs46BLhbLe
PFAWP0cANb2Hbt+99LYGLUGDFFMWV1DpxAM8hhOmA5vwdxPxF64WCsvklhbR8fHi
pSSTy5FCVw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:25:36 2026 by rpki-client