
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
File: AA39AE9FC417219D4A84D7759F82869F86905204.mft (raw, json)
Hash identifier: UY5Mn9czYfw5ow9YVCfyqAgO0+PkQn3tQ6l+xLSGuTg=
Subject key identifier: 31:09:62:72:1A:6B:DB:9F:4D:8D:5D:B2:55:F1:AE:04:6E:86:6A:86
Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
Certificate issuer: /CN=AA39AE9FC417219D4A84D7759F82869F86905204
Certificate serial: 03DA596E7A1E4FFFC7F23A300BDB15A143F30797
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
Manifest number: 04
Signing time: Wed 13 May 2026 00:20:49 +0000
Manifest this update: Wed 13 May 2026 00:15:49 +0000
Manifest next update: Thu 14 May 2026 01:02:49 +0000
Files and hashes: 1: 3130332e31372e3232382e302f32322d3232203d3e203234313339.roa (hash: WKBC1qRwt+7dMdzTZIqQRn/5SumS317itfT4IKDsIo4=)
2: 323430363a363130303a3a2f33322d3332203d3e203234313339.roa (hash: gCEI8a7rZnOPEvUyXP287SD6JhgKuVmWO2SvTJg86oU=)
3: 323430363a363130303a323030303a3a2f33362d3336203d3e203234313339.roa (hash: Om9Ul+tIE5T2JX51QQmc7zE+/WIdDQ4UiAdT/yJdWzg=)
4: 323430363a363130303a383030303a3a2f33362d3336203d3e203234313339.roa (hash: HQHQ7zcb2DUJkBE2yCKj5cQdoRT7QjDD4vyaoEjiVz0=)
5: 323430363a363130303a643030303a3a2f33362d3336203d3e203234313339.roa (hash: wqKR2OZj7TF30PoIDKbSL2mPIWb/uNK3lB7F9IauevM=)
6: 323430363a363130303a363030303a3a2f33362d3336203d3e203234313339.roa (hash: UMt0eG92riLUhT2wp1ct6ayH6yCz39YR/2h4dIcAXD8=)
7: 323430363a363130303a373030303a3a2f33362d3336203d3e203234313339.roa (hash: Be53bBYRJ3Fpj790gazG2H7V+LnaMLTPqrJR+W7OJ2Y=)
8: 323430363a363130303a333030303a3a2f33362d3336203d3e203234313339.roa (hash: TS+nJ2C1T6zSN9K1PgNbDsyykfkwEFSrUadsN4jzN4s=)
9: 323430363a363130303a353030303a3a2f33362d3336203d3e203234313339.roa (hash: C6d2tt/JHqFwEp+CIe1fj6fwP2wy1hhZYhEeSVUzUjk=)
10: 323430363a363130303a343030303a3a2f33362d3336203d3e203234313339.roa (hash: Nc+iO12T5PwOZ1omW+heF25TZ/63WJlMCVihooShVAQ=)
11: 323430363a363130303a613030303a3a2f33362d3336203d3e203234313339.roa (hash: uCVf0IR58lHW8JM2QosMidDxkjkeCVKFEmU0jlBsWbA=)
12: 323430363a363130303a313030303a3a2f33362d3336203d3e203234313339.roa (hash: orp1bXNad5I7fyfSNRPjjEGSQNI3R+PNfxTZOqreeX0=)
13: 323430363a363130303a3a2f33362d3336203d3e203234313339.roa (hash: KS372/eSv2i+u4bHIZxCPYLZ9s7d9YBvzuhY+9gcHh4=)
14: 323430363a363130303a653030303a3a2f33362d3336203d3e203234313339.roa (hash: YdeoxCMtUMQSHMJliyZeYa6pXWnFk43C0hpRVJSj0uk=)
15: 323430363a363130303a633030303a3a2f33362d3336203d3e203234313339.roa (hash: 5YdWn8WKBXq+DUYe3bznIwJ3ken9gwKvoEURrJwBcl4=)
16: 34332e3232352e37362e302f32322d3232203d3e203234313339.roa (hash: AfTewB5N2+NygTIMFLOJxv2PKqLLMf8AlOOICIxhrv0=)
17: 323430363a363130303a623030303a3a2f33362d3336203d3e203234313339.roa (hash: f5fHl8wuWkXU6z2K2DrpawCQDN9O6wL8Ty6pgADDBdA=)
18: 323430363a363130303a663030303a3a2f33362d3336203d3e203234313339.roa (hash: k7ppHJGvPeQCRuKbE+YGT+zFqwt94W47Aqe+iURX61s=)
19: 323430363a363130303a393030303a3a2f33362d3336203d3e203234313339.roa (hash: Dtv0Bsg3TyRUQspcB/o4m7HQ4ZYGoW6tSld2VMwwtjA=)
20: AA39AE9FC417219D4A84D7759F82869F86905204.crl (hash: tixw/LadNppvRE6xn5/tjpC0XbEHs3KXRFdviwNsFlU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:da:59:6e:7a:1e:4f:ff:c7:f2:3a:30:0b:db:15:a1:43:f3:07:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204
Validity
Not Before: May 13 00:15:49 2026 GMT
Not After : May 14 01:02:49 2026 GMT
Subject: CN=310962721A6BDB9F4D8D5DB255F1AE046E866A86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:f8:82:a6:b9:a0:42:df:ff:12:e2:b9:99:
d8:49:61:7a:91:0b:91:b5:bd:ad:4f:d7:dd:e5:6e:
42:cb:0f:10:22:fe:21:f5:9c:c8:93:6b:7c:14:7a:
03:5c:d8:04:83:8f:38:46:82:47:c7:44:1d:72:e7:
f8:40:00:12:4e:64:43:9e:56:f8:89:66:44:61:54:
fe:c7:07:2d:98:fb:16:3b:46:8e:bf:4d:9b:53:bc:
ab:69:7f:6b:bd:57:cb:40:c1:8c:a0:dc:08:87:96:
a7:ea:32:d2:d9:de:fb:2d:af:08:f4:b7:2a:87:f0:
94:f7:68:bb:45:a1:91:19:1f:84:3f:20:8d:75:38:
f1:b0:b6:68:e5:8b:be:01:70:de:ca:7a:ff:ff:a6:
52:bc:c2:b9:80:f8:9f:83:6e:a5:2b:c1:ad:29:14:
8a:a7:8b:a4:bb:74:ec:d3:a3:a7:46:ff:a3:1a:94:
93:aa:ac:6b:fc:ab:85:35:1f:dd:53:a8:17:ee:21:
dc:62:b6:19:50:08:94:06:18:26:3c:04:97:22:1b:
4f:17:28:63:a1:b9:e4:d5:e5:9d:0e:88:6e:32:f2:
c5:c9:5c:8d:1d:ee:57:74:bd:40:99:b3:d1:3a:d4:
40:91:c4:3a:f5:36:f2:b8:39:12:0b:1e:c8:ef:61:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:09:62:72:1A:6B:DB:9F:4D:8D:5D:B2:55:F1:AE:04:6E:86:6A:86
X509v3 Authority Key Identifier:
keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:98:21:3c:22:70:48:0e:aa:27:44:3d:78:c0:9a:ba:a4:fe:
8e:99:49:87:24:50:fd:71:2e:be:74:10:35:37:6f:00:f8:d1:
e7:f8:76:3e:9d:16:62:ec:ce:34:82:07:3e:bf:9e:8c:a6:a7:
f7:81:04:c4:99:22:16:0c:8c:d5:9b:c0:1f:30:44:4d:fa:ab:
73:29:f3:c4:99:4a:fd:99:7f:7e:50:91:df:d8:89:28:ed:34:
86:b4:83:59:3f:24:0c:7a:87:15:b6:73:8e:2c:6c:63:a1:ed:
1e:e8:56:9e:25:8b:5c:5c:8a:0f:69:94:c5:dd:36:7e:15:58:
13:ba:ae:b8:96:27:60:ca:d8:68:8b:fe:8d:19:b0:bc:12:29:
cf:c5:50:5a:5d:86:10:84:44:1d:e7:53:fe:ae:67:3a:50:8f:
60:35:ef:cd:f5:e6:10:c5:a6:dc:43:96:36:db:a9:67:c3:86:
75:86:3c:d6:ee:ab:47:2b:9b:df:8a:f6:eb:9a:84:c8:6e:22:
6e:84:c0:5f:c3:12:b8:25:6d:71:34:51:1c:44:12:83:92:90:
08:59:59:95:0f:62:6b:24:6b:ec:53:91:e1:99:2a:88:0b:85:
f2:92:4c:80:1d:87:98:7c:60:c1:10:6b:75:cf:6a:1e:a3:79:
b1:aa:b4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:54:30 2026 by rpki-client