
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft
File: AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft (raw, json)
Hash identifier: lgzNBxjy1eTJtBv9ZJ2vkUfV84zFlej5iWTtlUTTYjY=
Subject key identifier: 90:C0:5D:DD:26:AF:49:30:C8:2F:42:7C:AE:49:50:91:7F:CE:6A:FD
Authority key identifier: AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3
Certificate issuer: /CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3
Certificate serial: 2B79EE10E94B6F5CE92097F799F6A1F9D4A01106
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft
Manifest number: 9C
Signing time: Sat 03 Oct 2026 11:11:53 +0000
Manifest this update: Sat 03 Oct 2026 11:06:53 +0000
Manifest next update: Tue 06 Oct 2026 18:20:53 +0000
Files and hashes: 1: AS4847.roa (hash: 43JbO/RY/CXlAZ6gtxSZl4suSooMAGX4ZhYCBk21is8=)
2: AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl (hash: 6qv4Zt0RNqaV+zuxROL83sEkp+al5ECUaedHl3u4mMA=)
3: AS4808.roa (hash: TPs4K1IwuFBCZlPJPwsrxBKlLQX+ki67IEXGfZAOXrc=)
4: AS0.roa (hash: Tnh8WMSLJSGCaAxb/VZeyXb0gUX1GKQVaIvE4qh0adg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl
rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 18:20:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:79:ee:10:e9:4b:6f:5c:e9:20:97:f7:99:f6:a1:f9:d4:a0:11:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3
Validity
Not Before: Oct 3 11:06:53 2026 GMT
Not After : Oct 6 18:20:53 2026 GMT
Subject: CN=90C05DDD26AF4930C82F427CAE4950917FCE6AFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:82:55:0e:21:85:e7:f4:4b:e6:3a:53:08:
7c:a6:23:24:ed:b6:93:12:74:e2:1e:cc:c2:de:55:
fc:29:b5:17:a9:5b:d8:f3:8b:09:bc:dc:e6:5f:47:
35:79:b4:68:34:cc:97:0d:24:2d:16:8d:01:ff:15:
ef:82:57:e6:e3:69:de:f7:f1:78:75:c5:01:6a:a4:
a5:3f:df:dc:ac:2c:4f:a0:68:d5:a9:3b:a3:82:84:
59:2b:7b:09:53:a5:6d:b5:26:eb:83:60:72:7f:1d:
27:12:c6:96:03:48:c1:6b:cd:ca:64:d9:f0:f1:54:
fd:80:9e:8d:a8:3a:e8:9e:60:a7:20:25:00:3d:f4:
50:99:95:5b:1b:e7:72:8b:0c:13:7a:d2:71:29:6c:
4d:c3:b9:aa:0e:66:f5:d1:8f:a8:da:70:5b:fa:e4:
58:89:e7:b7:a0:b2:3b:06:37:6b:f7:7b:66:56:91:
f9:cf:cd:f4:cc:73:97:51:86:24:69:93:c1:c2:bf:
36:d8:05:3e:93:17:10:0c:45:19:b7:73:be:35:d8:
e0:a5:95:a0:e0:66:ba:1e:aa:b8:78:26:04:06:7a:
df:7c:d9:0f:7d:47:18:bd:16:c8:b4:a0:66:1f:d9:
74:63:54:5c:3c:7c:ec:e8:77:90:b1:85:f2:c8:3f:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C0:5D:DD:26:AF:49:30:C8:2F:42:7C:AE:49:50:91:7F:CE:6A:FD
X509v3 Authority Key Identifier:
keyid:AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:9c:5a:c7:30:4a:04:8d:a4:26:98:6e:3e:22:0a:f6:92:f1:
38:d3:e4:e7:7e:80:ac:8b:54:40:05:3c:a2:a0:96:a8:fb:ef:
ae:59:1f:00:ca:5f:bf:f7:da:1f:0d:e5:de:f8:9b:78:24:d7:
3c:dc:81:e7:c8:c4:1a:b6:6e:34:46:9f:3f:da:5a:eb:1d:25:
f3:9a:fd:78:da:76:c1:c5:6f:1d:11:2e:d0:d6:12:49:19:5c:
00:09:cb:bb:91:b0:c0:c5:52:8f:f2:72:6e:89:ad:eb:72:95:
5d:fb:fc:f2:bd:b7:d0:1a:36:33:d3:fb:6b:cf:de:b1:cc:98:
62:15:bd:9a:d3:98:4b:a9:7f:cd:a9:37:2d:a3:09:9b:bf:7c:
40:ec:82:7e:64:22:93:04:e5:e8:4e:4b:96:b0:e5:5e:5f:5d:
b1:74:35:7f:9b:cf:3d:d1:83:fb:ba:64:f7:de:d9:7f:d7:bc:
f4:e0:e6:a1:6e:5b:66:05:cb:a5:33:6d:4a:10:ba:ce:1b:93:
3b:d7:1a:db:7c:6d:19:2e:8a:88:4c:e9:40:6e:41:b8:1d:af:
b5:d3:41:89:04:ba:92:13:8e:6c:f4:9a:a8:45:dd:a2:f6:de:
ff:ea:1b:9d:ac:0e:f3:39:04:b8:88:52:c1:5c:cb:6e:6a:e6:
5a:9b:86:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:21:43 2026 by rpki-client