
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
File: AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft (raw, json)
Hash identifier: EqqtkBveiZn2s1yNcxc2XS+fB+47z9hKHFAcorIPht0=
Subject key identifier: 52:7F:EB:48:78:90:1D:25:BA:44:44:8D:C7:48:E2:85:AF:0C:19:34
Authority key identifier: AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5
Certificate issuer: /CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5
Certificate serial: 36392FB66A53B17F39C5EEB749B059CFEA6C0EDA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
Manifest number: 47
Signing time: Fri 24 Jul 2026 02:05:06 +0000
Manifest this update: Fri 24 Jul 2026 02:00:06 +0000
Manifest next update: Sat 25 Jul 2026 02:40:06 +0000
Files and hashes: 1: 323430323a356634303a3a2f33322d3430203d3e203535393632.roa (hash: J8V4fC0EcnnEJAvudK1CUUz+Anxis8iYxXNE/PbJCkw=)
2: 3130332e3130372e3232302e302f32322d3232203d3e203435313135.roa (hash: UjzzAVTAPjmbxCOqtX5OnTgoTMEPz4NjCFbWABjcjYU=)
3: AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl (hash: EHRvVN/e+19QJ5mbwkeuCVIsCFT/XW7bb34yC6S1dC4=)
4: 323430323a356634303a3a2f33322d3430203d3e2034383038.roa (hash: hEdpxSyQhKq8Tt6+4mX4pbyGXdjKHqDZ4gkvGobLPvk=)
5: 3130332e3130372e3232302e302f32322d3232203d3e203535393632.roa (hash: JjhOnvBAbyhHj25SJk42Z/mWkYT2CJtKWOeuYdrDSEM=)
6: 323430323a356634303a3a2f33322d3430203d3e20313331353433.roa (hash: Fr7SJF8nS/QnvygXHIyiT1ifZlb4UClCGvRUFGJ/Wbg=)
7: 3130332e3130372e3232302e302f32322d3232203d3e20313331353433.roa (hash: vZBk5SOJuUm559ZMaJN8pTKtV568qUIjt4RbuicJAVo=)
8: 323430323a356634303a3a2f33322d3430203d3e203233373234.roa (hash: BYhl8Kes59vhOWYPWklbb97wfjM9JLHk+KCCzyARPMo=)
9: 3130332e3130372e3232302e302f32322d3232203d3e2034383038.roa (hash: lUxvbUf3vyf4fNMsQgH2jFFsF7urmoVrC7TTHQeV5x8=)
10: 3130332e3130372e3232302e302f32322d3232203d3e203233373234.roa (hash: M89JPpic5CUnz+XG6ZBO4FH5rzyVxYok5bjRrf4SiqU=)
11: 323430323a356634303a3a2f33322d3430203d3e203435313135.roa (hash: ZN27c9UzjJ3wdK64dTmHf5rjrWHM5T8TdThVNyywHCg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl
rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:39:2f:b6:6a:53:b1:7f:39:c5:ee:b7:49:b0:59:cf:ea:6c:0e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5
Validity
Not Before: Jul 24 02:00:06 2026 GMT
Not After : Jul 25 02:40:06 2026 GMT
Subject: CN=527FEB4878901D25BA44448DC748E285AF0C1934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cf:e8:43:40:6d:ef:62:04:e2:20:7b:68:28:
85:cd:69:a9:72:bf:ce:3c:a1:e3:70:11:f5:ed:bc:
78:e2:e5:48:4c:e3:92:71:05:54:5c:f5:82:58:65:
28:06:e7:ad:da:89:e9:e3:92:e3:d5:c0:63:5c:36:
87:ad:7c:2d:04:a1:bf:c7:06:fc:7a:06:f2:c1:40:
7b:31:b0:a5:f8:f4:4a:b5:07:42:71:3a:91:b5:bd:
b2:46:97:7f:5b:d5:ee:9e:c5:24:ce:c9:ab:71:89:
e9:5f:30:fc:05:ea:5a:d7:b0:5d:16:c5:98:80:6d:
a8:e0:c0:cb:91:92:04:19:dc:c8:98:bc:5d:1d:7c:
0a:62:86:99:0c:77:d2:21:41:18:39:fe:ea:0f:11:
19:98:18:b8:14:3e:76:de:06:b3:f2:00:c0:80:f8:
ac:29:a7:af:e0:d7:25:51:a7:da:29:fa:96:fb:5d:
0b:94:15:c0:11:27:75:14:78:98:df:07:43:33:70:
bd:99:17:dc:34:eb:11:4d:ea:8d:50:c3:6e:26:47:
ec:d5:26:7d:77:6c:d2:a2:d1:30:49:37:95:1a:97:
b6:f8:43:58:3c:f5:ed:03:9f:fa:f0:ea:43:a3:3d:
0f:5f:4c:69:3e:12:6e:e1:49:dd:50:df:55:9c:3c:
1f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7F:EB:48:78:90:1D:25:BA:44:44:8D:C7:48:E2:85:AF:0C:19:34
X509v3 Authority Key Identifier:
keyid:AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c2:3a:bb:70:b6:e0:a0:09:4e:bb:3a:6a:70:24:de:b7:02:
8e:fe:42:31:94:56:e0:19:9d:e8:3f:57:ec:7e:e0:57:cf:28:
7f:4d:ee:b3:7c:48:da:7f:56:b6:ff:64:19:65:fa:53:30:7a:
b7:8d:9e:b3:6c:45:a2:bf:12:e3:a6:89:df:9e:23:ae:81:9c:
1d:ff:45:af:36:86:fa:a3:92:20:c1:d2:18:63:65:75:66:40:
29:2d:d0:ed:ff:8f:16:b1:0e:55:dc:e6:42:dc:c7:4e:5d:52:
bf:6b:9b:c6:5e:b7:f6:ac:38:d8:1f:01:40:4b:96:0f:5c:d9:
21:85:5a:13:e9:62:b4:8a:5a:9e:62:c8:0f:fd:d2:2a:5d:1a:
10:70:40:eb:c9:ca:e1:e8:9e:c5:41:9c:91:f7:0e:35:5f:66:
58:32:cb:4a:ab:26:bf:31:3c:4a:ae:1b:e0:cc:39:c1:92:6e:
c3:01:6d:56:6d:7f:67:b4:ee:02:93:e2:ba:28:e1:8d:fb:67:
1a:30:cd:67:54:35:6d:fd:9f:73:e5:c1:76:b6:91:99:07:97:
78:a4:41:16:84:d8:34:b1:67:f6:c1:04:c4:36:a4:cc:06:47:
8c:97:d8:c7:b7:27:e1:38:f9:18:01:6e:1f:03:72:35:08:76:
a8:dd:e3:bf
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUNjkvtmpTsX85xe63SbBZz+psDtowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVD
REMxMTdCNTAeFw0yNjA3MjQwMjAwMDZaFw0yNjA3MjUwMjQwMDZaMDMxMTAvBgNV
BAMTKDUyN0ZFQjQ4Nzg5MDFEMjVCQTQ0NDQ4REM3NDhFMjg1QUYwQzE5MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJz+hDQG3vYgTiIHtoKIXNaaly
v848oeNwEfXtvHji5UhM45JxBVRc9YJYZSgG563aienjkuPVwGNcNoetfC0Eob/H
Bvx6BvLBQHsxsKX49Eq1B0JxOpG1vbJGl39b1e6exSTOyatxielfMPwF6lrXsF0W
xZiAbajgwMuRkgQZ3MiYvF0dfApihpkMd9IhQRg5/uoPERmYGLgUPnbeBrPyAMCA
+Kwpp6/g1yVRp9op+pb7XQuUFcARJ3UUeJjfB0MzcL2ZF9w06xFN6o1Qw24mR+zV
Jn13bNKi0TBJN5Ual7b4Q1g89e0Dn/rw6kOjPQ9fTGk+Em7hSd1Q31WcPB9vAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUUn/rSHiQHSW6RESNx0jiha8MGTQwHwYDVR0j
BBgwFoAUq3DTbc6HF9I4n/+5utzGDs3BF7UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDEwODU4MDY2MDc3Mjg4My8wL0FCNzBEMzZEQ0U4NzE3RDIzODlGRkZCOUJBREND
NjBFQ0RDMTE3QjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVDREMxMTdCNS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTQxMDg1ODA2NjA3NzI4ODMvMC9BQjcwRDM2RENFODcx
N0QyMzg5RkZGQjlCQURDQzYwRUNEQzExN0I1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMI6u3C24KAJ
Trs6anAk3rcCjv5CMZRW4Bmd6D9X7H7gV88of03us3xI2n9Wtv9kGWX6UzB6t42e
s2xFor8S46aJ354jroGcHf9FrzaG+qOSIMHSGGNldWZAKS3Q7f+PFrEOVdzmQtzH
Tl1Sv2ubxl639qw42B8BQEuWD1zZIYVaE+litIpanmLID/3SKl0aEHBA68nK4eie
xUGckfcONV9mWDLLSqsmvzE8Sq4b4Mw5wZJuwwFtVm1/Z7TuApPiuijhjftnGjDN
Z1Q1bf2fc+XBdraRmQeXeKRBFoTYNLFn9sEExDakzAZHjJfYx7cn4Tj5GAFuHwNy
NQh2qN3jvw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:29:50 2026 by rpki-client