
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
File: DE4AF5E551F820212884173F2ABBB1665D92F03C.mft (raw, json)
Hash identifier: NQwmZ3lSle8ROcL3FK5b0hmtQWaXbtKQltcjpFXGE6w=
Subject key identifier: 4C:4C:60:BA:99:D3:00:42:D5:C6:D2:96:C3:6D:82:D2:04:7B:A1:B7
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Certificate issuer: /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial: 7D39C78176EDF5D1DF46587D37F9A2E0E5E8D29B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
Manifest number: 0128
Signing time: Fri 28 Aug 2026 06:53:28 +0000
Manifest this update: Fri 28 Aug 2026 06:48:28 +0000
Manifest next update: Mon 31 Aug 2026 11:46:28 +0000
Files and hashes: 1: 3131302e34302e35302e302f32342d3234203d3e20313531323730.roa (hash: 4JLg/82qzAnBdqp31YBOIVaUQ/HsZIQm/+zzBWuOoc0=)
2: 3131302e34302e35322e302f32342d3234203d3e20313531323730.roa (hash: SmRU4scI1d5ItLZtbLsixK6Xp7BL82WGWExiBRup4Rg=)
3: 3131302e34302e37382e302f32342d3234203d3e20313531323730.roa (hash: zfNZniNA/0IgphqeSgGWizashNXjLUcNyFpjXVeyfXk=)
4: 3131302e34302e32302e302f32342d3234203d3e20313531323730.roa (hash: ImRRVtB0oFAe/o9QR/JWsPg+8dQpeAu+2h50TZkGRjg=)
5: 3131302e34302e35392e302f32342d3234203d3e20313531323730.roa (hash: A8v4yHSCDZM7KMJ5vjdxIHI73ykbpwQPv3248ev+Ggs=)
6: 3131302e34302e33382e302f32342d3234203d3e20313531323730.roa (hash: hoWQgbP2IUKbj7YROUZcdo0tKaqMg12VXcaQKeo2mXk=)
7: 3131302e34302e35372e302f32342d3234203d3e20313531323730.roa (hash: 4RmDRzcMhBN2hJIGrEmHQdAQCG7fzvdw/LrNzFu0YEY=)
8: DE4AF5E551F820212884173F2ABBB1665D92F03C.crl (hash: n1k3/HGcHIBSLU51RyiKrVUYQWK+9/SSJbf0I/FbH3w=)
9: 3131302e34302e33362e302f32342d3234203d3e20313531323730.roa (hash: dlvSYo6TmGOPRp6RbTF0oe3KNFmy9oOySt2NIAJi03Q=)
10: 3131302e34302e38302e302f32342d3234203d3e20313531323730.roa (hash: VqiUeFiKFnRa4ejTgotm4YJk3KYGlqMPzcSMkd44z18=)
11: 3131302e34302e38342e302f32342d3234203d3e20313531323730.roa (hash: l60H/jjer0CZfPuQlb03Hvv6l+sefDqCAEquqDxlxA8=)
12: 3131302e34302e34382e302f32342d3234203d3e20313531323730.roa (hash: z6RinG9S+jJTeKo8Rvw+92evtahMOYNZQUsHETh33lg=)
13: 3131302e34302e38332e302f32342d3234203d3e20313531323730.roa (hash: T8tBr1P9wYEwA9OqWA8eZUx4DxztUK7kGgBbsT61dM0=)
14: 3131302e34302e33372e302f32342d3234203d3e20313531323730.roa (hash: WmeZnSDb6+hiFY0NO9rPwYkF//eSWxE2g8pulG2ljX8=)
15: 3131302e34302e36332e302f32342d3234203d3e20313531323730.roa (hash: t+bXkrGtVNf4oWwJ9og4qJxpD3GRE27efaBcUhCI/L4=)
16: 3131302e34302e34322e302f32342d3234203d3e20313531323730.roa (hash: Uyj8KokDFD1uU80elHzt9gvbRCtgXkYNmcp5Rp1DFkM=)
17: 3131302e34302e34372e302f32342d3234203d3e20313531323730.roa (hash: cGjwhGJPiEzlcPj3scUnXA7T6Wkzdm0RByyhebVcpxQ=)
18: 3131302e34302e36352e302f32342d3234203d3e20313531323730.roa (hash: CqOZ1GEEVGspVVDPDgGXrZGFlwNDnRAuaKj+LDrrdFo=)
19: 3131302e34302e35312e302f32342d3234203d3e20313531323730.roa (hash: lTgU8qlQlP77fJ/XuVRh9FeVPrvJeUdWVBAXXEd3XkE=)
20: 3131302e34302e36342e302f32342d3234203d3e20313531323730.roa (hash: B91RwXkHBa5snBRZr6fQti0TecYlXvAWuEv5+XVtDqs=)
21: 3131302e34302e36302e302f32342d3234203d3e20313531323730.roa (hash: IeS/IQiiUsKjGCa3/NrYJnMrWFwyVhMNRnw15oiva1w=)
22: 3131302e34302e33342e302f32342d3234203d3e20313531323730.roa (hash: CEZPTV/KNjCSkq+hfdUYsMToO2Kvr4FX5BnLlvZT80U=)
23: 3131302e34302e34392e302f32342d3234203d3e20313531323730.roa (hash: KQHEpEtvgud6uYnjATnaVVS3GyOLMnjkOafl8oHFNdo=)
24: 3131302e34302e34352e302f32342d3234203d3e20313531323730.roa (hash: Df+EAx9Bx+GEeFQFGoHCEPEa5rPWhyq4mo9XDPQUj+8=)
25: 3131302e34302e33352e302f32342d3234203d3e20313531323730.roa (hash: 6miPXUNyuuVj8a0Li5t4nsaCfG1qtqdIuKdDwZAh57M=)
26: 3131302e34302e36362e302f32342d3234203d3e20313531323730.roa (hash: u51qC16Tqv5obUpwrYrc91/8bkJyh39ZAAvI33eh3EQ=)
27: 3131302e34302e36382e302f32342d3234203d3e20313531323730.roa (hash: 7TmrFwmcYNL49K4gOSLIxjUkfZXrWxzzZTnA3dbY7/8=)
28: 3131302e34302e36322e302f32342d3234203d3e20313531323730.roa (hash: jSWAQgbf0KijXEu9Yt0YUEqi72gFzsTGKYt066xNhVw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 11:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:39:c7:81:76:ed:f5:d1:df:46:58:7d:37:f9:a2:e0:e5:e8:d2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Validity
Not Before: Aug 28 06:48:28 2026 GMT
Not After : Aug 31 11:46:28 2026 GMT
Subject: CN=4C4C60BA99D30042D5C6D296C36D82D2047BA1B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:f1:07:34:0a:f6:d5:72:da:5f:d6:d3:a0:
9d:3b:02:8b:52:55:96:68:2f:23:14:d3:b7:f4:db:
cc:50:be:2a:2e:52:79:4a:c6:22:7d:ad:d9:6a:a8:
28:78:0c:59:27:05:da:f8:d9:a6:6b:d5:f6:7c:cf:
33:a9:75:21:9e:93:08:50:f7:05:5f:73:a9:1b:2d:
b1:a0:3c:1a:fc:6f:08:b5:d4:4c:d7:07:30:5a:37:
7e:15:21:bd:5d:62:29:f1:52:e7:b0:d1:d0:0b:14:
d1:4e:e7:15:8b:43:0a:f0:fe:a8:70:9f:e7:e2:36:
14:a3:be:ff:c4:90:2c:dd:92:6e:bf:62:ce:5d:85:
6c:36:96:9c:15:21:85:d0:0f:1d:87:1d:f6:88:5a:
73:08:5f:65:d4:ba:db:fc:db:f5:41:74:e8:c5:ec:
b5:51:03:61:8f:f5:eb:fe:14:f0:7e:91:1e:01:1f:
95:58:60:7b:7d:8b:1c:57:53:91:cb:c0:0f:86:e5:
14:32:11:d2:17:50:8c:9e:96:75:3c:c2:a3:63:e4:
66:e8:a6:bc:a8:f4:55:9e:71:8a:08:c5:c5:6e:1e:
9c:27:19:57:56:85:e6:b5:7c:72:13:19:a0:a6:1a:
f6:b7:e2:a3:62:7f:13:e0:b0:75:29:36:c5:dd:ba:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4C:60:BA:99:D3:00:42:D5:C6:D2:96:C3:6D:82:D2:04:7B:A1:B7
X509v3 Authority Key Identifier:
keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7d:c3:7e:61:b5:37:4c:49:78:94:e1:8a:48:46:8f:b2:42:
ab:cb:c6:92:40:47:95:52:b4:5d:6c:59:68:c1:4b:6c:de:45:
e5:5c:ec:d3:23:f0:18:48:dc:14:97:64:42:da:e5:7d:b4:1a:
72:bc:fb:96:37:d8:63:7c:02:04:97:61:64:16:f0:2f:a9:a5:
cb:ac:23:35:83:85:34:c1:27:d9:59:ed:e0:21:36:3f:d0:b5:
44:2c:af:c9:28:63:6a:0e:8d:d0:d3:6f:7b:c1:9b:f3:ab:72:
35:d9:20:80:fc:1b:1a:42:38:9a:ac:d7:00:ec:ad:0a:c3:0d:
a6:37:72:a0:07:88:4a:d9:0c:cd:94:b8:e5:90:14:18:90:b2:
d0:b7:6e:7d:7d:b5:2f:a7:40:c5:0d:cc:f3:7f:15:52:ba:2a:
86:0f:75:c7:1c:ab:58:9f:90:7b:77:b3:65:6f:60:33:0d:0a:
70:49:8b:57:a3:85:a2:ab:fd:b5:43:02:8e:59:e5:98:fb:2e:
a5:39:88:b2:cc:39:0f:09:b8:77:b7:9e:79:7b:d3:c2:dd:7e:
93:20:be:4c:1c:7a:4a:d4:4d:1c:c8:fb:2e:cc:61:90:52:6c:
b1:c0:ed:14:52:fa:a0:9b:78:15:d3:01:85:b7:6b:cd:37:3f:
be:2b:10:aa
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUfTnHgXbt9dHfRlh9N/mi4OXo0pswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1
RDkyRjAzQzAeFw0yNjA4MjgwNjQ4MjhaFw0yNjA4MzExMTQ2MjhaMDMxMTAvBgNV
BAMTKDRDNEM2MEJBOTlEMzAwNDJENUM2RDI5NkMzNkQ4MkQyMDQ3QkExQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4MvEHNAr21XLaX9bToJ07AotS
VZZoLyMU07f028xQviouUnlKxiJ9rdlqqCh4DFknBdr42aZr1fZ8zzOpdSGekwhQ
9wVfc6kbLbGgPBr8bwi11EzXBzBaN34VIb1dYinxUuew0dALFNFO5xWLQwrw/qhw
n+fiNhSjvv/EkCzdkm6/Ys5dhWw2lpwVIYXQDx2HHfaIWnMIX2XUutv82/VBdOjF
7LVRA2GP9ev+FPB+kR4BH5VYYHt9ixxXU5HLwA+G5RQyEdIXUIyelnU8wqNj5Gbo
pryo9FWecYoIxcVuHpwnGVdWhea1fHITGaCmGva34qNifxPgsHUpNsXdun5PAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUTExgupnTAELVxtKWw22C0gR7obcwHwYDVR0j
BBgwFoAU3kr15VH4ICEohBc/KruxZl2S8DwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzEyNzQyNy8wL0RFNEFGNUU1NTFGODIwMjEyODg0MTczRjJBQkJC
MTY2NUQ5MkYwM0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1RDkyRjAzQy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcxMjc0MjcvMC9ERTRBRjVFNTUxRjgy
MDIxMjg4NDE3M0YyQUJCQjE2NjVEOTJGMDNDLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADH3DfmG1N0xJ
eJThikhGj7JCq8vGkkBHlVK0XWxZaMFLbN5F5Vzs0yPwGEjcFJdkQtrlfbQacrz7
ljfYY3wCBJdhZBbwL6mly6wjNYOFNMEn2Vnt4CE2P9C1RCyvyShjag6N0NNve8Gb
86tyNdkggPwbGkI4mqzXAOytCsMNpjdyoAeIStkMzZS45ZAUGJCy0LdufX21L6dA
xQ3M838VUroqhg91xxyrWJ+Qe3ezZW9gMw0KcEmLV6OFoqv9tUMCjlnlmPsupTmI
ssw5Dwm4d7eeeXvTwt1+kyC+TBx6StRNHMj7LsxhkFJsscDtFFL6oJt4FdMBhbdr
zTc/visQqg==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:45:15 2026 by rpki-client