
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
File: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft (raw, json)
Hash identifier: L7l/PVnDHE5tADzzNtzY4dIgmkkWc16aeO0+7sFLBWE=
Subject key identifier: 85:A1:DB:9B:13:C8:DA:9C:56:EF:DA:A4:D3:82:78:A2:FA:50:C2:AD
Authority key identifier: AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9
Certificate issuer: /CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
Certificate serial: 24397A09E7367497720A60984FE39833C90AA1A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
Manifest number: D4
Signing time: Tue 13 Oct 2026 22:13:17 +0000
Manifest this update: Tue 13 Oct 2026 22:08:17 +0000
Manifest next update: Sat 17 Oct 2026 03:49:17 +0000
Files and hashes: 1: 3231312e3130312e3234342e302f32322d3234203d3e203538353139.roa (hash: /uXfkAccy3v3a9BHA09vw6dKcshdQs/6n+DUQ8IYKi8=)
2: 3130332e33362e3232302e302f32322d3234203d3e203538353139.roa (hash: cpYrgo4yAI6Z4974RFpP1Ve2Wg+ZBptUjAdisTeBGyw=)
3: 3231312e3130312e3233322e302f32312d3234203d3e203538353139.roa (hash: iVNiE9bxsTL+DkppA0g1irY1nuYRs9Q3qr7qbEuyfxk=)
4: 3130332e3136332e34362e302f32332d3234203d3e203538353139.roa (hash: tnfkAsqQvcqpL20P+LPe4F4kwN7iekWJ1PPQsYyrYg8=)
5: 34332e3234302e3232302e302f32322d3234203d3e203538353139.roa (hash: vSeQnc0mmTH3jj/CmKx/qvwuVCC4G3xToac39RSw2JM=)
6: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl (hash: ENEFirNI2Kv2JB2/1iEimtYWsrD10uRP204wRT5trDg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 03:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:39:7a:09:e7:36:74:97:72:0a:60:98:4f:e3:98:33:c9:0a:a1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
Validity
Not Before: Oct 13 22:08:17 2026 GMT
Not After : Oct 17 03:49:17 2026 GMT
Subject: CN=85A1DB9B13C8DA9C56EFDAA4D38278A2FA50C2AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:ee:7b:40:50:b2:0c:e0:4f:cc:98:7e:77:
3c:d1:8f:0d:7c:04:b7:24:d5:77:1f:fa:64:be:88:
e1:f4:94:9f:ae:c4:66:fb:57:4c:81:8e:64:ec:ed:
4b:f5:54:ee:10:db:88:e0:2a:6c:bb:90:b3:f9:37:
70:75:36:c7:ca:1a:9a:e1:17:f0:ed:11:c4:33:3c:
14:20:22:bf:cf:14:23:1f:6e:97:8e:ee:d2:c9:b8:
35:48:dc:2c:02:21:3c:95:94:cd:81:fb:5e:26:8a:
21:05:00:a8:8c:99:f0:d2:b7:db:35:0c:e0:f8:86:
11:58:e7:f4:bc:8e:a2:bc:87:b9:e1:42:7a:61:67:
49:5d:fd:4a:31:6b:bb:15:ff:ab:56:9b:9b:68:78:
65:73:82:bc:b5:c6:83:8e:59:6f:8b:f8:f2:68:42:
69:89:da:3b:db:22:6c:68:4d:18:77:da:ec:e6:18:
1f:18:dd:c7:62:ba:35:36:f7:e2:ec:d3:7f:60:07:
bd:e0:01:72:5f:f5:ad:a1:a9:54:6b:2c:2b:50:ae:
e4:d7:49:29:bf:26:95:fc:b9:7c:cb:e8:0e:29:2d:
ac:85:b6:fe:b2:80:19:8b:33:e8:d8:a1:64:85:a3:
8c:1b:7f:38:ac:b3:df:e4:2b:81:b7:43:df:ce:9a:
64:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A1:DB:9B:13:C8:DA:9C:56:EF:DA:A4:D3:82:78:A2:FA:50:C2:AD
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:30:d3:9b:20:5c:90:e4:12:fa:47:96:18:68:eb:50:8e:55:
c2:83:d3:a5:96:b8:ee:fe:04:15:c4:ce:2c:b5:bc:c9:da:e3:
d6:37:ed:4f:ad:9e:8b:a3:26:79:cc:fc:94:39:27:cb:cf:a8:
de:65:d7:62:52:c6:88:be:8d:6d:78:e3:50:42:cb:d2:df:e8:
0d:58:ad:7f:bc:b8:a7:ff:41:42:26:f7:ff:79:b8:a7:50:a8:
16:51:af:98:a1:a4:86:17:03:73:00:96:3c:25:85:dc:da:93:
9e:d3:f0:b6:02:dc:22:69:89:62:f5:e5:ee:4f:8f:b3:f1:48:
14:4c:14:79:5f:6b:64:22:e2:34:c3:43:4b:d8:86:ce:e5:4e:
3c:5a:7b:9b:6e:a1:8f:eb:b7:20:70:c8:99:62:cb:b5:95:cc:
fb:cc:7f:f6:41:20:18:45:33:26:9f:f6:10:b2:ef:b5:d0:f8:
ef:f3:61:9e:30:0a:f6:65:eb:88:0a:50:62:df:85:1b:f4:b3:
58:05:75:dc:9a:54:2c:c6:78:fe:21:69:f9:85:b8:65:26:a1:
1d:44:a5:f7:0b:af:df:53:a3:31:06:20:a8:18:67:77:f1:64:
57:c4:de:66:54:13:dc:b1:52:6d:c0:82:88:74:ab:9f:72:cc:
3f:1a:3c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:10:28 2026 by rpki-client