
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
File: AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft (raw, json)
Hash identifier: 4vUXe8UiSjLKJNUkjsH9uLxsnBuDc206cQJfOu4GfA4=
Subject key identifier: 39:B8:C2:E8:AE:4C:C2:E8:30:FB:4C:69:07:D8:F6:EE:5C:9D:AC:83
Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
Certificate issuer: /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Certificate serial: 086A69869D943E86BC7690A97F3B823B690BEA61
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
Manifest number: C7
Signing time: Sun 25 Oct 2026 23:33:05 +0000
Manifest this update: Sun 25 Oct 2026 23:28:05 +0000
Manifest next update: Thu 29 Oct 2026 11:27:05 +0000
Files and hashes: 1: 3232312e3133332e3233352e302f32342d3234203d3e2034383132.roa (hash: a2VfsMsZhsvGAUUY1Ndu97RvKL9qo+FoR0ehHhF29YY=)
2: 3232312e3133332e3232382e302f32332d3233203d3e2034383132.roa (hash: Y1HiM+KumJNDeDYPLakmSQoLeW7lH5fsmPDT4ZzwnTw=)
3: 3131362e36362e33322e302f32302d3230203d3e2030.roa (hash: wNT1DQAFsp8Zs52N3h30+NLAy/kRLoWVPBBLRjJSqcQ=)
4: 3232312e3133332e3233322e302f32332d3233203d3e2034383132.roa (hash: QqHw6UnjAmZaF6ZKGYjDcxL5eEwCirmJLq8wCW5ccfU=)
5: 3232312e3133332e3232352e302f32342d3234203d3e2034383132.roa (hash: oSxen+avH3yqnVUcHFHfBxSONh2HEHoFvmKh9qAM9WI=)
6: 3232312e3133332e3234302e302f32312d3231203d3e2030.roa (hash: wa6+lFTaePy6KwEnyhKCGrbQLm0Z3dbhjkj2JdaOPuM=)
7: AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl (hash: 8p0nmkYHoWpyrMcYma9cLqSBusJI6fUj/MJ5uas3GM8=)
8: 3232312e3133332e3232342e302f32302d3230203d3e2030.roa (hash: nHvu/7uCsbClyS8g05j2ZhgLdmx83hkxQxwIo964IPY=)
9: 3232312e3133332e3232362e302f32342d3234203d3e2034383132.roa (hash: fZP84wU8PI7wcGhsSPIodw7AFzy8mHQUVVGTGntl5c4=)
10: 3131362e36362e39382e302f32342d3234203d3e2034383132.roa (hash: 0WcQhOacv893u6+dnq1uiCvKvpO1wG8GhBFYPj0MqeM=)
11: 3232312e3133332e3233302e302f32332d3233203d3e2034383132.roa (hash: d98CvU56OAX7rtIY8aOAQjNFJ5nL1C3K1MePIYbNFnA=)
12: 3131362e36362e33362e302f32342d3234203d3e2034383132.roa (hash: 9PZcNDwOFM1W+HqkIe4mT1Xoe9v6VAm30cLnLhC5Dxg=)
13: 3131362e36362e302e302f31392d3139203d3e2030.roa (hash: f2cz2JzSUuLpJdbOQ1lpXQ6pQJh4CE9buuubTfFQl5o=)
14: 3131362e36362e39362e302f32302d3230203d3e2030.roa (hash: MqrW8ck2y9ByUyAqAmNpkYC3kLSHt1wbYRwpKGGG0Jo=)
15: 3131362e36362e36342e302f31392d3139203d3e2030.roa (hash: iXic9QsPCgNhQwzKKNPoIkJAYXI9V9gKXFUDqaHrlF4=)
16: 3232312e3133332e3234352e302f32342d3234203d3e2034383132.roa (hash: E8J6ehCAVQBTTL4nluJ8TryKPdaQtCV6x7AzifZmEoU=)
17: 3232312e3133332e3234342e302f32342d3234203d3e2034383132.roa (hash: /xsrM0t7gazGxT8vu8S20afPJ+/R7tTwrJw9ipbCbuY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 11:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:6a:69:86:9d:94:3e:86:bc:76:90:a9:7f:3b:82:3b:69:0b:ea:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Validity
Not Before: Oct 25 23:28:05 2026 GMT
Not After : Oct 29 11:27:05 2026 GMT
Subject: CN=39B8C2E8AE4CC2E830FB4C6907D8F6EE5C9DAC83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:16:1f:25:b6:8f:f9:63:cb:7b:28:53:9e:
a7:99:37:83:22:58:e9:dd:ba:8c:8d:91:d1:d3:e6:
0d:e0:32:87:c8:ce:52:a4:f8:d7:4a:9b:02:b5:e1:
da:67:96:92:dd:fe:9e:98:2f:38:1e:33:84:32:93:
03:4b:b8:ba:20:f9:24:d8:cc:ac:9c:86:31:fb:72:
7a:fb:43:d1:e9:80:db:b1:b4:c5:05:d0:2d:c3:d6:
8b:a2:02:90:d6:fb:03:53:77:dd:2e:26:87:c0:f2:
18:dd:ad:d9:27:ac:51:9f:24:b8:74:b6:41:88:a9:
7c:8b:a7:70:ea:38:3a:f7:64:5e:fc:54:66:6d:15:
38:b7:79:46:d9:53:9c:70:31:d2:80:1c:93:45:43:
0e:38:e6:83:46:e1:1c:cf:c8:5a:02:5c:ce:d0:6d:
38:ea:8a:93:d3:ca:ef:2a:87:38:cb:f4:d2:00:72:
da:08:2f:8d:17:ec:a7:95:1c:59:02:36:39:1f:36:
4f:ea:74:47:7a:e9:48:3f:db:e1:74:84:22:38:a8:
2a:b4:ec:86:9e:63:2f:f8:d4:62:64:5b:c4:e4:f3:
60:af:65:99:78:78:5a:87:b2:28:c3:66:6e:c4:4b:
25:ec:63:e9:de:58:63:0e:39:1f:f9:f5:85:4b:af:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B8:C2:E8:AE:4C:C2:E8:30:FB:4C:69:07:D8:F6:EE:5C:9D:AC:83
X509v3 Authority Key Identifier:
keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:67:b5:81:e2:0d:d9:60:df:3f:5c:6d:d1:8b:9f:22:b6:de:
e8:1e:67:0a:6c:72:f6:2e:a1:7a:19:f1:c3:73:a3:0e:88:6c:
cf:54:52:08:b6:5c:74:cb:d6:3e:a0:27:14:67:ca:01:8c:08:
b2:a5:c0:e0:c7:54:d7:0f:b5:2c:ba:50:2c:66:13:46:b6:04:
e6:9e:a9:25:25:36:5e:54:71:cf:d0:7c:17:d8:62:61:29:f7:
b2:e6:a5:e5:d3:85:e2:d0:bd:84:d8:d0:0b:a9:33:c3:9b:ac:
34:d6:e7:c0:c8:83:ef:46:aa:90:97:19:c8:32:14:20:43:d2:
74:66:7b:d0:cd:fa:df:e5:a0:09:80:f0:82:3e:d5:08:85:71:
4a:9f:fc:cc:36:ca:98:ca:f9:5e:e8:85:d2:88:27:e2:fb:37:
a9:81:98:ef:97:60:43:c6:0b:83:c9:df:26:58:f3:78:73:db:
0d:a3:fc:aa:a7:d0:71:a0:9b:10:42:a3:44:d4:78:ca:56:fc:
1d:2b:b8:df:de:df:c2:89:be:c3:ab:c0:13:22:48:33:97:4e:
72:c0:e5:62:4d:09:31:b1:cd:b4:34:17:21:a6:e0:08:ef:08:
69:2d:91:be:4b:87:96:eb:6f:bf:2e:ee:58:60:26:63:78:a2:
11:c9:e9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:33:58 2026 by rpki-client