
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
File: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft (raw, json)
Hash identifier: N7Szs33Oa0tN6GgBEZ2KLbR7ZLAyVlpA9xJs9FTNKmI=
Subject key identifier: 2F:CA:97:B0:F4:2F:92:F7:46:E3:52:B9:24:27:6E:BA:FA:AE:AA:2A
Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Certificate serial: 12EF719FACF8540111056EAE88562568066FDC78
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
Manifest number: 93
Signing time: Fri 28 Aug 2026 06:47:40 +0000
Manifest this update: Fri 28 Aug 2026 06:42:40 +0000
Manifest next update: Mon 31 Aug 2026 17:43:40 +0000
Files and hashes: 1: 3230332e3139322e312e302f32342d3234203d3e2034363131.roa (hash: 0KdLEVUiybk5V4n+f+0dKRmU6UVh7v523bGbqNGXd8I=)
2: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl (hash: RwURgSuYB2Jzt7sha+004wwaQCTZp+f2CZj36s8feUw=)
3: 3130332e36362e33332e302f32342d3234203d3e2034363131.roa (hash: n5yRgo6J2D5FtGrXkvOOKqNrGph1QpbzvpT/k6W4Gyg=)
4: 3230332e3139322e342e302f32342d3234203d3e2034363131.roa (hash: 17kgFGc3cSe7uHyaAKqp7oAC5dXyj9elPuMYbCDiwxE=)
5: 3230332e3139322e322e302f32342d3234203d3e2034363131.roa (hash: 5kRdUKU+ZXXchqJyoqf+wUpdIG1fnufxQH0iQlauhG0=)
6: 323430323a616663303a3a2f33322d3332203d3e2034363131.roa (hash: f3GHixVb1HwjhyVU8K4swaXzIGI0Hioddav5kM0XXUw=)
7: 3230332e3139322e31302e302f32342d3234203d3e2034363131.roa (hash: B5g+2JRh5TgR/UTOSPrdbR+qCyH6GJDVipqqxDIoaCk=)
8: 3130332e36362e33322e302f32342d3234203d3e2034363131.roa (hash: pGPnNL8I17M9sBQn6scU0wF53hsmAZju26aVp9ckSkQ=)
9: 3130332e36362e33342e302f32342d3234203d3e2034363131.roa (hash: tjZDTuEgQlRXpFbbaG0NArZJgDuaiVOSE05Z7p9qiAI=)
10: 3130332e3232382e3133382e302f32342d3234203d3e2034363131.roa (hash: yTCamlVpkLTaQtiao0McbVEofmqZPgYyOVfZcUXNIMg=)
11: 3230322e3132332e3130372e302f32342d3234203d3e2034363131.roa (hash: 3tbE64n/dii7GNRtLZg5K6aHAbP1egLJB2VvyhZEfFU=)
12: 3130332e3232382e3133392e302f32342d3234203d3e2034363131.roa (hash: QdeAkUPnqLpZiSPqBIxzU0fpw+Eqvq8f9jvgOeoo9mg=)
13: 3130332e3232382e3133372e302f32342d3234203d3e2034363131.roa (hash: QQ4ATBeNE3ml6YUNfv/6tpe2Kv/BmFijIHp4Rv9IGTo=)
14: 3130332e3232382e3133362e302f32342d3234203d3e2034363131.roa (hash: gi5/C7Ig+PLVimVU9eNIn1aKpNA5wgBO2EvkhiKLFtQ=)
15: 3130332e36362e33352e302f32342d3234203d3e2034363131.roa (hash: gY+qMgWgJvHs6SDZmlGFp+AAc3uGBrjBkD6f9uzt130=)
16: 3230332e3139322e372e302f32342d3234203d3e2034363131.roa (hash: SDHyN9XXrw0odzkF0QeNY9cKYZ9QdH1ieH7qxu1iHl8=)
17: 3230332e3139322e392e302f32342d3234203d3e2034363131.roa (hash: Uy+BapU0I48WC0bWQ2ZydXi48JznYrjW62PXNe53HUM=)
18: 3230332e3139322e382e302f32342d3234203d3e2034363131.roa (hash: ExwddNKPU24UIMMf46gIGo0/55R/RolIT8ID+4HvTfo=)
19: 3230322e3132332e3131302e302f32342d3234203d3e2034363131.roa (hash: 155iifkZEs6RHAaqhrEQCAQN53twEduDtnNVPAqFrTI=)
20: 3230332e3139322e362e302f32342d3234203d3e2034363131.roa (hash: CRUJkzzmVRsaFDZOKPvn/CRKcvAx+oeYntLvx9WwCyk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 15:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ef:71:9f:ac:f8:54:01:11:05:6e:ae:88:56:25:68:06:6f:dc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Validity
Not Before: Aug 28 06:42:40 2026 GMT
Not After : Aug 31 17:43:40 2026 GMT
Subject: CN=2FCA97B0F42F92F746E352B924276EBAFAAEAA2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:17:51:16:09:5d:92:43:69:cd:78:8a:f9:9c:
f7:89:45:50:f1:08:22:2a:7c:49:0a:fd:87:b8:90:
51:5a:80:6c:61:05:f2:68:11:e0:af:72:f6:25:af:
06:1f:bb:b4:3b:6d:f6:2e:b8:22:61:aa:df:49:b1:
29:64:ab:34:8f:11:7a:9b:5f:06:e3:74:17:3a:f0:
f9:e0:36:1f:47:71:40:4a:34:84:8b:67:1f:02:73:
d2:53:3a:ac:b2:0d:9a:4c:bc:84:ce:ed:1b:cd:15:
1c:94:5b:69:9e:ae:01:6a:fe:78:43:76:a9:8c:bb:
9f:19:53:68:2a:9d:7b:2f:9e:d5:25:e4:57:bf:22:
44:a3:a0:e4:03:a2:41:61:08:59:12:81:c8:4a:57:
79:04:32:4a:d6:8a:a8:0f:a4:65:6d:9e:56:68:88:
53:22:bb:f2:14:5e:05:91:0a:84:56:43:27:c0:da:
e2:7d:ec:da:27:24:e4:09:d5:ba:59:b8:76:a3:3c:
5a:2a:48:b3:bb:ee:e1:eb:7d:bf:45:9b:47:fe:50:
a3:2a:e7:0c:95:6f:5e:9d:70:ea:e2:1e:dd:3b:16:
63:51:90:a8:d2:f5:d5:b7:64:65:46:37:8d:31:b7:
eb:78:31:24:20:86:31:91:87:e0:42:4b:db:1a:50:
08:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CA:97:B0:F4:2F:92:F7:46:E3:52:B9:24:27:6E:BA:FA:AE:AA:2A
X509v3 Authority Key Identifier:
keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:6c:1f:d3:06:fa:50:eb:59:22:ef:06:d2:ab:de:b9:9b:d5:
18:f2:a2:81:ed:0a:2e:b7:ad:cf:6f:b0:12:83:2f:0a:09:aa:
58:72:b6:1e:c2:5c:e5:e6:f9:4d:de:b1:83:1c:26:ba:75:23:
18:9d:df:6f:ec:61:84:95:69:a2:39:a5:02:37:37:81:5b:a6:
09:44:00:59:9e:6d:a7:32:e5:f0:b4:71:f5:29:ee:75:3b:f1:
32:ee:64:1a:fa:52:cf:79:11:68:5d:56:50:6e:7e:05:a2:d3:
73:52:5d:d9:6e:d6:29:b8:5e:5e:81:14:0d:ea:97:f1:d8:3f:
c4:9d:e8:16:cd:3a:9a:3e:e2:ae:5c:67:cb:0f:53:0c:b1:27:
55:df:58:46:c1:3b:4e:9c:3d:33:94:78:bd:b7:7f:15:0a:d2:
76:c1:69:82:56:91:75:08:16:2c:26:01:1a:67:3b:fb:6d:ab:
8f:a6:23:a8:3d:86:37:de:d0:bf:01:e6:d2:b3:9d:87:48:e0:
c8:de:13:d3:fd:54:41:97:cc:11:5c:62:a0:bb:84:99:4d:b7:
3c:8d:3f:5a:23:b1:30:7f:6f:de:5d:6c:09:a9:ab:7f:ca:56:
9a:36:79:39:6e:f8:19:cc:9d:65:b8:47:bb:82:c8:9b:26:88:
fd:70:6e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:06:08 2026 by rpki-client