
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
File: AA39AE9FC417219D4A84D7759F82869F86905204.mft (raw, json)
Hash identifier: DDX8FXJhwAnpiMQ8x4OFO0tRip+bCBCSBkCbzYuaJQE=
Subject key identifier: 7E:13:B1:B3:19:C4:EC:CA:87:4F:31:71:24:AD:38:1F:DE:BE:2F:3A
Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
Certificate issuer: /CN=AA39AE9FC417219D4A84D7759F82869F86905204
Certificate serial: 5F28EE22024C197BDF45701B8EC11310B0031886
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
Manifest number: 1A
Signing time: Fri 29 May 2026 16:58:03 +0000
Manifest this update: Fri 29 May 2026 16:53:03 +0000
Manifest next update: Sat 30 May 2026 20:08:03 +0000
Files and hashes: 1: 323430363a363130303a663030303a3a2f33362d3336203d3e203234313339.roa (hash: k7ppHJGvPeQCRuKbE+YGT+zFqwt94W47Aqe+iURX61s=)
2: 323430363a363130303a623030303a3a2f33362d3336203d3e203234313339.roa (hash: f5fHl8wuWkXU6z2K2DrpawCQDN9O6wL8Ty6pgADDBdA=)
3: 3130332e31372e3232382e302f32322d3232203d3e203234313339.roa (hash: WKBC1qRwt+7dMdzTZIqQRn/5SumS317itfT4IKDsIo4=)
4: 323430363a363130303a373030303a3a2f33362d3336203d3e203234313339.roa (hash: Be53bBYRJ3Fpj790gazG2H7V+LnaMLTPqrJR+W7OJ2Y=)
5: 323430363a363130303a383030303a3a2f33362d3336203d3e203234313339.roa (hash: HQHQ7zcb2DUJkBE2yCKj5cQdoRT7QjDD4vyaoEjiVz0=)
6: 323430363a363130303a323030303a3a2f33362d3336203d3e203234313339.roa (hash: Om9Ul+tIE5T2JX51QQmc7zE+/WIdDQ4UiAdT/yJdWzg=)
7: 323430363a363130303a3a2f33362d3336203d3e203234313339.roa (hash: KS372/eSv2i+u4bHIZxCPYLZ9s7d9YBvzuhY+9gcHh4=)
8: 323430363a363130303a343030303a3a2f33362d3336203d3e203234313339.roa (hash: Nc+iO12T5PwOZ1omW+heF25TZ/63WJlMCVihooShVAQ=)
9: 323430363a363130303a393030303a3a2f33362d3336203d3e203234313339.roa (hash: Dtv0Bsg3TyRUQspcB/o4m7HQ4ZYGoW6tSld2VMwwtjA=)
10: 323430363a363130303a363030303a3a2f33362d3336203d3e203234313339.roa (hash: UMt0eG92riLUhT2wp1ct6ayH6yCz39YR/2h4dIcAXD8=)
11: 323430363a363130303a353030303a3a2f33362d3336203d3e203234313339.roa (hash: C6d2tt/JHqFwEp+CIe1fj6fwP2wy1hhZYhEeSVUzUjk=)
12: 323430363a363130303a3a2f33322d3332203d3e203234313339.roa (hash: gCEI8a7rZnOPEvUyXP287SD6JhgKuVmWO2SvTJg86oU=)
13: 323430363a363130303a613030303a3a2f33362d3336203d3e203234313339.roa (hash: uCVf0IR58lHW8JM2QosMidDxkjkeCVKFEmU0jlBsWbA=)
14: 323430363a363130303a333030303a3a2f33362d3336203d3e203234313339.roa (hash: TS+nJ2C1T6zSN9K1PgNbDsyykfkwEFSrUadsN4jzN4s=)
15: 323430363a363130303a653030303a3a2f33362d3336203d3e203234313339.roa (hash: YdeoxCMtUMQSHMJliyZeYa6pXWnFk43C0hpRVJSj0uk=)
16: AA39AE9FC417219D4A84D7759F82869F86905204.crl (hash: S4KWRroN8fsZAJO65D+8ugL0TDA05+23pQ5I3+r2nwk=)
17: 323430363a363130303a313030303a3a2f33362d3336203d3e203234313339.roa (hash: orp1bXNad5I7fyfSNRPjjEGSQNI3R+PNfxTZOqreeX0=)
18: 34332e3232352e37362e302f32322d3232203d3e203234313339.roa (hash: AfTewB5N2+NygTIMFLOJxv2PKqLLMf8AlOOICIxhrv0=)
19: 323430363a363130303a643030303a3a2f33362d3336203d3e203234313339.roa (hash: wqKR2OZj7TF30PoIDKbSL2mPIWb/uNK3lB7F9IauevM=)
20: 323430363a363130303a633030303a3a2f33362d3336203d3e203234313339.roa (hash: 5YdWn8WKBXq+DUYe3bznIwJ3ken9gwKvoEURrJwBcl4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:28:ee:22:02:4c:19:7b:df:45:70:1b:8e:c1:13:10:b0:03:18:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204
Validity
Not Before: May 29 16:53:03 2026 GMT
Not After : May 30 20:08:03 2026 GMT
Subject: CN=7E13B1B319C4ECCA874F317124AD381FDEBE2F3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:8f:20:2a:dd:38:19:c3:48:f3:80:a4:6d:
ce:c4:4d:ee:25:5b:64:24:fb:04:b1:3b:1d:67:92:
75:58:57:e5:0e:f1:23:62:33:c6:dd:a2:2c:0b:1a:
7a:37:86:e5:c1:0c:97:2a:da:9d:cb:86:5d:24:6b:
27:48:64:b1:e6:e0:b9:4c:a4:76:64:ac:72:ed:c4:
e6:25:5f:79:ff:57:46:c7:66:8d:f6:92:04:7b:ed:
73:25:ae:ed:68:53:65:8b:d6:b6:5f:fa:9e:b5:27:
59:5f:64:59:96:87:9b:c1:ec:6a:cd:97:fd:dc:c4:
3e:60:ec:b2:9c:c7:f1:f3:b4:87:87:c3:6f:43:34:
2b:1c:ad:2c:d1:4a:02:c8:c8:99:22:30:5c:b5:40:
26:1d:80:6b:19:d3:21:55:aa:20:74:ed:27:14:46:
0b:c9:93:51:49:16:17:ce:24:d3:59:66:0d:1a:2c:
fb:aa:8e:7c:2b:61:dd:d1:0e:1e:10:4a:2b:b2:9d:
e3:e9:22:67:07:cf:2f:ff:43:12:79:f5:99:9c:f9:
b8:2f:2e:91:87:96:fe:4c:7e:8b:a4:19:76:19:f5:
ad:1f:99:7e:54:83:fd:52:c6:b8:6d:26:27:44:11:
a0:4a:37:f1:3b:3e:95:00:29:2f:67:55:9d:73:0a:
18:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:13:B1:B3:19:C4:EC:CA:87:4F:31:71:24:AD:38:1F:DE:BE:2F:3A
X509v3 Authority Key Identifier:
keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2a:c6:81:41:5a:5b:68:06:0f:c0:c2:56:22:6f:1f:71:a5:
9e:03:68:f3:7b:bd:86:1f:10:de:4a:88:aa:e1:df:b6:55:e1:
50:a1:c2:77:98:c9:f0:00:64:da:28:ed:4d:ac:0b:67:56:5d:
4c:71:93:39:2d:60:dd:8f:76:dd:83:dd:37:b9:92:4a:3c:00:
9e:c7:b2:36:1c:7e:eb:56:4e:88:4e:89:de:ad:97:9e:48:3e:
4a:dc:73:bf:f7:e8:15:ce:75:08:0c:5f:db:19:94:e0:1c:99:
db:cf:e5:aa:42:d7:71:c1:ce:03:7d:46:83:c3:6e:40:8a:cc:
13:e3:46:49:49:92:7b:42:59:de:aa:ac:35:af:e1:28:55:07:
84:f7:51:9c:87:8d:a4:c9:67:52:58:b0:16:f9:9d:cd:bc:e9:
d3:a3:8e:22:26:23:83:d1:a2:95:1d:df:0b:71:22:7a:f6:88:
83:da:f1:e8:26:56:2c:75:ce:24:fa:d9:8c:0e:b0:ac:cb:d4:
3a:be:56:39:00:83:67:7a:46:f6:1c:c7:62:5d:a6:76:56:0a:
fe:fc:75:dc:ab:1d:39:10:90:53:3f:6f:52:a9:53:ca:f7:f3:
cd:67:4e:3b:e2:78:f9:d1:f5:ae:8f:7e:49:7f:88:8a:19:da:
12:18:a4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:03:34 2026 by rpki-client