
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
File: AA39AE9FC417219D4A84D7759F82869F86905204.mft (raw, json)
Hash identifier: mE9sEG84XJIg33Q1kQT7b4Y3FyozwtuIw5UVdbo1HzE=
Subject key identifier: A1:04:15:1F:9D:49:1B:0A:3D:77:83:D3:93:5F:A1:43:3E:8C:D9:DC
Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
Certificate issuer: /CN=AA39AE9FC417219D4A84D7759F82869F86905204
Certificate serial: 3F6A6C2A78060D4C2843E76917AD0F4197C0E4AF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
Manifest number: 58
Signing time: Tue 14 Jul 2026 14:36:30 +0000
Manifest this update: Tue 14 Jul 2026 14:31:30 +0000
Manifest next update: Wed 15 Jul 2026 16:44:30 +0000
Files and hashes: 1: 323430363a363130303a363030303a3a2f33362d3336203d3e203234313339.roa (hash: UMt0eG92riLUhT2wp1ct6ayH6yCz39YR/2h4dIcAXD8=)
2: 323430363a363130303a633030303a3a2f33362d3336203d3e203234313339.roa (hash: 5YdWn8WKBXq+DUYe3bznIwJ3ken9gwKvoEURrJwBcl4=)
3: 323430363a363130303a383030303a3a2f33362d3336203d3e203234313339.roa (hash: HQHQ7zcb2DUJkBE2yCKj5cQdoRT7QjDD4vyaoEjiVz0=)
4: AA39AE9FC417219D4A84D7759F82869F86905204.crl (hash: TtXfatrazOuPYXut468lyBi/+o0lPJyNTgENrLzV0hg=)
5: 323430363a363130303a613030303a3a2f33362d3336203d3e203234313339.roa (hash: uCVf0IR58lHW8JM2QosMidDxkjkeCVKFEmU0jlBsWbA=)
6: 323430363a363130303a3a2f33362d3336203d3e203234313339.roa (hash: KS372/eSv2i+u4bHIZxCPYLZ9s7d9YBvzuhY+9gcHh4=)
7: 323430363a363130303a393030303a3a2f33362d3336203d3e203234313339.roa (hash: Dtv0Bsg3TyRUQspcB/o4m7HQ4ZYGoW6tSld2VMwwtjA=)
8: 323430363a363130303a333030303a3a2f33362d3336203d3e203234313339.roa (hash: TS+nJ2C1T6zSN9K1PgNbDsyykfkwEFSrUadsN4jzN4s=)
9: 323430363a363130303a323030303a3a2f33362d3336203d3e203234313339.roa (hash: Om9Ul+tIE5T2JX51QQmc7zE+/WIdDQ4UiAdT/yJdWzg=)
10: 34332e3232352e37362e302f32322d3232203d3e203234313339.roa (hash: AfTewB5N2+NygTIMFLOJxv2PKqLLMf8AlOOICIxhrv0=)
11: 323430363a363130303a343030303a3a2f33362d3336203d3e203234313339.roa (hash: Nc+iO12T5PwOZ1omW+heF25TZ/63WJlMCVihooShVAQ=)
12: 3130332e31372e3232382e302f32322d3232203d3e203234313339.roa (hash: WKBC1qRwt+7dMdzTZIqQRn/5SumS317itfT4IKDsIo4=)
13: 323430363a363130303a663030303a3a2f33362d3336203d3e203234313339.roa (hash: k7ppHJGvPeQCRuKbE+YGT+zFqwt94W47Aqe+iURX61s=)
14: 323430363a363130303a373030303a3a2f33362d3336203d3e203234313339.roa (hash: Be53bBYRJ3Fpj790gazG2H7V+LnaMLTPqrJR+W7OJ2Y=)
15: 323430363a363130303a353030303a3a2f33362d3336203d3e203234313339.roa (hash: C6d2tt/JHqFwEp+CIe1fj6fwP2wy1hhZYhEeSVUzUjk=)
16: 323430363a363130303a653030303a3a2f33362d3336203d3e203234313339.roa (hash: YdeoxCMtUMQSHMJliyZeYa6pXWnFk43C0hpRVJSj0uk=)
17: 323430363a363130303a3a2f33322d3332203d3e203234313339.roa (hash: gCEI8a7rZnOPEvUyXP287SD6JhgKuVmWO2SvTJg86oU=)
18: 323430363a363130303a643030303a3a2f33362d3336203d3e203234313339.roa (hash: wqKR2OZj7TF30PoIDKbSL2mPIWb/uNK3lB7F9IauevM=)
19: 323430363a363130303a313030303a3a2f33362d3336203d3e203234313339.roa (hash: orp1bXNad5I7fyfSNRPjjEGSQNI3R+PNfxTZOqreeX0=)
20: 323430363a363130303a623030303a3a2f33362d3336203d3e203234313339.roa (hash: f5fHl8wuWkXU6z2K2DrpawCQDN9O6wL8Ty6pgADDBdA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 16:44:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:6a:6c:2a:78:06:0d:4c:28:43:e7:69:17:ad:0f:41:97:c0:e4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204
Validity
Not Before: Jul 14 14:31:30 2026 GMT
Not After : Jul 15 16:44:30 2026 GMT
Subject: CN=A104151F9D491B0A3D7783D3935FA1433E8CD9DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:65:df:bb:6d:3e:7d:a5:eb:a6:7f:8a:a4:
f6:e9:d7:ea:3a:1d:9a:6e:86:a9:ad:e4:09:a9:17:
f2:c1:5c:e6:c2:a6:b9:e2:c8:d5:c3:21:4a:88:c5:
e0:20:5e:6c:02:73:b7:ea:c8:00:15:32:32:22:eb:
4c:46:08:08:e1:54:e9:dc:c0:77:e0:d1:c3:a6:d6:
39:53:d5:67:a1:85:9f:99:bd:16:9c:13:ab:0f:c2:
b6:ea:9d:45:ef:36:49:eb:f4:84:1a:9f:ea:1e:c0:
c8:61:7b:bb:b8:c2:cd:39:87:d6:8a:de:83:e3:b0:
f1:d9:2c:de:36:95:3d:92:f4:57:41:49:00:84:93:
64:90:f2:62:c8:34:5e:21:5b:28:64:a7:ff:3a:ab:
c6:18:c9:6c:0b:f2:98:be:5b:59:b7:51:1d:95:7b:
54:6c:f1:b4:11:fe:71:b6:ba:3e:b7:13:fe:84:7c:
71:80:2d:7c:77:d8:01:f6:7e:c9:a2:30:2d:e1:1e:
f4:91:e8:49:9c:a8:c4:d7:bf:72:fc:07:81:2c:80:
2a:43:d8:ea:23:ae:94:b0:7b:ea:9b:b6:45:fc:ef:
8d:8e:5f:f3:b9:f6:0b:ec:37:34:49:99:61:8a:74:
b5:fc:ae:69:38:3f:35:ea:4a:57:3b:92:7c:c3:da:
dd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:04:15:1F:9D:49:1B:0A:3D:77:83:D3:93:5F:A1:43:3E:8C:D9:DC
X509v3 Authority Key Identifier:
keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ba:e8:f9:f9:eb:c1:75:97:37:ae:3f:f2:88:7d:9a:05:57:
09:aa:9d:b5:18:80:80:f8:9d:d1:35:01:da:9d:d7:4f:b3:80:
50:df:23:5c:39:18:db:8e:7c:86:0c:0d:5d:98:36:d2:2d:a3:
e4:2a:f0:ce:42:3a:d6:d2:6a:7a:09:18:d5:2a:34:c7:cd:ff:
f1:94:54:ff:25:23:d5:a6:7f:3e:5f:38:b6:ef:2a:c2:51:37:
fc:7f:a9:55:96:20:1b:da:5f:95:33:c9:69:93:b0:cc:f7:45:
17:16:c5:c0:93:b7:3e:de:8e:25:71:f8:49:ea:c7:f9:08:98:
1b:ef:50:5b:80:8d:18:67:b8:5b:8c:1a:00:ee:dd:29:e6:fd:
9f:84:09:2f:d0:b3:02:db:5b:c1:2b:a7:55:c9:97:01:d0:b7:
5b:88:fa:f9:f1:5f:68:30:ef:9b:04:98:e1:d1:13:ae:df:68:
6c:8d:60:3d:f2:37:0b:59:a8:86:cd:2b:1c:65:34:4e:49:6f:
a2:07:c1:09:b5:39:e1:85:1a:38:a3:33:40:26:28:2f:2e:d0:
b9:99:35:7a:95:aa:45:b7:18:28:ca:c9:18:2a:38:a6:c5:2a:
5c:dd:05:cf:2d:af:bf:30:61:bd:7d:b6:7e:10:b5:64:1f:c7:
d1:2f:15:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:08:44 2026 by rpki-client