
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
File: AA39AE9FC417219D4A84D7759F82869F86905204.mft (raw, json)
Hash identifier: 7YRH0nQIzvAfkwW6rHDKc6ImakLhMK1O5xx/CX5D4l8=
Subject key identifier: 4C:C4:AB:CA:88:CF:DA:BA:44:B6:6C:3B:06:F7:52:87:9F:A4:69:6E
Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
Certificate issuer: /CN=AA39AE9FC417219D4A84D7759F82869F86905204
Certificate serial: 5EFA3EA0454304D86C522779B5CAB93307CFD56A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
Manifest number: A8
Signing time: Tue 13 Oct 2026 17:58:13 +0000
Manifest this update: Tue 13 Oct 2026 17:53:13 +0000
Manifest next update: Sat 17 Oct 2026 03:56:13 +0000
Files and hashes: 1: 323430363a363130303a663030303a3a2f33362d3336203d3e203234313339.roa (hash: k7ppHJGvPeQCRuKbE+YGT+zFqwt94W47Aqe+iURX61s=)
2: 323430363a363130303a313030303a3a2f33362d3336203d3e203234313339.roa (hash: orp1bXNad5I7fyfSNRPjjEGSQNI3R+PNfxTZOqreeX0=)
3: 323430363a363130303a3a2f33322d3332203d3e203234313339.roa (hash: gCEI8a7rZnOPEvUyXP287SD6JhgKuVmWO2SvTJg86oU=)
4: 323430363a363130303a613030303a3a2f33362d3336203d3e203234313339.roa (hash: uCVf0IR58lHW8JM2QosMidDxkjkeCVKFEmU0jlBsWbA=)
5: 323430363a363130303a393030303a3a2f33362d3336203d3e203234313339.roa (hash: Dtv0Bsg3TyRUQspcB/o4m7HQ4ZYGoW6tSld2VMwwtjA=)
6: 323430363a363130303a3a2f33362d3336203d3e203234313339.roa (hash: KS372/eSv2i+u4bHIZxCPYLZ9s7d9YBvzuhY+9gcHh4=)
7: 323430363a363130303a333030303a3a2f33362d3336203d3e203234313339.roa (hash: TS+nJ2C1T6zSN9K1PgNbDsyykfkwEFSrUadsN4jzN4s=)
8: 323430363a363130303a633030303a3a2f33362d3336203d3e203234313339.roa (hash: 5YdWn8WKBXq+DUYe3bznIwJ3ken9gwKvoEURrJwBcl4=)
9: 323430363a363130303a343030303a3a2f33362d3336203d3e203234313339.roa (hash: Nc+iO12T5PwOZ1omW+heF25TZ/63WJlMCVihooShVAQ=)
10: 323430363a363130303a653030303a3a2f33362d3336203d3e203234313339.roa (hash: YdeoxCMtUMQSHMJliyZeYa6pXWnFk43C0hpRVJSj0uk=)
11: 323430363a363130303a353030303a3a2f33362d3336203d3e203234313339.roa (hash: C6d2tt/JHqFwEp+CIe1fj6fwP2wy1hhZYhEeSVUzUjk=)
12: 3130332e31372e3232382e302f32322d3232203d3e203234313339.roa (hash: WKBC1qRwt+7dMdzTZIqQRn/5SumS317itfT4IKDsIo4=)
13: 323430363a363130303a623030303a3a2f33362d3336203d3e203234313339.roa (hash: f5fHl8wuWkXU6z2K2DrpawCQDN9O6wL8Ty6pgADDBdA=)
14: 323430363a363130303a323030303a3a2f33362d3336203d3e203234313339.roa (hash: Om9Ul+tIE5T2JX51QQmc7zE+/WIdDQ4UiAdT/yJdWzg=)
15: 323430363a363130303a373030303a3a2f33362d3336203d3e203234313339.roa (hash: Be53bBYRJ3Fpj790gazG2H7V+LnaMLTPqrJR+W7OJ2Y=)
16: 323430363a363130303a363030303a3a2f33362d3336203d3e203234313339.roa (hash: UMt0eG92riLUhT2wp1ct6ayH6yCz39YR/2h4dIcAXD8=)
17: AA39AE9FC417219D4A84D7759F82869F86905204.crl (hash: x44dIag4UicT/C0HOKV52ZbyO7wX0GMblGc+p1ipVPE=)
18: 323430363a363130303a643030303a3a2f33362d3336203d3e203234313339.roa (hash: wqKR2OZj7TF30PoIDKbSL2mPIWb/uNK3lB7F9IauevM=)
19: 323430363a363130303a383030303a3a2f33362d3336203d3e203234313339.roa (hash: HQHQ7zcb2DUJkBE2yCKj5cQdoRT7QjDD4vyaoEjiVz0=)
20: 34332e3232352e37362e302f32322d3232203d3e203234313339.roa (hash: AfTewB5N2+NygTIMFLOJxv2PKqLLMf8AlOOICIxhrv0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 03:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:fa:3e:a0:45:43:04:d8:6c:52:27:79:b5:ca:b9:33:07:cf:d5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204
Validity
Not Before: Oct 13 17:53:13 2026 GMT
Not After : Oct 17 03:56:13 2026 GMT
Subject: CN=4CC4ABCA88CFDABA44B66C3B06F752879FA4696E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:3c:9d:12:98:63:c1:d4:b5:9a:8a:eb:c6:
ee:ea:41:2a:81:54:bc:c2:a0:08:bc:3d:ea:5c:75:
c3:b9:2d:42:15:b6:22:78:cf:37:03:6c:e7:67:cc:
7e:9b:86:ff:40:af:c2:2d:6e:c9:23:f5:f8:c3:62:
54:9c:56:d8:5f:70:87:82:54:6b:9a:0f:da:54:99:
e5:3a:ec:95:b4:c8:85:df:17:3a:d9:69:85:e1:79:
c4:43:a2:96:95:d3:4b:2d:d7:16:ac:94:d3:57:ae:
31:bd:23:3b:16:46:40:fa:f4:07:fb:70:d6:82:79:
8b:f2:8b:9e:c0:09:80:ac:2b:95:fc:94:bd:fb:c9:
78:a8:62:ca:cd:c5:ef:6b:3d:9c:31:17:29:13:30:
11:70:a7:56:47:67:9c:c9:2d:1d:34:20:bd:30:d8:
15:29:41:db:88:9e:72:fa:d0:69:af:dc:bc:da:94:
b3:ff:c6:c8:89:02:01:46:30:3b:eb:8e:00:d9:b5:
8b:08:e0:e1:e5:92:62:b2:cf:bd:9c:a2:99:0b:cb:
8e:f6:91:b6:3f:da:f9:57:7d:34:23:43:8f:84:44:
a7:a1:76:4a:0b:40:8c:1c:0d:c1:48:79:0a:83:96:
8d:53:87:d3:a3:09:fb:3d:05:18:98:1b:d9:7e:a1:
01:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C4:AB:CA:88:CF:DA:BA:44:B6:6C:3B:06:F7:52:87:9F:A4:69:6E
X509v3 Authority Key Identifier:
keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:94:49:27:63:3d:06:2e:35:7b:14:d7:5f:e0:b5:00:5a:6d:
0a:73:60:95:fc:e7:cf:c7:9c:2b:6c:2f:44:3e:f0:1a:ba:06:
65:0c:67:af:5a:b8:0f:a4:36:f6:de:94:21:1b:d1:ed:a7:c1:
f2:0c:2d:b8:2e:76:40:f0:ed:34:11:6a:ca:28:45:25:32:f7:
6a:3f:c3:91:a8:73:21:dc:46:c9:26:78:ee:72:97:38:e5:3c:
4b:c6:c5:4e:fd:e7:ae:69:5e:f7:9a:cc:71:95:29:43:64:16:
81:03:dc:69:21:0a:bc:a2:86:56:70:81:2a:94:8a:13:d3:29:
35:90:cc:fc:77:1f:55:90:2b:30:78:86:c1:2d:3c:9c:f8:61:
96:2e:9e:26:49:c9:f5:e4:f2:e7:74:e3:25:82:95:b3:9e:fd:
84:43:64:66:d3:76:d2:5e:d8:2e:95:b5:50:fe:ba:3e:aa:02:
77:c4:ee:32:e5:f2:51:cf:22:00:90:f1:79:f7:f3:c5:82:e4:
ea:21:a1:f5:d7:87:c0:8d:d3:93:08:f8:5a:a7:fb:3f:1f:41:
2e:ab:45:e1:58:85:d3:dc:f7:2a:d7:eb:0e:76:4a:3f:21:b3:
c1:81:31:ba:30:ec:b0:51:74:eb:db:8b:a1:f5:7f:72:2a:1c:
9c:03:b7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:14:28 2026 by rpki-client