
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft
File: AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft (raw, json)
Hash identifier: 4hj++ZON0HlF/apMhwOtHnlabUc3dP+3OYninKeXuDI=
Subject key identifier: F2:A0:CD:76:6E:31:F3:DF:5C:2F:B3:82:4D:9D:41:44:57:88:FC:04
Authority key identifier: AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3
Certificate issuer: /CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3
Certificate serial: 4734C25B69E4028C8C3118E138833881D955947B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft
Manifest number: 08
Signing time: Fri 29 May 2026 04:22:32 +0000
Manifest this update: Fri 29 May 2026 04:17:32 +0000
Manifest next update: Sat 30 May 2026 05:50:32 +0000
Files and hashes: 1: AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl (hash: MnJa/gfKQAhkbOa5grr5zL/n0ghUOu74ozNWYDqiWYE=)
2: 3231392e3233322e3131322e302f32342d3234203d3e2034383038.roa (hash: OO8vRmAkg4+dMfmbzdTiV+9Mv+Az21ASxb9SPkL1gG8=)
3: 3231392e3233322e3131322e302f32342d3234203d3e2034383437.roa (hash: Jp1MXYQSoxZLKxbSRSiNVvTuPRq8VuF7qKjxwYtl1Ko=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl
rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 05:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:34:c2:5b:69:e4:02:8c:8c:31:18:e1:38:83:38:81:d9:55:94:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3
Validity
Not Before: May 29 04:17:32 2026 GMT
Not After : May 30 05:50:32 2026 GMT
Subject: CN=F2A0CD766E31F3DF5C2FB3824D9D41445788FC04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e7:26:e1:65:0d:b2:19:2a:f3:6e:05:1f:5a:
ba:3d:9a:6e:08:49:c0:28:24:45:40:8f:4a:5d:fd:
8e:68:d5:03:c9:71:7f:71:63:dc:07:55:fc:da:db:
b3:4e:24:42:f5:ec:f0:9e:86:3b:ce:cf:60:e8:aa:
50:26:9a:77:21:b9:54:80:90:49:77:dd:3a:fb:cf:
1e:4a:20:0c:79:8e:1a:85:54:d3:10:a4:7a:5b:1d:
eb:ad:8f:af:24:de:da:80:f2:f4:b4:97:e1:9e:59:
87:ea:67:d4:e7:0a:8b:49:76:fd:51:53:9b:42:a1:
ab:ce:b7:64:f3:b9:cd:5b:be:9f:9f:d5:18:9d:93:
6d:f5:c0:0d:6b:6c:09:36:b4:2a:91:45:fc:6f:c2:
3f:d6:f0:f2:ac:0d:25:16:41:25:62:63:5f:e1:90:
05:1c:aa:2d:1f:38:15:97:d4:d6:0d:2c:4b:26:4f:
74:56:29:bd:6c:83:49:80:40:0e:55:dd:0a:55:bd:
de:bb:42:ee:e6:28:cc:09:aa:ce:5c:a7:d4:04:8d:
e3:98:1c:40:6a:0f:e1:88:42:64:41:a9:f2:6c:b8:
0e:8a:12:a8:0a:73:6a:06:4b:8c:d1:09:45:96:5d:
9e:73:f8:36:7c:cc:d1:4a:a0:73:af:e1:c1:59:7d:
74:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A0:CD:76:6E:31:F3:DF:5C:2F:B3:82:4D:9D:41:44:57:88:FC:04
X509v3 Authority Key Identifier:
keyid:AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:38:ed:58:3b:8b:0a:8f:ef:5d:39:10:bd:16:37:41:a1:9e:
87:7b:00:56:7e:cf:24:44:6f:22:8e:9a:41:7f:a1:70:4e:98:
51:fd:67:10:65:44:2f:98:d2:9e:96:0b:ce:50:6a:e6:42:a6:
11:a8:c9:4e:40:1d:e9:33:a2:44:57:8f:89:63:5a:7d:9c:1e:
00:63:cd:3c:85:b9:ab:b3:d3:3c:51:ab:1e:62:19:1d:9d:32:
a6:12:28:22:42:38:bb:d6:6c:ff:69:7a:7a:1b:8d:85:e1:1e:
6b:ab:75:eb:c3:eb:44:55:7b:94:ec:78:58:51:f4:55:40:5f:
80:5b:4b:9c:95:3c:42:db:76:16:a9:de:3b:4f:14:f3:cc:97:
0c:eb:e5:c4:f5:1c:03:94:8f:cd:f2:16:c2:4a:41:98:39:c4:
c5:44:4c:07:13:ef:72:42:2e:70:04:a8:97:52:16:c4:2d:78:
4f:43:85:ef:51:d0:91:8d:eb:b2:5d:e2:e2:3d:1b:a9:e3:83:
7d:ac:c0:96:04:b1:7f:f6:2e:d0:dd:2d:de:44:5f:8b:93:33:
00:b4:9a:06:c5:94:35:3f:c8:9c:58:56:c1:ff:58:41:e7:d4:
a4:78:4b:cc:e2:8b:bc:49:86:92:51:31:de:16:ac:63:a5:80:
a5:1e:bf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:54 2026 by rpki-client