
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
File: AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft (raw, json)
Hash identifier: j9XrYbYaez+l/L5Q0QEDp5om8b3HU87CX5Yf5kVt55c=
Subject key identifier: 58:4E:B1:CE:11:7F:1E:CA:98:06:56:EC:E0:20:6D:1D:C9:1F:AD:9B
Authority key identifier: AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5
Certificate issuer: /CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5
Certificate serial: 74D20A1F6E8E722BF2455DB9760515DD9076AB01
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
Manifest number: 0E
Signing time: Thu 11 Jun 2026 11:08:43 +0000
Manifest this update: Thu 11 Jun 2026 11:03:43 +0000
Manifest next update: Fri 12 Jun 2026 12:16:43 +0000
Files and hashes: 1: 3130332e3130372e3232302e302f32322d3232203d3e203233373234.roa (hash: M89JPpic5CUnz+XG6ZBO4FH5rzyVxYok5bjRrf4SiqU=)
2: 323430323a356634303a3a2f33322d3430203d3e203233373234.roa (hash: BYhl8Kes59vhOWYPWklbb97wfjM9JLHk+KCCzyARPMo=)
3: 323430323a356634303a3a2f33322d3430203d3e203535393632.roa (hash: J8V4fC0EcnnEJAvudK1CUUz+Anxis8iYxXNE/PbJCkw=)
4: 323430323a356634303a3a2f33322d3430203d3e2034383038.roa (hash: hEdpxSyQhKq8Tt6+4mX4pbyGXdjKHqDZ4gkvGobLPvk=)
5: 3130332e3130372e3232302e302f32322d3232203d3e203535393632.roa (hash: JjhOnvBAbyhHj25SJk42Z/mWkYT2CJtKWOeuYdrDSEM=)
6: 3130332e3130372e3232302e302f32322d3232203d3e20313331353433.roa (hash: vZBk5SOJuUm559ZMaJN8pTKtV568qUIjt4RbuicJAVo=)
7: 323430323a356634303a3a2f33322d3430203d3e20313331353433.roa (hash: Fr7SJF8nS/QnvygXHIyiT1ifZlb4UClCGvRUFGJ/Wbg=)
8: 323430323a356634303a3a2f33322d3430203d3e203435313135.roa (hash: ZN27c9UzjJ3wdK64dTmHf5rjrWHM5T8TdThVNyywHCg=)
9: 3130332e3130372e3232302e302f32322d3232203d3e203435313135.roa (hash: UjzzAVTAPjmbxCOqtX5OnTgoTMEPz4NjCFbWABjcjYU=)
10: AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl (hash: C04v7YqHDPjL4csAHtNbTifJ5JfAmXZSznzQcADJTJY=)
11: 3130332e3130372e3232302e302f32322d3232203d3e2034383038.roa (hash: lUxvbUf3vyf4fNMsQgH2jFFsF7urmoVrC7TTHQeV5x8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl
rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d2:0a:1f:6e:8e:72:2b:f2:45:5d:b9:76:05:15:dd:90:76:ab:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5
Validity
Not Before: Jun 11 11:03:43 2026 GMT
Not After : Jun 12 12:16:43 2026 GMT
Subject: CN=584EB1CE117F1ECA980656ECE0206D1DC91FAD9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:e0:ed:17:c2:e7:1f:01:c9:10:a0:86:55:
13:63:27:6a:9b:2a:b0:d6:ea:f7:1d:40:fe:3f:f5:
4b:80:5c:41:67:6f:a1:85:33:0f:6a:a0:c2:04:9a:
37:51:b8:3a:ca:c7:20:68:bd:ef:73:15:a6:9d:2e:
3c:6c:ae:25:bc:dc:1a:c8:86:c0:93:9c:b3:ac:63:
57:b9:d0:91:8f:cd:e1:cb:97:22:a1:8e:6f:0e:1d:
72:5d:e4:af:4c:01:1d:84:8a:c6:c7:6b:3e:41:18:
73:df:0a:d9:55:e8:61:2e:55:45:d0:69:89:a3:62:
9b:5a:a5:c9:d0:82:f3:f8:40:10:a0:be:6b:f7:8d:
0b:8e:f0:80:5c:3d:5e:18:47:e6:96:23:bb:4e:fb:
72:2e:22:32:1c:1c:88:79:a9:09:b4:84:2c:96:0f:
f8:a1:72:75:2f:23:e9:35:7b:03:2a:f6:ae:29:d8:
3f:50:dd:ab:b3:55:29:20:1d:dc:43:9c:f1:19:c0:
63:8c:44:2c:15:be:2a:42:5f:22:8d:fe:93:dd:4f:
7a:d1:c2:42:fc:27:9f:e1:b9:92:cd:78:d5:01:d1:
1c:69:d3:2a:2d:44:a1:89:1b:4f:f3:59:b4:f4:91:
eb:f4:1e:e0:95:68:73:fe:a9:f1:48:4c:4b:80:c1:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4E:B1:CE:11:7F:1E:CA:98:06:56:EC:E0:20:6D:1D:C9:1F:AD:9B
X509v3 Authority Key Identifier:
keyid:AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bd:65:0b:5e:cd:00:0b:c5:e4:81:00:ae:78:92:ed:6c:a4:
1d:cf:e7:17:d0:f6:a2:71:2b:80:37:3e:24:80:d0:c5:97:55:
84:d2:ac:db:3f:56:49:00:98:04:61:b2:32:ff:83:34:df:ff:
f3:cd:62:dc:11:00:e6:6b:ce:3d:f3:4f:31:fd:67:3a:ed:1e:
29:31:51:78:54:f7:a1:a0:b7:5d:87:6a:99:cd:56:8e:92:f9:
9d:51:f6:7f:19:44:cd:bb:1e:0f:63:ad:55:2a:c8:60:75:ea:
64:4b:44:8f:8c:e9:73:34:46:97:33:c1:e1:eb:89:41:19:18:
bd:0c:02:b9:4f:87:11:19:ce:ea:fd:5c:75:87:3e:9a:3d:9e:
59:d8:df:02:cb:c4:1b:f9:b5:8b:8e:79:9b:d1:c7:78:b6:ae:
b6:81:56:8c:b2:de:54:3f:fa:8c:fd:b0:a2:42:11:8b:f4:4f:
79:31:7b:78:fa:3d:3f:b6:e3:33:4b:e0:bc:f7:bd:b4:0b:79:
b9:95:38:10:f0:54:08:03:27:cf:94:6c:0e:1f:9e:ee:92:6b:
eb:78:22:56:d1:e2:6e:e4:c5:77:93:cf:10:f4:e4:af:ba:d3:
21:80:9c:13:0e:8b:7b:1f:3d:37:a5:48:d3:d1:a8:30:94:88:
21:85:dc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:33:30 2026 by rpki-client