
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
File: AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft (raw, json)
Hash identifier: uH3AhKm7O/gSbSNcnE/0fdImfY2sV9J3TCjgwWEODBU=
Subject key identifier: AD:1E:24:57:07:30:03:E6:98:7D:65:B3:BC:AB:13:56:41:C0:ED:5C
Authority key identifier: AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5
Certificate issuer: /CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5
Certificate serial: 4CC2C543B7238FB0B7F7177C1C25311A53B8102F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
Manifest number: 7C
Signing time: Thu 10 Sep 2026 04:05:48 +0000
Manifest this update: Thu 10 Sep 2026 04:00:48 +0000
Manifest next update: Sun 13 Sep 2026 07:34:48 +0000
Files and hashes: 1: 3130332e3130372e3232302e302f32322d3232203d3e203233373234.roa (hash: M89JPpic5CUnz+XG6ZBO4FH5rzyVxYok5bjRrf4SiqU=)
2: 323430323a356634303a3a2f33322d3430203d3e203535393632.roa (hash: J8V4fC0EcnnEJAvudK1CUUz+Anxis8iYxXNE/PbJCkw=)
3: AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl (hash: 5PPp8bpUop4SoxZpJLR13XFjZjXkX1uNCpANCQMl+Gs=)
4: 3130332e3130372e3232302e302f32322d3232203d3e203535393632.roa (hash: JjhOnvBAbyhHj25SJk42Z/mWkYT2CJtKWOeuYdrDSEM=)
5: 3130332e3130372e3232302e302f32322d3232203d3e2034383038.roa (hash: lUxvbUf3vyf4fNMsQgH2jFFsF7urmoVrC7TTHQeV5x8=)
6: 323430323a356634303a3a2f33322d3430203d3e20313331353433.roa (hash: Fr7SJF8nS/QnvygXHIyiT1ifZlb4UClCGvRUFGJ/Wbg=)
7: 3130332e3130372e3232302e302f32322d3232203d3e203435313135.roa (hash: UjzzAVTAPjmbxCOqtX5OnTgoTMEPz4NjCFbWABjcjYU=)
8: 323430323a356634303a3a2f33322d3430203d3e2034383038.roa (hash: hEdpxSyQhKq8Tt6+4mX4pbyGXdjKHqDZ4gkvGobLPvk=)
9: 323430323a356634303a3a2f33322d3430203d3e203233373234.roa (hash: BYhl8Kes59vhOWYPWklbb97wfjM9JLHk+KCCzyARPMo=)
10: 323430323a356634303a3a2f33322d3430203d3e203435313135.roa (hash: ZN27c9UzjJ3wdK64dTmHf5rjrWHM5T8TdThVNyywHCg=)
11: 3130332e3130372e3232302e302f32322d3232203d3e20313331353433.roa (hash: vZBk5SOJuUm559ZMaJN8pTKtV568qUIjt4RbuicJAVo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl
rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Sep 2026 00:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:c2:c5:43:b7:23:8f:b0:b7:f7:17:7c:1c:25:31:1a:53:b8:10:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5
Validity
Not Before: Sep 10 04:00:48 2026 GMT
Not After : Sep 13 07:34:48 2026 GMT
Subject: CN=AD1E2457073003E6987D65B3BCAB135641C0ED5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:67:ae:b5:94:c2:20:0c:f6:f9:98:d8:17:
a5:54:bd:a5:17:7a:c7:69:a9:e7:29:4a:51:ad:93:
61:6b:b0:14:24:c7:01:0f:9a:4c:14:d6:f9:54:d0:
e0:21:21:78:cd:2c:1b:6c:8e:16:34:5a:26:2e:1f:
09:7a:09:08:aa:61:77:d7:9f:b8:99:de:9d:5e:ce:
64:0a:07:8d:e3:6d:fa:50:f0:c6:10:31:a8:79:23:
b1:55:4b:5e:28:3c:0a:a8:4c:4e:58:24:e5:74:3e:
80:1c:a0:c7:ce:a0:cf:34:0e:99:7b:d7:89:a6:29:
1f:4f:09:34:b1:ba:f4:64:8d:59:a1:5e:a9:d8:5e:
7f:45:34:87:d7:79:e3:35:88:69:94:7b:40:d6:8b:
2f:f1:1c:00:52:52:1b:4d:d6:94:ad:37:27:f8:c1:
16:f0:46:ee:e9:53:3b:a6:7b:4d:82:94:bf:80:c3:
a7:8f:cf:9d:0f:f5:a7:a0:3f:4d:8d:84:de:32:df:
39:e5:bb:01:b6:59:47:a1:3f:46:45:c1:39:6f:ce:
03:00:ee:9b:6b:e3:74:d5:fb:d4:3a:91:c2:8e:b0:
0d:e6:22:bf:66:0c:31:88:42:db:c8:c9:34:e9:3e:
ff:fe:60:62:8d:9e:c3:c7:4b:ac:3d:96:83:1d:29:
05:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1E:24:57:07:30:03:E6:98:7D:65:B3:BC:AB:13:56:41:C0:ED:5C
X509v3 Authority Key Identifier:
keyid:AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c4:0f:28:69:d8:c9:3d:8e:87:58:45:be:97:28:da:ca:b0:
75:1d:0c:c3:be:69:6d:b2:8c:15:c6:68:1c:3b:85:43:f4:42:
a2:22:7a:80:2c:c7:df:6c:69:79:08:a2:10:21:f1:78:17:ac:
ad:37:9c:11:fe:cf:4f:20:02:49:01:e4:99:ca:46:7a:bf:b5:
7f:ab:cb:a9:62:08:7e:4b:e4:fd:17:33:64:77:b3:48:71:27:
e0:b0:1b:f0:74:37:91:6c:b8:13:6c:a8:90:f1:96:5b:3e:6f:
d9:48:20:c1:88:ba:fb:fc:4c:56:12:44:06:84:fb:7f:6e:0d:
f0:c4:05:f4:e3:ab:2f:08:a7:63:21:f1:c1:b3:dd:26:23:68:
f5:31:86:1a:73:9b:94:0d:0f:c4:04:e2:ed:d8:00:33:2e:25:
3c:bf:d6:b0:9e:3e:1f:d6:93:ee:be:1b:38:a4:44:0e:d5:28:
c9:de:7f:8e:80:bd:65:e9:93:da:ec:03:9f:b8:37:f1:40:ee:
7b:18:4c:b3:94:4f:c4:d1:ae:58:4f:12:48:dd:0c:4c:97:e6:
2a:0a:d4:5c:da:c0:14:9c:05:ce:88:3e:65:5c:ed:2a:30:d5:
69:ef:b3:23:25:f4:c8:40:b2:c9:07:39:ac:b0:17:9e:e3:bd:
af:20:65:d0
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUTMLFQ7cjj7C39xd8HCUxGlO4EC8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVD
REMxMTdCNTAeFw0yNjA5MTAwNDAwNDhaFw0yNjA5MTMwNzM0NDhaMDMxMTAvBgNV
BAMTKEFEMUUyNDU3MDczMDAzRTY5ODdENjVCM0JDQUIxMzU2NDFDMEVENUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLkWeutZTCIAz2+ZjYF6VUvaUX
esdpqecpSlGtk2FrsBQkxwEPmkwU1vlU0OAhIXjNLBtsjhY0WiYuHwl6CQiqYXfX
n7iZ3p1ezmQKB43jbfpQ8MYQMah5I7FVS14oPAqoTE5YJOV0PoAcoMfOoM80Dpl7
14mmKR9PCTSxuvRkjVmhXqnYXn9FNIfXeeM1iGmUe0DWiy/xHABSUhtN1pStNyf4
wRbwRu7pUzume02ClL+Aw6ePz50P9aegP02NhN4y3znluwG2WUehP0ZFwTlvzgMA
7ptr43TV+9Q6kcKOsA3mIr9mDDGIQtvIyTTpPv/+YGKNnsPHS6w9loMdKQX1AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUrR4kVwcwA+aYfWWzvKsTVkHA7VwwHwYDVR0j
BBgwFoAUq3DTbc6HF9I4n/+5utzGDs3BF7UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDEwODU4MDY2MDc3Mjg4My8wL0FCNzBEMzZEQ0U4NzE3RDIzODlGRkZCOUJBREND
NjBFQ0RDMTE3QjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVDREMxMTdCNS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTQxMDg1ODA2NjA3NzI4ODMvMC9BQjcwRDM2RENFODcx
N0QyMzg5RkZGQjlCQURDQzYwRUNEQzExN0I1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu8QPKGnYyT2O
h1hFvpco2sqwdR0Mw75pbbKMFcZoHDuFQ/RCoiJ6gCzH32xpeQiiECHxeBesrTec
Ef7PTyACSQHkmcpGer+1f6vLqWIIfkvk/RczZHezSHEn4LAb8HQ3kWy4E2yokPGW
Wz5v2UggwYi6+/xMVhJEBoT7f24N8MQF9OOrLwinYyHxwbPdJiNo9TGGGnOblA0P
xATi7dgAMy4lPL/WsJ4+H9aT7r4bOKREDtUoyd5/joC9ZemT2uwDn7g38UDuexhM
s5RPxNGuWE8SSN0MTJfmKgrUXNrAFJwFzog+ZVztKjDVae+zIyX0yECyyQc5rLAX
nuO9ryBl0A==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:59:03 2026 by rpki-client