
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
File: 30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft (raw, json)
Hash identifier: iYg5jv1hnSXM+vRz8NI4Qq/vpiq/gWOF3cF4BDEyBnc=
Subject key identifier: 24:72:CF:06:09:C5:82:AD:F4:61:DF:50:6D:4C:F9:0D:5F:3E:A4:ED
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 3833CF14F0DC127C693DB170A154477B3242E55E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
Manifest number: FF
Signing time: Sun 26 Jul 2026 22:37:44 +0000
Manifest this update: Sun 26 Jul 2026 22:32:44 +0000
Manifest next update: Mon 27 Jul 2026 23:12:44 +0000
Files and hashes: 1: AS58542.roa (hash: AEO/fpBXkvkzlHfKHc7bxC8ekrI/SS0qPJSMlWtqud8=)
2: 30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl (hash: WSAYSbICpfkpkxBllkvF0TLNxgl3u7U2a510zzgF6F8=)
3: AS4808.roa (hash: tasK4cpH9M4PtTXCeNeZvukouo7AYHCM07ZHpy7dkSA=)
4: AS23724.roa (hash: rQG0L3U9tMwNofaMnW3Xu0RjhTwBDcEyS9DHW3lp+fE=)
5: AS137718.roa (hash: x/jz4ghwv8Kdsn3wjAGWBS2nf863CLQpDdrI/5iiwI4=)
6: AS136958.roa (hash: 5MuxDvzh5jSL7gxh3flkF/2u78NC8pzzs/pM0KoP7Dk=)
7: AS58539.roa (hash: 5b56r+15342aRmOBeN/+dRPYsRzKMNQt0YSbhErfaMk=)
8: AS138421.roa (hash: 1J1MoWEmlIzHO1jzmqXyT5+DCPwDEGkXxEOB97W9x6o=)
9: AS58466.roa (hash: dYgaskG/ajSMyjYl8h58mtZD6nA9uHJMtAREK6ikuSU=)
10: AS4811.roa (hash: tOgXPdkc4vojliZLRFzh1l2XJvQRfxjErd6BbYitfuo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 23:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:33:cf:14:f0:dc:12:7c:69:3d:b1:70:a1:54:47:7b:32:42:e5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Jul 26 22:32:44 2026 GMT
Not After : Jul 27 23:12:44 2026 GMT
Subject: CN=2472CF0609C582ADF461DF506D4CF90D5F3EA4ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:4d:e2:bb:00:45:90:a2:90:94:9d:45:c0:
87:39:b5:30:4b:76:5e:19:86:f6:95:5f:e6:51:d2:
db:89:85:5f:b3:51:71:dd:4f:d1:36:54:b0:f1:80:
bc:f1:12:41:3a:9f:54:ae:0f:b8:36:e9:50:38:26:
1f:50:b3:49:3a:3a:44:42:a4:c0:eb:76:0c:0c:a8:
b7:59:15:25:c9:1c:10:75:ca:fd:c9:60:d2:3b:1e:
c3:7b:e0:f0:bf:ac:af:15:0b:c5:16:3c:f0:10:8d:
fa:4a:cd:f0:8c:b9:6c:6e:9a:e4:c7:c6:19:dd:0e:
d5:7a:b1:33:04:37:47:f9:02:72:cb:41:7f:a9:11:
cf:2b:af:60:cb:95:dc:2d:f8:28:d6:83:06:28:6b:
e5:77:8b:f2:7d:60:23:e4:eb:e1:3c:92:99:34:b0:
65:e2:03:b4:68:dc:db:5b:bf:0e:5b:70:65:09:e7:
87:e5:64:d1:6b:86:6e:d9:13:f3:52:28:d2:c7:4f:
0b:d0:d1:66:bd:2a:99:8f:aa:13:5d:1b:8f:84:e6:
67:28:91:5a:46:36:2c:61:0b:5a:55:a0:f1:ee:e6:
54:5f:d0:45:a0:6b:47:8f:89:55:06:46:c7:2a:1f:
5e:f8:ca:09:43:77:de:80:58:6c:f4:e9:34:ca:e6:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:72:CF:06:09:C5:82:AD:F4:61:DF:50:6D:4C:F9:0D:5F:3E:A4:ED
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f4:fd:f9:a8:c0:65:35:f7:9a:5a:05:4f:21:5e:e0:23:d2:
8d:f1:e0:8e:6a:13:79:f3:23:65:18:28:a5:18:e2:55:c9:f6:
2a:12:a1:19:76:65:dc:1f:6a:63:de:37:b7:2f:31:c0:e2:ba:
33:54:a8:18:f9:aa:0d:63:52:d3:f6:79:5a:6f:a6:ca:32:86:
fc:24:d9:c1:cc:33:ed:67:51:bf:5b:8e:a3:49:00:39:3b:77:
6c:09:0b:3d:93:b5:0c:db:00:4a:7f:0f:8f:1c:28:6d:b5:d6:
bb:f0:f6:22:36:a5:6c:56:a0:8b:f3:8e:1b:ac:19:b9:f6:dc:
5f:22:14:18:71:80:08:c1:cd:ef:c9:20:a1:80:bd:b7:fd:b2:
19:4f:d9:89:5f:92:cf:5f:dc:4f:5c:52:5b:65:42:4a:97:3a:
61:4e:f9:33:cc:71:82:f5:91:b2:bb:60:9a:bd:e2:14:b2:e8:
74:68:6b:04:d5:60:fc:3e:4a:80:e2:d2:3a:86:be:d2:ad:3e:
b7:66:3e:e4:fa:1b:5d:76:19:72:d5:d2:99:e2:ae:a0:88:ef:
7e:a3:41:35:a3:79:33:4f:b6:b8:f9:2c:a2:83:4e:db:97:95:
7a:ef:f6:74:46:ee:08:a7:66:fc:e9:ee:e0:a6:eb:f7:bc:94:
cb:92:11:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:12:17 2026 by rpki-client