
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
File: 30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft (raw, json)
Hash identifier: YAfPdM/cNL0BVXRs/3mj5AymimSYwcX0T8MMaWtW5gk=
Subject key identifier: B6:F9:DF:18:53:0E:6F:60:E3:E8:2C:7D:7A:0E:1F:71:B2:EF:6F:1E
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 1F7030DCB4D6857640A46CAC8FF8326A603C54BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
Manifest number: 0145
Signing time: Sat 24 Oct 2026 22:47:01 +0000
Manifest this update: Sat 24 Oct 2026 22:42:01 +0000
Manifest next update: Wed 28 Oct 2026 00:44:01 +0000
Files and hashes: 1: AS138421.roa (hash: 1J1MoWEmlIzHO1jzmqXyT5+DCPwDEGkXxEOB97W9x6o=)
2: AS4808.roa (hash: tasK4cpH9M4PtTXCeNeZvukouo7AYHCM07ZHpy7dkSA=)
3: AS137718.roa (hash: dIgp2CS8swLeW+S+MZoTiCkhV84Wwb4gJZ0pdiojUzA=)
4: AS58466.roa (hash: dYgaskG/ajSMyjYl8h58mtZD6nA9uHJMtAREK6ikuSU=)
5: AS58542.roa (hash: AEO/fpBXkvkzlHfKHc7bxC8ekrI/SS0qPJSMlWtqud8=)
6: AS136958.roa (hash: 5MuxDvzh5jSL7gxh3flkF/2u78NC8pzzs/pM0KoP7Dk=)
7: AS4811.roa (hash: iNnyZqiBbOKcCg6RzRmZ1zCnEpcRwk2g+ghfT4gKQL4=)
8: AS23724.roa (hash: rQG0L3U9tMwNofaMnW3Xu0RjhTwBDcEyS9DHW3lp+fE=)
9: 30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl (hash: RhZx/dM31VXdWaH6qfPZzd4yV4sTsb4y4r8+sqzcdf4=)
10: AS58539.roa (hash: 5b56r+15342aRmOBeN/+dRPYsRzKMNQt0YSbhErfaMk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 00:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:70:30:dc:b4:d6:85:76:40:a4:6c:ac:8f:f8:32:6a:60:3c:54:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Oct 24 22:42:01 2026 GMT
Not After : Oct 28 00:44:01 2026 GMT
Subject: CN=B6F9DF18530E6F60E3E82C7D7A0E1F71B2EF6F1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f7:8f:ad:3a:35:c6:17:35:2b:99:e2:80:d0:
0d:31:f5:c3:da:21:66:88:85:bc:95:f6:e0:9b:5f:
60:76:24:ec:a8:a7:c6:4a:38:69:be:42:96:3c:a0:
06:42:b3:4b:40:90:e5:90:d4:b9:79:7c:c4:16:d6:
5a:d0:23:8d:be:a1:30:83:bb:03:fc:7f:de:ef:b4:
f8:6e:27:37:6d:a1:f8:8d:60:0b:8e:8b:ca:56:3f:
d4:d6:d9:04:4c:65:94:1a:2b:21:92:6e:98:69:3a:
fd:a6:1d:58:4f:ea:5e:55:63:36:c8:17:09:5b:35:
51:48:4d:ca:e1:5a:ce:19:b8:0f:b6:8f:d6:33:53:
31:66:80:72:ab:4c:c2:77:2e:72:bf:31:b1:45:af:
69:af:76:c3:c7:56:74:86:b3:da:4d:1d:dd:1d:c0:
d4:95:11:dd:a3:fe:3e:b8:fc:14:d1:9c:d4:bc:9c:
85:16:98:7c:f5:2b:67:2c:c8:6f:7a:df:cb:6f:8f:
44:e7:19:56:94:da:97:04:6f:5f:94:6a:b4:dc:52:
23:7d:be:a5:16:42:f3:bf:00:89:05:1d:e5:ed:27:
7f:ad:17:a1:f7:96:9b:1d:a2:96:f9:6e:89:40:d8:
b2:bc:60:87:9c:09:e7:cb:7c:18:a1:2e:49:a6:cc:
9f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F9:DF:18:53:0E:6F:60:E3:E8:2C:7D:7A:0E:1F:71:B2:EF:6F:1E
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cb:98:0f:67:76:81:d7:ae:90:8a:29:3b:01:7b:33:b8:4b:
b8:b6:a0:e0:f9:ad:35:e9:ab:75:2f:eb:8c:64:52:50:76:ee:
e8:4a:62:3a:ea:a4:de:51:29:f7:01:ad:4b:3d:8c:77:19:7c:
ca:2e:98:b1:85:61:46:a9:1b:1d:2f:3d:42:60:62:1b:cb:46:
33:dd:f3:96:a0:1d:a9:7c:d9:5d:a7:b8:d1:c2:79:88:d7:66:
6d:03:db:f9:7e:85:51:50:85:3a:26:62:64:9e:9f:a9:63:9b:
6d:d6:3a:b8:d1:a0:ba:74:95:e6:df:a9:0e:85:9c:ee:c6:d3:
04:21:71:2f:f4:3c:f4:91:9b:db:69:f1:24:50:1f:cd:03:be:
90:9b:5d:b1:49:7a:9d:5e:03:73:a5:77:8d:f4:fd:0a:4c:0c:
5c:90:20:4c:b1:54:9f:89:96:55:f4:88:45:d7:3e:ab:98:50:
fd:b4:26:dd:de:62:e7:4f:38:73:aa:b9:63:47:46:93:1f:9a:
d0:84:d4:77:94:f6:b1:34:eb:83:3a:32:a6:fe:f6:18:23:83:
27:ca:03:76:f3:39:8a:70:7e:10:d0:32:66:ed:82:86:88:22:
0e:83:a8:85:7c:3e:d6:2d:58:84:96:ba:e2:39:4c:12:6f:aa:
71:4d:c5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:55:54 2026 by rpki-client