
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
File: 845BB307E2A1100E89FA0C939A9389686796F0F6.mft (raw, json)
Hash identifier: rFobuHa5U4hUIk6nzwcvpGlKD4yqhItzS8rQTABUbSk=
Subject key identifier: 91:87:67:A5:DC:57:ED:58:C9:0F:91:EE:10:13:63:14:BB:2C:72:4D
Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Certificate serial: 1820F949AC8F550D198B99C580C3AFA4476D0CC0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
Manifest number: 73
Signing time: Mon 13 Apr 2026 01:14:17 +0000
Manifest this update: Mon 13 Apr 2026 01:09:17 +0000
Manifest next update: Tue 14 Apr 2026 01:28:17 +0000
Files and hashes: 1: 845BB307E2A1100E89FA0C939A9389686796F0F6.crl (hash: cLB3r2rPi/UfwokwnUcxTTki7TWmxyELJXEjYZTQXkk=)
2: AS24547.roa (hash: Xen7wwX9Xzx4GN3flNjS7P2Ugc4hiNYweJQlKQIi62g=)
3: AS56046.roa (hash: zW0iUbqlQ8uN9FYsso15mrFxcS5kb0AsmPWmXaSopDk=)
4: AS134810.roa (hash: BGEXpEzwxeWMAoo8PozXmaSGYXVdMwou0IIAHhyKcVA=)
5: AS56044.roa (hash: ju6hnW87+VxPZM0qz4L9gxI7v0Xt5hi5gCeAoAFVbuo=)
6: AS56040.roa (hash: lDlA8jvzb9VWKhxfKZykpCygX9ao6jxfTGriyR1nFTc=)
7: AS56041.roa (hash: cDJp82e4lKQT1ZQ0rKqPRItsjQKi5e97NaFO/XVYk5Y=)
8: AS56048.roa (hash: m5tp62yjwOzFChjQXqAFvM1PUtbqWVquyfStLbUXsFg=)
9: AS56042.roa (hash: rfwfi/XCe7vmj/k8jgyQS6LeFmBcMItRekfElE+p7wc=)
10: AS56047.roa (hash: gmqTZb2TqWCzDosogMfpPrVKyXw5NW2KOuPfbKMrxW4=)
11: AS244400.roa (hash: bhI1UKxrm3GLN+fc8qGvC+xkunPjqFis517LeIEdzh8=)
12: AS38019.roa (hash: hSgYc8SlaFX6kU7qTh3IVn7SMvIUlxXB0vHo6MreoQU=)
13: AS24444.roa (hash: 4xfdUDbhWlqN6/ZuXJSIFl6uTalXsaIc5cKmnA9Xhuo=)
14: AS9808.roa (hash: E/6QOHAzgXf03QFXs8qc4cA7hdE0GEiziY0xLK1ClFM=)
15: AS146788.roa (hash: zpRF+orMm1cXnAI2EXsq1WNqOE/Y017y0m/dOiaCEbE=)
16: AS132525.roa (hash: +ZRxiwxXJxBFLETR69+vP/2wOS/8a67geZIh3B0WSMw=)
17: AS24445.roa (hash: 0V2TUk/phvgrWuzOENxfwPOK0acolB7D1baasQPhxWM=)
18: AS24400.roa (hash: ql35zIap451HVcpWGnoICAb2sHI19dHkxqC8PGi+o/s=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 01:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:20:f9:49:ac:8f:55:0d:19:8b:99:c5:80:c3:af:a4:47:6d:0c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Validity
Not Before: Apr 13 01:09:17 2026 GMT
Not After : Apr 14 01:28:17 2026 GMT
Subject: CN=918767A5DC57ED58C90F91EE10136314BB2C724D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e5:95:9b:ca:c5:52:99:4c:df:03:9a:38:ba:
b4:b1:7a:4d:f2:3f:df:41:82:2e:95:de:68:3d:0f:
bf:23:d1:52:e6:5f:a5:51:c7:a7:21:59:21:31:66:
70:1c:94:60:f8:89:f6:4c:94:ae:1a:54:7b:e4:54:
33:4a:20:8f:ea:1f:73:20:e6:ca:b0:65:00:60:31:
4b:74:b4:61:ee:1e:a1:21:28:58:84:79:f5:44:d3:
e4:21:26:4a:2e:34:2d:56:6c:13:cc:81:19:b8:54:
cb:26:c4:91:82:22:bb:bf:23:5e:8b:52:9e:9e:98:
16:1b:85:59:27:80:38:6b:a3:e6:90:cc:89:f8:ba:
75:29:4d:9b:92:93:e9:99:16:3b:c7:40:5f:7a:09:
c8:9f:9a:7e:b7:bd:61:e5:22:66:76:f9:5f:ae:c4:
78:9c:2d:95:a7:ec:5a:84:b7:43:d5:0c:8a:de:6d:
2b:92:98:cf:49:50:d9:32:e7:52:fe:92:3c:28:fe:
20:2b:8b:50:88:fd:67:79:c0:69:02:f2:9a:80:82:
22:9f:3e:17:29:0e:dd:7f:23:46:37:35:45:c1:74:
63:33:d4:72:88:bd:3a:a5:87:aa:cc:0f:52:ea:7a:
06:d9:1f:20:be:dd:f0:95:df:2b:f9:f4:7c:7c:3d:
53:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:87:67:A5:DC:57:ED:58:C9:0F:91:EE:10:13:63:14:BB:2C:72:4D
X509v3 Authority Key Identifier:
keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:35:07:1b:e8:0e:fe:b2:98:28:0b:75:5f:57:84:cf:e7:91:
54:f2:7a:67:cd:d0:a3:d9:c8:7b:bd:21:1e:31:ad:8a:2e:2e:
e7:94:41:95:36:9c:d4:58:5a:17:87:33:42:88:4a:06:50:4a:
b4:8c:9b:5a:8e:15:92:a9:9e:2e:19:c7:68:08:f5:a1:3d:77:
cc:8f:b8:8a:46:cd:0e:9a:e2:2e:1d:f0:81:10:7f:e5:7b:fa:
e1:c7:f5:6a:76:05:61:a4:b9:2a:7c:ab:b8:b8:f4:f3:1d:13:
5f:8f:4a:92:0a:50:c7:2d:15:7c:54:fc:29:d1:21:48:fb:f5:
81:da:af:4d:b4:ec:ff:3b:22:4e:f5:bb:04:03:33:21:b7:8b:
fb:2b:76:2d:c1:ef:bc:de:aa:d4:99:81:cc:6c:02:15:7d:6a:
9c:14:77:ee:a8:ce:89:37:7c:12:93:ee:bb:86:7a:15:16:ec:
29:1e:9e:36:f1:31:88:93:2c:85:38:19:05:e8:08:eb:db:5d:
b8:13:03:e4:fc:69:2f:1c:fd:cb:28:a9:35:ec:b9:98:49:eb:
e0:7a:75:35:09:fb:29:2b:59:bc:b6:22:66:32:e1:3c:ec:72:
db:08:cd:8f:07:69:5a:89:86:65:5d:3a:0a:37:07:2c:06:7c:
63:05:2c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:57:44 2026 by rpki-client