
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
File: 845BB307E2A1100E89FA0C939A9389686796F0F6.mft (raw, json)
Hash identifier: EgleGfzM0ukiqUXSgaNSlX94rQceGx/RLWuCZKLR1WA=
Subject key identifier: 96:2F:5A:CB:FD:99:EB:B7:4A:6B:72:EE:D7:BA:F6:8B:BB:09:00:42
Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Certificate serial: 6FF35D0DCB1E89CE39BBFA6A4885EF93D9ED9D5A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
Manifest number: BA
Signing time: Fri 29 May 2026 07:32:22 +0000
Manifest this update: Fri 29 May 2026 07:27:22 +0000
Manifest next update: Sat 30 May 2026 11:02:22 +0000
Files and hashes: 1: AS134810.roa (hash: BGEXpEzwxeWMAoo8PozXmaSGYXVdMwou0IIAHhyKcVA=)
2: AS244400.roa (hash: bhI1UKxrm3GLN+fc8qGvC+xkunPjqFis517LeIEdzh8=)
3: AS24444.roa (hash: 4xfdUDbhWlqN6/ZuXJSIFl6uTalXsaIc5cKmnA9Xhuo=)
4: AS24445.roa (hash: 0V2TUk/phvgrWuzOENxfwPOK0acolB7D1baasQPhxWM=)
5: AS56041.roa (hash: cDJp82e4lKQT1ZQ0rKqPRItsjQKi5e97NaFO/XVYk5Y=)
6: AS24400.roa (hash: ql35zIap451HVcpWGnoICAb2sHI19dHkxqC8PGi+o/s=)
7: AS132525.roa (hash: +ZRxiwxXJxBFLETR69+vP/2wOS/8a67geZIh3B0WSMw=)
8: AS56045.roa (hash: JhWIRgXmD/AAVpMY2itiLtwWBujQgPFnNfmralXfMzA=)
9: AS56042.roa (hash: rfwfi/XCe7vmj/k8jgyQS6LeFmBcMItRekfElE+p7wc=)
10: AS9808.roa (hash: lDrAoTUnYB64grsjpP1t7+3xH0Ykk2SmzdWPX2wFqNM=)
11: AS56048.roa (hash: m5tp62yjwOzFChjQXqAFvM1PUtbqWVquyfStLbUXsFg=)
12: AS146788.roa (hash: YKRVVpEOG/SjpP5iuazLNu2+ftditm+qt0XCfUkNMTQ=)
13: AS56040.roa (hash: lDlA8jvzb9VWKhxfKZykpCygX9ao6jxfTGriyR1nFTc=)
14: AS24547.roa (hash: Xen7wwX9Xzx4GN3flNjS7P2Ugc4hiNYweJQlKQIi62g=)
15: AS56047.roa (hash: gmqTZb2TqWCzDosogMfpPrVKyXw5NW2KOuPfbKMrxW4=)
16: 845BB307E2A1100E89FA0C939A9389686796F0F6.crl (hash: peoBA0R/erGLLeH/odOdsLqnGGiUrO0W68//fluAoa0=)
17: AS38019.roa (hash: hSgYc8SlaFX6kU7qTh3IVn7SMvIUlxXB0vHo6MreoQU=)
18: AS56044.roa (hash: ju6hnW87+VxPZM0qz4L9gxI7v0Xt5hi5gCeAoAFVbuo=)
19: AS56046.roa (hash: zW0iUbqlQ8uN9FYsso15mrFxcS5kb0AsmPWmXaSopDk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 11:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:f3:5d:0d:cb:1e:89:ce:39:bb:fa:6a:48:85:ef:93:d9:ed:9d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Validity
Not Before: May 29 07:27:22 2026 GMT
Not After : May 30 11:02:22 2026 GMT
Subject: CN=962F5ACBFD99EBB74A6B72EED7BAF68BBB090042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:8d:b6:27:ff:23:5b:98:b8:bb:8f:92:bf:
a2:d6:47:8f:e7:e7:93:c6:ed:5a:f3:e4:cc:85:3a:
fe:c1:7f:63:7b:66:9a:41:8b:5b:46:47:d8:da:9a:
e3:45:ae:85:2a:f6:53:c0:5f:54:b8:d8:e2:93:a6:
b8:e4:ba:97:5c:80:f6:c8:d9:cc:cb:76:c3:dc:e0:
2f:a8:04:bc:f5:49:68:0d:4f:cb:de:dc:2b:46:6b:
81:a1:3f:f4:a4:8e:eb:0d:0c:47:23:35:d5:00:47:
ec:54:7c:ae:b5:7f:bc:31:62:d5:c5:a4:78:b5:f6:
a4:15:be:8a:eb:39:45:d4:ce:9c:8d:e0:c0:9d:91:
d2:88:d8:f3:63:25:34:fc:ab:24:39:65:94:3a:87:
f6:9a:5e:ac:f2:94:f6:db:6d:6b:77:5e:66:de:63:
98:65:1f:6e:c5:f2:56:c2:c6:05:86:58:ca:95:e2:
a2:21:2e:1b:98:c5:c8:7d:ae:b8:42:dd:8b:bf:e2:
dc:24:75:92:bb:f3:e8:41:26:0d:3a:9b:cf:85:50:
62:79:02:e8:c0:d5:8c:1e:cd:d0:e4:ff:a6:95:af:
4e:f1:58:d7:e5:dd:70:bd:03:87:71:e6:e5:46:d0:
f0:60:5c:42:17:52:4d:63:72:0b:72:1f:be:3b:d2:
e9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2F:5A:CB:FD:99:EB:B7:4A:6B:72:EE:D7:BA:F6:8B:BB:09:00:42
X509v3 Authority Key Identifier:
keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:da:2b:00:fd:16:65:be:e1:05:e4:55:96:bc:66:07:75:ba:
6a:9a:cc:87:e5:14:c5:1d:11:19:9a:dc:16:9b:fe:7a:07:6a:
cc:5c:4c:a4:4b:9b:f0:f6:8c:c4:73:55:56:05:ec:dc:94:e6:
ad:77:3e:6e:82:b3:a6:57:c7:8f:27:cd:df:66:74:4f:0a:f9:
72:17:5d:2d:72:dd:c5:10:88:43:10:c9:77:06:a0:1c:1b:7b:
86:5b:ba:79:4f:83:a2:8f:bb:6c:c4:4c:6c:22:76:23:15:0b:
33:b4:b4:16:ca:c4:fc:d3:40:73:11:5d:74:be:88:5a:16:97:
ae:fa:48:f2:38:bd:bc:41:51:b1:99:93:26:76:45:6f:76:ae:
4f:e3:0c:0f:62:9f:32:07:a4:20:8c:b9:1d:10:85:7a:26:90:
c6:4c:c3:85:d1:c8:1b:0d:ce:0a:93:ee:45:41:61:d6:b9:26:
f1:30:98:f1:c5:a2:f3:42:8d:e4:f7:1a:0d:f3:3d:00:07:57:
c3:2a:d0:cf:af:d1:55:2a:86:79:1b:66:82:3b:92:b2:f6:33:
fd:90:58:62:6c:13:c6:77:b7:ba:04:18:4e:7d:73:ec:f7:cd:
43:9e:c1:72:a8:c1:11:2b:5f:e8:0f:67:d6:e7:5f:89:24:66:
1c:5c:92:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:49 2026 by rpki-client