
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
File: 845BB307E2A1100E89FA0C939A9389686796F0F6.mft (raw, json)
Hash identifier: OymtIdZx4DuSWhQH7YjOkTRlqtdcaL4LpypYO4qzbGA=
Subject key identifier: 0B:B3:36:FE:B8:3E:87:97:74:80:FC:E1:C0:0B:99:8E:07:19:3C:08
Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Certificate serial: 62D674FDBE51CE16B142D79C2CFFE8D2B541F75C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
Manifest number: 0132
Signing time: Tue 14 Jul 2026 01:35:06 +0000
Manifest this update: Tue 14 Jul 2026 01:30:06 +0000
Manifest next update: Wed 15 Jul 2026 03:19:06 +0000
Files and hashes: 1: AS38019.roa (hash: hSgYc8SlaFX6kU7qTh3IVn7SMvIUlxXB0vHo6MreoQU=)
2: AS56047.roa (hash: gmqTZb2TqWCzDosogMfpPrVKyXw5NW2KOuPfbKMrxW4=)
3: AS9808.roa (hash: zZfe/+qTYM62wyezIOZ8FVo94hNdVSlDvwJ8QBWElwA=)
4: AS24444.roa (hash: 4xfdUDbhWlqN6/ZuXJSIFl6uTalXsaIc5cKmnA9Xhuo=)
5: AS63540.roa (hash: A0fnLqo2aGScojf6EkdOg+7NgfJcql2OLZayOMQN4s0=)
6: AS134810.roa (hash: BGEXpEzwxeWMAoo8PozXmaSGYXVdMwou0IIAHhyKcVA=)
7: AS56044.roa (hash: ju6hnW87+VxPZM0qz4L9gxI7v0Xt5hi5gCeAoAFVbuo=)
8: AS56046.roa (hash: zW0iUbqlQ8uN9FYsso15mrFxcS5kb0AsmPWmXaSopDk=)
9: AS56041.roa (hash: cDJp82e4lKQT1ZQ0rKqPRItsjQKi5e97NaFO/XVYk5Y=)
10: AS146838.roa (hash: MTCngMPNWmRnisx5hTizNPX+K8oCQs2lVT5mdlPUUpI=)
11: AS24423.roa (hash: /mGGTOyUKupdvXhHE7fZt5S0WBXZV1kFB0/ZuYXQQZc=)
12: AS146788.roa (hash: rVdRouxB5F2Bn88ZAEgt2PXhDEy2teygSVIxZd3/qt0=)
13: AS23841.roa (hash: N3aPTwRv4oQ0jbeynPtTYUEcIvfsR9IeChMOO26Rmvc=)
14: AS63621.roa (hash: kM/frUaMP1Tr3VyGU05ugFm4RA+5/q4Tfg29dOKr5Qk=)
15: AS56048.roa (hash: m5tp62yjwOzFChjQXqAFvM1PUtbqWVquyfStLbUXsFg=)
16: AS56045.roa (hash: JhWIRgXmD/AAVpMY2itiLtwWBujQgPFnNfmralXfMzA=)
17: AS24400.roa (hash: 0+o85fkYpiIFCFMQljowAFtrY9bNhD+dDhNiB6TrxOw=)
18: AS56040.roa (hash: lDlA8jvzb9VWKhxfKZykpCygX9ao6jxfTGriyR1nFTc=)
19: AS17429.roa (hash: HN0dXbgZGSc9qnYjM1vDXhmsEXJFkHuKRf+Pfjocylk=)
20: AS56042.roa (hash: rfwfi/XCe7vmj/k8jgyQS6LeFmBcMItRekfElE+p7wc=)
21: AS24445.roa (hash: 0V2TUk/phvgrWuzOENxfwPOK0acolB7D1baasQPhxWM=)
22: 845BB307E2A1100E89FA0C939A9389686796F0F6.crl (hash: JyF/mVvrc2ozV8WppgxIk81HindwnPoR7jwbhakBynI=)
23: AS132525.roa (hash: +ZRxiwxXJxBFLETR69+vP/2wOS/8a67geZIh3B0WSMw=)
24: AS24547.roa (hash: Xen7wwX9Xzx4GN3flNjS7P2Ugc4hiNYweJQlKQIi62g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 03:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d6:74:fd:be:51:ce:16:b1:42:d7:9c:2c:ff:e8:d2:b5:41:f7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Validity
Not Before: Jul 14 01:30:06 2026 GMT
Not After : Jul 15 03:19:06 2026 GMT
Subject: CN=0BB336FEB83E87977480FCE1C00B998E07193C08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:89:2b:46:a0:f8:a3:5d:51:67:1a:f4:d7:5f:
f7:74:27:3e:c6:2a:5b:26:9a:fe:df:a6:49:73:0b:
57:d5:7c:a0:2d:f1:f5:3e:c1:0c:8c:4d:2e:18:46:
ba:03:8e:88:52:b7:1d:63:ce:23:fe:44:f9:26:6d:
6c:48:5b:ca:cd:6e:ef:89:16:fd:6a:f8:b9:98:ea:
a9:26:3f:12:09:f5:40:1b:d3:2b:08:3a:38:f7:42:
88:ed:f6:6e:c7:f6:f5:74:5d:80:b6:94:1c:21:23:
04:29:f9:c7:33:6b:e4:34:f3:83:60:c8:f9:61:fe:
71:39:f9:b5:a1:b9:57:2a:21:81:69:a5:72:38:08:
87:0b:ef:b4:b1:ae:ce:72:b4:0b:10:f0:90:b1:d5:
7a:09:e5:15:c8:b9:65:a5:23:b6:ff:f1:1e:e7:da:
85:5a:b4:20:11:2b:45:34:c3:e3:3b:a1:d4:af:53:
f5:41:5b:c9:ac:2c:2b:4b:39:c4:9b:77:8b:fb:fb:
e5:0c:0b:a7:92:f7:ee:97:49:4e:a6:3a:12:80:16:
35:2f:d1:20:c2:5d:27:06:b4:19:69:ad:87:a1:84:
7e:42:7b:52:4a:a6:f4:ba:c1:c3:de:d2:1e:db:e8:
8e:2d:3f:59:6f:86:b4:84:72:c2:4f:d8:24:4a:73:
d7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B3:36:FE:B8:3E:87:97:74:80:FC:E1:C0:0B:99:8E:07:19:3C:08
X509v3 Authority Key Identifier:
keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cb:8f:d3:ad:a2:0b:68:e6:05:68:dc:6c:b4:7b:87:fe:b7:
47:e6:7e:01:a4:63:ef:18:5f:ce:eb:05:63:76:ad:05:ab:24:
59:14:6f:ff:f0:00:10:60:0f:61:22:71:99:46:f9:9f:ff:ab:
c8:7e:84:e5:d8:69:6a:2b:9a:3a:15:24:f0:2d:de:e5:6e:ae:
4d:e7:ab:6b:7f:32:e0:c9:f5:7e:37:1b:4b:21:26:43:b6:d5:
f0:9a:2b:7d:1e:f8:e8:36:f4:aa:54:f6:0c:a7:a3:83:b7:ff:
c7:f8:8f:b3:27:64:af:be:5e:00:1b:8d:f2:0f:2b:16:34:02:
f3:d4:b2:17:1b:31:16:51:bc:6e:24:09:51:8a:0b:dd:4f:58:
f5:5a:94:62:2c:94:28:54:76:45:74:e8:32:03:85:c7:87:91:
ff:a5:c7:59:92:cb:73:72:6f:33:74:04:0b:8b:6c:31:b5:1e:
2b:52:1a:60:ae:98:26:e2:6e:26:e9:4e:be:5a:a6:c5:ad:e8:
42:da:20:7d:1b:93:00:f4:6e:90:f7:9c:f1:d1:4d:18:c9:e6:
8a:3c:2a:80:fb:37:3f:98:c6:cd:0a:7f:b5:94:9f:77:3a:63:
ca:ff:04:91:e9:a7:c4:8d:86:d9:b1:c3:d5:a9:c6:ff:b7:04:
50:87:52:98
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUYtZ0/b5RzhaxQtecLP/o0rVB91wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2
Nzk2RjBGNjAeFw0yNjA3MTQwMTMwMDZaFw0yNjA3MTUwMzE5MDZaMDMxMTAvBgNV
BAMTKDBCQjMzNkZFQjgzRTg3OTc3NDgwRkNFMUMwMEI5OThFMDcxOTNDMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfiStGoPijXVFnGvTXX/d0Jz7G
Klsmmv7fpklzC1fVfKAt8fU+wQyMTS4YRroDjohStx1jziP+RPkmbWxIW8rNbu+J
Fv1q+LmY6qkmPxIJ9UAb0ysIOjj3Qojt9m7H9vV0XYC2lBwhIwQp+ccza+Q084Ng
yPlh/nE5+bWhuVcqIYFppXI4CIcL77Sxrs5ytAsQ8JCx1XoJ5RXIuWWlI7b/8R7n
2oVatCARK0U0w+M7odSvU/VBW8msLCtLOcSbd4v7++UMC6eS9+6XSU6mOhKAFjUv
0SDCXScGtBlprYehhH5Ce1JKpvS6wcPe0h7b6I4tP1lvhrSEcsJP2CRKc9dhAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUC7M2/rg+h5d0gPzhwAuZjgcZPAgwHwYDVR0j
BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4
OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC84NDVCQjMwN0UyQTEx
MDBFODlGQTBDOTM5QTkzODk2ODY3OTZGMEY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncuP062iC2jm
BWjcbLR7h/63R+Z+AaRj7xhfzusFY3atBaskWRRv//AAEGAPYSJxmUb5n/+ryH6E
5dhpaiuaOhUk8C3e5W6uTeera38y4Mn1fjcbSyEmQ7bV8JorfR746Db0qlT2DKej
g7f/x/iPsydkr75eABuN8g8rFjQC89SyFxsxFlG8biQJUYoL3U9Y9VqUYiyUKFR2
RXToMgOFx4eR/6XHWZLLc3JvM3QEC4tsMbUeK1IaYK6YJuJuJulOvlqmxa3oQtog
fRuTAPRukPec8dFNGMnmijwqgPs3P5jGzQp/tZSfdzpjyv8EkemnxI2G2bHD1anG
/7cEUIdSmA==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:18:34 2026 by rpki-client