
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
File: 845BB307E2A1100E89FA0C939A9389686796F0F6.mft (raw, json)
Hash identifier: f/UfmrKeC39bxitHIqMZkWNPjRoCb2OedXFaJonj2dg=
Subject key identifier: 74:F7:72:44:10:4A:C7:5D:1B:69:CF:7F:EC:64:0D:39:4D:B3:C2:E5
Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Certificate serial: 19AB2090EE73D775F24563F4992E1A5F07C6A926
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
Manifest number: 0182
Signing time: Mon 12 Oct 2026 10:21:51 +0000
Manifest this update: Mon 12 Oct 2026 10:16:51 +0000
Manifest next update: Thu 15 Oct 2026 17:17:51 +0000
Files and hashes: 1: AS24444.roa (hash: 4xfdUDbhWlqN6/ZuXJSIFl6uTalXsaIc5cKmnA9Xhuo=)
2: AS132525.roa (hash: +ZRxiwxXJxBFLETR69+vP/2wOS/8a67geZIh3B0WSMw=)
3: AS23841.roa (hash: N3aPTwRv4oQ0jbeynPtTYUEcIvfsR9IeChMOO26Rmvc=)
4: AS24547.roa (hash: Xen7wwX9Xzx4GN3flNjS7P2Ugc4hiNYweJQlKQIi62g=)
5: AS24400.roa (hash: 0+o85fkYpiIFCFMQljowAFtrY9bNhD+dDhNiB6TrxOw=)
6: AS56047.roa (hash: gmqTZb2TqWCzDosogMfpPrVKyXw5NW2KOuPfbKMrxW4=)
7: AS63621.roa (hash: kM/frUaMP1Tr3VyGU05ugFm4RA+5/q4Tfg29dOKr5Qk=)
8: AS56048.roa (hash: m5tp62yjwOzFChjQXqAFvM1PUtbqWVquyfStLbUXsFg=)
9: AS56045.roa (hash: JhWIRgXmD/AAVpMY2itiLtwWBujQgPFnNfmralXfMzA=)
10: AS146788.roa (hash: rVdRouxB5F2Bn88ZAEgt2PXhDEy2teygSVIxZd3/qt0=)
11: AS9808.roa (hash: zZfe/+qTYM62wyezIOZ8FVo94hNdVSlDvwJ8QBWElwA=)
12: AS56041.roa (hash: cDJp82e4lKQT1ZQ0rKqPRItsjQKi5e97NaFO/XVYk5Y=)
13: AS24445.roa (hash: 0V2TUk/phvgrWuzOENxfwPOK0acolB7D1baasQPhxWM=)
14: AS63540.roa (hash: A0fnLqo2aGScojf6EkdOg+7NgfJcql2OLZayOMQN4s0=)
15: AS134810.roa (hash: BGEXpEzwxeWMAoo8PozXmaSGYXVdMwou0IIAHhyKcVA=)
16: AS56044.roa (hash: ju6hnW87+VxPZM0qz4L9gxI7v0Xt5hi5gCeAoAFVbuo=)
17: AS17429.roa (hash: HN0dXbgZGSc9qnYjM1vDXhmsEXJFkHuKRf+Pfjocylk=)
18: AS38019.roa (hash: hSgYc8SlaFX6kU7qTh3IVn7SMvIUlxXB0vHo6MreoQU=)
19: AS56042.roa (hash: rfwfi/XCe7vmj/k8jgyQS6LeFmBcMItRekfElE+p7wc=)
20: AS24423.roa (hash: /mGGTOyUKupdvXhHE7fZt5S0WBXZV1kFB0/ZuYXQQZc=)
21: AS56046.roa (hash: zW0iUbqlQ8uN9FYsso15mrFxcS5kb0AsmPWmXaSopDk=)
22: AS56040.roa (hash: lDlA8jvzb9VWKhxfKZykpCygX9ao6jxfTGriyR1nFTc=)
23: 845BB307E2A1100E89FA0C939A9389686796F0F6.crl (hash: rPXhtprQqREnRmiP6aX7P/yJr4/MDyu0Sv4J+fBwRbY=)
24: AS146838.roa (hash: MTCngMPNWmRnisx5hTizNPX+K8oCQs2lVT5mdlPUUpI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:ab:20:90:ee:73:d7:75:f2:45:63:f4:99:2e:1a:5f:07:c6:a9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Validity
Not Before: Oct 12 10:16:51 2026 GMT
Not After : Oct 15 17:17:51 2026 GMT
Subject: CN=74F77244104AC75D1B69CF7FEC640D394DB3C2E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:66:37:fe:db:63:66:a1:31:84:55:de:40:
e8:64:13:e8:b8:2b:ba:f4:d8:77:94:91:5c:33:bf:
2d:ff:34:7f:e1:43:83:5d:b5:31:26:eb:34:bc:45:
e9:06:9a:b4:61:a0:fe:63:2b:b1:c0:5e:af:98:ba:
1a:0d:8d:ce:8d:e4:2e:cd:a1:2a:59:28:e7:62:b5:
5c:61:b9:82:45:fb:65:7b:7b:56:2f:10:da:e5:7e:
a2:a3:b5:1e:49:8b:5c:fe:93:6e:e8:ea:b5:0e:c7:
58:46:0d:29:9e:8c:59:15:48:94:28:1c:da:cc:11:
1c:c4:03:c9:6c:a7:a7:58:fa:01:15:47:e8:9d:f7:
8f:05:c6:b7:6f:a9:2e:ee:6e:57:df:08:26:18:7f:
a1:da:3b:cd:6e:4f:60:77:9b:3b:c6:d9:8a:7d:53:
f4:67:d8:52:80:bd:a5:ab:8d:e1:94:57:ed:a3:fa:
3e:9c:6a:72:da:e6:eb:cb:5e:e1:08:ca:71:95:1f:
15:c4:d9:af:ae:6d:ae:e1:73:23:b6:5e:c7:58:05:
42:ba:9e:07:60:cc:53:ca:4c:56:65:27:b7:34:5e:
a7:fe:ad:53:bb:1d:c0:d4:90:7a:2e:2d:c7:fc:29:
d9:0c:d3:79:43:a6:51:fb:0f:00:2b:ec:76:15:da:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F7:72:44:10:4A:C7:5D:1B:69:CF:7F:EC:64:0D:39:4D:B3:C2:E5
X509v3 Authority Key Identifier:
keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7d:15:99:db:b6:fb:82:2c:67:98:82:28:17:ec:18:96:3b:
2f:cd:05:51:f6:6a:20:a2:f3:a8:52:19:a1:04:6b:c9:fc:1c:
bc:d8:22:77:67:ab:20:42:19:db:c4:90:5d:da:a6:76:d6:8e:
a9:26:cf:9c:12:d4:99:69:b7:3c:72:46:0e:f3:8c:c2:8d:67:
2b:87:85:30:a1:cd:da:df:11:57:f0:c3:88:9e:e7:b1:5c:a2:
a9:8f:75:ca:ad:e5:33:86:02:a5:6a:23:bf:0b:f9:84:11:a1:
07:2d:98:ce:f4:fd:ec:0a:1e:42:77:07:73:68:26:41:79:93:
f0:e0:b5:c1:ab:29:35:75:9e:0b:e3:93:7a:21:81:e6:f3:cc:
80:fb:ef:b3:72:d0:48:f2:f3:f0:fc:26:e1:05:9c:76:94:49:
3d:ba:b7:51:8b:5d:4d:b0:85:dc:d9:8a:8a:ff:f0:ac:d9:be:
43:0a:69:e4:4d:c5:c5:7d:88:eb:92:c1:d7:66:22:48:f6:8d:
0d:5e:f9:9e:44:7d:df:57:65:32:6f:5e:e8:ba:86:45:8d:82:
59:67:d3:3f:5d:00:26:c6:bf:98:83:f7:1f:6a:80:13:5e:a4:
96:d5:7b:11:55:a0:a6:f0:99:54:12:50:1e:2a:0f:b5:1e:5c:
c2:f0:42:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:09:39 2026 by rpki-client