$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft File: 30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft (raw, json) Hash identifier: Kn7Y8xSMM4TiEgAFoI9rc7RTl+EvX5viIxKLPWF38YA= Subject key identifier: 3E:20:EF:20:EC:09:BD:78:E0:82:B8:9D:34:3A:23:9C:CE:82:D2:33 Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 755C826EF68A07E70067E1BA7B183F476BF0F91D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft Manifest number: 0390 Signing time: Tue 13 Oct 2026 09:35:13 +0000 Manifest this update: Tue 13 Oct 2026 09:30:13 +0000 Manifest next update: Fri 16 Oct 2026 11:24:13 +0000 Files and hashes: 1: AS58541.roa (hash: /rzJUVPATTqW/wguYZGnmmWnH282m9kioCsO/yxOo8g=) 2: AS139887.roa (hash: HDCjHLc51eYxBpG16liw1CPZPfJENeW/M+CCHxizFU0=) 3: AS4134.roa (hash: pIlNm6i8NNbHg3yYAJykm0cTJ0hs14VD2bobw2ZPFnM=) 4: AS58519.roa (hash: uUokiWOdjiPHbpOBcaBYWsx2ROjnNNYfBhV4ww0sinI=) 5: AS58540.roa (hash: TSY0z4g2ml0XJrRPP6gGTNNEujjalV5Ki0HIaE9WKcA=) 6: AS136197.roa (hash: Gj2HHJpfeTYn0R3yNYxcCyTTb9LjwMIF+CAPxxIbvzA=) 7: AS133775.roa (hash: KQC0NT/Wn83Bp9fqkbR3E2q2ApnfJ7XJPbE8L6z3O5I=) 8: AS136195.roa (hash: vSKIhQBQFrZObTTnwbmTqGzsnP11EigITb5cyhYeX+Q=) 9: AS38283.roa (hash: byu4xG8+yTtwBscrS8iuOSWagzsulyP1XFC++sIeZwQ=) 10: 30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl (hash: bbK438y0Dp10qH8ikFGjPNQNPoyUWQexroqF47y2Cdg=) 11: AS4809.roa (hash: 40EfWKFEX/nLkzxF5pF2vrZgXoER5vL9bZ2K9OXie/4=) 12: AS151058.roa (hash: mSzRVS75vBPa8uyPHLbMcuZW2KkpFKvPNE1wfvrC/UI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 11:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:5c:82:6e:f6:8a:07:e7:00:67:e1:ba:7b:18:3f:47:6b:f0:f9:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: Oct 13 09:30:13 2026 GMT Not After : Oct 16 11:24:13 2026 GMT Subject: CN=3E20EF20EC09BD78E082B89D343A239CCE82D233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:72:85:a3:d9:5b:95:06:d9:2f:37:aa:2a:de: 9f:6e:07:de:0a:fd:0d:d3:90:20:fc:15:32:d8:e7: 2d:b2:19:75:da:74:58:2d:61:d9:f1:5c:a0:5e:29: bc:fc:cf:85:21:0d:03:bf:4c:4d:2c:45:04:8d:6e: 3f:79:f9:13:e1:cf:de:f2:66:5e:99:f5:04:6a:54: 43:75:99:c7:a7:da:4f:c8:4f:8b:83:ba:01:33:74: 1f:80:ab:e7:79:e5:4a:02:a1:98:ff:02:05:74:39: 3d:5c:c2:86:6a:ef:08:01:28:e9:b0:e5:e2:b8:53: 06:44:40:41:b5:b4:66:de:a3:1f:28:ee:ab:fd:88: 9c:08:ab:30:96:52:d3:34:85:27:71:d7:68:40:42: 62:d5:75:28:7b:a2:19:4b:48:8d:82:3a:f4:cf:61: d2:56:80:49:2b:94:92:69:94:98:06:8d:0b:3a:39: fa:57:92:ad:0c:34:e9:61:05:2b:4e:21:f4:9d:52: aa:ad:c6:b3:56:45:4a:6f:5e:10:8b:5b:f6:b2:a0: 95:8e:df:c2:28:33:c9:05:cc:e0:05:53:db:bd:08: e9:2d:a6:e1:e7:0b:49:6b:25:cd:46:bf:30:42:70: 35:0c:fd:33:23:1a:24:11:bf:cc:09:a4:82:bf:6b: ca:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:20:EF:20:EC:09:BD:78:E0:82:B8:9D:34:3A:23:9C:CE:82:D2:33 X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:34:6e:37:c7:f9:d0:18:17:0a:0f:4b:c1:42:91:53:e7:22: 08:55:93:65:eb:6a:c9:3c:31:fa:0b:ba:d4:9e:c4:65:ec:15: 68:04:15:e2:b9:5e:30:f7:b1:8d:62:22:44:65:6e:02:4a:21: 51:13:6a:79:0f:6b:dd:96:f3:17:50:eb:98:a0:0e:fa:b2:aa: eb:c9:fe:28:da:fc:bb:fc:63:80:f6:89:e1:c8:7b:0a:6b:f8: 34:ef:0c:8d:b0:94:7a:cc:69:b7:fd:72:76:64:ad:46:86:30: c9:e3:2d:05:e5:28:60:48:77:4f:b1:cf:32:f7:79:a4:3d:78: b2:13:49:58:48:e7:12:b9:39:1f:aa:4c:8b:61:25:bc:08:5e: b0:2c:6f:9c:00:6e:c5:f4:a2:6e:54:01:5e:26:c3:a7:77:38: 7d:d0:19:51:83:3f:ec:15:f1:e1:6e:34:c5:86:bb:d6:93:c5: 46:6b:70:34:16:2b:15:d2:95:49:56:db:5a:93:50:2e:4b:31: f9:15:96:7e:f2:0b:79:47:ca:f2:98:34:9f:9c:de:1c:33:be: da:3a:29:ae:dd:52:ce:88:7c:f2:5d:20:9e:b7:94:48:2e:a4: 19:fc:93:51:5d:15:86:3d:69:63:7f:a4:43:e5:16:5e:4a:df: d1:4a:c4:03 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdVyCbvaKB+cAZ+G6exg/R2vw+R0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MTAxMzA5MzAxM1oX DTI2MTAxNjExMjQxM1owMzExMC8GA1UEAxMoM0UyMEVGMjBFQzA5QkQ3OEUwODJC ODlEMzQzQTIzOUNDRTgyRDIzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRyhaPZW5UG2S83qiren24H3gr9DdOQIPwVMtjnLbIZddp0WC1h2fFcoF4p vPzPhSENA79MTSxFBI1uP3n5E+HP3vJmXpn1BGpUQ3WZx6faT8hPi4O6ATN0H4Cr 53nlSgKhmP8CBXQ5PVzChmrvCAEo6bDl4rhTBkRAQbW0Zt6jHyjuq/2InAirMJZS 0zSFJ3HXaEBCYtV1KHuiGUtIjYI69M9h0laASSuUkmmUmAaNCzo5+leSrQw06WEF K04h9J1Sqq3Gs1ZFSm9eEItb9rKglY7fwigzyQXM4AVT270I6S2m4ecLSWslzUa/ MEJwNQz9MyMaJBG/zAmkgr9rymsCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQ+IO8g 7Am9eOCCuJ00OiOczoLSMzAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8wLzMwQUU4NUQzMjUzRUEyQzk5RUFGNjM2OTYxNUY1QkMwNzBDQzVG QjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBRNG43x/nQGBcKD0vBQpFT5yIIVZNl62rJPDH6C7rUnsRl 7BVoBBXiuV4w97GNYiJEZW4CSiFRE2p5D2vdlvMXUOuYoA76sqrryf4o2vy7/GOA 9onhyHsKa/g07wyNsJR6zGm3/XJ2ZK1GhjDJ4y0F5ShgSHdPsc8y93mkPXiyE0lY SOcSuTkfqkyLYSW8CF6wLG+cAG7F9KJuVAFeJsOndzh90BlRgz/sFfHhbjTFhrvW k8VGa3A0FisV0pVJVttak1AuSzH5FZZ+8gt5R8rymDSfnN4cM77aOimu3VLOiHzy XSCet5RILqQZ/JNRXRWGPWljf6RD5RZeSt/RSsQD -----END CERTIFICATE-----Generated at Thu Oct 15 06:47:49 2026 by rpki-client