$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft File: 30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft (raw, json) Hash identifier: VUgruVbOSlBA20Bvdemvf2QTbuWvpUWUtWFlTm5BnXg= Subject key identifier: 00:5A:A2:E1:14:5F:21:6C:11:BE:4E:E9:30:6B:BC:7D:E8:09:17:A1 Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 301B1FA8E40C3AD0140E5EA0A7F339ED8C77AA18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft Manifest number: 02FC Signing time: Tue 14 Jul 2026 16:57:49 +0000 Manifest this update: Tue 14 Jul 2026 16:52:49 +0000 Manifest next update: Wed 15 Jul 2026 19:42:49 +0000 Files and hashes: 1: AS133775.roa (hash: KQC0NT/Wn83Bp9fqkbR3E2q2ApnfJ7XJPbE8L6z3O5I=) 2: AS136195.roa (hash: vSKIhQBQFrZObTTnwbmTqGzsnP11EigITb5cyhYeX+Q=) 3: AS58540.roa (hash: TSY0z4g2ml0XJrRPP6gGTNNEujjalV5Ki0HIaE9WKcA=) 4: AS151058.roa (hash: mSzRVS75vBPa8uyPHLbMcuZW2KkpFKvPNE1wfvrC/UI=) 5: AS58519.roa (hash: uUokiWOdjiPHbpOBcaBYWsx2ROjnNNYfBhV4ww0sinI=) 6: AS38283.roa (hash: byu4xG8+yTtwBscrS8iuOSWagzsulyP1XFC++sIeZwQ=) 7: AS139887.roa (hash: HDCjHLc51eYxBpG16liw1CPZPfJENeW/M+CCHxizFU0=) 8: AS4809.roa (hash: 40EfWKFEX/nLkzxF5pF2vrZgXoER5vL9bZ2K9OXie/4=) 9: AS136197.roa (hash: Gj2HHJpfeTYn0R3yNYxcCyTTb9LjwMIF+CAPxxIbvzA=) 10: AS4134.roa (hash: pIlNm6i8NNbHg3yYAJykm0cTJ0hs14VD2bobw2ZPFnM=) 11: AS58541.roa (hash: /rzJUVPATTqW/wguYZGnmmWnH282m9kioCsO/yxOo8g=) 12: 30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl (hash: 6iiFALkt+5+VGl5Hz7BV8yrGf+UGcgslsCyMq6eMwiQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 19:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1b:1f:a8:e4:0c:3a:d0:14:0e:5e:a0:a7:f3:39:ed:8c:77:aa:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: Jul 14 16:52:49 2026 GMT Not After : Jul 15 19:42:49 2026 GMT Subject: CN=005AA2E1145F216C11BE4EE9306BBC7DE80917A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3a:dc:ae:f1:60:79:9d:ba:c2:93:1d:40:ab: ae:cf:ed:0c:c0:10:b6:d9:9f:72:38:76:f7:1c:65: 54:21:5b:c0:80:b3:f7:c9:13:63:08:6e:8e:55:ef: 20:53:8b:ac:47:0e:c1:42:2f:c8:bc:84:df:47:5f: 88:1c:70:b6:a4:61:35:2e:86:49:5a:54:b3:e4:d5: 73:3d:cf:1b:7c:92:d2:c5:26:b4:96:e0:1d:3d:f2: 09:54:50:09:d3:78:e3:d5:22:89:57:a0:31:25:a8: ae:4c:a0:c8:7e:59:a1:67:f9:31:95:35:fe:2a:60: 11:d5:b2:0d:3a:70:96:04:7b:5f:94:8b:8a:b2:ed: c7:75:07:e0:ad:a3:fe:03:63:a2:a7:44:78:cf:84: 70:7c:e7:f9:97:e1:13:ee:b6:59:e0:df:c9:fb:a7: a2:a1:79:3b:b0:78:3c:e2:53:f8:10:e7:50:0f:5e: ef:25:50:d5:ca:00:84:8a:a0:f1:c5:09:ee:7f:ed: 4e:b8:16:62:4f:70:fd:cb:93:ef:e0:96:a9:d3:5a: 11:4f:fd:f9:30:53:36:73:29:ce:ec:01:de:dc:4d: 4b:57:d3:bc:d3:7d:16:88:c8:d0:8c:fc:aa:7a:39: 51:74:e4:62:b0:c8:d8:3c:86:6b:78:e0:bf:4d:34: 4b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5A:A2:E1:14:5F:21:6C:11:BE:4E:E9:30:6B:BC:7D:E8:09:17:A1 X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a0:e8:1d:3e:94:79:83:a4:57:48:0f:74:f7:72:aa:2e:58: 5d:3b:f1:5f:3d:a3:34:8c:e6:0e:80:e0:1b:9e:ab:84:d5:9f: b6:38:50:9b:45:5f:ba:e8:98:b9:60:19:82:ef:90:ed:25:e2: 92:cf:19:4f:e9:12:a9:ad:a7:34:f5:ac:75:5a:48:85:f3:9c: 05:7c:4c:4d:5e:78:0b:1b:6e:ca:c2:d7:9f:51:ff:1c:ff:d2: 6c:23:3c:99:73:69:ce:c9:b5:85:12:92:82:4b:42:26:39:c3: 8b:b9:9b:97:ce:93:23:28:8c:19:eb:88:04:1c:a5:e8:83:4f: 08:71:1d:19:ee:99:98:5b:75:76:ea:0b:b0:c1:fd:1c:7c:ca: d5:c3:a5:63:99:a7:2f:0e:33:b9:70:13:09:db:ef:8e:ec:d7: 22:bc:c2:ea:3a:1e:a5:88:84:8a:b8:a9:1c:65:96:a0:70:dd: 60:75:b8:97:dc:43:27:07:33:d1:80:3d:12:3f:10:6f:01:1b: f5:d8:a0:1b:f3:eb:70:b4:cc:6d:88:20:84:78:ae:0b:63:39: 27:2e:a4:ff:0d:8b:6a:63:cf:f1:6f:8e:8a:f4:2a:8e:51:ab: bc:06:0d:24:42:c7:a9:e4:b4:6f:f0:a1:a8:85:5d:79:ae:01: 8a:52:29:95 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMBsfqOQMOtAUDl6gp/M57Yx3qhgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDcxNDE2NTI0OVoX DTI2MDcxNTE5NDI0OVowMzExMC8GA1UEAxMoMDA1QUEyRTExNDVGMjE2QzExQkU0 RUU5MzA2QkJDN0RFODA5MTdBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANU63K7xYHmdusKTHUCrrs/tDMAQttmfcjh29xxlVCFbwICz98kTYwhujlXv IFOLrEcOwUIvyLyE30dfiBxwtqRhNS6GSVpUs+TVcz3PG3yS0sUmtJbgHT3yCVRQ CdN449UiiVegMSWorkygyH5ZoWf5MZU1/ipgEdWyDTpwlgR7X5SLirLtx3UH4K2j /gNjoqdEeM+EcHzn+ZfhE+62WeDfyfunoqF5O7B4POJT+BDnUA9e7yVQ1coAhIqg 8cUJ7n/tTrgWYk9w/cuT7+CWqdNaEU/9+TBTNnMpzuwB3txNS1fTvNN9FojI0Iz8 qno5UXTkYrDI2DyGa3jgv000SykCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQAWqLh FF8hbBG+Tukwa7x96AkXoTAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8wLzMwQUU4NUQzMjUzRUEyQzk5RUFGNjM2OTYxNUY1QkMwNzBDQzVG QjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQAfoOgdPpR5g6RXSA9093KqLlhdO/FfPaM0jOYOgOAbnquE 1Z+2OFCbRV+66Ji5YBmC75DtJeKSzxlP6RKprac09ax1WkiF85wFfExNXngLG27K wtefUf8c/9JsIzyZc2nOybWFEpKCS0ImOcOLuZuXzpMjKIwZ64gEHKXog08IcR0Z 7pmYW3V26guwwf0cfMrVw6VjmacvDjO5cBMJ2++O7NcivMLqOh6liISKuKkcZZag cN1gdbiX3EMnBzPRgD0SPxBvARv12KAb8+twtMxtiCCEeK4LYzknLqT/DYtqY8/x b46K9CqOUau8Bg0kQsep5LRv8KGohV15rgGKUimV -----END CERTIFICATE-----Generated at Tue Jul 14 23:44:02 2026 by rpki-client