$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft File: 30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft (raw, json) Hash identifier: zHKvHS1GsLhrqkYn7xfLcquGn2z0EuLD39Ma3yf80qU= Subject key identifier: F1:38:19:41:A6:72:61:54:CB:34:88:01:9A:9A:25:29:39:F7:BE:02 Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 7632C6A5A54EC98BB3D1F36044F5E9B7B636E96F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft Manifest number: 035A Signing time: Fri 28 Aug 2026 17:45:23 +0000 Manifest this update: Fri 28 Aug 2026 17:40:23 +0000 Manifest next update: Sat 29 Aug 2026 20:18:23 +0000 Files and hashes: 1: AS58519.roa (hash: uUokiWOdjiPHbpOBcaBYWsx2ROjnNNYfBhV4ww0sinI=) 2: AS139887.roa (hash: HDCjHLc51eYxBpG16liw1CPZPfJENeW/M+CCHxizFU0=) 3: AS133775.roa (hash: KQC0NT/Wn83Bp9fqkbR3E2q2ApnfJ7XJPbE8L6z3O5I=) 4: AS136197.roa (hash: Gj2HHJpfeTYn0R3yNYxcCyTTb9LjwMIF+CAPxxIbvzA=) 5: AS136195.roa (hash: vSKIhQBQFrZObTTnwbmTqGzsnP11EigITb5cyhYeX+Q=) 6: AS151058.roa (hash: mSzRVS75vBPa8uyPHLbMcuZW2KkpFKvPNE1wfvrC/UI=) 7: AS38283.roa (hash: byu4xG8+yTtwBscrS8iuOSWagzsulyP1XFC++sIeZwQ=) 8: AS58541.roa (hash: /rzJUVPATTqW/wguYZGnmmWnH282m9kioCsO/yxOo8g=) 9: 30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl (hash: giQ1C0WYT59EqJHo6ARmhLOy5C93qDZqF5G3vcsKPh4=) 10: AS4809.roa (hash: 40EfWKFEX/nLkzxF5pF2vrZgXoER5vL9bZ2K9OXie/4=) 11: AS4134.roa (hash: pIlNm6i8NNbHg3yYAJykm0cTJ0hs14VD2bobw2ZPFnM=) 12: AS58540.roa (hash: TSY0z4g2ml0XJrRPP6gGTNNEujjalV5Ki0HIaE9WKcA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 20:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:32:c6:a5:a5:4e:c9:8b:b3:d1:f3:60:44:f5:e9:b7:b6:36:e9:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: Aug 28 17:40:23 2026 GMT Not After : Aug 29 20:18:23 2026 GMT Subject: CN=F1381941A6726154CB3488019A9A252939F7BE02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e7:58:d1:54:19:9d:03:28:a4:09:21:59:17: 4d:a7:f6:ac:ef:57:78:41:60:8a:c6:9d:66:12:3b: b2:67:61:ae:b1:9a:41:3b:11:ce:c8:db:dc:00:40: 7a:50:af:7a:a0:2e:35:0a:c6:e8:2a:1f:2e:f3:09: b5:34:ee:2c:72:b1:56:ab:c6:2d:45:a0:8a:20:5a: f3:ea:fb:e7:f5:93:56:07:bd:e5:9b:22:02:99:58: 42:17:cc:81:ad:50:b3:67:9a:33:0b:3c:46:33:0d: bf:5d:18:df:46:e9:f7:05:18:d7:4d:d2:ac:b2:30: 3a:23:3b:8b:f5:0d:8d:20:57:70:28:1f:d8:51:71: 33:f9:72:56:1d:db:6a:ee:03:de:64:65:c9:4b:4c: ee:3d:21:57:46:21:f0:3e:8e:3f:29:19:e8:78:58: 18:5f:0d:4b:c1:ab:a0:c5:15:b8:61:f9:1e:fc:c4: 78:69:22:75:7f:2b:d6:da:d4:67:39:f3:97:24:f1: fd:6a:e8:c2:2f:f8:56:d8:61:c3:c2:d3:cd:4e:b0: ab:8a:85:c1:88:fb:57:80:f1:6a:43:f6:56:c4:91: 47:cc:cb:16:0f:19:88:3d:8a:fb:23:7e:ab:b9:e4: 58:5f:d5:d4:aa:ec:39:c9:b3:62:2e:f8:e8:41:18: 8d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:38:19:41:A6:72:61:54:CB:34:88:01:9A:9A:25:29:39:F7:BE:02 X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:f6:49:c5:97:6f:87:26:25:ed:d0:c2:b5:f3:98:ec:05:46: ad:18:38:9c:1b:14:ff:f4:da:13:50:18:88:2e:50:f9:b8:fa: 38:60:63:eb:9f:38:39:db:0e:9c:56:3f:a3:9d:24:dc:8d:de: 55:87:67:58:12:5c:e9:28:6d:f2:f1:42:bb:11:06:0f:1c:dd: eb:f0:a6:ff:5e:5e:67:06:10:8f:d2:06:b8:79:df:e9:de:4c: 59:b9:70:0d:31:43:fb:3c:e1:04:df:48:f0:13:40:19:a4:dc: 3c:e3:fe:50:9d:ee:92:af:8c:99:fd:ed:4e:7c:3e:ae:4b:4d: b5:ce:b1:06:6b:6f:1c:a2:37:8f:27:3f:32:3c:c2:e9:ac:9c: c7:6c:bc:fc:35:d3:40:c7:45:85:5d:0f:78:f9:4c:c3:5d:a7: 5d:07:28:f1:29:0b:ce:93:d0:e5:dd:22:a4:ad:3a:73:4a:d1: 06:e8:03:9d:69:38:d0:56:ee:64:22:54:d6:b3:15:4d:06:c2: 15:de:d8:4d:3c:59:b3:11:1a:4a:d9:65:c1:b0:aa:2f:9d:70: e4:99:fb:2d:e3:4b:2e:e9:a6:eb:0d:31:20:25:bc:fc:1c:b6: 71:3e:73:58:11:e0:fb:72:47:57:84:b0:a7:9c:e5:95:2e:c7: 9e:0e:b8:be -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdjLGpaVOyYuz0fNgRPXpt7Y26W8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDgyODE3NDAyM1oX DTI2MDgyOTIwMTgyM1owMzExMC8GA1UEAxMoRjEzODE5NDFBNjcyNjE1NENCMzQ4 ODAxOUE5QTI1MjkzOUY3QkUwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXnWNFUGZ0DKKQJIVkXTaf2rO9XeEFgisadZhI7smdhrrGaQTsRzsjb3ABA elCveqAuNQrG6CofLvMJtTTuLHKxVqvGLUWgiiBa8+r75/WTVge95ZsiAplYQhfM ga1Qs2eaMws8RjMNv10Y30bp9wUY103SrLIwOiM7i/UNjSBXcCgf2FFxM/lyVh3b au4D3mRlyUtM7j0hV0Yh8D6OPykZ6HhYGF8NS8GroMUVuGH5HvzEeGkidX8r1trU ZznzlyTx/Wrowi/4Vthhw8LTzU6wq4qFwYj7V4DxakP2VsSRR8zLFg8ZiD2K+yN+ q7nkWF/V1KrsOcmzYi746EEYjXMCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBTxOBlB pnJhVMs0iAGamiUpOfe+AjAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8wLzMwQUU4NUQzMjUzRUEyQzk5RUFGNjM2OTYxNUY1QkMwNzBDQzVG QjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQDf9knFl2+HJiXt0MK185jsBUatGDicGxT/9NoTUBiILlD5 uPo4YGPrnzg52w6cVj+jnSTcjd5Vh2dYElzpKG3y8UK7EQYPHN3r8Kb/Xl5nBhCP 0ga4ed/p3kxZuXANMUP7POEE30jwE0AZpNw84/5Qne6Sr4yZ/e1OfD6uS021zrEG a28cojePJz8yPMLprJzHbLz8NdNAx0WFXQ94+UzDXaddByjxKQvOk9Dl3SKkrTpz StEG6AOdaTjQVu5kIlTWsxVNBsIV3thNPFmzERpK2WXBsKovnXDkmfst40su6abr DTEgJbz8HLZxPnNYEeD7ckdXhLCnnOWVLseeDri+ -----END CERTIFICATE-----Generated at Sat Aug 29 07:17:28 2026 by rpki-client