
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft
File: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft (raw, json)
Hash identifier: OhmV9HCDZf9WOf8hx/lhgk4T9jQcWRtFsNWNWBrzW10=
Subject key identifier: C7:86:DF:42:75:B8:04:D3:40:32:8B:8F:99:A4:2C:A1:AE:C4:46:75
Authority key identifier: D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E
Certificate issuer: /CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E
Certificate serial: 7BAD434B0748BC09F534A1CFC333E26F26289FF1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft
Manifest number: 16
Signing time: Fri 29 May 2026 04:32:34 +0000
Manifest this update: Fri 29 May 2026 04:27:34 +0000
Manifest next update: Sat 30 May 2026 04:54:34 +0000
Files and hashes: 1: 323430313a313332303a3a2f33322d3332203d3e2039383038.roa (hash: gkXLtfsm57+1SLQOnZmPCOz2Uc/ydhDt+i+LwC+ujFg=)
2: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl (hash: DwAhhgVKZ+tMZ5l0M0J5WADluccsqpqYc2ej2Tkcyu8=)
3: 3130332e3233322e3136362e302f32332d3233203d3e2039383038.roa (hash: wZgCkdZF56vtDndZBJDFwSUyJO2LVVtO+dAGyXmN1DQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 04:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ad:43:4b:07:48:bc:09:f5:34:a1:cf:c3:33:e2:6f:26:28:9f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E
Validity
Not Before: May 29 04:27:34 2026 GMT
Not After : May 30 04:54:34 2026 GMT
Subject: CN=C786DF4275B804D340328B8F99A42CA1AEC44675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:58:31:c3:07:89:39:79:3c:89:15:d3:f9:
1f:d9:88:30:38:45:fb:3f:f1:e9:2c:2a:80:f4:6a:
31:77:3d:45:3b:1b:ba:80:78:f1:00:7b:b5:ec:ab:
da:a3:5c:39:42:ca:54:24:b4:d6:6a:87:0b:f9:f6:
dc:f5:3f:0c:c9:4a:15:e5:9e:19:7a:df:2d:04:1a:
7f:4f:38:cd:dd:17:f6:99:c1:c5:50:0b:70:f4:94:
fe:a8:4a:ed:10:40:53:00:f6:52:7c:f5:50:58:7a:
86:8b:60:b9:a3:0c:e8:67:b2:bd:78:aa:fc:f4:76:
73:9f:3d:6d:5e:62:5f:7a:04:67:52:b1:d6:02:c6:
d3:27:d9:9e:b7:35:fe:2b:e8:8b:c5:fb:ea:15:f0:
58:52:96:1d:2e:1c:46:3d:2a:c3:c1:6f:81:67:dd:
83:6f:27:d1:ce:bd:65:92:3f:2e:ac:87:6f:35:cd:
73:e6:33:9b:d6:79:33:9a:a2:d4:9d:90:2d:af:b0:
43:2c:ef:a9:6a:2e:32:7d:81:be:06:fc:92:c8:e1:
40:e7:0c:20:76:5e:53:f3:e8:90:f5:6a:5c:ab:a9:
89:06:b1:f3:d0:63:2f:8f:ab:c7:3f:81:8e:ad:2d:
65:68:10:1f:37:a3:59:45:f0:24:7b:aa:de:6e:7e:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:86:DF:42:75:B8:04:D3:40:32:8B:8F:99:A4:2C:A1:AE:C4:46:75
X509v3 Authority Key Identifier:
keyid:D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:23:71:f6:fe:a6:af:f7:38:bc:54:5c:9d:b0:9e:dc:a6:72:
06:a7:29:be:a3:ae:9e:a4:38:34:32:bf:22:22:0d:47:49:18:
83:dd:ff:9d:dd:79:dc:55:98:5b:ac:eb:3e:e1:aa:ca:8e:a6:
16:fc:f7:a5:3f:0d:74:91:83:ab:00:87:a5:43:1f:ff:0a:6f:
74:82:8f:31:dd:69:2d:59:24:16:9e:36:07:b5:c1:ab:4a:2f:
8d:3a:43:a4:eb:91:80:d0:cf:ac:22:ec:aa:d9:0b:5e:13:c7:
7d:30:2c:93:b4:4e:79:9f:75:7f:fa:eb:d1:76:94:44:96:74:
04:3b:4f:e2:53:65:8b:2b:12:2b:b9:e5:fa:d6:68:5b:2f:f9:
22:53:b3:0c:d5:75:b7:7e:f1:40:59:82:23:20:8a:07:10:21:
77:bf:94:ff:c2:5a:59:06:f4:a7:65:29:56:a1:24:d4:34:d4:
f9:ea:1a:2e:d0:ed:70:2f:0a:15:b2:d2:22:0b:78:36:21:e0:
e1:84:98:45:04:0a:a5:34:72:a1:d2:ef:9e:25:a9:93:06:60:
c7:f4:e1:ce:93:a6:ad:ab:0c:a0:29:9c:d1:69:62:02:07:98:
39:4c:87:3e:c5:bb:a3:d7:99:ab:f8:6d:29:74:07:ed:8f:5f:
3b:23:5b:62
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUe61DSwdIvAn1NKHPwzPibyYon/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgy
NzZFOUQwRTAeFw0yNjA1MjkwNDI3MzRaFw0yNjA1MzAwNDU0MzRaMDMxMTAvBgNV
BAMTKEM3ODZERjQyNzVCODA0RDM0MDMyOEI4Rjk5QTQyQ0ExQUVDNDQ2NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSc1gxwweJOXk8iRXT+R/ZiDA4
Rfs/8eksKoD0ajF3PUU7G7qAePEAe7Xsq9qjXDlCylQktNZqhwv59tz1PwzJShXl
nhl63y0EGn9POM3dF/aZwcVQC3D0lP6oSu0QQFMA9lJ89VBYeoaLYLmjDOhnsr14
qvz0dnOfPW1eYl96BGdSsdYCxtMn2Z63Nf4r6IvF++oV8FhSlh0uHEY9KsPBb4Fn
3YNvJ9HOvWWSPy6sh281zXPmM5vWeTOaotSdkC2vsEMs76lqLjJ9gb4G/JLI4UDn
DCB2XlPz6JD1alyrqYkGsfPQYy+Pq8c/gY6tLWVoEB83o1lF8CR7qt5ufjaJAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUx4bfQnW4BNNAMouPmaQsoa7ERnUwHwYDVR0j
BBgwFoAU0w+QifnqWDYAC4rkvghaiCdunQ4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzEwNjI1NDQ3MzM5NjI0MS8wL0QzMEY5MDg5RjlFQTU4MzYwMDBCOEFFNEJFMDg1
QTg4Mjc2RTlEMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgyNzZFOUQwRS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDcxMDYyNTQ0NzMzOTYyNDEvMC9EMzBGOTA4OUY5RUE1
ODM2MDAwQjhBRTRCRTA4NUE4ODI3NkU5RDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2iNx9v6mr/c4
vFRcnbCe3KZyBqcpvqOunqQ4NDK/IiINR0kYg93/nd153FWYW6zrPuGqyo6mFvz3
pT8NdJGDqwCHpUMf/wpvdIKPMd1pLVkkFp42B7XBq0ovjTpDpOuRgNDPrCLsqtkL
XhPHfTAsk7ROeZ91f/rr0XaURJZ0BDtP4lNliysSK7nl+tZoWy/5IlOzDNV1t37x
QFmCIyCKBxAhd7+U/8JaWQb0p2UpVqEk1DTU+eoaLtDtcC8KFbLSIgt4NiHg4YSY
RQQKpTRyodLvniWpkwZgx/ThzpOmrasMoCmc0WliAgeYOUyHPsW7o9eZq/htKXQH
7Y9fOyNbYg==
-----END CERTIFICATE-----
Generated at Fri May 29 22:02:53 2026 by rpki-client