
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
File: 305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft (raw, json)
Hash identifier: uugJMEUXuzMqQkiDlpJBF1cW/wWH93RfmWvgMGCDlmE=
Subject key identifier: C5:D7:D1:45:54:3E:44:71:5B:57:98:26:F2:71:83:A6:9D:E1:F2:37
Authority key identifier: 30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C
Certificate issuer: /CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
Certificate serial: 5E9A3A9AF0E1C51A721212EA9E6262A0F2E57AB5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
Manifest number: 05
Signing time: Fri 29 May 2026 07:42:43 +0000
Manifest this update: Fri 29 May 2026 07:37:43 +0000
Manifest next update: Sat 30 May 2026 09:18:43 +0000
Files and hashes: 1: 305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl (hash: bm7s7jN5J0JxrlCL+UuQGFrCd5yIXQnQE1evXxJgrGQ=)
2: 3130332e3231342e34382e302f32342d3234203d3e2034383337.roa (hash: q/GlwgMVJgPz2YueX/zYdDdwd1pwk2ZMLOJoiBEhT3c=)
3: 34332e3232342e38322e302f32342d3234203d3e2030.roa (hash: D39m87ASX2kc9MpoFjHVU2AueuSbGqJTzgTzZ/kReSU=)
4: 34332e3232342e38332e302f32342d3234203d3e2034383337.roa (hash: s9n48nIoaQYE7kYFEdZycok3rB7tsRN2hC/vaOMUzNE=)
5: 3130332e3231342e35302e302f32342d3234203d3e2034383337.roa (hash: QO8gfo6WmKKlnAdCSBncVA0jNKjPGbdc+9tghke8cWs=)
6: 34332e3232342e38302e302f32342d3234203d3e2030.roa (hash: DydeEBLvTFBni6sap3dOQebSJ8YoD801483ECqfgdmE=)
7: 34332e3232342e38312e302f32342d3234203d3e2034383337.roa (hash: pQe03r/gh6IE/0fmJBQ3yi0lYCayIje0KE/YHarwW2I=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl
rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:9a:3a:9a:f0:e1:c5:1a:72:12:12:ea:9e:62:62:a0:f2:e5:7a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
Validity
Not Before: May 29 07:37:43 2026 GMT
Not After : May 30 09:18:43 2026 GMT
Subject: CN=C5D7D145543E44715B579826F27183A69DE1F237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a7:e3:b2:0f:5f:c9:11:96:77:25:78:3e:00:
8f:33:2d:ae:82:fb:90:90:6c:06:8e:99:40:f2:34:
eb:d1:fc:02:89:25:0d:31:b2:e5:f6:91:75:67:5b:
73:f1:7d:ec:b5:30:b3:69:7f:8d:3f:2d:36:53:f7:
96:52:28:1e:0f:e5:51:28:ec:40:c5:23:69:66:08:
64:bc:58:78:cc:40:39:de:d3:1b:cb:14:a6:c1:56:
fc:94:9b:21:f9:82:01:78:1f:d5:28:ff:3d:4c:88:
ee:23:01:65:24:a5:48:41:bf:8e:9b:1b:77:5c:61:
a3:a9:55:de:49:28:89:e5:c6:31:0e:91:f8:dc:05:
5a:b0:b3:14:e0:97:85:39:81:63:71:b1:18:a8:12:
e4:8a:04:8f:82:f8:7d:cd:66:20:fb:34:ff:02:c3:
a5:92:72:2f:c6:fe:02:c6:5c:f3:d6:00:9e:a3:a2:
46:ee:d4:10:f4:c2:48:66:6e:55:97:f6:2c:c0:38:
99:ee:1d:0e:ea:11:8e:b0:d1:7a:53:fe:d0:64:84:
ca:5a:b0:03:e9:a2:05:60:95:29:d3:70:21:8c:32:
23:c1:2e:5c:82:bf:f9:bf:84:b7:b2:48:66:b3:1e:
0c:04:fa:c2:08:d0:a3:76:8b:20:b8:1b:76:c9:68:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D7:D1:45:54:3E:44:71:5B:57:98:26:F2:71:83:A6:9D:E1:F2:37
X509v3 Authority Key Identifier:
keyid:30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f7:67:34:ca:24:46:0a:f0:bc:22:6f:dd:d5:f4:d2:ef:6c:
e2:90:b6:46:3c:6b:5f:57:fd:41:ac:43:45:d3:52:72:2f:3b:
e6:a0:8d:22:e7:58:ff:5b:00:c9:73:a2:c3:64:e8:75:c4:3d:
d0:70:a3:4f:f2:80:6a:d4:e2:48:ba:35:68:a5:1e:70:9e:bb:
ec:16:39:9b:81:ed:17:1e:f3:9f:c8:49:12:f2:bf:3d:87:65:
4d:11:43:a4:4f:12:8d:ad:a5:1c:03:b3:83:e6:39:e8:34:32:
e6:86:ef:0a:e4:ee:ee:9e:5b:30:77:63:33:7b:f2:14:12:7b:
01:d3:32:e0:ab:53:ff:62:7e:b4:51:bf:dd:6e:32:a6:ff:0b:
24:62:82:58:9b:7a:25:cc:37:4e:09:d6:ce:d7:0d:2f:73:82:
af:14:36:1a:0a:fc:ae:50:89:6e:73:7b:6b:f9:ea:b0:23:40:
c4:e2:21:f6:b6:0b:73:99:5d:2a:4a:64:49:d3:c6:9b:9a:2c:
b1:39:20:64:00:25:86:a6:6d:6b:62:45:fa:b7:e7:97:ee:75:
9c:1d:20:01:3e:cf:97:37:f5:8c:60:e9:f0:c0:63:23:0f:db:
c5:53:e8:29:70:c5:fc:23:7d:ff:ef:5f:41:ce:01:36:58:55:
06:7e:97:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:53 2026 by rpki-client