
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
File: 305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft (raw, json)
Hash identifier: EdP1ydYexSW4bM0dhwPCDXXa4U4f9/pFklRVgyYsqlA=
Subject key identifier: 91:B3:85:89:2F:72:DC:B6:EA:32:82:59:1C:4D:E1:A4:46:5A:D9:D1
Authority key identifier: 30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C
Certificate issuer: /CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
Certificate serial: 2DC51AEF024266E8021CDA458031FBCB95121972
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
Manifest number: 84
Signing time: Fri 28 Aug 2026 06:47:37 +0000
Manifest this update: Fri 28 Aug 2026 06:42:37 +0000
Manifest next update: Mon 31 Aug 2026 07:06:37 +0000
Files and hashes: 1: 305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl (hash: LqdC1nuLE3K449vvOt5HqqpgRrLZoL6lIY84bY9RjBA=)
2: 34332e3232342e38302e302f32322d3232203d3e2034383337.roa (hash: bXqT1q3Xi8uEtR2DeZe8yD99M07BG3eez7vSwEaf0iI=)
3: 3130332e3231342e34382e302f32322d3232203d3e2034383337.roa (hash: wpwMVqYTLbP68yao2fYoXKN2+eMRU0R4Vc9UHj1IA7A=)
4: 3134342e34382e36342e302f32322d3232203d3e2034383337.roa (hash: vQ0CAaPQV+i3w/GJOaVXDBBSQcmTSIVf3fh4Hxu2or0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl
rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 07:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c5:1a:ef:02:42:66:e8:02:1c:da:45:80:31:fb:cb:95:12:19:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
Validity
Not Before: Aug 28 06:42:37 2026 GMT
Not After : Aug 31 07:06:37 2026 GMT
Subject: CN=91B385892F72DCB6EA3282591C4DE1A4465AD9D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:c9:77:ec:58:2d:b9:f8:0f:6b:16:ce:9f:
33:57:93:8f:4c:46:97:84:b7:12:9e:a4:a5:18:17:
90:70:67:1a:9b:1f:d8:6a:dd:17:b1:51:5a:3e:d5:
d8:f2:d3:4c:1b:d6:b3:1f:a2:c4:f2:ae:4f:7a:86:
78:ba:c8:7f:67:6c:f9:e8:f6:dc:0c:9e:50:5e:8a:
3e:cf:ab:bb:9b:c5:74:41:6c:1a:0f:8d:00:1e:17:
54:46:45:05:7f:9e:21:cd:3c:85:7b:50:ab:e1:10:
da:fb:c0:a8:4b:a1:eb:f0:66:32:d3:f0:ec:10:0c:
cf:82:a4:8e:d0:5a:56:db:22:42:0c:ff:c0:03:c8:
ad:9e:e0:c0:2e:3e:0a:4d:16:23:cb:88:af:87:eb:
2a:08:80:22:b1:81:5b:08:f8:85:24:b9:e6:bb:0b:
66:03:2a:3c:e5:1a:f3:41:fd:1b:a1:b5:b1:6c:4a:
ce:59:8b:51:d6:04:c1:b1:08:df:14:31:f6:51:7e:
4f:52:e4:78:3d:05:17:c3:96:13:1c:5a:19:f8:71:
8d:10:29:dd:2f:71:4f:51:12:36:34:91:d2:15:c5:
75:1b:1f:c8:9b:44:90:2c:61:e2:c2:2b:66:5f:02:
9e:36:95:93:00:47:4f:1f:b4:dc:4e:86:96:00:a2:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B3:85:89:2F:72:DC:B6:EA:32:82:59:1C:4D:E1:A4:46:5A:D9:D1
X509v3 Authority Key Identifier:
keyid:30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:59:e6:f1:ad:f1:ba:c7:22:cc:4d:be:63:67:7f:9b:f2:42:
5c:0e:5a:83:92:7a:39:ad:0f:73:33:df:5e:fe:37:3d:3b:66:
2f:1b:43:b5:97:9e:89:a6:f9:42:50:a2:b2:85:80:4e:32:5b:
41:79:73:50:11:97:8f:7c:c7:52:1b:25:92:f8:30:1f:62:10:
b7:62:07:a0:37:e8:31:3d:e3:49:2d:93:4e:d9:47:b9:4d:80:
3d:42:46:b3:8e:99:0a:84:98:f9:a7:67:e4:1f:6e:43:e4:04:
36:89:9b:09:b8:b9:a7:22:36:39:6e:91:b0:1f:ba:01:35:63:
58:20:b8:ad:55:3e:50:fc:f5:e9:2f:14:54:ed:44:f3:83:30:
d9:9c:be:1a:05:02:4c:4e:f9:5f:ec:5e:52:e6:19:e0:08:48:
e2:8b:19:c4:06:19:e1:8a:ed:d4:e3:53:dd:f1:4d:fb:c5:1d:
e9:44:db:da:7e:7d:1d:47:f8:fb:1e:d2:ba:b5:1b:0e:c4:4e:
2d:0a:ff:85:64:01:a4:ed:a8:94:76:14:b7:dc:be:5e:79:09:
71:6f:c1:54:d1:89:02:ba:eb:e7:18:1f:7d:2d:0a:b5:e2:68:
59:c9:49:3a:bc:a5:1e:56:71:bc:bd:62:04:c3:ab:4e:f1:2f:
40:2a:53:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:06:51 2026 by rpki-client