
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
File: 305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft (raw, json)
Hash identifier: KjwukNSn406hpesAyKRn4GOoPm7wtYmGcWY1AIU4JOo=
Subject key identifier: 26:A9:B5:E7:00:61:1F:13:A6:C5:56:7C:C5:64:18:A9:9B:78:6A:D5
Authority key identifier: 30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C
Certificate issuer: /CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
Certificate serial: 071F9E85C757AD0C203623D5EC2DFEECCD75CBFB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
Manifest number: 49
Signing time: Tue 14 Jul 2026 10:26:03 +0000
Manifest this update: Tue 14 Jul 2026 10:21:03 +0000
Manifest next update: Wed 15 Jul 2026 11:13:03 +0000
Files and hashes: 1: 305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl (hash: CuXF1YXFOEL74Rh0g6ZCPQZ4WQ6t6vy8bYHjKFKh29w=)
2: 3130332e3231342e34382e302f32322d3232203d3e2034383337.roa (hash: wpwMVqYTLbP68yao2fYoXKN2+eMRU0R4Vc9UHj1IA7A=)
3: 34332e3232342e38302e302f32322d3232203d3e2034383337.roa (hash: bXqT1q3Xi8uEtR2DeZe8yD99M07BG3eez7vSwEaf0iI=)
4: 3134342e34382e36342e302f32322d3232203d3e2034383337.roa (hash: vQ0CAaPQV+i3w/GJOaVXDBBSQcmTSIVf3fh4Hxu2or0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl
rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 11:13:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:1f:9e:85:c7:57:ad:0c:20:36:23:d5:ec:2d:fe:ec:cd:75:cb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
Validity
Not Before: Jul 14 10:21:03 2026 GMT
Not After : Jul 15 11:13:03 2026 GMT
Subject: CN=26A9B5E700611F13A6C5567CC56418A99B786AD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:76:1d:1f:c9:a6:b3:54:62:c1:b2:95:01:
3d:20:37:27:6f:40:bd:c9:76:fc:a1:82:67:28:0b:
2e:b4:c9:c7:78:f8:67:cc:97:0e:df:70:89:1d:f2:
b0:db:05:ea:9f:7d:f3:39:6a:69:d6:20:48:f2:ac:
93:ae:ed:1d:3c:ea:9e:f3:f8:e1:64:b1:62:c5:01:
fb:bb:a7:31:7a:07:a0:a7:85:5f:fd:03:92:55:f4:
8a:fc:32:97:70:87:c8:bf:0d:31:29:97:b6:dd:f5:
e3:5e:81:00:9a:f4:d1:9a:90:72:c1:a6:59:44:5a:
26:d0:0b:25:51:60:ef:81:78:96:ef:bb:d6:9f:92:
5d:40:fe:ff:48:83:ac:ea:c6:d5:8c:a8:34:ed:47:
e4:98:0f:dc:49:d7:d9:1d:80:70:51:bd:88:73:7b:
98:9c:3d:5b:24:a8:33:7f:09:b6:3b:27:86:71:7e:
09:0d:b3:a0:ed:c9:cd:72:53:66:44:e9:6b:43:29:
4e:bb:fe:5c:2d:b8:98:b7:eb:fb:4f:ab:0a:0c:f7:
30:55:ba:46:26:d3:33:ff:d4:52:ad:14:e0:df:b3:
15:e8:dc:13:25:da:72:ce:e0:40:43:b9:03:f9:14:
aa:ba:95:40:31:5c:97:63:15:26:6d:5f:63:23:1c:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A9:B5:E7:00:61:1F:13:A6:C5:56:7C:C5:64:18:A9:9B:78:6A:D5
X509v3 Authority Key Identifier:
keyid:30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:26:19:a5:72:0a:0b:bb:ef:4b:99:63:9e:2a:db:cc:6b:08:
0d:b0:7b:b5:3d:0c:b2:e0:cb:1f:67:7a:e6:5f:50:de:9e:cd:
7a:01:38:af:f3:9b:17:52:d6:0b:c8:70:b6:f3:4b:64:92:63:
79:3a:ba:2e:a8:e6:48:fd:93:f9:9d:13:ba:51:ec:86:19:b4:
ef:60:08:fb:d4:00:94:3a:29:26:02:15:87:c2:0e:58:32:44:
3c:ed:c5:7e:06:99:44:7a:e5:58:51:1d:af:11:16:8f:e2:20:
58:d4:40:6c:e3:3b:b9:90:48:46:fd:23:2c:5e:76:06:7e:23:
aa:5f:3e:b3:9b:75:2a:db:d7:63:21:31:a8:cf:db:de:e6:23:
ca:c2:c0:c9:a3:cc:d1:8f:c2:ee:f3:3b:30:18:7d:bf:f2:c6:
5b:35:e3:5f:d6:35:45:ef:67:75:ca:1e:3a:69:d4:35:f1:89:
c7:f1:39:2b:c5:99:5f:cc:81:c2:47:1a:91:82:00:6c:c1:48:
f1:62:5d:a5:f4:d5:e0:7a:ab:12:0e:cf:ba:e5:a5:c9:12:d8:
db:86:d9:ee:05:f2:8d:8b:38:a6:1f:1d:e1:2d:cd:34:30:11:
aa:2a:95:c3:3f:69:bf:d0:91:cb:0d:a6:59:bd:d4:f7:6e:93:
4b:66:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:05:51 2026 by rpki-client