
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
File: 24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft (raw, json)
Hash identifier: PQXQ2AMP65Xct9vn/35JuP5hcYkEN+3eJ/NcrAI4gU0=
Subject key identifier: 79:D3:29:E4:A3:60:21:0A:E0:13:E9:18:45:14:6E:34:FC:4F:CD:6E
Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
Certificate issuer: /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Certificate serial: 7E8F4FA9DD79DDCB6DD64B7FFCCB45F067CA30F7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
Manifest number: 02
Signing time: Fri 29 May 2026 08:44:00 +0000
Manifest this update: Fri 29 May 2026 08:39:00 +0000
Manifest next update: Sat 30 May 2026 08:44:00 +0000
Files and hashes: 1: 3230332e3139322e32352e302f32342d3234203d3e203137373831.roa (hash: Xo0MC9gPyqAkaqWViitQYw2ysJ5sNhY/oWc7KDvqJfU=)
2: 3230332e3139322e31312e302f32342d3234203d3e203137373831.roa (hash: 45xCYyRQyjhCRC0vlSjwuILRfUgMsSd1dvyBXnBRchU=)
3: 3230332e3139322e31352e302f32342d3234203d3e203137373831.roa (hash: WUwGCIiUne8yyxM/WabENAtajJDwAdTfUC/KCT6uOXI=)
4: 3230332e3139322e31362e302f32342d3234203d3e203137373831.roa (hash: o1cwMuKJtWT+7Uff4dbGVEK93EucJkFrdoxPX5tQr2M=)
5: 3230332e3139322e32342e302f32342d3234203d3e203137373831.roa (hash: BbMTunYrz1nmuNv7CTHzX20n2SaSGLdFMAbzTikvoko=)
6: 3230322e3132332e39362e302f32342d3234203d3e203137373831.roa (hash: oPL+WqvBQ1jMwFkI+nTHLmCwxfrPvPAUqSpu7XtDHhg=)
7: 3230322e3132332e3131312e302f32342d3234203d3e203137373831.roa (hash: 0GJxn9D0pYDb4yxO7Aud+dLGirj3mYMN7u3UYAKJgB4=)
8: 3230332e3139322e31322e302f32342d3234203d3e203137373831.roa (hash: V607HldWKuDXxlXGV+41k9BZRTPj2GoE42D0lUJabyA=)
9: 24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl (hash: 7G2Gm24Azqu8DO6h5RXuqchLN8QRXHEcMgyAKYvsMZ4=)
10: 3230322e3132332e3130362e302f32342d3234203d3e203137373831.roa (hash: B8CJpw4Mvz8SY6JreF+MZ8mRXXEL39z/L2SgwDPy4ro=)
11: 3230322e3132332e39382e302f32342d3234203d3e203137373831.roa (hash: 5YOOHhOu3QXd/4aaDjVX3d1nj51K6HH65UEeEz4zkEc=)
12: 3230322e38342e31372e302f32342d3234203d3e203137373831.roa (hash: 1I+ea8Rekynt7Imb05kV7gQ8KNgPu0KKaGq6waMXCoQ=)
13: 3230332e3139322e31342e302f32342d3234203d3e203137373831.roa (hash: C7pQnRLENNKawwBs1x742C4NQfWK3wR/8M1J5WHfE0I=)
14: 3230332e3139322e332e302f32342d3234203d3e203137373831.roa (hash: 0WS8k8pofZHHVmupE3YpYkM+OR/Seos2N2zmoRKePNo=)
15: 3230332e3139322e31332e302f32342d3234203d3e203137373831.roa (hash: bq7zzFwnBzqyn7Gg9JxzkYCqrRUYNIitvDRYqPRHld0=)
16: 3230332e3139322e352e302f32342d3234203d3e203137373831.roa (hash: BnkUoU7gJDO5a7aLhB5agXBQ3aLjPGSg0lU2EZRdkk0=)
17: 3230322e3132332e3130382e302f32342d3234203d3e203137373831.roa (hash: 6vWD4VyRB5bYBDWD26oF0cZv2VdLIlKVmTJZdVbRs5g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 08:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:8f:4f:a9:dd:79:dd:cb:6d:d6:4b:7f:fc:cb:45:f0:67:ca:30:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Validity
Not Before: May 29 08:39:00 2026 GMT
Not After : May 30 08:44:00 2026 GMT
Subject: CN=79D329E4A360210AE013E91845146E34FC4FCD6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:31:5b:9f:a3:b7:3f:c8:d1:4b:0c:53:46:
a7:70:2e:82:01:55:37:07:a8:45:27:2b:db:14:cc:
7c:3f:21:85:4c:10:25:05:4e:1a:ef:db:07:47:19:
8d:95:68:f9:7e:52:fa:04:67:85:a1:a5:03:2a:5e:
eb:da:41:27:04:3d:0a:7e:72:43:8f:d8:dc:64:63:
65:34:e3:46:85:50:22:77:3d:62:73:2e:19:8c:9c:
36:5e:b5:6e:8d:75:0e:77:4b:77:62:2b:52:4e:44:
98:6a:7b:40:b7:eb:41:ad:67:2f:ba:05:f3:52:c4:
17:89:fa:dc:0c:5c:ff:0e:4a:df:bf:6b:79:7f:19:
6b:a1:08:24:94:b2:e0:8e:55:ca:b0:6a:80:66:f2:
0a:b3:1e:3e:1b:64:af:3e:01:7d:34:81:eb:de:b6:
eb:fc:aa:8f:88:57:b5:dc:58:df:39:e4:5d:54:49:
47:04:66:f3:6d:4c:da:2f:db:da:be:29:75:16:03:
88:bf:15:1d:2b:a0:f7:57:3c:1e:ed:3f:32:89:1d:
40:00:02:05:61:48:e4:4b:52:0d:3c:db:57:16:6a:
87:65:51:67:c3:30:90:6e:b1:16:4c:20:40:9f:d2:
db:55:a9:67:74:c7:41:dd:fb:82:ea:d6:8f:3e:0e:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D3:29:E4:A3:60:21:0A:E0:13:E9:18:45:14:6E:34:FC:4F:CD:6E
X509v3 Authority Key Identifier:
keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:4f:d2:09:3d:08:5c:db:73:68:95:4b:42:b4:5a:81:32:ce:
af:58:e5:db:53:e6:63:ca:da:b5:30:5d:3e:44:f0:e3:9f:c9:
05:01:bd:a8:9b:62:4e:fa:b5:1a:2a:f5:3e:9f:a0:03:74:36:
e1:50:99:69:be:b0:6d:40:d1:08:4b:0b:46:86:0a:da:43:7d:
66:ea:ca:44:50:8d:62:9f:81:b9:32:07:6c:64:ab:9c:d2:b2:
a8:54:21:0d:ea:32:20:2b:31:cd:44:0e:c4:4b:4d:47:0a:18:
88:63:7c:88:04:76:52:9a:f5:ee:69:51:90:e6:a4:03:89:90:
e2:f7:fb:ad:a9:a5:55:6b:af:59:32:62:c5:95:a6:65:8c:2d:
27:f5:9f:b8:2f:e6:2b:13:5a:22:07:1d:2a:cb:da:c4:ad:f7:
62:12:2d:ab:bf:1f:0d:0f:88:32:17:a3:87:2d:96:47:d2:06:
46:bb:00:94:91:03:98:0c:04:60:ba:ed:4f:b2:54:2f:0d:72:
20:79:23:b0:55:42:69:24:ff:08:a7:90:e3:fe:b5:d5:05:0a:
be:cf:48:21:8d:4d:65:c3:af:93:b4:fb:2e:52:6b:80:da:52:
0c:8b:50:5d:88:a5:aa:b6:8c:e3:78:8e:b9:18:63:5f:71:f7:
4c:29:d0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:45 2026 by rpki-client