
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
File: 30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft (raw, json)
Hash identifier: rV0jKcEmIMaKIX0+kz1EDDKe9qAOEXUtE8mQDbD22sw=
Subject key identifier: AC:2E:EB:A0:B0:48:09:83:60:5F:33:D7:56:17:6B:05:43:FC:CA:5A
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 1EF780CABE01EB248B55FA0FD2C409B53296F67F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
Manifest number: FB
Signing time: Thu 23 Jul 2026 23:34:50 +0000
Manifest this update: Thu 23 Jul 2026 23:29:50 +0000
Manifest next update: Sat 25 Jul 2026 01:38:50 +0000
Files and hashes: 1: AS23724.roa (hash: rQG0L3U9tMwNofaMnW3Xu0RjhTwBDcEyS9DHW3lp+fE=)
2: AS137718.roa (hash: x/jz4ghwv8Kdsn3wjAGWBS2nf863CLQpDdrI/5iiwI4=)
3: AS4811.roa (hash: tOgXPdkc4vojliZLRFzh1l2XJvQRfxjErd6BbYitfuo=)
4: AS58542.roa (hash: AEO/fpBXkvkzlHfKHc7bxC8ekrI/SS0qPJSMlWtqud8=)
5: AS58466.roa (hash: dYgaskG/ajSMyjYl8h58mtZD6nA9uHJMtAREK6ikuSU=)
6: 30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl (hash: tHEwpojbK6szsNcIri1L8tWD/1PP4M3Q9gccDJC1098=)
7: AS4808.roa (hash: tasK4cpH9M4PtTXCeNeZvukouo7AYHCM07ZHpy7dkSA=)
8: AS136958.roa (hash: 5MuxDvzh5jSL7gxh3flkF/2u78NC8pzzs/pM0KoP7Dk=)
9: AS58539.roa (hash: 5b56r+15342aRmOBeN/+dRPYsRzKMNQt0YSbhErfaMk=)
10: AS138421.roa (hash: 1J1MoWEmlIzHO1jzmqXyT5+DCPwDEGkXxEOB97W9x6o=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 01:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f7:80:ca:be:01:eb:24:8b:55:fa:0f:d2:c4:09:b5:32:96:f6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Jul 23 23:29:50 2026 GMT
Not After : Jul 25 01:38:50 2026 GMT
Subject: CN=AC2EEBA0B0480983605F33D756176B0543FCCA5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:9c:0f:ab:d7:12:41:de:ac:70:dd:f1:c8:
87:e8:f6:c3:60:11:8e:d1:c3:3e:f4:87:13:f7:51:
0a:f4:88:8b:67:75:a3:52:d8:71:e2:44:4a:4d:ba:
da:f7:12:fc:90:38:50:97:4c:a4:25:80:04:3f:c6:
45:6c:b1:5c:7b:cf:38:4c:92:bc:4b:1e:89:fc:c4:
9c:c3:76:c7:a8:11:2e:38:20:52:14:58:25:09:ba:
ff:9a:6b:fb:09:af:24:9a:61:97:51:94:af:a1:13:
f5:5c:46:8b:af:c3:ea:37:90:68:d7:9c:54:96:1f:
97:b5:c6:55:ab:96:9a:0a:d6:96:9d:80:41:3d:24:
4b:67:06:67:4a:be:40:0d:1a:36:cc:c5:f1:bc:9b:
f5:cf:8c:25:c1:49:5c:68:bd:94:51:aa:dd:60:7b:
47:4b:a2:b5:2b:c5:fd:af:0a:c8:d7:ff:bc:24:7d:
bd:d7:f9:6f:b6:10:3b:31:f6:39:91:67:8f:38:d0:
03:84:70:a7:14:42:2b:ec:da:59:f8:6e:3f:4d:09:
db:8f:c4:fe:96:7d:9f:b5:12:89:a3:d7:ec:99:b9:
3d:88:f3:49:2f:51:cf:94:eb:9f:f7:9d:c2:93:f0:
f1:c5:59:7f:b6:54:28:64:33:e7:2f:ef:eb:e1:07:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2E:EB:A0:B0:48:09:83:60:5F:33:D7:56:17:6B:05:43:FC:CA:5A
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:21:89:4c:ea:9e:ba:51:3e:f4:11:21:1a:92:dd:2c:2a:30:
74:9c:07:90:50:8d:48:63:a9:82:35:26:75:13:86:30:f7:d0:
65:73:83:83:a1:ae:da:3a:68:e8:d3:e8:94:7c:88:8d:46:5f:
99:9d:8f:32:6e:2a:d7:5e:06:72:75:46:5c:ea:fd:3a:ce:54:
4f:f4:e5:cf:d2:6b:ad:58:f7:8d:50:8b:d2:ea:e4:2f:17:12:
c1:76:f7:56:bf:02:bd:16:d5:d5:eb:18:78:c1:d8:44:0b:b3:
ae:24:8e:3f:da:72:e2:30:b5:47:92:2c:ea:ac:46:44:23:78:
18:cd:e3:d4:a6:36:83:c9:76:76:0f:66:4a:b3:90:19:69:5f:
66:8a:87:51:f4:02:7d:11:ca:0e:01:a6:2f:a9:b5:67:f6:18:
c3:a8:fb:66:bb:34:e5:1b:59:10:11:1d:70:4f:50:46:a6:00:
6b:fe:27:b2:d2:33:d1:5b:aa:60:91:b9:ef:49:52:77:b7:8f:
61:26:78:8e:72:24:b4:ef:8b:20:eb:85:48:51:ff:51:5d:91:
a1:8d:9f:db:61:40:c7:49:fc:ef:1b:8b:35:28:86:70:e2:ab:
81:df:c0:03:0b:94:b8:14:b4:fb:b4:3c:7c:52:23:76:26:d3:
f3:7f:ad:fb
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUHveAyr4B6ySLVfoP0sQJtTKW9n8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE
MUVFRjM4RjAeFw0yNjA3MjMyMzI5NTBaFw0yNjA3MjUwMTM4NTBaMDMxMTAvBgNV
BAMTKEFDMkVFQkEwQjA0ODA5ODM2MDVGMzNENzU2MTc2QjA1NDNGQ0NBNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqJZwPq9cSQd6scN3xyIfo9sNg
EY7Rwz70hxP3UQr0iItndaNS2HHiREpNutr3EvyQOFCXTKQlgAQ/xkVssVx7zzhM
krxLHon8xJzDdseoES44IFIUWCUJuv+aa/sJrySaYZdRlK+hE/VcRouvw+o3kGjX
nFSWH5e1xlWrlpoK1padgEE9JEtnBmdKvkANGjbMxfG8m/XPjCXBSVxovZRRqt1g
e0dLorUrxf2vCsjX/7wkfb3X+W+2EDsx9jmRZ4840AOEcKcUQivs2ln4bj9NCduP
xP6WfZ+1Eomj1+yZuT2I80kvUc+U65/3ncKT8PHFWX+2VChkM+cv7+vhBxDVAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUrC7roLBICYNgXzPXVhdrBUP8ylowHwYDVR0j
BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB
NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2OTE2NTAvMC8zMDc3NDY1M0IzQjdC
RjE1QjM4QjhCQkZGRDczQTVDMkQxRUVGMzhGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeiGJTOqeulE+
9BEhGpLdLCowdJwHkFCNSGOpgjUmdROGMPfQZXODg6Gu2jpo6NPolHyIjUZfmZ2P
Mm4q114GcnVGXOr9Os5UT/Tlz9JrrVj3jVCL0urkLxcSwXb3Vr8CvRbV1esYeMHY
RAuzriSOP9py4jC1R5Is6qxGRCN4GM3j1KY2g8l2dg9mSrOQGWlfZoqHUfQCfRHK
DgGmL6m1Z/YYw6j7Zrs05RtZEBEdcE9QRqYAa/4nstIz0VuqYJG570lSd7ePYSZ4
jnIktO+LIOuFSFH/UV2RoY2f22FAx0n87xuLNSiGcOKrgd/AAwuUuBS0+7Q8fFIj
dibT83+t+w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:27 2026 by rpki-client