$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft File: 30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft (raw, json) Hash identifier: KbsqZHNuhC0rSXkdy/BGbY1eJb6/tU3CoS5AgbRwx3Q= Subject key identifier: 8E:D5:8A:D8:58:43:F9:E7:3A:D1:7A:F0:89:2D:B0:73:47:83:5E:99 Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Certificate serial: 21B6873103240DF3CE5D93DCDE76F0412A8ED626 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft Manifest number: 0138 Signing time: Sat 26 Sep 2026 01:48:04 +0000 Manifest this update: Sat 26 Sep 2026 01:43:04 +0000 Manifest next update: Tue 29 Sep 2026 05:30:04 +0000 Files and hashes: 1: AS23724.roa (hash: rQG0L3U9tMwNofaMnW3Xu0RjhTwBDcEyS9DHW3lp+fE=) 2: AS4811.roa (hash: iNnyZqiBbOKcCg6RzRmZ1zCnEpcRwk2g+ghfT4gKQL4=) 3: AS58539.roa (hash: 5b56r+15342aRmOBeN/+dRPYsRzKMNQt0YSbhErfaMk=) 4: 30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl (hash: 45P7okf37ys40GK6LTgM6yavVFqdKIbHLEuNInMzCHU=) 5: AS58466.roa (hash: dYgaskG/ajSMyjYl8h58mtZD6nA9uHJMtAREK6ikuSU=) 6: AS58542.roa (hash: AEO/fpBXkvkzlHfKHc7bxC8ekrI/SS0qPJSMlWtqud8=) 7: AS137718.roa (hash: dIgp2CS8swLeW+S+MZoTiCkhV84Wwb4gJZ0pdiojUzA=) 8: AS4808.roa (hash: tasK4cpH9M4PtTXCeNeZvukouo7AYHCM07ZHpy7dkSA=) 9: AS136958.roa (hash: 5MuxDvzh5jSL7gxh3flkF/2u78NC8pzzs/pM0KoP7Dk=) 10: AS138421.roa (hash: 1J1MoWEmlIzHO1jzmqXyT5+DCPwDEGkXxEOB97W9x6o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b6:87:31:03:24:0d:f3:ce:5d:93:dc:de:76:f0:41:2a:8e:d6:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Validity Not Before: Sep 26 01:43:04 2026 GMT Not After : Sep 29 05:30:04 2026 GMT Subject: CN=8ED58AD85843F9E73AD17AF0892DB07347835E99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0a:81:0c:cc:f8:25:ef:12:28:99:1c:26:79: 52:07:c2:1f:03:ac:33:52:9b:cd:d5:54:9d:88:8a: 56:e1:98:4d:53:20:c0:5f:55:93:d4:0a:79:6c:7f: 3d:f1:f2:df:80:6a:38:84:ed:33:d4:b8:6d:95:fa: b6:fd:1e:04:20:73:bc:04:0c:41:3f:86:5b:80:5e: e6:5b:57:61:27:08:e5:6d:c8:78:9b:0f:9e:1a:b4: f8:9e:b1:68:8f:6b:1d:f3:7a:58:9e:bc:4b:ca:0d: 0f:1d:fe:64:b8:38:c6:a9:f5:12:73:43:43:90:2c: c9:c4:db:bc:16:b0:f5:b1:58:68:76:75:b8:22:7c: 3c:d6:dc:12:fa:78:cb:a0:8c:8b:17:dd:b7:2b:a8: 16:77:43:fb:fe:00:0f:e8:0d:db:ec:ee:74:b6:a8: 29:1d:a8:b9:a4:c2:cd:31:07:b8:b0:4f:35:45:cc: 93:b8:81:c3:e3:55:e8:7b:46:48:37:0e:22:95:7e: 14:3c:3d:f9:1e:8b:b7:06:7c:7a:73:69:ba:58:7a: ab:f7:52:06:0f:55:d7:84:e7:b4:55:97:b5:dc:63: a1:e5:6b:6d:b7:66:90:23:ef:d2:c2:2f:da:c0:3f: 3c:f4:54:4f:3d:e4:a5:5f:9d:8b:13:84:50:61:13: 18:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D5:8A:D8:58:43:F9:E7:3A:D1:7A:F0:89:2D:B0:73:47:83:5E:99 X509v3 Authority Key Identifier: keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d4:5b:7b:51:d5:47:a9:48:12:1f:44:a1:cb:30:f8:38:31: fe:87:79:fa:31:db:6c:e7:32:71:02:4f:c4:7b:3b:12:bd:ef: ca:8e:06:d1:92:73:3b:4c:37:be:a5:23:e6:5a:76:00:be:e6: 31:7b:a2:f2:f4:17:57:94:10:b7:33:ae:4b:b6:19:bf:2c:c1: 65:06:05:33:f3:4e:0b:35:56:0e:77:d4:46:1b:c8:06:b1:6f: f0:26:2b:c3:2a:b2:d8:53:4c:37:1f:7e:f1:32:83:fc:ea:23: 15:a3:f3:3b:c3:e9:3c:2e:69:f1:53:32:59:38:70:ef:99:4d: 50:a1:2f:4a:2a:1c:c7:0d:09:00:88:42:1c:8e:b4:00:90:0a: bd:28:c6:a8:b1:5d:f9:9a:dc:cc:10:25:db:85:f0:a9:a8:f9: f6:f6:d0:d5:60:65:32:71:3d:9e:e8:21:86:1c:2c:7a:fb:52: 3e:af:bc:e6:82:78:a4:9c:f6:b4:ac:7c:c0:1b:c0:cc:dd:8d: d1:55:ac:18:a2:16:1c:31:60:d1:e0:67:e0:de:8f:9d:ba:3f: c9:0b:65:33:06:29:11:d2:d1:7e:e1:f1:3e:40:5e:73:4a:13: c6:f9:42:1a:fd:75:6e:0c:50:aa:67:6a:0e:d0:96:11:c6:5a: 27:00:b0:3e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIbaHMQMkDfPOXZPc3nbwQSqO1iYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE MUVFRjM4RjAeFw0yNjA5MjYwMTQzMDRaFw0yNjA5MjkwNTMwMDRaMDMxMTAvBgNV BAMTKDhFRDU4QUQ4NTg0M0Y5RTczQUQxN0FGMDg5MkRCMDczNDc4MzVFOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjCoEMzPgl7xIomRwmeVIHwh8D rDNSm83VVJ2IilbhmE1TIMBfVZPUCnlsfz3x8t+AajiE7TPUuG2V+rb9HgQgc7wE DEE/hluAXuZbV2EnCOVtyHibD54atPiesWiPax3zelievEvKDQ8d/mS4OMap9RJz Q0OQLMnE27wWsPWxWGh2dbgifDzW3BL6eMugjIsX3bcrqBZ3Q/v+AA/oDdvs7nS2 qCkdqLmkws0xB7iwTzVFzJO4gcPjVeh7Rkg3DiKVfhQ8Pfkei7cGfHpzabpYeqv3 UgYPVdeE57RVl7XcY6Hla223ZpAj79LCL9rAPzz0VE895KVfnYsThFBhExhBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjtWK2FhD+ec60XrwiS2wc0eDXpkwHwYDVR0j BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2OTE2NTAvMC8zMDc3NDY1M0IzQjdC RjE1QjM4QjhCQkZGRDczQTVDMkQxRUVGMzhGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANRbe1HVR6lI Eh9Eocsw+Dgx/od5+jHbbOcycQJPxHs7Er3vyo4G0ZJzO0w3vqUj5lp2AL7mMXui 8vQXV5QQtzOuS7YZvyzBZQYFM/NOCzVWDnfURhvIBrFv8CYrwyqy2FNMNx9+8TKD /OojFaPzO8PpPC5p8VMyWThw75lNUKEvSiocxw0JAIhCHI60AJAKvSjGqLFd+Zrc zBAl24Xwqaj59vbQ1WBlMnE9nughhhwsevtSPq+85oJ4pJz2tKx8wBvAzN2N0VWs GKIWHDFg0eBn4N6Pnbo/yQtlMwYpEdLRfuHxPkBec0oTxvlCGv11bgxQqmdqDtCW EcZaJwCwPg== -----END CERTIFICATE-----Generated at Sat Sep 26 14:22:57 2026 by rpki-client