
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
File: 30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft (raw, json)
Hash identifier: teuYHqfZBAe8faSu8NXok29C7o3bO+luzylCufflrLA=
Subject key identifier: 21:D0:B0:E1:D9:F3:46:A5:6E:02:D0:E3:94:91:2E:48:61:4B:28:38
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Certificate issuer: /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial: 3490931C71B0B91882AB5744214FC45E82643C6C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
Manifest number: 014E
Signing time: Fri 13 Nov 2026 19:59:51 +0000
Manifest this update: Fri 13 Nov 2026 19:54:51 +0000
Manifest next update: Mon 16 Nov 2026 21:05:51 +0000
Files and hashes: 1: AS137718.roa (hash: dIgp2CS8swLeW+S+MZoTiCkhV84Wwb4gJZ0pdiojUzA=)
2: AS58542.roa (hash: AEO/fpBXkvkzlHfKHc7bxC8ekrI/SS0qPJSMlWtqud8=)
3: AS23724.roa (hash: rQG0L3U9tMwNofaMnW3Xu0RjhTwBDcEyS9DHW3lp+fE=)
4: AS4808.roa (hash: tasK4cpH9M4PtTXCeNeZvukouo7AYHCM07ZHpy7dkSA=)
5: AS4811.roa (hash: iNnyZqiBbOKcCg6RzRmZ1zCnEpcRwk2g+ghfT4gKQL4=)
6: AS58539.roa (hash: 5b56r+15342aRmOBeN/+dRPYsRzKMNQt0YSbhErfaMk=)
7: 30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl (hash: cx8upUv8+78I83zRo6NEp58/B9eyDFd4yDKAu0S7l5c=)
8: AS136958.roa (hash: 5MuxDvzh5jSL7gxh3flkF/2u78NC8pzzs/pM0KoP7Dk=)
9: AS138421.roa (hash: 1J1MoWEmlIzHO1jzmqXyT5+DCPwDEGkXxEOB97W9x6o=)
10: AS58466.roa (hash: dYgaskG/ajSMyjYl8h58mtZD6nA9uHJMtAREK6ikuSU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 06:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:90:93:1c:71:b0:b9:18:82:ab:57:44:21:4f:c4:5e:82:64:3c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Validity
Not Before: Nov 13 19:54:51 2026 GMT
Not After : Nov 16 21:05:51 2026 GMT
Subject: CN=21D0B0E1D9F346A56E02D0E394912E48614B2838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:5a:74:e7:b8:28:9e:21:b2:dd:c1:e8:b3:
f1:97:b0:25:7b:58:1a:06:47:42:51:36:34:a0:c5:
ae:9e:34:9e:b3:2d:40:0b:c5:8e:64:79:9b:a7:a5:
29:9e:45:e0:22:53:3b:05:e4:f7:94:ad:be:3d:32:
0f:f5:03:22:4e:3d:a2:8a:d9:71:ef:e8:28:14:b6:
6d:00:dc:eb:fe:3a:65:08:93:91:69:2a:71:85:a1:
f3:08:92:83:70:54:65:d9:8c:61:97:6e:5f:09:a2:
84:8c:0d:38:e8:25:6a:38:c2:02:f6:f4:60:eb:1e:
dd:f5:fe:10:60:d6:32:a5:d1:21:82:9c:4e:47:a9:
67:f7:67:ef:bd:ef:d4:c7:5a:63:98:98:0e:54:d8:
99:67:47:09:a7:7a:23:f5:a4:de:31:82:ff:10:12:
70:d6:73:dc:13:ba:92:44:96:35:9b:fc:c6:3a:51:
80:8d:38:6d:b9:75:d7:2c:a9:93:c8:26:61:cc:11:
87:d4:ea:96:d5:2e:c1:7a:99:34:a7:66:52:13:4d:
57:cc:e8:98:1a:7f:f7:02:9e:45:d0:e7:f9:66:e8:
aa:69:51:8b:94:1c:19:a6:62:2f:f0:2f:22:18:13:
83:88:72:17:92:ae:bb:79:42:29:e3:ae:cb:94:50:
07:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D0:B0:E1:D9:F3:46:A5:6E:02:D0:E3:94:91:2E:48:61:4B:28:38
X509v3 Authority Key Identifier:
keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:69:93:03:19:2a:43:26:27:c2:f2:59:b0:18:e8:95:fa:02:
56:04:f4:09:60:f0:f7:8e:6f:e0:0a:ac:b3:4e:90:08:c2:d0:
9e:2c:4d:ad:ff:99:aa:e6:54:39:15:0c:88:9d:32:ac:10:5c:
f2:3b:c8:d6:fc:42:f1:67:6b:cd:66:a3:70:ed:4c:34:b8:b3:
ef:e1:d7:35:0d:25:ee:a3:48:48:f3:8f:f9:32:e0:b1:42:63:
58:ed:fd:87:b5:cc:2d:cd:1b:3a:5e:16:43:9b:8f:63:20:4f:
56:97:de:57:0d:72:6c:b9:73:a3:6f:9c:24:05:dd:d4:a6:95:
70:0c:63:6f:d8:80:fd:41:e1:c9:48:88:85:8d:c8:93:73:bf:
e3:6c:37:c5:85:c3:d7:57:1a:bb:5f:b7:15:81:20:f4:65:ec:
e6:08:5e:74:3a:4b:4c:b9:b9:5b:0d:d0:7d:29:ac:bb:9a:e5:
26:85:d5:2b:97:53:99:d2:1b:bf:62:13:24:72:c3:c1:ba:d5:
09:aa:47:3c:44:27:db:62:6e:62:33:65:ba:15:1b:cd:58:0c:
01:ed:88:34:9f:06:75:46:03:d6:08:ab:b3:ff:71:34:f0:03:
10:90:1a:d8:ed:7b:5e:db:b2:8b:cf:f0:d1:8c:51:ca:b9:a6:
38:77:ef:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:06:15 2026 by rpki-client