
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
File: 601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft (raw, json)
Hash identifier: R7M5gqZZ8QaT2Rix+sc2axNwgFinebRmaE+pBL8KNfU=
Subject key identifier: 4F:B1:0B:A5:F3:DE:EE:1B:93:6B:34:87:A3:A2:BA:09:D1:2F:9B:8C
Authority key identifier: 60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E
Certificate issuer: /CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E
Certificate serial: 2DF127C985446528B36F7A71BF5B62E6E1B49B77
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
Manifest number: 30
Signing time: Wed 13 May 2026 08:31:02 +0000
Manifest this update: Wed 13 May 2026 08:26:02 +0000
Manifest next update: Thu 14 May 2026 10:13:02 +0000
Files and hashes: 1: 34332e3234372e3233322e302f32322d3232203d3e2030.roa (hash: HvknGg3jtHTLMLRmwKj2Fju4EA01k6DXU/KhVvFuIHQ=)
2: 3130332e3232302e3130382e302f32322d3232203d3e2030.roa (hash: eweMT2DqhbhsogWgs3Ls5JTkhPjH5PVagqQGefKB424=)
3: 601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl (hash: wSbqz0RjasQ7PK7rSNyvdph8M/LAZ74Z3JS9ipd5g1s=)
4: 3138322e34392e302e302f31362d3136203d3e2030.roa (hash: VcnWubwyz4XXsy5ib4o3aMuT/7BWYwmSEQsMbdX4oJM=)
5: 3130332e33302e39362e302f32322d3232203d3e2030.roa (hash: wZLSzYpHhbp1Z9qyC1a2LGCTkcXv5D87rPj068v2abM=)
6: 34332e3234372e3135322e302f32322d3232203d3e2030.roa (hash: 1pk6tiEHf9kNqPoegfgckkczUu2VR2BfY6u9CKdeHko=)
7: 34352e3235312e3134382e302f32322d3232203d3e2030.roa (hash: hgzzmAJZR3a6NXzfmlpD1wxFTR8mhcdKXPB/DalEBzY=)
8: 323430353a393938303a3a2f33322d3332203d3e2030.roa (hash: GA+g1A5a2HBFT7Hhy5u0IBn7+mkbJWeKKCXdtRL2bVU=)
9: 3130332e3232302e3131362e302f32322d3232203d3e2030.roa (hash: if/xm2ZmxEWHRHPBv5cvIrLrrTMi5u7rlBXqn+knNDE=)
10: 3130332e3235322e3130342e302f32322d3232203d3e2030.roa (hash: LbvUNBbkkW0aewjviCw2bvPKR6Kgliws3ypDPVSBx14=)
11: 323430353a393838303a3a2f33322d3332203d3e2030.roa (hash: /XSBz2YauMRg8MSFkadncF+Xb/VKcdTSZjiZ3GisOqo=)
12: 34352e3235312e3134342e302f32322d3232203d3e2030.roa (hash: UHhl5vIywlR9EF1SuP2tWpZscGg6dt5K75MIQmmozxM=)
13: 323430353a393730303a3a2f33322d3332203d3e2030.roa (hash: b+fcHzb/W5/fimiES+nchVhDT38rC5UajNjNb4ZygPk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl
rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:13:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f1:27:c9:85:44:65:28:b3:6f:7a:71:bf:5b:62:e6:e1:b4:9b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E
Validity
Not Before: May 13 08:26:02 2026 GMT
Not After : May 14 10:13:02 2026 GMT
Subject: CN=4FB10BA5F3DEEE1B936B3487A3A2BA09D12F9B8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:a5:7f:d8:f5:5c:6d:09:a2:9d:49:17:24:
3f:9f:b4:9b:ac:0f:ba:3c:e5:91:7b:58:f5:b7:8c:
e3:54:77:13:04:5d:ca:9f:5d:9a:7e:34:73:30:53:
d9:13:81:85:32:0a:d8:8a:49:dc:4e:04:9f:c1:9a:
cc:34:2a:02:53:f5:7e:68:b0:e6:58:7b:12:fe:33:
62:fc:57:71:27:d7:d2:a7:8b:bf:87:28:f1:2e:a3:
5d:2c:85:db:64:31:af:35:bc:77:17:57:c2:b6:49:
05:83:2c:d6:96:30:e7:14:3c:e1:32:15:59:db:54:
e4:50:80:33:63:71:6a:8a:bf:29:2f:a1:84:bd:f7:
5f:aa:67:f4:94:b9:a2:0e:9b:7b:fd:fe:d7:3e:77:
b3:6f:65:8c:b6:81:50:73:b5:16:40:a7:9f:7b:7c:
a6:44:15:fd:cd:30:49:d6:74:59:66:cd:3f:fd:1b:
d4:94:af:c1:c6:80:24:57:1e:5d:56:06:23:5e:43:
7e:58:e6:3a:32:b9:54:af:0b:3c:63:3d:b6:a3:db:
b5:16:95:c1:e8:37:85:38:fb:c1:52:bd:55:74:c5:
24:8b:94:d4:70:16:04:06:93:67:3c:9f:8b:c2:9e:
67:33:a3:22:a4:f7:2d:46:ad:30:bd:6c:2c:92:93:
3b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B1:0B:A5:F3:DE:EE:1B:93:6B:34:87:A3:A2:BA:09:D1:2F:9B:8C
X509v3 Authority Key Identifier:
keyid:60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e8:e5:7b:3c:48:18:32:8b:07:35:ac:e6:04:65:2c:d2:c4:
47:31:e2:81:29:5b:85:54:78:a9:da:7e:72:53:65:77:80:f1:
bf:bf:62:43:c2:a0:f2:1c:67:26:6d:02:46:7d:5c:5e:60:be:
49:99:aa:0c:9e:8b:24:fe:ce:4f:66:3b:32:f3:ff:38:50:dd:
90:9b:56:1b:90:59:d4:10:be:74:69:c9:ac:fd:93:be:41:ed:
a4:0c:f6:fe:ca:c7:64:66:d2:2f:d0:dd:f2:9b:a0:f4:2e:ca:
d1:e5:3d:50:f2:d4:e5:cf:06:b0:3c:04:bc:a4:83:59:b7:18:
5f:e4:16:da:fe:80:5b:de:f1:37:d9:ed:b7:e1:4d:db:ea:37:
6a:5d:aa:46:96:02:50:fb:8b:54:28:47:b3:09:9c:03:86:8c:
08:b9:e1:c2:a0:68:64:a2:be:b1:56:d5:10:ad:86:c4:cf:c7:
a5:c0:a0:23:07:72:b4:03:46:0b:b7:62:05:29:cb:3f:49:8d:
23:f9:2f:3b:63:22:b8:8a:ab:24:1e:31:95:e6:83:6e:07:fd:
98:23:0e:3d:28:b3:60:1b:7d:11:82:12:d5:8e:e4:0a:cc:78:
25:33:fc:93:23:af:a4:32:f2:4a:e9:af:1a:0a:79:15:a5:0b:
12:76:96:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:46:20 2026 by rpki-client