$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft File: 30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft (raw, json) Hash identifier: f3m0ZJnS9CefY0MRlykIDY68AUflqwt5mnRfIdJXNGI= Subject key identifier: 33:38:2D:AB:C8:6F:21:D6:46:C1:05:A0:FF:1E:F0:A5:48:10:BB:D1 Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 5FD507E7C053B735F8D2EEDCAC1A9B25FA56DA6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft Manifest number: 0384 Signing time: Tue 22 Sep 2026 16:25:22 +0000 Manifest this update: Tue 22 Sep 2026 16:20:22 +0000 Manifest next update: Fri 25 Sep 2026 20:35:22 +0000 Files and hashes: 1: AS58540.roa (hash: TSY0z4g2ml0XJrRPP6gGTNNEujjalV5Ki0HIaE9WKcA=) 2: AS38283.roa (hash: byu4xG8+yTtwBscrS8iuOSWagzsulyP1XFC++sIeZwQ=) 3: AS4134.roa (hash: pIlNm6i8NNbHg3yYAJykm0cTJ0hs14VD2bobw2ZPFnM=) 4: AS136197.roa (hash: Gj2HHJpfeTYn0R3yNYxcCyTTb9LjwMIF+CAPxxIbvzA=) 5: AS136195.roa (hash: vSKIhQBQFrZObTTnwbmTqGzsnP11EigITb5cyhYeX+Q=) 6: 30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl (hash: jPAxJAY6PG7HI7kfH/1UYeGgIprUOe1M2pKj18DomLI=) 7: AS133775.roa (hash: KQC0NT/Wn83Bp9fqkbR3E2q2ApnfJ7XJPbE8L6z3O5I=) 8: AS58541.roa (hash: /rzJUVPATTqW/wguYZGnmmWnH282m9kioCsO/yxOo8g=) 9: AS151058.roa (hash: mSzRVS75vBPa8uyPHLbMcuZW2KkpFKvPNE1wfvrC/UI=) 10: AS139887.roa (hash: HDCjHLc51eYxBpG16liw1CPZPfJENeW/M+CCHxizFU0=) 11: AS4809.roa (hash: 40EfWKFEX/nLkzxF5pF2vrZgXoER5vL9bZ2K9OXie/4=) 12: AS58519.roa (hash: uUokiWOdjiPHbpOBcaBYWsx2ROjnNNYfBhV4ww0sinI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 20:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d5:07:e7:c0:53:b7:35:f8:d2:ee:dc:ac:1a:9b:25:fa:56:da:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: Sep 22 16:20:22 2026 GMT Not After : Sep 25 20:35:22 2026 GMT Subject: CN=33382DABC86F21D646C105A0FF1EF0A54810BBD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a2:b3:7d:eb:fe:4e:8b:5d:da:67:6a:e0:b5: 82:80:a5:38:d0:e8:98:2c:3a:a7:48:26:c7:3c:aa: 2b:5c:a5:41:6e:1e:0e:94:9b:b9:ee:1c:2d:77:86: b2:2c:7b:a1:ab:8d:78:40:91:36:bd:14:ec:1d:af: de:3e:33:12:80:ba:38:dc:ba:e3:e7:8c:29:c9:f7: 28:a2:3c:97:c5:16:30:12:3e:1b:c7:da:c5:c0:14: 93:ef:b4:8b:06:86:7b:69:33:10:a6:e6:0c:66:1b: 20:c2:3b:5b:2e:a4:46:90:a4:98:05:a7:eb:e1:cc: 58:96:bb:28:3e:5d:51:6b:62:65:fd:cf:0c:af:f7: 50:aa:97:57:6c:af:1b:a4:db:b0:71:32:a5:f7:f4: 8a:69:0a:02:a7:04:ca:99:c2:28:83:64:2c:30:a3: d8:99:cb:e4:a6:d3:80:a9:2a:f3:7d:e3:76:93:da: f6:35:c7:f8:8d:cb:c1:9d:a8:22:63:fb:71:ba:57: 2e:46:80:d7:c1:e1:aa:6b:f0:50:6b:63:9b:3d:0f: 48:73:ed:bc:49:6b:3f:93:32:96:86:8d:bc:03:20: 20:7f:19:02:a5:c1:f2:7e:5b:a1:99:fe:22:57:b3: f9:44:57:70:a4:83:f8:98:ef:d2:4e:c6:f6:46:9f: 9c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:38:2D:AB:C8:6F:21:D6:46:C1:05:A0:FF:1E:F0:A5:48:10:BB:D1 X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ae:3f:58:33:45:b1:83:58:2b:8a:24:0e:f7:b1:9c:4a:3e: e5:9b:4e:d5:e0:09:91:0a:e2:fb:23:a2:2d:bd:e6:22:ec:37: de:70:ee:96:5b:d0:9c:ae:11:37:54:45:c8:b0:0c:26:c4:f0: bb:7f:72:05:94:27:a9:6b:86:fb:c0:98:e2:bb:5f:27:59:cc: 3b:6b:ab:12:a4:50:82:15:e7:70:21:96:f1:9c:d2:ef:32:08: 9c:1c:e5:d3:34:01:f5:d9:36:d5:e1:8f:3f:b1:9d:1a:fe:0b: 33:47:ec:a4:08:43:89:c8:f8:b9:d2:7b:77:63:10:dd:c6:5f: a9:85:59:02:2f:5d:24:2b:f5:6a:43:11:d7:66:94:79:eb:48: 0d:30:8f:c2:26:26:ae:b3:8a:51:56:a2:58:30:3d:64:97:2d: 18:c0:b2:a4:76:68:a7:f6:c8:2e:d3:2e:44:6f:69:7e:26:5f: c7:57:1f:95:e5:34:91:aa:56:9d:33:0d:0b:d3:4f:80:0b:a6: 7c:85:f0:38:fc:7c:eb:54:cb:2f:77:6b:1c:87:96:ae:ff:75: 39:7b:b6:11:9a:16:2b:53:5f:eb:8a:e7:d1:b9:96:3a:93:6c: 79:41:f7:8a:c1:51:b2:f6:b5:c7:01:33:10:a6:b4:72:81:76: dd:c3:92:43 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUX9UH58BTtzX40u7crBqbJfpW2mowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDkyMjE2MjAyMloX DTI2MDkyNTIwMzUyMlowMzExMC8GA1UEAxMoMzMzODJEQUJDODZGMjFENjQ2QzEw NUEwRkYxRUYwQTU0ODEwQkJEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALyis33r/k6LXdpnauC1goClONDomCw6p0gmxzyqK1ylQW4eDpSbue4cLXeG six7oauNeECRNr0U7B2v3j4zEoC6ONy64+eMKcn3KKI8l8UWMBI+G8faxcAUk++0 iwaGe2kzEKbmDGYbIMI7Wy6kRpCkmAWn6+HMWJa7KD5dUWtiZf3PDK/3UKqXV2yv G6TbsHEypff0imkKAqcEypnCKINkLDCj2JnL5KbTgKkq833jdpPa9jXH+I3LwZ2o ImP7cbpXLkaA18HhqmvwUGtjmz0PSHPtvElrP5MyloaNvAMgIH8ZAqXB8n5boZn+ Ilez+URXcKSD+Jjv0k7G9kafnMcCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQzOC2r yG8h1kbBBaD/HvClSBC70TAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8wLzMwQUU4NUQzMjUzRUEyQzk5RUFGNjM2OTYxNUY1QkMwNzBDQzVG QjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQA5rj9YM0Wxg1griiQO97GcSj7lm07V4AmRCuL7I6ItveYi 7DfecO6WW9CcrhE3VEXIsAwmxPC7f3IFlCepa4b7wJjiu18nWcw7a6sSpFCCFedw IZbxnNLvMgicHOXTNAH12TbV4Y8/sZ0a/gszR+ykCEOJyPi50nt3YxDdxl+phVkC L10kK/VqQxHXZpR560gNMI/CJiaus4pRVqJYMD1kly0YwLKkdmin9sgu0y5Eb2l+ Jl/HVx+V5TSRqladMw0L00+AC6Z8hfA4/HzrVMsvd2sch5au/3U5e7YRmhYrU1/r iufRuZY6k2x5QfeKwVGy9rXHATMQprRygXbdw5JD -----END CERTIFICATE-----Generated at Thu Sep 24 11:07:11 2026 by rpki-client