$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft File: 30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft (raw, json) Hash identifier: KndArQgx8WcumVMWUYeDrwy8j3COD5/O/uJBCSyuu3Q= Subject key identifier: 36:60:B4:A7:91:AF:3D:BD:1C:14:C1:2A:52:7A:FF:F8:F7:E4:D8:9E Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 39E8DD46E598A115E87F4F1CE6443752B147AA5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft Manifest number: 030E Signing time: Thu 23 Jul 2026 19:19:42 +0000 Manifest this update: Thu 23 Jul 2026 19:14:42 +0000 Manifest next update: Fri 24 Jul 2026 19:50:42 +0000 Files and hashes: 1: AS151058.roa (hash: mSzRVS75vBPa8uyPHLbMcuZW2KkpFKvPNE1wfvrC/UI=) 2: AS4134.roa (hash: pIlNm6i8NNbHg3yYAJykm0cTJ0hs14VD2bobw2ZPFnM=) 3: AS139887.roa (hash: HDCjHLc51eYxBpG16liw1CPZPfJENeW/M+CCHxizFU0=) 4: AS136195.roa (hash: vSKIhQBQFrZObTTnwbmTqGzsnP11EigITb5cyhYeX+Q=) 5: AS58540.roa (hash: TSY0z4g2ml0XJrRPP6gGTNNEujjalV5Ki0HIaE9WKcA=) 6: AS58519.roa (hash: uUokiWOdjiPHbpOBcaBYWsx2ROjnNNYfBhV4ww0sinI=) 7: 30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl (hash: sKFbkOqGoyQm98rPp5Q7CXjrpfeqEDJRrlKfIO6hb0c=) 8: AS136197.roa (hash: Gj2HHJpfeTYn0R3yNYxcCyTTb9LjwMIF+CAPxxIbvzA=) 9: AS133775.roa (hash: KQC0NT/Wn83Bp9fqkbR3E2q2ApnfJ7XJPbE8L6z3O5I=) 10: AS58541.roa (hash: /rzJUVPATTqW/wguYZGnmmWnH282m9kioCsO/yxOo8g=) 11: AS38283.roa (hash: byu4xG8+yTtwBscrS8iuOSWagzsulyP1XFC++sIeZwQ=) 12: AS4809.roa (hash: 40EfWKFEX/nLkzxF5pF2vrZgXoER5vL9bZ2K9OXie/4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e8:dd:46:e5:98:a1:15:e8:7f:4f:1c:e6:44:37:52:b1:47:aa:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: Jul 23 19:14:42 2026 GMT Not After : Jul 24 19:50:42 2026 GMT Subject: CN=3660B4A791AF3DBD1C14C12A527AFFF8F7E4D89E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a4:4c:8e:3b:c9:5e:92:84:17:f0:38:ff:21: bd:88:76:2c:dc:f1:d3:4b:d5:64:98:de:d7:fd:c7: dd:2f:0c:92:da:34:06:49:b0:04:6f:3b:8e:5a:7b: 2e:0d:15:f9:b2:f7:53:bd:f0:97:54:a4:6a:80:4f: 75:7d:e1:df:a8:dc:bf:81:e9:9c:c3:75:f1:bb:4c: e5:d4:c4:44:e1:af:ef:26:2b:d7:8c:2d:36:c5:8d: 0f:f6:5d:bd:a0:a8:13:88:71:d6:64:ed:ca:6a:09: 2a:79:88:69:40:c9:b8:25:83:24:6d:b8:9b:18:17: 63:de:72:ff:03:a8:a6:24:1e:02:d3:f3:17:93:29: ae:36:47:41:5f:56:42:37:55:bc:ac:17:f5:db:98: cb:05:4e:9b:9f:a9:c0:59:9d:56:be:02:4d:8c:bb: 4f:29:e7:c4:b1:79:d3:7f:e5:6d:98:a5:db:e1:ee: 87:a5:cc:bb:12:f7:db:0f:47:97:38:08:99:ea:26: a3:17:b7:27:6e:63:de:f5:ed:6a:51:9b:fc:7e:7f: 08:16:d4:b8:22:ad:69:0a:0a:b2:d0:4c:ba:f1:2d: a3:3b:e0:a2:9e:09:1b:77:3b:d0:22:3b:93:87:55: 18:e3:1c:72:7f:fd:32:71:80:5c:b8:68:d5:e5:50: 52:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:60:B4:A7:91:AF:3D:BD:1C:14:C1:2A:52:7A:FF:F8:F7:E4:D8:9E X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:3c:3c:0d:f1:ce:30:96:06:14:85:97:0e:b5:20:e1:03:27: 74:10:f9:08:29:05:b6:75:9f:5a:8c:01:e9:cb:78:2c:e4:9d: b4:ee:bd:da:42:d2:ae:ac:27:1f:07:dd:76:94:ad:14:10:1a: 02:bf:7f:97:3f:cd:cf:cb:30:e2:7f:c8:68:dd:b5:bd:e4:65: 9e:b1:d5:40:47:6c:6e:93:41:8f:b0:6d:d2:5d:4f:c4:3f:42: 06:7d:a2:93:01:8d:48:1c:67:aa:80:9f:4b:e0:30:d1:ee:76: 75:42:2a:fa:7b:c2:13:12:7d:9e:95:c6:30:ed:ec:df:40:d9: 32:84:c8:0c:4f:cb:cf:8e:66:73:5f:52:37:10:48:1a:bf:22: 5b:7f:b9:8c:ff:8b:6f:85:c7:8d:e5:45:b0:38:40:86:18:4b: 68:ba:18:a7:a9:a9:e2:83:a6:28:fa:11:e7:cb:bf:66:c7:3d: a5:bd:e7:93:36:ae:0a:09:b7:7e:d0:25:05:e9:66:b6:a7:10: ed:4f:37:fc:e4:03:a3:ef:37:c4:d9:e7:4f:28:75:61:ef:cc: bc:96:61:59:1f:ad:95:60:b7:aa:2b:55:41:d0:a7:e0:3d:dd: 3b:ae:68:9a:0d:99:46:42:3c:eb:fa:00:e3:3c:42:a7:46:29: 1e:94:1e:14 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOejdRuWYoRXof08c5kQ3UrFHql4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDcyMzE5MTQ0MloX DTI2MDcyNDE5NTA0MlowMzExMC8GA1UEAxMoMzY2MEI0QTc5MUFGM0RCRDFDMTRD MTJBNTI3QUZGRjhGN0U0RDg5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMykTI47yV6ShBfwOP8hvYh2LNzx00vVZJje1/3H3S8Mkto0BkmwBG87jlp7 Lg0V+bL3U73wl1SkaoBPdX3h36jcv4HpnMN18btM5dTEROGv7yYr14wtNsWND/Zd vaCoE4hx1mTtymoJKnmIaUDJuCWDJG24mxgXY95y/wOopiQeAtPzF5MprjZHQV9W QjdVvKwX9duYywVOm5+pwFmdVr4CTYy7TynnxLF503/lbZil2+Huh6XMuxL32w9H lzgImeomoxe3J25j3vXtalGb/H5/CBbUuCKtaQoKstBMuvEtozvgop4JG3c70CI7 k4dVGOMccn/9MnGAXLho1eVQUnsCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQ2YLSn ka89vRwUwSpSev/49+TYnjAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8wLzMwQUU4NUQzMjUzRUEyQzk5RUFGNjM2OTYxNUY1QkMwNzBDQzVG QjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQC4PDwN8c4wlgYUhZcOtSDhAyd0EPkIKQW2dZ9ajAHpy3gs 5J207r3aQtKurCcfB912lK0UEBoCv3+XP83PyzDif8ho3bW95GWesdVAR2xuk0GP sG3SXU/EP0IGfaKTAY1IHGeqgJ9L4DDR7nZ1Qir6e8ITEn2elcYw7ezfQNkyhMgM T8vPjmZzX1I3EEgavyJbf7mM/4tvhceN5UWwOECGGEtouhinqanig6Yo+hHny79m xz2lveeTNq4KCbd+0CUF6Wa2pxDtTzf85AOj7zfE2edPKHVh78y8lmFZH62VYLeq K1VB0KfgPd07rmiaDZlGQjzr+gDjPEKnRikelB4U -----END CERTIFICATE-----Generated at Fri Jul 24 01:56:49 2026 by rpki-client