
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
File: 30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft (raw, json)
Hash identifier: 9rACo05IFMKuSnCtKpznba+YJc8ubO+tQnYwh3bEmgM=
Subject key identifier: 23:F2:B5:2F:71:AE:C7:63:A9:93:25:E2:D4:F3:A1:B1:60:93:37:A4
Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Certificate serial: 3868648A6294BAC46931101BF2D073FBD35E3BE6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
Manifest number: 19
Signing time: Wed 13 May 2026 00:59:30 +0000
Manifest this update: Wed 13 May 2026 00:54:30 +0000
Manifest next update: Thu 14 May 2026 03:40:30 +0000
Files and hashes: 1: 30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl (hash: 5eskAcuLQ2KiHDUg/padu1j22aAEZq7GXX/LB3p6ICs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:68:64:8a:62:94:ba:c4:69:31:10:1b:f2:d0:73:fb:d3:5e:3b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2
Validity
Not Before: May 13 00:54:30 2026 GMT
Not After : May 14 03:40:30 2026 GMT
Subject: CN=23F2B52F71AEC763A99325E2D4F3A1B1609337A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:26:d1:61:25:a6:9c:12:52:3b:07:a5:19:
7c:39:b7:1b:9a:22:b1:3f:08:73:4f:5a:75:df:f0:
c0:aa:1b:9a:98:74:c4:5b:20:b8:27:c9:09:09:98:
e2:18:e7:a8:81:83:e7:7d:8e:53:37:5c:bb:4f:0b:
35:2a:d6:61:08:57:08:05:57:57:0c:0e:62:0f:21:
4f:fb:e4:c0:fb:65:95:05:37:c1:9e:fe:e8:2e:81:
0a:77:df:10:f7:f2:10:9f:05:73:12:fb:a1:a5:b3:
4a:23:ee:f2:1c:9f:f0:eb:27:33:ce:c3:17:2d:f5:
cf:ea:c1:2d:f1:fa:c4:52:1f:ad:30:c0:37:c7:e6:
da:d1:57:91:55:ca:0e:ec:b9:8b:14:cc:ac:ab:23:
a7:25:8b:3b:57:dd:16:ae:b7:ef:95:17:ea:7b:53:
39:44:af:8a:b9:7c:6a:b2:0f:6b:87:51:13:b7:ce:
60:49:1f:7d:db:0e:d4:04:bb:38:3c:85:5c:ad:c3:
c3:f9:c6:58:6d:80:54:0e:50:62:9c:f3:8f:ed:c2:
e1:18:55:bc:b0:bb:ea:f1:40:85:b3:e3:00:6d:fe:
0b:3d:f1:f6:d3:87:bc:22:f1:9e:d3:2b:f7:21:43:
79:70:28:28:31:c0:43:b9:9b:54:bb:49:8e:d9:c9:
be:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F2:B5:2F:71:AE:C7:63:A9:93:25:E2:D4:F3:A1:B1:60:93:37:A4
X509v3 Authority Key Identifier:
keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:85:2e:ce:46:93:6d:d2:7c:2f:e8:42:1e:cb:55:91:2e:33:
78:ff:02:00:97:41:df:59:29:9a:b7:01:be:88:2b:2a:9f:84:
80:72:6c:58:06:04:eb:b3:e8:31:0e:d2:3e:89:af:00:92:66:
6f:cf:87:72:40:eb:d2:b7:a9:4f:16:30:01:8b:fc:10:70:df:
02:73:a1:45:3c:a7:49:60:8a:e6:21:73:e1:d7:30:13:13:41:
7c:a9:4d:81:e9:5c:03:73:3a:0d:69:3f:f3:a9:6c:f7:a5:2c:
cd:d6:3b:27:44:c7:26:80:e5:7c:f7:48:6f:75:60:0d:31:2c:
d7:68:bb:69:68:d7:61:89:96:42:a9:a1:36:f0:32:cb:63:7f:
5b:93:2b:74:a6:03:c9:19:ca:80:af:4c:73:95:9d:dd:b8:b3:
a9:cf:de:b5:f2:a5:36:8c:ab:58:8e:ac:06:02:2c:67:63:28:
2c:bb:1e:fa:cc:6c:24:f5:d8:b1:20:73:4c:61:7f:1f:64:ab:
cb:91:33:ff:cb:8c:b3:e0:60:a9:f9:7d:b9:ca:6c:8e:e5:f6:
cf:2a:40:93:b1:90:07:89:a6:eb:90:b2:9e:93:5f:a3:d4:88:
e6:d7:56:57:09:ff:de:92:6a:f4:4b:27:42:0a:dd:ae:c4:cf:
81:17:e7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:37 2026 by rpki-client