
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
File: 305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft (raw, json)
Hash identifier: eeMgB8ZBpZhwzMXjRpJQtsVESF4yTkPwRepx6VpIG24=
Subject key identifier: 25:4F:CC:13:EB:56:06:2A:3E:F2:67:93:CB:ED:A7:93:27:C6:C6:F5
Authority key identifier: 30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C
Certificate issuer: /CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
Certificate serial: 0890B7F6A381F1B76CC2B8C06C0A821655FD9DF0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
Manifest number: 56
Signing time: Fri 24 Jul 2026 06:55:34 +0000
Manifest this update: Fri 24 Jul 2026 06:50:34 +0000
Manifest next update: Sat 25 Jul 2026 10:18:34 +0000
Files and hashes: 1: 3134342e34382e36342e302f32322d3232203d3e2034383337.roa (hash: vQ0CAaPQV+i3w/GJOaVXDBBSQcmTSIVf3fh4Hxu2or0=)
2: 34332e3232342e38302e302f32322d3232203d3e2034383337.roa (hash: bXqT1q3Xi8uEtR2DeZe8yD99M07BG3eez7vSwEaf0iI=)
3: 305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl (hash: 9lx30a2knif/eEdDH4GpOebUMs6LJtuUBDN30MDuifU=)
4: 3130332e3231342e34382e302f32322d3232203d3e2034383337.roa (hash: wpwMVqYTLbP68yao2fYoXKN2+eMRU0R4Vc9UHj1IA7A=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl
rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:90:b7:f6:a3:81:f1:b7:6c:c2:b8:c0:6c:0a:82:16:55:fd:9d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
Validity
Not Before: Jul 24 06:50:34 2026 GMT
Not After : Jul 25 10:18:34 2026 GMT
Subject: CN=254FCC13EB56062A3EF26793CBEDA79327C6C6F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bc:94:f0:bb:35:ea:82:40:81:91:80:ec:c9:
49:77:76:b5:ca:9a:90:b3:77:94:68:ae:e5:85:60:
6e:f0:c9:6d:b0:5b:8b:13:37:4b:d6:b3:d8:0e:66:
c6:55:36:1e:7e:e7:06:4e:fb:b4:31:f8:58:16:35:
d2:08:2f:92:00:14:47:c2:4b:9a:51:a5:12:c2:d1:
da:80:3b:2d:ba:41:69:34:3b:98:73:6f:07:c3:cd:
db:cc:57:16:03:10:85:d1:0b:04:5b:b4:17:20:7e:
be:ab:aa:63:45:c5:da:91:4a:28:81:81:3b:e0:5f:
ac:96:d9:ba:4e:77:d7:81:73:c1:0d:08:b8:3b:5a:
b6:d3:cb:a7:e9:2e:2e:fc:d0:25:f0:d9:00:21:b9:
64:a7:62:5f:27:cd:23:99:1f:5d:fa:e9:99:a3:a7:
0c:e3:cb:b0:4b:8f:57:2e:1b:56:ed:c8:af:eb:ee:
ed:97:15:ed:83:50:ef:36:ed:a8:95:79:d8:55:98:
40:2b:54:ac:52:18:bc:e6:b6:44:21:e8:a6:99:1d:
ac:b6:4f:5e:6c:42:be:bf:a6:79:2f:75:53:f7:6e:
b0:5f:25:1f:b5:b0:2a:4e:16:c0:e4:3f:c6:95:5c:
86:d0:d1:b4:af:fc:90:65:11:a2:af:62:6c:55:ec:
9f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4F:CC:13:EB:56:06:2A:3E:F2:67:93:CB:ED:A7:93:27:C6:C6:F5
X509v3 Authority Key Identifier:
keyid:30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:df:eb:18:5e:d2:b1:6d:7d:74:80:42:bb:4b:3a:f5:b6:a9:
6b:70:06:ca:b3:c6:1a:ea:53:2f:e8:3c:e0:d7:08:21:7f:89:
f9:5e:b5:2d:6c:78:d5:2f:0b:21:41:b6:69:59:36:19:cf:39:
82:a7:c1:e4:2a:66:c5:83:a3:7d:6c:55:87:24:24:ee:7c:13:
db:cd:9c:22:aa:07:94:b0:0f:5d:5c:53:19:5f:74:35:ad:9d:
b7:75:2f:fb:8d:c4:27:93:b3:eb:bf:6f:20:37:b4:80:58:cf:
7f:b6:e8:1b:bf:92:46:e9:bb:05:be:ab:74:2c:33:34:57:c3:
b4:c9:35:2c:a0:b8:7c:45:4e:6c:da:c3:2c:0b:15:cb:05:cd:
ab:02:c9:44:36:f5:b4:0e:0b:f9:31:d8:b2:45:cb:94:fd:62:
ca:2c:04:49:21:09:5e:4a:37:e0:e3:32:3a:54:5f:0c:c0:f2:
59:18:4c:2a:cc:e2:c0:19:ef:ac:4a:54:00:dd:d0:e6:44:51:
a9:6a:be:4b:40:3f:37:38:58:0b:2f:6a:94:af:82:ba:02:30:
4a:7f:51:fe:16:49:4b:64:d7:1b:cd:f0:7a:4b:34:56:f3:91:
a7:3e:5c:b1:c6:3a:89:4e:c2:fd:12:da:aa:ed:df:0d:1d:11:
9c:2b:d8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:20:12 2026 by rpki-client