
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
File: 24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft (raw, json)
Hash identifier: Vr2Xyt1iOawwGX12JXtCtLtM2I0RIcYbEpJjruEASPA=
Subject key identifier: C5:8F:5E:97:14:10:58:D4:70:AC:93:7E:50:2C:35:4D:DC:A9:5D:37
Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
Certificate issuer: /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Certificate serial: 627A2FC88699EE98D408BA640248E32B983E694B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
Manifest number: 4B
Signing time: Thu 23 Jul 2026 17:04:10 +0000
Manifest this update: Thu 23 Jul 2026 16:59:10 +0000
Manifest next update: Fri 24 Jul 2026 20:26:10 +0000
Files and hashes: 1: 24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl (hash: 72N558pxEqf7gla20DpwGJ/jPjordYOqTUyedMhh/98=)
2: 3230332e3139322e31362e302f32342d3234203d3e203137373831.roa (hash: o1cwMuKJtWT+7Uff4dbGVEK93EucJkFrdoxPX5tQr2M=)
3: 3230332e3139322e32342e302f32342d3234203d3e203137373831.roa (hash: BbMTunYrz1nmuNv7CTHzX20n2SaSGLdFMAbzTikvoko=)
4: 3230322e3132332e3130362e302f32342d3234203d3e203137373831.roa (hash: B8CJpw4Mvz8SY6JreF+MZ8mRXXEL39z/L2SgwDPy4ro=)
5: 3230332e3139322e332e302f32342d3234203d3e203137373831.roa (hash: 0WS8k8pofZHHVmupE3YpYkM+OR/Seos2N2zmoRKePNo=)
6: 3230332e3139322e32352e302f32342d3234203d3e203137373831.roa (hash: Xo0MC9gPyqAkaqWViitQYw2ysJ5sNhY/oWc7KDvqJfU=)
7: 3230332e3139322e352e302f32342d3234203d3e203137373831.roa (hash: BnkUoU7gJDO5a7aLhB5agXBQ3aLjPGSg0lU2EZRdkk0=)
8: 3230322e3132332e39382e302f32342d3234203d3e203137373831.roa (hash: 5YOOHhOu3QXd/4aaDjVX3d1nj51K6HH65UEeEz4zkEc=)
9: 3230322e3132332e3131312e302f32342d3234203d3e203137373831.roa (hash: 0GJxn9D0pYDb4yxO7Aud+dLGirj3mYMN7u3UYAKJgB4=)
10: 3230332e3139322e31322e302f32342d3234203d3e203137373831.roa (hash: V607HldWKuDXxlXGV+41k9BZRTPj2GoE42D0lUJabyA=)
11: 3230322e3132332e39362e302f32342d3234203d3e203137373831.roa (hash: oPL+WqvBQ1jMwFkI+nTHLmCwxfrPvPAUqSpu7XtDHhg=)
12: 3230332e3139322e31312e302f32342d3234203d3e203137373831.roa (hash: 45xCYyRQyjhCRC0vlSjwuILRfUgMsSd1dvyBXnBRchU=)
13: 3230332e3139322e31332e302f32342d3234203d3e203137373831.roa (hash: bq7zzFwnBzqyn7Gg9JxzkYCqrRUYNIitvDRYqPRHld0=)
14: 3230332e3139322e31352e302f32342d3234203d3e203137373831.roa (hash: WUwGCIiUne8yyxM/WabENAtajJDwAdTfUC/KCT6uOXI=)
15: 3230332e3139322e31342e302f32342d3234203d3e203137373831.roa (hash: C7pQnRLENNKawwBs1x742C4NQfWK3wR/8M1J5WHfE0I=)
16: 3230322e3132332e3130382e302f32342d3234203d3e203137373831.roa (hash: 6vWD4VyRB5bYBDWD26oF0cZv2VdLIlKVmTJZdVbRs5g=)
17: 3230322e38342e31372e302f32342d3234203d3e203137373831.roa (hash: 1I+ea8Rekynt7Imb05kV7gQ8KNgPu0KKaGq6waMXCoQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 20:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:7a:2f:c8:86:99:ee:98:d4:08:ba:64:02:48:e3:2b:98:3e:69:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Validity
Not Before: Jul 23 16:59:10 2026 GMT
Not After : Jul 24 20:26:10 2026 GMT
Subject: CN=C58F5E97141058D470AC937E502C354DDCA95D37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:7c:be:86:24:d4:23:6e:91:d0:b0:0d:3d:
9c:1e:0f:b5:ac:3b:e3:74:62:26:4d:9e:26:6c:5f:
67:45:9b:db:96:69:2e:4f:6a:10:d8:fc:80:39:ab:
ad:7f:ba:56:44:3f:e4:b5:d6:97:df:30:ca:cd:4b:
f5:9c:49:40:28:4d:ed:1a:9c:b3:3e:a8:3f:ca:0b:
f5:b4:c5:8e:3f:d8:90:83:94:a5:d4:4d:74:e0:2c:
96:ab:2e:b7:b1:83:8c:d9:70:00:e7:57:02:92:17:
14:ad:4e:bc:33:0c:7c:7c:a7:b3:de:a9:6c:02:57:
fc:b7:97:68:a3:c9:58:77:50:8e:e6:55:88:8a:d3:
e1:c9:ba:dc:9a:d7:54:92:e1:a4:5d:05:fc:a2:43:
20:bc:a6:b2:63:8a:81:80:54:f6:36:c9:5c:ea:d3:
d2:ce:f7:c6:70:14:99:80:24:bc:69:be:cb:8e:e6:
12:27:8e:b8:bd:11:9c:51:6f:4c:bb:e0:c9:3e:4c:
ae:99:3c:d8:98:d6:a0:46:89:43:12:4a:b5:64:b7:
2e:a6:05:d2:d0:74:b8:af:b6:2b:43:af:c5:ae:7d:
07:47:d1:d0:bd:bd:7e:ad:2d:7c:06:29:d2:ef:6e:
4a:97:ef:6a:85:fd:ee:44:c0:6b:6e:fb:f3:4e:e1:
4e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8F:5E:97:14:10:58:D4:70:AC:93:7E:50:2C:35:4D:DC:A9:5D:37
X509v3 Authority Key Identifier:
keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:6e:6f:dc:c6:96:58:55:73:11:3b:7b:a3:b0:9c:4a:be:37:
51:28:9a:17:e6:46:04:9b:f0:f2:5c:db:e2:15:ee:3b:9e:49:
72:4f:8c:d1:82:52:10:ae:f5:9a:05:6c:37:53:08:00:54:fc:
7b:be:2b:d2:44:fa:bc:1a:ac:b2:9e:6f:ab:84:4b:34:7b:0c:
36:3f:2f:bf:f9:18:be:b0:e8:6f:35:0d:53:09:c1:98:ce:e0:
dc:e3:4b:ac:3f:47:3f:5c:63:c9:96:d5:fe:36:cb:fb:8e:8d:
56:1c:f1:ce:af:d7:5c:f7:35:9a:6e:e6:0a:48:09:78:cf:f1:
6a:72:aa:58:04:5b:26:e6:b2:d2:86:7f:66:53:18:18:7b:8e:
20:0c:e8:f4:d4:f5:6e:3a:5c:9e:b4:9d:c8:16:f2:10:8f:0c:
0a:d9:e8:14:70:c1:da:79:21:7a:7e:ab:58:d9:85:ba:e8:da:
42:58:6f:7e:2e:26:6f:88:c8:26:ec:c3:4f:47:50:2d:ed:82:
c7:3f:92:aa:00:34:ab:e4:9d:2d:47:36:fe:1c:46:19:97:45:
bc:fc:eb:db:13:c5:bc:94:10:a9:d6:44:52:5e:8c:c9:b3:bd:
93:16:4c:57:1d:fc:1b:99:03:0c:c6:a7:de:7c:60:4c:42:09:
35:8b:71:d8
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUYnovyIaZ7pjUCLpkAkjjK5g+aUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2
OTgxNTIzRDAeFw0yNjA3MjMxNjU5MTBaFw0yNjA3MjQyMDI2MTBaMDMxMTAvBgNV
BAMTKEM1OEY1RTk3MTQxMDU4RDQ3MEFDOTM3RTUwMkMzNTRERENBOTVEMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC70Hy+hiTUI26R0LANPZweD7Ws
O+N0YiZNniZsX2dFm9uWaS5PahDY/IA5q61/ulZEP+S11pffMMrNS/WcSUAoTe0a
nLM+qD/KC/W0xY4/2JCDlKXUTXTgLJarLrexg4zZcADnVwKSFxStTrwzDHx8p7Pe
qWwCV/y3l2ijyVh3UI7mVYiK0+HJutya11SS4aRdBfyiQyC8prJjioGAVPY2yVzq
09LO98ZwFJmAJLxpvsuO5hInjri9EZxRb0y74Mk+TK6ZPNiY1qBGiUMSSrVkty6m
BdLQdLivtitDr8WufQdH0dC9vX6tLXwGKdLvbkqX72qF/e5EwGtu+/NO4U4zAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUxY9elxQQWNRwrJN+UCw1TdypXTcwHwYDVR0j
BBgwFoAUJDAuP+Hsq7y8rlL8hfKptGmBUj0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjY1ODY5MzM5ODI2NTg3NS8wLzI0MzAyRTNGRTFFQ0FCQkNCQ0FFNTJGQzg1RjJB
OUI0Njk4MTUyM0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2OTgxNTIzRC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTI2NTg2OTMzOTgyNjU4NzUvMC8yNDMwMkUzRkUxRUNB
QkJDQkNBRTUyRkM4NUYyQTlCNDY5ODE1MjNELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsG5v3MaWWFVz
ETt7o7CcSr43USiaF+ZGBJvw8lzb4hXuO55Jck+M0YJSEK71mgVsN1MIAFT8e74r
0kT6vBqssp5vq4RLNHsMNj8vv/kYvrDobzUNUwnBmM7g3ONLrD9HP1xjyZbV/jbL
+46NVhzxzq/XXPc1mm7mCkgJeM/xanKqWARbJuay0oZ/ZlMYGHuOIAzo9NT1bjpc
nrSdyBbyEI8MCtnoFHDB2nkhen6rWNmFuujaQlhvfi4mb4jIJuzDT0dQLe2Cxz+S
qgA0q+SdLUc2/hxGGZdFvPzr2xPFvJQQqdZEUl6MybO9kxZMVx38G5kDDMan3nxg
TEIJNYtx2A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:15:56 2026 by rpki-client