
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft
File: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft (raw, json)
Hash identifier: td4NiJuljypA1hgBhVIvATZbL7VUOzXAyjpB/UJq+EY=
Subject key identifier: AC:D3:18:E3:B8:B3:2D:C3:07:13:CD:1D:FF:BD:87:CB:95:A9:2E:23
Authority key identifier: 30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48
Certificate issuer: /CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48
Certificate serial: 30ADBA0899B3C6DD609B04F16E2F7ABB8E10AA82
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft
Manifest number: 013E
Signing time: Fri 16 Oct 2026 23:43:12 +0000
Manifest this update: Fri 16 Oct 2026 23:38:12 +0000
Manifest next update: Tue 20 Oct 2026 03:43:12 +0000
Files and hashes: 1: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl (hash: hSR5VjMSIQ6amQmxdwgGLLB9FVG78aYevCNEvse6E+0=)
2: 3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa (hash: OwGJ692ZnKe+Op1Sm1ixyOF3ncQ6G9amzCOrZZ4KNGU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 11:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ad:ba:08:99:b3:c6:dd:60:9b:04:f1:6e:2f:7a:bb:8e:10:aa:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48
Validity
Not Before: Oct 16 23:38:12 2026 GMT
Not After : Oct 20 03:43:12 2026 GMT
Subject: CN=ACD318E3B8B32DC30713CD1DFFBD87CB95A92E23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5d:5f:15:e4:e4:66:67:1e:71:9d:5e:a4:1e:
58:70:08:61:2b:a8:05:f4:da:a8:ba:a0:e4:04:d0:
c8:61:e9:e2:e5:75:6b:a8:76:72:88:8a:06:b2:72:
ac:67:7d:8f:fd:d4:99:9b:5a:69:68:c3:47:14:3d:
53:fc:b4:c1:d8:b3:5e:0e:b6:33:a0:a7:28:55:cc:
c3:3b:4a:1a:10:92:bd:2b:18:29:30:48:6b:f0:b1:
e8:d4:46:13:22:cc:6f:48:43:8f:f2:74:87:9d:49:
90:36:08:0e:cf:23:93:57:72:a0:e0:c7:ad:6d:d1:
d9:51:1f:f7:cf:f8:a2:76:c1:a2:13:3f:a0:08:c7:
90:c5:3a:e7:f5:29:9d:eb:aa:63:b7:8c:56:a0:78:
0c:b5:ff:26:cc:62:c4:3d:89:1a:a1:7c:3a:55:23:
75:ef:22:3b:8d:a2:bb:6a:c3:ba:f7:ff:c0:80:41:
4b:4c:8f:af:15:c9:7e:c0:8b:d6:9e:45:2e:ed:d3:
cd:3a:e8:c2:bb:07:a4:43:2a:45:fd:6b:4b:54:83:
b6:4f:a3:b5:88:15:e2:72:47:c3:2e:ca:0d:83:af:
a0:52:5c:63:e3:8c:84:14:bd:67:84:0f:a6:c8:69:
de:ea:aa:b6:39:14:bf:f9:59:7a:e0:32:e2:39:70:
aa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D3:18:E3:B8:B3:2D:C3:07:13:CD:1D:FF:BD:87:CB:95:A9:2E:23
X509v3 Authority Key Identifier:
keyid:30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:da:11:41:b2:9a:8e:77:53:e2:f8:cc:7a:23:a4:0d:40:4a:
fa:20:aa:91:42:30:f4:61:f2:b8:26:d6:df:a1:a9:8f:0a:90:
19:81:a1:6d:a3:ca:90:e6:7c:5a:a6:8c:dc:ca:cf:47:bf:28:
2b:f8:fe:85:db:7b:96:2b:b2:17:24:a8:76:a3:6c:71:09:28:
93:a2:38:66:73:c2:cf:2e:28:ff:e5:62:f1:a8:08:12:78:d2:
23:6d:27:76:a1:92:6c:fc:fb:71:e2:81:32:cf:01:d3:87:90:
ae:1c:79:e6:cd:f3:9d:92:6d:be:98:a4:ab:c5:60:c8:32:2e:
f9:3d:d5:4b:df:a1:cf:f0:69:b1:4f:59:8e:ff:a3:b7:ee:3b:
f0:fe:2e:84:eb:e7:53:a6:5c:1f:d9:3c:2f:b7:3d:24:0c:85:
e9:5a:47:0d:44:c8:a8:b2:2b:8f:6e:84:0e:54:7a:16:4f:79:
5a:f6:96:8a:0c:64:39:04:3c:e8:00:8f:43:0d:8f:9e:a4:31:
c4:2c:39:32:db:2b:3c:c5:85:9c:fb:38:01:bc:be:93:65:3a:
4f:5b:1d:0f:db:3a:53:28:4e:59:1b:00:06:73:44:72:62:7e:
7f:d5:99:c7:d0:d5:40:6a:51:ec:43:e9:8a:30:0d:dd:fe:c2:
ab:7d:92:db
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUMK26CJmzxt1gmwTxbi96u44QqoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYz
MkZDQkI0ODAeFw0yNjEwMTYyMzM4MTJaFw0yNjEwMjAwMzQzMTJaMDMxMTAvBgNV
BAMTKEFDRDMxOEUzQjhCMzJEQzMwNzEzQ0QxREZGQkQ4N0NCOTVBOTJFMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPXV8V5ORmZx5xnV6kHlhwCGEr
qAX02qi6oOQE0Mhh6eLldWuodnKIigaycqxnfY/91JmbWmlow0cUPVP8tMHYs14O
tjOgpyhVzMM7ShoQkr0rGCkwSGvwsejURhMizG9IQ4/ydIedSZA2CA7PI5NXcqDg
x61t0dlRH/fP+KJ2waITP6AIx5DFOuf1KZ3rqmO3jFageAy1/ybMYsQ9iRqhfDpV
I3XvIjuNortqw7r3/8CAQUtMj68VyX7Ai9aeRS7t08066MK7B6RDKkX9a0tUg7ZP
o7WIFeJyR8Muyg2Dr6BSXGPjjIQUvWeED6bIad7qqrY5FL/5WXrgMuI5cKo3AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUrNMY47izLcMHE80d/72Hy5WpLiMwHwYDVR0j
BBgwFoAUMI1+XFIdUsM0qO8XIqTTXzL8u0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3NzkyNDYxMC8wLzMwOEQ3RTVDNTIxRDUyQzMzNEE4RUYxNzIyQTRE
MzVGMzJGQ0JCNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYzMkZDQkI0OC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5MjQ2MTAvMC8zMDhEN0U1QzUyMUQ1
MkMzMzRBOEVGMTcyMkE0RDM1RjMyRkNCQjQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9oRQbKajndT
4vjMeiOkDUBK+iCqkUIw9GHyuCbW36GpjwqQGYGhbaPKkOZ8WqaM3MrPR78oK/j+
hdt7liuyFySodqNscQkok6I4ZnPCzy4o/+Vi8agIEnjSI20ndqGSbPz7ceKBMs8B
04eQrhx55s3znZJtvpikq8VgyDIu+T3VS9+hz/BpsU9Zjv+jt+478P4uhOvnU6Zc
H9k8L7c9JAyF6VpHDUTIqLIrj26EDlR6Fk95WvaWigxkOQQ86ACPQw2PnqQxxCw5
MtsrPMWFnPs4Aby+k2U6T1sdD9s6UyhOWRsABnNEcmJ+f9WZx9DVQGpR7EPpijAN
3f7Cq32S2w==
-----END CERTIFICATE-----
Generated at Sat Oct 17 22:56:34 2026 by rpki-client