
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
File: 845BB307E2A1100E89FA0C939A9389686796F0F6.mft (raw, json)
Hash identifier: pl90SfFZMjoG5SyazME5u/QX7oulEbzYH1950KwPhsg=
Subject key identifier: 7F:A4:1F:50:99:E0:82:D2:09:79:3B:D9:D6:A3:86:CB:BB:24:EB:DC
Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Certificate serial: 4CC72081C721F1A211287D51344F10F4684DCED5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
Manifest number: 0146
Signing time: Wed 29 Jul 2026 07:08:45 +0000
Manifest this update: Wed 29 Jul 2026 07:03:45 +0000
Manifest next update: Thu 30 Jul 2026 08:25:45 +0000
Files and hashes: 1: AS132525.roa (hash: +ZRxiwxXJxBFLETR69+vP/2wOS/8a67geZIh3B0WSMw=)
2: AS56047.roa (hash: gmqTZb2TqWCzDosogMfpPrVKyXw5NW2KOuPfbKMrxW4=)
3: AS146788.roa (hash: rVdRouxB5F2Bn88ZAEgt2PXhDEy2teygSVIxZd3/qt0=)
4: AS56044.roa (hash: ju6hnW87+VxPZM0qz4L9gxI7v0Xt5hi5gCeAoAFVbuo=)
5: AS24444.roa (hash: 4xfdUDbhWlqN6/ZuXJSIFl6uTalXsaIc5cKmnA9Xhuo=)
6: AS134810.roa (hash: BGEXpEzwxeWMAoo8PozXmaSGYXVdMwou0IIAHhyKcVA=)
7: AS24423.roa (hash: /mGGTOyUKupdvXhHE7fZt5S0WBXZV1kFB0/ZuYXQQZc=)
8: AS24445.roa (hash: 0V2TUk/phvgrWuzOENxfwPOK0acolB7D1baasQPhxWM=)
9: AS56048.roa (hash: m5tp62yjwOzFChjQXqAFvM1PUtbqWVquyfStLbUXsFg=)
10: AS38019.roa (hash: hSgYc8SlaFX6kU7qTh3IVn7SMvIUlxXB0vHo6MreoQU=)
11: AS63621.roa (hash: kM/frUaMP1Tr3VyGU05ugFm4RA+5/q4Tfg29dOKr5Qk=)
12: AS17429.roa (hash: HN0dXbgZGSc9qnYjM1vDXhmsEXJFkHuKRf+Pfjocylk=)
13: AS56045.roa (hash: JhWIRgXmD/AAVpMY2itiLtwWBujQgPFnNfmralXfMzA=)
14: AS56041.roa (hash: cDJp82e4lKQT1ZQ0rKqPRItsjQKi5e97NaFO/XVYk5Y=)
15: AS56040.roa (hash: lDlA8jvzb9VWKhxfKZykpCygX9ao6jxfTGriyR1nFTc=)
16: AS24400.roa (hash: 0+o85fkYpiIFCFMQljowAFtrY9bNhD+dDhNiB6TrxOw=)
17: 845BB307E2A1100E89FA0C939A9389686796F0F6.crl (hash: zDGFzPvA69hnH1WZx2DKssiiAUVb5DY9fIAUt/oNyA8=)
18: AS24547.roa (hash: Xen7wwX9Xzx4GN3flNjS7P2Ugc4hiNYweJQlKQIi62g=)
19: AS56042.roa (hash: rfwfi/XCe7vmj/k8jgyQS6LeFmBcMItRekfElE+p7wc=)
20: AS23841.roa (hash: N3aPTwRv4oQ0jbeynPtTYUEcIvfsR9IeChMOO26Rmvc=)
21: AS56046.roa (hash: zW0iUbqlQ8uN9FYsso15mrFxcS5kb0AsmPWmXaSopDk=)
22: AS9808.roa (hash: zZfe/+qTYM62wyezIOZ8FVo94hNdVSlDvwJ8QBWElwA=)
23: AS63540.roa (hash: A0fnLqo2aGScojf6EkdOg+7NgfJcql2OLZayOMQN4s0=)
24: AS146838.roa (hash: MTCngMPNWmRnisx5hTizNPX+K8oCQs2lVT5mdlPUUpI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:c7:20:81:c7:21:f1:a2:11:28:7d:51:34:4f:10:f4:68:4d:ce:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Validity
Not Before: Jul 29 07:03:45 2026 GMT
Not After : Jul 30 08:25:45 2026 GMT
Subject: CN=7FA41F5099E082D209793BD9D6A386CBBB24EBDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:70:69:4b:44:03:33:5c:50:52:ac:45:cc:
e3:b2:52:d7:4e:0b:3d:41:d6:83:7e:9b:ac:a1:8e:
04:1a:3f:8f:07:b9:81:21:14:82:5a:10:a3:4c:48:
f2:e4:0f:3e:12:4e:29:30:1a:8c:96:96:80:21:0c:
b1:09:b7:e4:e3:82:49:d0:67:c1:4d:fc:9b:c8:49:
f2:ac:fb:f4:2b:59:a1:4d:3f:dc:02:eb:ab:11:a6:
73:66:b0:8c:ed:14:60:09:c5:9d:47:da:eb:48:cb:
f7:06:4f:37:47:a1:eb:19:f5:07:d2:18:ef:ca:db:
13:84:4b:2d:b0:d0:5b:d8:90:9a:b5:c9:5b:0e:02:
71:be:41:98:fe:96:91:2a:6e:03:70:2c:d5:77:b6:
e4:c5:bc:e5:b7:65:4a:e3:e0:7f:f5:ae:0e:bb:05:
7e:21:6d:9f:f4:62:6c:d1:27:93:d5:04:53:9e:54:
47:cb:9d:a4:e0:11:55:1c:65:74:d3:05:30:6c:1c:
18:41:7d:d5:c3:01:f8:9d:a8:0c:6e:07:98:4e:6f:
7f:e0:d8:1d:05:14:f9:58:e3:89:8a:43:c3:df:8d:
b1:dd:17:f2:e8:0e:a4:4a:1e:24:b0:06:c7:0e:e8:
85:62:08:3b:b0:d9:6a:fb:ef:dc:cf:c4:12:54:ec:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A4:1F:50:99:E0:82:D2:09:79:3B:D9:D6:A3:86:CB:BB:24:EB:DC
X509v3 Authority Key Identifier:
keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c1:bf:d3:0d:2b:f0:d3:61:05:dd:33:42:da:e2:d1:ea:a9:
98:df:11:fc:0f:40:58:ec:20:67:06:22:9f:18:51:6d:f2:90:
00:49:36:f0:8e:8c:f3:db:ed:ff:72:f6:3a:01:14:c1:dc:66:
a8:39:c3:ec:db:54:bd:a3:73:27:62:94:73:38:02:29:a0:a3:
86:eb:dd:6e:a2:c6:5a:78:4b:f7:07:ae:43:60:1c:e1:8b:25:
64:38:d3:43:73:e8:67:93:6f:06:e8:2f:bd:2a:00:c2:28:6c:
a6:1a:7e:32:e7:5d:15:51:80:99:0b:54:e0:79:60:70:16:3d:
8c:0a:4c:41:93:30:09:12:b9:5e:a6:75:db:5f:68:2a:18:ce:
a5:45:90:3c:c3:53:b9:ce:b0:80:48:54:a7:73:0a:6d:78:ee:
d9:1c:27:fd:5c:6d:72:c3:7c:25:d0:a9:14:27:8c:a8:e6:6f:
0c:53:64:2a:b9:61:56:a4:81:a1:7c:0b:d8:1e:17:22:b0:93:
62:65:7c:97:f8:62:01:85:bb:e9:fe:f6:9b:be:11:cc:3e:2d:
91:c9:b4:1f:d2:3a:86:92:f4:63:e4:19:a5:4c:aa:c8:04:11:
fc:17:d3:94:c3:a6:bb:52:f6:ae:a3:6f:ac:43:5e:10:bd:6b:
ab:3c:c2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:04:02 2026 by rpki-client