
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
File: 845BB307E2A1100E89FA0C939A9389686796F0F6.mft (raw, json)
Hash identifier: lmKW0Ke7/qa60/SovLQOVk36+Rs8yzgLytuKsKA7728=
Subject key identifier: 2C:DE:29:9A:90:CE:9E:09:33:C5:C7:37:4C:2D:C2:14:AD:91:2F:CE
Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
Certificate issuer: /CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Certificate serial: 10E9EEDFF1383103DB5EB88A189E192CFBCFC624
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
Manifest number: 0181
Signing time: Sat 10 Oct 2026 06:04:21 +0000
Manifest this update: Sat 10 Oct 2026 05:59:21 +0000
Manifest next update: Tue 13 Oct 2026 10:17:21 +0000
Files and hashes: 1: AS38019.roa (hash: hSgYc8SlaFX6kU7qTh3IVn7SMvIUlxXB0vHo6MreoQU=)
2: AS23841.roa (hash: N3aPTwRv4oQ0jbeynPtTYUEcIvfsR9IeChMOO26Rmvc=)
3: AS146788.roa (hash: rVdRouxB5F2Bn88ZAEgt2PXhDEy2teygSVIxZd3/qt0=)
4: AS56047.roa (hash: gmqTZb2TqWCzDosogMfpPrVKyXw5NW2KOuPfbKMrxW4=)
5: AS56046.roa (hash: zW0iUbqlQ8uN9FYsso15mrFxcS5kb0AsmPWmXaSopDk=)
6: AS63621.roa (hash: kM/frUaMP1Tr3VyGU05ugFm4RA+5/q4Tfg29dOKr5Qk=)
7: AS56045.roa (hash: JhWIRgXmD/AAVpMY2itiLtwWBujQgPFnNfmralXfMzA=)
8: AS24423.roa (hash: /mGGTOyUKupdvXhHE7fZt5S0WBXZV1kFB0/ZuYXQQZc=)
9: AS17429.roa (hash: HN0dXbgZGSc9qnYjM1vDXhmsEXJFkHuKRf+Pfjocylk=)
10: AS134810.roa (hash: BGEXpEzwxeWMAoo8PozXmaSGYXVdMwou0IIAHhyKcVA=)
11: AS56040.roa (hash: lDlA8jvzb9VWKhxfKZykpCygX9ao6jxfTGriyR1nFTc=)
12: AS146838.roa (hash: MTCngMPNWmRnisx5hTizNPX+K8oCQs2lVT5mdlPUUpI=)
13: AS24445.roa (hash: 0V2TUk/phvgrWuzOENxfwPOK0acolB7D1baasQPhxWM=)
14: AS56041.roa (hash: cDJp82e4lKQT1ZQ0rKqPRItsjQKi5e97NaFO/XVYk5Y=)
15: AS56044.roa (hash: ju6hnW87+VxPZM0qz4L9gxI7v0Xt5hi5gCeAoAFVbuo=)
16: AS63540.roa (hash: A0fnLqo2aGScojf6EkdOg+7NgfJcql2OLZayOMQN4s0=)
17: 845BB307E2A1100E89FA0C939A9389686796F0F6.crl (hash: PTop7w5Vc5d671XnbhGiAavPfxCWpYuCOocuHi9SjpY=)
18: AS9808.roa (hash: zZfe/+qTYM62wyezIOZ8FVo94hNdVSlDvwJ8QBWElwA=)
19: AS56042.roa (hash: rfwfi/XCe7vmj/k8jgyQS6LeFmBcMItRekfElE+p7wc=)
20: AS56048.roa (hash: m5tp62yjwOzFChjQXqAFvM1PUtbqWVquyfStLbUXsFg=)
21: AS132525.roa (hash: +ZRxiwxXJxBFLETR69+vP/2wOS/8a67geZIh3B0WSMw=)
22: AS24400.roa (hash: 0+o85fkYpiIFCFMQljowAFtrY9bNhD+dDhNiB6TrxOw=)
23: AS24547.roa (hash: Xen7wwX9Xzx4GN3flNjS7P2Ugc4hiNYweJQlKQIi62g=)
24: AS24444.roa (hash: 4xfdUDbhWlqN6/ZuXJSIFl6uTalXsaIc5cKmnA9Xhuo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 09:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e9:ee:df:f1:38:31:03:db:5e:b8:8a:18:9e:19:2c:fb:cf:c6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Validity
Not Before: Oct 10 05:59:21 2026 GMT
Not After : Oct 13 10:17:21 2026 GMT
Subject: CN=2CDE299A90CE9E0933C5C7374C2DC214AD912FCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:03:d0:9a:c7:6f:fb:8b:7e:70:e1:80:c1:
53:38:ae:75:bf:ac:81:c8:e7:21:3a:0a:17:16:2b:
a7:88:55:05:e6:32:fa:78:c6:19:ce:6e:18:08:45:
9f:fb:6f:28:6d:05:78:8d:b2:1c:28:c0:28:15:1a:
28:3b:45:b4:68:14:8e:95:b7:8c:49:e1:cf:5a:94:
dd:2f:0f:aa:8b:36:6e:00:6f:27:e7:bd:06:60:f7:
00:0b:07:b3:dd:b4:49:d0:dd:97:d7:d7:92:5f:50:
86:a0:55:46:7d:25:45:68:83:9e:08:3f:10:3a:68:
c4:6e:03:e8:49:22:cd:32:6a:bb:70:b7:7a:67:ea:
83:06:11:7d:08:35:c4:87:40:64:02:a6:bb:a3:71:
73:c0:31:36:9c:18:a5:b7:2a:ba:09:49:b5:ad:a2:
cb:be:b6:04:b5:51:30:fd:fe:9d:22:c3:f9:8f:3e:
ed:32:c7:bc:94:8d:40:99:d8:cb:c9:4c:3b:09:dd:
b7:0b:de:0d:2c:1f:e2:dc:58:14:fa:9d:ee:68:f2:
75:37:af:55:4c:72:8d:a4:60:7e:26:ec:c4:17:03:
a6:56:81:b1:b0:dc:96:3a:80:72:bf:07:fd:e0:0d:
8e:96:fc:8d:b0:51:dc:e4:a8:9f:65:2a:ae:6f:16:
2a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DE:29:9A:90:CE:9E:09:33:C5:C7:37:4C:2D:C2:14:AD:91:2F:CE
X509v3 Authority Key Identifier:
keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:63:4f:68:2d:bf:03:32:5f:92:e4:07:fb:e2:86:18:9a:2a:
ad:5a:54:3a:d7:b9:2f:99:a2:00:23:99:61:45:91:a4:a8:5f:
9c:7d:29:b4:4d:d5:2c:e8:89:7a:d4:84:fa:1b:b7:3a:e6:1d:
57:40:09:06:9f:b6:18:29:65:93:4c:fc:89:71:69:14:1d:65:
65:9d:0f:79:33:94:bc:25:ce:e5:e8:e9:95:1c:56:bc:85:c8:
b1:f5:66:be:de:5d:5c:7e:2f:ff:a9:c2:8b:03:aa:23:da:46:
7a:b9:cc:d0:e9:5a:8e:72:e5:ef:8d:80:33:b7:08:db:d5:40:
77:35:04:0e:e4:2a:43:f4:06:00:69:05:a7:37:f0:92:e5:5c:
69:db:b3:14:e3:92:25:e8:17:64:4f:dc:60:b8:cc:21:0c:a7:
ed:f6:0c:a5:50:87:de:b8:b0:03:95:47:0a:d1:77:f3:ab:1a:
9a:b1:8b:57:db:d9:11:6e:6d:f3:85:12:db:cd:99:5f:e9:7e:
d2:fa:aa:2a:ac:8f:34:16:66:2a:ca:13:bc:bd:3d:9f:16:2d:
73:f1:9e:a1:44:9f:2a:bd:3c:d2:42:a1:2f:67:38:f7:9d:a6:
f0:27:d8:c3:37:ae:c1:f1:27:07:2f:bc:7f:03:47:e1:29:b4:
9d:5d:02:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:49:08 2026 by rpki-client