$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft File: 30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft (raw, json) Hash identifier: JmvSgEZSv9OTlKNydXEdGnIdCda/GmYTsM0TpJRFPWE= Subject key identifier: 45:81:5B:42:0A:37:10:CD:F0:97:84:73:F2:27:D3:1E:90:1C:73:21 Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 20A93471FE10BC7DE69B8BED0011FA91B5916C57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft Manifest number: 0380 Signing time: Mon 21 Sep 2026 09:10:29 +0000 Manifest this update: Mon 21 Sep 2026 09:05:29 +0000 Manifest next update: Tue 22 Sep 2026 09:34:29 +0000 Files and hashes: 1: 30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl (hash: TugVWrKqcTeyTV+CMMPHr9Dt/lLKgeGK1d/0PKfP8lU=) 2: AS58541.roa (hash: /rzJUVPATTqW/wguYZGnmmWnH282m9kioCsO/yxOo8g=) 3: AS4809.roa (hash: 40EfWKFEX/nLkzxF5pF2vrZgXoER5vL9bZ2K9OXie/4=) 4: AS136195.roa (hash: vSKIhQBQFrZObTTnwbmTqGzsnP11EigITb5cyhYeX+Q=) 5: AS136197.roa (hash: Gj2HHJpfeTYn0R3yNYxcCyTTb9LjwMIF+CAPxxIbvzA=) 6: AS58540.roa (hash: TSY0z4g2ml0XJrRPP6gGTNNEujjalV5Ki0HIaE9WKcA=) 7: AS38283.roa (hash: byu4xG8+yTtwBscrS8iuOSWagzsulyP1XFC++sIeZwQ=) 8: AS58519.roa (hash: uUokiWOdjiPHbpOBcaBYWsx2ROjnNNYfBhV4ww0sinI=) 9: AS139887.roa (hash: HDCjHLc51eYxBpG16liw1CPZPfJENeW/M+CCHxizFU0=) 10: AS151058.roa (hash: mSzRVS75vBPa8uyPHLbMcuZW2KkpFKvPNE1wfvrC/UI=) 11: AS4134.roa (hash: pIlNm6i8NNbHg3yYAJykm0cTJ0hs14VD2bobw2ZPFnM=) 12: AS133775.roa (hash: KQC0NT/Wn83Bp9fqkbR3E2q2ApnfJ7XJPbE8L6z3O5I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 09:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a9:34:71:fe:10:bc:7d:e6:9b:8b:ed:00:11:fa:91:b5:91:6c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: Sep 21 09:05:29 2026 GMT Not After : Sep 22 09:34:29 2026 GMT Subject: CN=45815B420A3710CDF0978473F227D31E901C7321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d5:c5:6a:92:48:0a:a7:d4:b8:40:38:a2:ec: 21:5f:fb:86:c0:88:3e:38:97:eb:68:77:7d:f0:f2: 39:42:ac:28:a1:ea:d4:e4:92:e8:87:7f:d2:17:aa: 18:2b:91:08:a4:00:14:a5:69:81:e6:f1:3c:b0:97: 9d:09:55:e3:8b:de:a9:74:cb:88:5c:2f:a1:7f:bd: 1c:ce:48:84:5a:1f:88:a1:13:c3:f9:33:90:0a:30: ef:6a:69:ab:ec:c8:ad:c4:8e:b8:82:69:90:ca:1d: 40:50:58:d7:43:f3:68:2b:28:94:0b:9b:05:7a:b0: 61:9f:98:f8:5d:ee:a3:a2:1a:d3:5f:2d:04:db:c4: 55:ee:0b:66:78:14:7b:d1:bb:b9:27:ec:f3:bd:8a: 08:2f:c6:9e:61:57:53:36:ba:e2:79:fb:67:b4:89: 93:e7:18:75:80:b6:f7:ab:5d:c7:e2:6a:d1:bc:aa: 9a:2a:8e:47:45:c7:d3:51:b6:12:e2:53:4e:a5:b5: 53:10:1e:ae:bc:89:74:b1:69:79:09:dd:b6:33:a1: 3a:fc:a0:44:ef:6c:fe:8e:e1:8b:5f:0c:c6:fd:74: 5f:92:44:04:40:73:2b:44:f9:8c:58:25:82:72:e4: 20:96:37:b1:f1:13:19:31:02:21:ad:fd:d3:c9:96: 78:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:81:5B:42:0A:37:10:CD:F0:97:84:73:F2:27:D3:1E:90:1C:73:21 X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:6c:b7:09:34:b3:07:9d:b9:db:04:45:7a:56:8a:ba:13:b9: eb:27:36:a9:90:e5:e3:a9:8c:d0:64:6f:bc:3b:bf:e1:d8:b0: 7c:32:58:7a:3b:3d:68:ba:90:c4:b6:17:bc:67:63:02:c3:3b: 75:85:56:24:77:6d:47:9d:b7:c5:bb:9c:c4:31:c3:30:3d:ce: ad:b8:70:56:51:89:21:84:b9:d5:dd:86:e1:0c:ee:1a:78:5f: e1:55:cb:dc:dc:34:30:27:de:ff:88:64:80:b5:c3:45:b4:3a: 4a:8e:cc:c0:a9:ce:83:85:79:0f:aa:14:71:fc:bb:92:e4:04: e3:d0:d9:1d:d8:75:28:52:65:bc:5e:10:83:d5:81:e3:7a:0f: 1f:36:a3:62:56:30:98:ee:6d:97:d4:f1:64:f7:63:27:bd:78: c2:2c:a5:8c:93:c5:fd:83:1d:98:dc:9b:4b:27:38:4c:09:06: ee:d3:e2:47:fb:a2:9c:95:86:98:f0:87:7b:5a:12:29:4d:57: 5d:8b:b7:30:2b:39:04:1b:7e:95:45:fa:af:4b:b6:31:ad:33: 55:de:25:24:e5:86:20:35:5e:40:43:4e:8e:36:6a:7b:37:ab: 2b:52:c0:85:1c:d4:11:63:f6:c6:4a:b6:18:db:41:9a:b2:7a: e0:6c:09:54 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIKk0cf4QvH3mm4vtABH6kbWRbFcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDkyMTA5MDUyOVoX DTI2MDkyMjA5MzQyOVowMzExMC8GA1UEAxMoNDU4MTVCNDIwQTM3MTBDREYwOTc4 NDczRjIyN0QzMUU5MDFDNzMyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANDVxWqSSAqn1LhAOKLsIV/7hsCIPjiX62h3ffDyOUKsKKHq1OSS6Id/0heq GCuRCKQAFKVpgebxPLCXnQlV44veqXTLiFwvoX+9HM5IhFofiKETw/kzkAow72pp q+zIrcSOuIJpkModQFBY10PzaCsolAubBXqwYZ+Y+F3uo6Ia018tBNvEVe4LZngU e9G7uSfs872KCC/GnmFXUza64nn7Z7SJk+cYdYC296tdx+Jq0byqmiqOR0XH01G2 EuJTTqW1UxAerryJdLFpeQndtjOhOvygRO9s/o7hi18Mxv10X5JEBEBzK0T5jFgl gnLkIJY3sfETGTECIa3908mWeIUCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBRFgVtC CjcQzfCXhHPyJ9MekBxzITAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8wLzMwQUU4NUQzMjUzRUEyQzk5RUFGNjM2OTYxNUY1QkMwNzBDQzVG QjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBkbLcJNLMHnbnbBEV6Voq6E7nrJzapkOXjqYzQZG+8O7/h 2LB8Mlh6Oz1oupDEthe8Z2MCwzt1hVYkd21HnbfFu5zEMcMwPc6tuHBWUYkhhLnV 3YbhDO4aeF/hVcvc3DQwJ97/iGSAtcNFtDpKjszAqc6DhXkPqhRx/LuS5ATj0Nkd 2HUoUmW8XhCD1YHjeg8fNqNiVjCY7m2X1PFk92MnvXjCLKWMk8X9gx2Y3JtLJzhM CQbu0+JH+6KclYaY8Id7WhIpTVddi7cwKzkEG36VRfqvS7YxrTNV3iUk5YYgNV5A Q06ONmp7N6srUsCFHNQRY/bGSrYY20GasnrgbAlU -----END CERTIFICATE-----Generated at Tue Sep 22 00:12:12 2026 by rpki-client