$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft File: 30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft (raw, json) Hash identifier: xMFTHXgglkaCX6YS/aF9i2DeKjL8c9BYuLUjufVaF6g= Subject key identifier: 20:78:EB:01:90:32:EA:BF:75:D0:0C:1F:39:9E:F3:6E:C0:CB:D0:7B Authority key identifier: 30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 Certificate issuer: /CN=A914EAE40000/serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Certificate serial: 71FEC071508202CF3A0D5A6A46C31E77A042A98D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft Manifest number: 031F Signing time: Tue 28 Jul 2026 09:16:27 +0000 Manifest this update: Tue 28 Jul 2026 09:11:27 +0000 Manifest next update: Wed 29 Jul 2026 11:22:27 +0000 Files and hashes: 1: AS38283.roa (hash: byu4xG8+yTtwBscrS8iuOSWagzsulyP1XFC++sIeZwQ=) 2: AS136195.roa (hash: vSKIhQBQFrZObTTnwbmTqGzsnP11EigITb5cyhYeX+Q=) 3: AS58541.roa (hash: /rzJUVPATTqW/wguYZGnmmWnH282m9kioCsO/yxOo8g=) 4: AS58540.roa (hash: TSY0z4g2ml0XJrRPP6gGTNNEujjalV5Ki0HIaE9WKcA=) 5: AS4809.roa (hash: 40EfWKFEX/nLkzxF5pF2vrZgXoER5vL9bZ2K9OXie/4=) 6: AS133775.roa (hash: KQC0NT/Wn83Bp9fqkbR3E2q2ApnfJ7XJPbE8L6z3O5I=) 7: 30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl (hash: BNInehyci1q1Bm+qA8kLV/N377LRLWcdkLhDoSUpBzY=) 8: AS4134.roa (hash: pIlNm6i8NNbHg3yYAJykm0cTJ0hs14VD2bobw2ZPFnM=) 9: AS136197.roa (hash: Gj2HHJpfeTYn0R3yNYxcCyTTb9LjwMIF+CAPxxIbvzA=) 10: AS151058.roa (hash: mSzRVS75vBPa8uyPHLbMcuZW2KkpFKvPNE1wfvrC/UI=) 11: AS58519.roa (hash: uUokiWOdjiPHbpOBcaBYWsx2ROjnNNYfBhV4ww0sinI=) 12: AS139887.roa (hash: HDCjHLc51eYxBpG16liw1CPZPfJENeW/M+CCHxizFU0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 11:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:fe:c0:71:50:82:02:cf:3a:0d:5a:6a:46:c3:1e:77:a0:42:a9:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=30AE85D3253EA2C99EAF6369615F5BC070CC5FB2 Validity Not Before: Jul 28 09:11:27 2026 GMT Not After : Jul 29 11:22:27 2026 GMT Subject: CN=2078EB019032EABF75D00C1F399EF36EC0CBD07B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e1:75:ea:96:e6:42:be:c1:d6:aa:b3:cb:36: e2:e6:d1:25:97:d0:37:c7:91:be:9c:f0:6d:0b:7d: 4f:6f:d6:17:f2:54:69:c8:f6:19:75:06:e2:56:58: 6a:e2:d2:cc:38:25:4a:39:78:ec:72:62:97:5a:c7: 9c:14:c6:73:fb:6a:b2:6f:ea:0d:d8:de:9a:a6:09: 0e:c7:9f:f7:d9:cd:5f:08:73:07:47:64:22:fe:c2: 89:6a:60:40:ae:32:7c:23:5e:a6:6b:69:e1:a3:a1: 0b:3d:76:fe:84:5d:65:4b:e8:a7:db:34:dd:9f:50: f4:98:27:08:6a:3e:f4:80:e9:52:76:e7:cf:33:8e: c5:68:f1:ef:00:51:8b:30:da:6d:d7:0f:db:da:65: 05:01:7b:2e:c5:0e:a4:3f:67:78:a2:26:10:33:54: 5d:c3:04:2e:0a:f6:26:2e:de:7c:d6:c6:aa:81:ac: 19:41:73:dd:d0:11:fd:38:2d:3b:a7:68:d2:f2:6c: f6:04:80:18:5f:52:11:1c:17:05:fc:67:ba:49:b6: 79:8e:78:4b:23:03:8c:ff:1e:6a:f2:8a:a5:e6:d7: 6d:d7:e0:e9:1d:2b:d9:82:32:72:2d:f2:79:1d:d4: 36:48:a8:59:e0:0d:3e:c0:52:3b:c5:9d:c9:84:52: 29:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:78:EB:01:90:32:EA:BF:75:D0:0C:1F:39:9E:F3:6E:C0:CB:D0:7B X509v3 Authority Key Identifier: keyid:30:AE:85:D3:25:3E:A2:C9:9E:AF:63:69:61:5F:5B:C0:70:CC:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MK6F0yU-osmer2NpYV9bwHDMX7I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/0/30AE85D3253EA2C99EAF6369615F5BC070CC5FB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:27:b8:4b:74:cd:90:a2:a0:60:58:66:92:82:b4:29:0e:59: 7b:da:e2:9b:e2:d7:c2:fd:5d:bb:6f:90:43:61:3a:ad:ed:8f: 13:4c:35:8c:13:24:2a:d4:bb:ce:39:6e:d5:4c:d5:ad:a3:36: 61:e7:9b:4f:84:c1:04:1d:36:1b:23:bf:8a:af:70:01:aa:ea: 4e:fb:8b:de:34:6b:15:e3:74:7a:43:78:c8:c9:66:e7:d1:5a: 9f:87:f8:0e:66:e0:06:2b:9c:e9:a8:af:69:3a:1c:f4:24:49: 53:b8:c8:26:ce:3e:d1:d1:f4:44:e4:ab:67:55:ba:73:10:12: ff:24:e6:91:7d:38:ae:ee:6c:b8:1c:91:4f:44:21:61:a4:66: 9e:a9:98:cc:30:90:8a:be:17:00:33:9d:a9:62:6f:7e:58:ea: 53:bb:a6:e4:62:f8:a5:03:86:0b:29:25:45:7d:57:05:4f:65: 30:47:45:77:24:04:08:74:32:35:d2:3d:2e:b7:52:ef:a5:fc: f2:09:62:72:b8:67:9c:1f:43:be:86:0e:46:67:2c:cc:70:b4: 9b:b8:24:9d:92:8c:8f:c4:8e:05:44:39:26:37:76:06:9f:83: 5d:d9:06:37:d1:15:90:97:16:8f:14:4c:18:ad:ae:0d:e1:78: 88:de:62:81 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcf7AcVCCAs86DVpqRsMed6BCqY0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygzMEFFODVEMzI1 M0VBMkM5OUVBRjYzNjk2MTVGNUJDMDcwQ0M1RkIyMB4XDTI2MDcyODA5MTEyN1oX DTI2MDcyOTExMjIyN1owMzExMC8GA1UEAxMoMjA3OEVCMDE5MDMyRUFCRjc1RDAw QzFGMzk5RUYzNkVDMENCRDA3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHhdeqW5kK+wdaqs8s24ubRJZfQN8eRvpzwbQt9T2/WF/JUacj2GXUG4lZY auLSzDglSjl47HJil1rHnBTGc/tqsm/qDdjemqYJDsef99nNXwhzB0dkIv7CiWpg QK4yfCNepmtp4aOhCz12/oRdZUvop9s03Z9Q9JgnCGo+9IDpUnbnzzOOxWjx7wBR izDabdcP29plBQF7LsUOpD9neKImEDNUXcMELgr2Ji7efNbGqoGsGUFz3dAR/Tgt O6do0vJs9gSAGF9SERwXBfxnukm2eY54SyMDjP8eavKKpebXbdfg6R0r2YIyci3y eR3UNkioWeANPsBSO8WdyYRSKX8CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQgeOsB kDLqv3XQDB85nvNuwMvQezAfBgNVHSMEGDAWgBQwroXTJT6iyZ6vY2lhX1vAcMxf sjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzAvMzBBRTg1 RDMyNTNFQTJDOTlFQUY2MzY5NjE1RjVCQzA3MENDNUZCMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTUs2RjB5VS1v c21lcjJOcFlWOWJ3SERNWDdJLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8wLzMwQUU4NUQzMjUzRUEyQzk5RUFGNjM2OTYxNUY1QkMwNzBDQzVG QjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQC9J7hLdM2QoqBgWGaSgrQpDll72uKb4tfC/V27b5BDYTqt 7Y8TTDWMEyQq1LvOOW7VTNWtozZh55tPhMEEHTYbI7+Kr3ABqupO+4veNGsV43R6 Q3jIyWbn0Vqfh/gOZuAGK5zpqK9pOhz0JElTuMgmzj7R0fRE5KtnVbpzEBL/JOaR fTiu7my4HJFPRCFhpGaeqZjMMJCKvhcAM52pYm9+WOpTu6bkYvilA4YLKSVFfVcF T2UwR0V3JAQIdDI10j0ut1LvpfzyCWJyuGecH0O+hg5GZyzMcLSbuCSdkoyPxI4F RDkmN3YGn4Nd2QY30RWQlxaPFEwYra4N4XiI3mKB -----END CERTIFICATE-----Generated at Tue Jul 28 21:10:13 2026 by rpki-client