
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
File: 30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft (raw, json)
Hash identifier: O73kcNAwkmcz1Wwf9mQQ5rOebDcf9uaWsDlgyM0EMqE=
Subject key identifier: 12:33:CF:73:EA:B2:01:C6:DC:91:9B:CF:52:14:37:6D:30:6E:C9:AA
Authority key identifier: 30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07
Certificate issuer: /CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
Certificate serial: 2D1D11B610A02F9531FFD67958C41CF70EC8560C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
Manifest number: AA
Signing time: Wed 14 Oct 2026 06:58:40 +0000
Manifest this update: Wed 14 Oct 2026 06:53:40 +0000
Manifest next update: Sat 17 Oct 2026 11:43:40 +0000
Files and hashes: 1: 34332e3235342e32352e302f32342d3234203d3e2034383437.roa (hash: Ovzt74NkNXMJ6/m3biB7d43E0CMu7+X75tSS41U+dss=)
2: 3130332e3235342e36382e302f32322d3232203d3e2034383437.roa (hash: aZ/0G1bg8whxvsp31vQsWHhAvgkdQ5XTg3GUqH++CNM=)
3: 3130332e3235342e37312e302f32342d3234203d3e2034383437.roa (hash: Z9Cz6Wun0YZVCea+g+TAm8panVnYO6AEROUy+XcBmjo=)
4: 3130332e3235342e36382e302f32342d3234203d3e2034383437.roa (hash: zPWgyyF1Mrz5OFEF3JqQzSab+M9J8QVcEpUZrn16NyU=)
5: 34332e3232392e3138342e302f32342d3234203d3e2034383437.roa (hash: BIKbDGmrj7dmztRm9eLK7stBUpN/RIDdxkIj1Z0oloc=)
6: 34332e3235342e32362e302f32332d3233203d3e2034383437.roa (hash: jeJkLvIYDEf7KsBjTjP0Muz7wutFiTENkO7VbCNpnp4=)
7: 323430333a346138303a3a2f33322d3332203d3e2030.roa (hash: E+y7ZP4/IkfHf0gPRAUW7GMFf81wT+enHmqcRbcYENg=)
8: 30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl (hash: bo9T7+HJr8Zrez8+uEaHoPDmILSGoHayGcI3/X01i+k=)
9: 3130332e3235342e36382e302f32332d3233203d3e2034383437.roa (hash: b1EVn7R7/USI6UFqMLTUH9674Mh9xwEDoREczBT6nZM=)
10: 3130332e3235342e37302e302f32342d3234203d3e2034383437.roa (hash: FNZmyanxz07Qqhgjs5JxEU8wVZNOlunehBdVCp6eaeg=)
11: 3130332e3235342e36392e302f32342d3234203d3e2034383437.roa (hash: 7F88lFm6DD6Qmur/MExkO+X2jVnHVUUR5x0VicHrQgE=)
12: 34332e3235342e32362e302f32342d3234203d3e2034383437.roa (hash: leQK+grHmHX+nKo+1gHEIEc2DgIqJnwwWJjDTD+bBIk=)
13: 34332e3235342e32372e302f32342d3234203d3e2034383437.roa (hash: TE4NaF/eF/qrYTsjwyjQmQNGwcNtHiBiLxwFl1yleq0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl
rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 11:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:1d:11:b6:10:a0:2f:95:31:ff:d6:79:58:c4:1c:f7:0e:c8:56:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
Validity
Not Before: Oct 14 06:53:40 2026 GMT
Not After : Oct 17 11:43:40 2026 GMT
Subject: CN=1233CF73EAB201C6DC919BCF5214376D306EC9AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:a6:da:2f:2d:a9:d4:d3:d6:86:d1:60:ab:
8e:c3:73:de:d2:eb:3b:c1:64:66:c6:89:fa:ee:51:
71:b1:2a:28:c9:58:ae:6a:25:98:39:8b:e5:92:12:
c9:36:20:b4:49:c7:95:43:20:b3:c6:17:cc:9a:73:
22:f1:a6:ea:2c:ac:90:d6:b7:40:b3:86:2e:67:5c:
b2:f9:3b:dc:89:ca:02:d9:93:8e:e9:63:3b:24:00:
40:7a:b5:c6:fa:af:fa:dd:17:fd:c2:28:81:cd:9b:
28:73:45:29:8b:cb:a0:26:69:d2:20:b2:2f:90:62:
cc:d5:0f:a5:45:c8:b8:12:65:5d:3a:47:2a:79:c3:
56:cc:d7:93:8e:0d:7a:ea:3b:36:0b:cd:27:07:3e:
87:13:0f:6e:29:d4:1a:39:2b:43:13:f2:c5:56:ff:
e9:7b:68:8d:a2:1f:1d:a8:b1:e9:00:00:15:47:ce:
21:bd:b8:51:2a:db:6f:70:62:cd:9e:13:ed:b1:16:
60:17:20:e1:4d:01:e2:64:9d:d4:6c:1a:6b:05:39:
33:a0:d8:7b:3c:ae:b1:63:38:93:e0:19:ef:fa:c6:
82:7b:ac:a3:61:cf:65:b6:9b:2c:ed:04:b4:aa:e2:
af:53:cc:4e:1e:04:b6:38:0f:6b:e3:e5:03:31:80:
7a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:33:CF:73:EA:B2:01:C6:DC:91:9B:CF:52:14:37:6D:30:6E:C9:AA
X509v3 Authority Key Identifier:
keyid:30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a0:42:b0:b7:1f:89:ef:4f:63:69:96:58:45:d3:b2:a7:bf:
32:e4:09:27:97:83:dd:b3:c3:33:7e:4b:1a:1e:f6:b9:f8:72:
58:ee:6f:7a:fe:a2:e7:1c:a7:a6:e9:69:7b:de:0e:90:e3:37:
c1:8c:f3:6c:a0:d2:ab:70:3b:8a:08:2a:5f:68:57:2b:f5:cd:
2e:e2:61:92:ec:34:59:c5:3d:64:ce:d6:d9:e2:65:af:29:03:
78:10:ff:8f:7b:de:a8:a7:da:ba:f4:1b:24:e7:1e:cd:74:67:
b6:24:fa:e2:37:84:e1:6f:d8:20:6e:54:a0:6e:81:c1:b7:5b:
08:83:b1:d3:45:95:18:7c:a8:ad:52:89:79:f7:a6:9e:8a:3f:
b2:d8:18:72:0a:35:c9:18:4a:00:16:79:c4:66:c5:13:b9:ba:
fa:78:f8:2b:18:19:1d:3c:03:8d:87:85:49:b0:10:91:4c:e8:
7c:06:92:2d:19:ad:53:a1:4f:0d:ae:fd:6b:4f:d3:76:7b:6b:
5e:c3:6c:7f:59:50:bd:27:33:7f:12:ea:95:2a:47:d3:16:a0:
d3:06:50:59:83:40:3c:a4:13:ab:62:0d:e7:f2:8c:2e:0c:85:
a8:9f:53:8c:16:55:24:7b:f2:ac:ae:e6:9e:97:8d:55:15:f5:
31:92:7f:89
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIULR0RthCgL5Ux/9Z5WMQc9w7IVgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCRkRFNDhDQUI5RERENUUyNzVBNzI0MUZGN0U0RTQw
NTE4RjUwNzAeFw0yNjEwMTQwNjUzNDBaFw0yNjEwMTcxMTQzNDBaMDMxMTAvBgNV
BAMTKDEyMzNDRjczRUFCMjAxQzZEQzkxOUJDRjUyMTQzNzZEMzA2RUM5QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDT6baLy2p1NPWhtFgq47Dc97S
6zvBZGbGifruUXGxKijJWK5qJZg5i+WSEsk2ILRJx5VDILPGF8yacyLxpuosrJDW
t0Czhi5nXLL5O9yJygLZk47pYzskAEB6tcb6r/rdF/3CKIHNmyhzRSmLy6AmadIg
si+QYszVD6VFyLgSZV06Ryp5w1bM15OODXrqOzYLzScHPocTD24p1Bo5K0MT8sVW
/+l7aI2iHx2osekAABVHziG9uFEq229wYs2eE+2xFmAXIOFNAeJkndRsGmsFOTOg
2Hs8rrFjOJPgGe/6xoJ7rKNhz2W2myztBLSq4q9TzE4eBLY4D2vj5QMxgHrRAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUEjPPc+qyAcbckZvPUhQ3bTBuyaowHwYDVR0j
BBgwFoAUML/eSMq53dXidackH/fk5AUY9QcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTM3NTkzMDMyODU0NzM0MS8wLzMwQkZERTQ4Q0FCOURERDVFMjc1QTcyNDFGRjdF
NEU0MDUxOEY1MDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzBCRkRFNDhDQUI5RERENUUyNzVBNzI0MUZGN0U0RTQwNTE4RjUwNy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDUzNzU5MzAzMjg1NDczNDEvMC8zMEJGREU0OENBQjlE
REQ1RTI3NUE3MjQxRkY3RTRFNDA1MThGNTA3Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApaBCsLcfie9P
Y2mWWEXTsqe/MuQJJ5eD3bPDM35LGh72ufhyWO5vev6i5xynpulpe94OkOM3wYzz
bKDSq3A7iggqX2hXK/XNLuJhkuw0WcU9ZM7W2eJlrykDeBD/j3veqKfauvQbJOce
zXRntiT64jeE4W/YIG5UoG6BwbdbCIOx00WVGHyorVKJefemnoo/stgYcgo1yRhK
ABZ5xGbFE7m6+nj4KxgZHTwDjYeFSbAQkUzofAaSLRmtU6FPDa79a0/TdntrXsNs
f1lQvSczfxLqlSpH0xag0wZQWYNAPKQTq2IN5/KMLgyFqJ9TjBZVJHvyrK7mnpeN
VRX1MZJ/iQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 13:25:11 2026 by rpki-client