
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
File: 305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft (raw, json)
Hash identifier: Cx9VKNySWmSMy7viQnxOUVG3wOQ7XW/h4SBtBWdH/To=
Subject key identifier: 2C:FA:81:CD:60:16:A7:90:1D:10:8F:C4:04:F7:BB:D2:CF:6C:7B:8A
Authority key identifier: 30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C
Certificate issuer: /CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
Certificate serial: 1215484DF95D2684AA31171BF80C843F99E5EA74
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
Manifest number: 19
Signing time: Sat 13 Jun 2026 09:46:41 +0000
Manifest this update: Sat 13 Jun 2026 09:41:41 +0000
Manifest next update: Sun 14 Jun 2026 10:34:41 +0000
Files and hashes: 1: 3130332e3231342e35302e302f32342d3234203d3e2034383337.roa (hash: QO8gfo6WmKKlnAdCSBncVA0jNKjPGbdc+9tghke8cWs=)
2: 34332e3232342e38302e302f32342d3234203d3e2030.roa (hash: DydeEBLvTFBni6sap3dOQebSJ8YoD801483ECqfgdmE=)
3: 305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl (hash: 9uaQtJ+Smx+JTxjfHfSOObCltdzJf0+dcRIM372tkek=)
4: 34332e3232342e38322e302f32342d3234203d3e2030.roa (hash: D39m87ASX2kc9MpoFjHVU2AueuSbGqJTzgTzZ/kReSU=)
5: 34332e3232342e38312e302f32342d3234203d3e2034383337.roa (hash: pQe03r/gh6IE/0fmJBQ3yi0lYCayIje0KE/YHarwW2I=)
6: 3130332e3231342e34382e302f32342d3234203d3e2034383337.roa (hash: q/GlwgMVJgPz2YueX/zYdDdwd1pwk2ZMLOJoiBEhT3c=)
7: 34332e3232342e38332e302f32342d3234203d3e2034383337.roa (hash: s9n48nIoaQYE7kYFEdZycok3rB7tsRN2hC/vaOMUzNE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl
rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 10:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:15:48:4d:f9:5d:26:84:aa:31:17:1b:f8:0c:84:3f:99:e5:ea:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
Validity
Not Before: Jun 13 09:41:41 2026 GMT
Not After : Jun 14 10:34:41 2026 GMT
Subject: CN=2CFA81CD6016A7901D108FC404F7BBD2CF6C7B8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:c9:e4:03:b3:f7:21:1e:18:50:4b:d8:aa:
a2:0d:c5:aa:4c:c7:97:05:91:e8:c1:5c:0e:57:19:
1e:15:f2:f8:8c:55:38:1f:4b:e2:43:ee:1f:17:7e:
2d:92:fe:62:ab:65:d5:db:1f:ea:f6:2e:2d:a3:22:
c2:3b:6b:df:9c:9a:12:ef:b5:7f:27:00:d8:95:7d:
59:9d:35:88:3e:0a:7a:ee:99:27:04:0d:ea:5c:e8:
6e:c4:a2:67:1e:7a:02:b7:77:03:01:ae:8d:78:90:
b9:37:85:b7:04:42:41:f6:b7:93:e9:3b:ed:52:27:
aa:49:21:15:e2:ed:b5:c1:53:b9:b2:96:32:18:ba:
ab:15:e6:c6:3c:f0:70:60:6d:7c:85:09:f9:62:22:
70:b7:03:dd:af:59:09:16:43:64:0d:b1:76:a2:7c:
10:cb:4a:ab:2f:cd:15:01:93:bc:f6:e0:4b:0a:bc:
3d:94:4d:8d:79:36:b0:c9:9c:97:c9:25:f1:1e:9f:
00:39:3e:e1:11:63:28:bc:30:59:08:18:1e:23:36:
b9:39:d0:af:dd:27:8a:ed:a0:93:28:a2:af:13:fb:
62:80:c7:4f:12:0a:e3:ca:c7:63:eb:44:80:c1:ab:
db:4c:a7:38:48:b4:a4:61:b3:c2:17:14:cf:31:98:
fd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FA:81:CD:60:16:A7:90:1D:10:8F:C4:04:F7:BB:D2:CF:6C:7B:8A
X509v3 Authority Key Identifier:
keyid:30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a6:b9:97:ed:5e:66:46:d3:e1:8a:cd:d9:54:df:fe:e9:0f:
5d:1c:db:ee:60:5d:6d:85:ef:a5:d6:64:9a:04:85:40:53:2b:
65:92:8b:0f:ea:b0:92:b1:87:9a:96:d1:a5:f2:08:1f:93:f0:
53:b4:43:56:95:3c:6b:51:b8:43:4f:99:26:10:41:6f:a0:7d:
0c:b6:51:7c:55:d1:53:31:3a:f0:a6:0d:fc:5a:c4:95:2d:fe:
6c:62:f8:50:79:14:08:a3:66:d7:d1:d6:48:66:56:fc:87:54:
83:0e:cc:0e:85:2d:08:f5:16:e8:09:ed:b7:62:d1:0b:ea:8a:
d6:b6:2f:e6:aa:9b:87:0a:40:fe:0d:b1:e8:1f:1f:c7:0c:31:
aa:90:db:cf:e4:98:be:58:88:17:ea:57:cf:9e:c5:15:23:62:
79:3e:48:0c:35:91:95:54:2f:b9:2e:9d:84:a6:8c:dd:cb:98:
ff:8a:ec:ae:1d:64:40:2f:a8:63:65:8e:fa:e5:c7:36:e8:fe:
6e:2b:ce:00:1e:6e:9a:59:ac:eb:30:8b:72:10:d8:63:4d:c2:
58:20:63:af:55:62:6d:27:4a:99:3b:35:ce:d4:34:6c:33:e7:
0a:95:b6:0b:37:6b:af:31:10:84:11:56:ca:53:2f:9d:b6:86:
b5:db:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:04:15 2026 by rpki-client