
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
File: 24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft (raw, json)
Hash identifier: Ss99Et9jAVDr2003cb0w3ZzAyItkCckqgrwIPsNu4Sc=
Subject key identifier: 09:FF:BF:21:4C:DF:D9:D2:35:BC:91:E2:D4:79:9E:78:BF:3A:D1:11
Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
Certificate issuer: /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Certificate serial: 6A52A40EDF1D9B00EBAAF592324F6B86FD8EEEB0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
Manifest number: 90
Signing time: Thu 15 Oct 2026 08:01:32 +0000
Manifest this update: Thu 15 Oct 2026 07:56:32 +0000
Manifest next update: Sun 18 Oct 2026 10:21:32 +0000
Files and hashes: 1: 3230332e3139322e31342e302f32342d3234203d3e203137373831.roa (hash: C7pQnRLENNKawwBs1x742C4NQfWK3wR/8M1J5WHfE0I=)
2: 3230332e3139322e31322e302f32342d3234203d3e203137373831.roa (hash: V607HldWKuDXxlXGV+41k9BZRTPj2GoE42D0lUJabyA=)
3: 3230332e3139322e31352e302f32342d3234203d3e203137373831.roa (hash: WUwGCIiUne8yyxM/WabENAtajJDwAdTfUC/KCT6uOXI=)
4: 3230332e3139322e31312e302f32342d3234203d3e203137373831.roa (hash: 45xCYyRQyjhCRC0vlSjwuILRfUgMsSd1dvyBXnBRchU=)
5: 3230322e3132332e3130362e302f32342d3234203d3e203137373831.roa (hash: B8CJpw4Mvz8SY6JreF+MZ8mRXXEL39z/L2SgwDPy4ro=)
6: 3230332e3139322e332e302f32342d3234203d3e203137373831.roa (hash: 0WS8k8pofZHHVmupE3YpYkM+OR/Seos2N2zmoRKePNo=)
7: 3230332e3139322e352e302f32342d3234203d3e203137373831.roa (hash: BnkUoU7gJDO5a7aLhB5agXBQ3aLjPGSg0lU2EZRdkk0=)
8: 3230332e3139322e31332e302f32342d3234203d3e203137373831.roa (hash: bq7zzFwnBzqyn7Gg9JxzkYCqrRUYNIitvDRYqPRHld0=)
9: 3230322e38342e31372e302f32342d3234203d3e203137373831.roa (hash: 1I+ea8Rekynt7Imb05kV7gQ8KNgPu0KKaGq6waMXCoQ=)
10: 3230322e3132332e3130382e302f32342d3234203d3e203137373831.roa (hash: 6vWD4VyRB5bYBDWD26oF0cZv2VdLIlKVmTJZdVbRs5g=)
11: 3230332e3139322e31362e302f32342d3234203d3e203137373831.roa (hash: o1cwMuKJtWT+7Uff4dbGVEK93EucJkFrdoxPX5tQr2M=)
12: 3230322e3132332e3131312e302f32342d3234203d3e203137373831.roa (hash: 0GJxn9D0pYDb4yxO7Aud+dLGirj3mYMN7u3UYAKJgB4=)
13: 3230322e3132332e39362e302f32342d3234203d3e203137373831.roa (hash: oPL+WqvBQ1jMwFkI+nTHLmCwxfrPvPAUqSpu7XtDHhg=)
14: 3230332e3139322e32342e302f32342d3234203d3e203137373831.roa (hash: BbMTunYrz1nmuNv7CTHzX20n2SaSGLdFMAbzTikvoko=)
15: 3230332e3139322e32352e302f32342d3234203d3e203137373831.roa (hash: Xo0MC9gPyqAkaqWViitQYw2ysJ5sNhY/oWc7KDvqJfU=)
16: 24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl (hash: hVNEYhFPsBVhBwc9yPjh554yN0d1Pe1IVPcM9tPEuMI=)
17: 3230322e3132332e39382e302f32342d3234203d3e203137373831.roa (hash: 5YOOHhOu3QXd/4aaDjVX3d1nj51K6HH65UEeEz4zkEc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 10:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:52:a4:0e:df:1d:9b:00:eb:aa:f5:92:32:4f:6b:86:fd:8e:ee:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Validity
Not Before: Oct 15 07:56:32 2026 GMT
Not After : Oct 18 10:21:32 2026 GMT
Subject: CN=09FFBF214CDFD9D235BC91E2D4799E78BF3AD111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:06:aa:2b:d2:ef:41:dc:06:4f:6f:7d:6a:
6a:c2:26:e0:9b:2c:7f:cc:71:25:e0:7b:05:db:1c:
c1:03:5c:83:64:f6:b2:86:61:6a:6b:a3:61:1a:ad:
38:61:38:83:0e:a2:e7:6a:0a:8f:ec:be:44:fb:75:
eb:a1:d2:a9:98:a0:37:80:47:92:fb:c9:b0:4c:6f:
06:16:54:e2:21:b4:91:34:09:53:50:56:35:32:a4:
db:19:6f:12:a6:c4:7e:59:7e:2d:50:ef:d0:15:1a:
88:2e:9b:cc:e9:ff:f1:ec:e0:d4:fc:d5:7f:ec:96:
02:a8:d0:6c:b2:12:89:b0:a4:03:13:ba:2a:3e:fa:
6f:72:7f:d3:b3:7f:7b:69:c0:f2:94:a5:fe:93:a2:
bc:25:55:48:cc:a3:70:c2:e7:8b:8e:26:e6:bc:25:
cf:68:bf:c3:87:52:02:d1:55:c7:3a:84:33:92:a4:
09:ac:41:40:3e:ad:56:eb:cf:d2:fd:66:23:20:16:
04:f4:95:60:47:5f:bd:6f:29:01:3e:14:31:ef:c5:
21:76:84:02:22:87:72:fa:68:52:d9:41:ba:08:e6:
45:b9:c7:61:27:4e:d4:b0:60:e3:33:8a:e7:e2:82:
59:34:5d:a4:7a:e6:92:51:cc:09:90:d5:92:1f:f6:
80:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FF:BF:21:4C:DF:D9:D2:35:BC:91:E2:D4:79:9E:78:BF:3A:D1:11
X509v3 Authority Key Identifier:
keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:31:33:aa:ec:7d:a1:7a:4d:ec:fa:36:33:14:de:21:e9:f8:
fc:3a:53:8b:68:1f:86:d3:fd:1d:6a:e7:4d:a8:56:ea:b7:3c:
22:ea:ee:01:4a:f8:ef:41:65:87:9b:a0:f6:12:9f:a1:3c:dc:
87:db:b3:77:fb:12:72:b4:71:5d:6d:a6:45:b5:98:62:79:7c:
2c:48:49:41:28:63:81:63:2c:1d:93:5a:d3:a0:95:d8:40:ba:
cc:27:12:ae:ce:95:a7:3f:9e:c6:b7:9e:ff:ac:9d:2d:7f:de:
55:d6:fe:a0:72:82:8a:64:86:e9:d4:a2:9e:61:5f:e6:71:b7:
b9:37:5b:3e:a7:7d:62:27:93:2a:a0:86:05:d0:30:c1:02:4e:
80:76:0f:72:30:c4:72:53:d8:4f:f8:30:e7:3e:e9:59:f1:1e:
24:b1:e1:41:d5:6b:3c:4c:83:a0:c7:fe:38:18:f1:09:cc:7b:
11:7c:4b:1c:38:e5:c5:b4:20:52:17:f4:56:70:59:24:c2:66:
98:16:bb:6f:92:eb:1e:a7:2c:c8:2b:6c:14:b5:cd:ea:65:6f:
d0:3e:8c:25:5d:13:ec:9a:4d:e7:3f:6d:59:2b:0e:ca:5c:6c:
30:4a:fa:1c:4e:e7:e4:ee:da:c3:bf:ff:7e:c7:39:a3:c7:df:
b4:05:f3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:09:39 2026 by rpki-client