
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
File: 24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft (raw, json)
Hash identifier: OJXlsSVjE5BoseLaC9BDzSQPXjPL4ynWDi36Yn+D+Q4=
Subject key identifier: A0:07:C3:5F:70:86:FB:4A:EB:54:01:84:AB:36:33:F7:E2:EB:D0:A4
Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
Certificate issuer: /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Certificate serial: 78A1E59E432FA870438D06866B2E09E2CE68AB47
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
Manifest number: 53
Signing time: Wed 29 Jul 2026 21:10:15 +0000
Manifest this update: Wed 29 Jul 2026 21:05:15 +0000
Manifest next update: Thu 30 Jul 2026 23:24:15 +0000
Files and hashes: 1: 3230322e3132332e39382e302f32342d3234203d3e203137373831.roa (hash: 5YOOHhOu3QXd/4aaDjVX3d1nj51K6HH65UEeEz4zkEc=)
2: 3230332e3139322e31362e302f32342d3234203d3e203137373831.roa (hash: o1cwMuKJtWT+7Uff4dbGVEK93EucJkFrdoxPX5tQr2M=)
3: 3230332e3139322e32342e302f32342d3234203d3e203137373831.roa (hash: BbMTunYrz1nmuNv7CTHzX20n2SaSGLdFMAbzTikvoko=)
4: 3230332e3139322e31342e302f32342d3234203d3e203137373831.roa (hash: C7pQnRLENNKawwBs1x742C4NQfWK3wR/8M1J5WHfE0I=)
5: 3230322e3132332e3131312e302f32342d3234203d3e203137373831.roa (hash: 0GJxn9D0pYDb4yxO7Aud+dLGirj3mYMN7u3UYAKJgB4=)
6: 3230332e3139322e352e302f32342d3234203d3e203137373831.roa (hash: BnkUoU7gJDO5a7aLhB5agXBQ3aLjPGSg0lU2EZRdkk0=)
7: 3230332e3139322e31322e302f32342d3234203d3e203137373831.roa (hash: V607HldWKuDXxlXGV+41k9BZRTPj2GoE42D0lUJabyA=)
8: 24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl (hash: CyrZp8P3Knfy98RPd+yO+mKSVXzdKgyDJjY75QJBC78=)
9: 3230332e3139322e32352e302f32342d3234203d3e203137373831.roa (hash: Xo0MC9gPyqAkaqWViitQYw2ysJ5sNhY/oWc7KDvqJfU=)
10: 3230322e3132332e39362e302f32342d3234203d3e203137373831.roa (hash: oPL+WqvBQ1jMwFkI+nTHLmCwxfrPvPAUqSpu7XtDHhg=)
11: 3230332e3139322e31352e302f32342d3234203d3e203137373831.roa (hash: WUwGCIiUne8yyxM/WabENAtajJDwAdTfUC/KCT6uOXI=)
12: 3230332e3139322e31332e302f32342d3234203d3e203137373831.roa (hash: bq7zzFwnBzqyn7Gg9JxzkYCqrRUYNIitvDRYqPRHld0=)
13: 3230332e3139322e31312e302f32342d3234203d3e203137373831.roa (hash: 45xCYyRQyjhCRC0vlSjwuILRfUgMsSd1dvyBXnBRchU=)
14: 3230332e3139322e332e302f32342d3234203d3e203137373831.roa (hash: 0WS8k8pofZHHVmupE3YpYkM+OR/Seos2N2zmoRKePNo=)
15: 3230322e3132332e3130362e302f32342d3234203d3e203137373831.roa (hash: B8CJpw4Mvz8SY6JreF+MZ8mRXXEL39z/L2SgwDPy4ro=)
16: 3230322e38342e31372e302f32342d3234203d3e203137373831.roa (hash: 1I+ea8Rekynt7Imb05kV7gQ8KNgPu0KKaGq6waMXCoQ=)
17: 3230322e3132332e3130382e302f32342d3234203d3e203137373831.roa (hash: 6vWD4VyRB5bYBDWD26oF0cZv2VdLIlKVmTJZdVbRs5g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 22:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:a1:e5:9e:43:2f:a8:70:43:8d:06:86:6b:2e:09:e2:ce:68:ab:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Validity
Not Before: Jul 29 21:05:15 2026 GMT
Not After : Jul 30 23:24:15 2026 GMT
Subject: CN=A007C35F7086FB4AEB540184AB3633F7E2EBD0A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4a:ca:23:ab:24:58:01:70:19:38:96:46:f9:
6e:79:5b:aa:6d:8f:e1:e2:df:6f:a9:53:ba:7c:de:
1e:e9:dd:20:af:e1:a2:5b:16:f9:8c:fc:d4:64:51:
51:9f:7f:24:db:2e:e5:0d:d6:2a:98:00:42:1f:66:
b1:12:f8:39:0c:12:68:37:b0:54:75:88:04:d6:38:
dd:bc:80:8f:ee:ec:fb:ec:c2:7e:21:60:3d:43:f4:
2d:63:2c:7d:41:9e:b2:c0:7c:d5:87:a2:75:a2:ec:
83:9b:93:3d:91:d0:42:e6:2b:23:a3:d0:e0:ae:43:
f5:4f:84:66:08:fb:8f:1f:2b:d4:28:cd:67:f2:bd:
ea:bf:a0:af:3e:77:1f:89:01:33:6d:da:48:75:9c:
da:09:31:36:17:d4:f4:72:e6:83:84:05:fe:fb:d9:
23:85:93:4c:24:90:0a:39:6c:39:d2:b1:bb:cb:3b:
ec:53:c9:51:95:a6:c5:8c:83:5a:09:27:aa:11:72:
aa:69:a8:4b:8d:69:dc:74:2e:7d:1c:c3:16:28:92:
3c:59:e6:77:d3:5e:d7:c9:d4:91:79:dd:34:db:fb:
6e:42:bb:83:82:f0:b4:bd:13:0d:97:92:10:ab:3c:
7b:44:c7:87:bf:f0:07:5a:0b:7e:49:f6:c1:32:91:
1a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:07:C3:5F:70:86:FB:4A:EB:54:01:84:AB:36:33:F7:E2:EB:D0:A4
X509v3 Authority Key Identifier:
keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8c:07:92:61:c0:16:59:72:1a:35:a5:0b:d6:6b:e6:c9:e1:
ab:62:d8:ff:a1:88:d8:9d:f0:a8:b0:6a:65:d0:d3:d0:1e:a5:
83:2a:a7:91:08:31:fe:f9:68:a0:3f:fa:a2:41:63:17:00:d8:
2d:60:8b:ed:13:47:d9:df:b7:59:04:5c:6d:20:49:69:41:a9:
a2:1a:c2:30:d8:ad:d4:b3:c2:2d:0e:2f:e4:6c:57:8c:e1:19:
65:ae:88:e7:89:56:f8:d9:88:cc:cd:7b:b9:f6:91:9a:43:52:
f4:72:4c:76:e1:6e:8c:94:b6:83:88:50:73:16:df:4c:af:8f:
46:5c:4b:65:6c:fd:b0:1d:21:aa:21:a8:0b:5b:d4:ca:80:1e:
ea:44:89:44:c5:64:3e:cf:99:ec:5a:a4:cf:a0:3e:16:f8:f0:
2a:ef:8a:54:a5:af:ba:0d:93:91:d8:0c:f2:bd:0e:0f:9a:da:
f9:23:fa:54:44:a4:4d:e8:ec:6f:7b:16:cd:08:98:80:7a:b7:
e8:bf:ee:fd:3d:83:41:61:76:e8:4a:a7:11:34:3c:0c:ca:77:
d8:db:ab:03:ec:cd:ee:b7:23:da:ed:df:78:c5:0a:c6:f3:65:
35:e1:83:8a:57:b5:ec:c3:1e:59:ad:c7:50:0b:ea:a8:34:43:
bc:e3:0e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:03:45 2026 by rpki-client