
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
File: A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft (raw, json)
Hash identifier: ApfycBfsrkZLKgoKtglM0wVBAK8hGlc5R9wIhMmKudI=
Subject key identifier: B4:0D:12:FF:5A:DA:B8:10:1F:DD:74:32:01:75:E5:8D:83:62:2E:A6
Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Certificate serial: 5BE57D88780A6B3C431D53563BD992BE45CE8417
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
Manifest number: 76
Signing time: Fri 17 Apr 2026 12:09:43 +0000
Manifest this update: Fri 17 Apr 2026 12:04:43 +0000
Manifest next update: Sat 18 Apr 2026 12:44:43 +0000
Files and hashes: 1: 3230332e38362e36302e302f32342d3234203d3e203234313437.roa (hash: BJZbR0lfoznCin3ZjtaBIQgGi5zQKhes89YrWdoFQs8=)
2: 3230332e38362e34382e302f32342d3234203d3e203234313437.roa (hash: ejzbVl97r5mOdJYA953Vk21BI5BB0TVZrbPRe544gDc=)
3: 3231392e3233352e3230372e302f32342d3234203d3e203234313437.roa (hash: Ol05ujiu93BtjhqGQ+WlieMkmygulOYjoIsurKH7T0c=)
4: 3231392e3233352e3139322e302f32342d3234203d3e203234313437.roa (hash: qtTgYatGvSNFTC6OFpTmEbcwwa3g6HwXVA0Ip2Px3xw=)
5: 3230332e38362e36312e302f32342d3234203d3e203234313437.roa (hash: BDN34o2PeLUuH7mUNKqvJMOmkHM7PlrsPh5Q9Hsq5P4=)
6: 3230332e38362e36322e302f32342d3234203d3e203234313437.roa (hash: LEggqkanD8YXk+XFnT/2KdUJ9g96lm9p2YSqWsX8J9A=)
7: 3230332e38362e35352e302f32342d3234203d3e203234313437.roa (hash: ZojEaFjtdgor13jSa7GyZGMBWWXJenaYyF2n+BjUBOg=)
8: 3230332e38362e35342e302f32342d3234203d3e203234313437.roa (hash: JIBRdGWpBW+adIGFLzrSbUhh/kt/vlw9SyeRkgMCJM8=)
9: 3231392e3233352e3139332e302f32342d3234203d3e203234313437.roa (hash: Nu0jpaTn4Fdv3bxm5NPIkyN0IrZp5kWxSz8smX/CQR8=)
10: 3230332e38362e35312e302f32342d3234203d3e203234313437.roa (hash: 5Nl4P4yjyaYsIWRUhf5zhO8ZOngx1vp1Piv9zXxY44w=)
11: 3230332e38362e34352e302f32342d3234203d3e203234313437.roa (hash: Nnd05xuUr2b4yGoh1bQE2fwywCCOmLsbEnz6TIRDa1k=)
12: 3230332e38362e34342e302f32342d3234203d3e203234313437.roa (hash: wIHg02Mx683aITJJCQSu1ItskF03DI8H6fuVpC8rq74=)
13: 3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa (hash: /iGkkIqO0FSP5CywowzeIsIdOQnf8YsmMX+nUyXOQLk=)
14: A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl (hash: 4U7Pe3vpP1DYc/6yCW+Diqj8RjDzkV6NuLCKrXod1IQ=)
15: 3230332e38362e35322e302f32342d3234203d3e203234313437.roa (hash: r4KefndZnU7luOV0QPcOqGP6CinPwbiKpD8RZV56f5E=)
16: 3230332e38362e34392e302f32342d3234203d3e203234313437.roa (hash: GxtOA4gw3IUgIx3k4sXIueBQkr72Q7f98AQ06CTYthw=)
17: 3230332e38362e33322e302f31392d3234203d3e203234313437.roa (hash: XDCVULdB42agXinP9bNu7bR26p/WgU+Ydt0+EBrlVrI=)
18: 3131332e3230382e3131362e302f32322d3232203d3e2034383038.roa (hash: aFwpRcl+lZeNzPOeiXM99Ies8yJ6dTHYIt0xhDzQl5M=)
19: 3230332e38362e34332e302f32342d3234203d3e203234313437.roa (hash: KAFhdO3yt9Ku7r/Veg9pGOh1yJ/ksXYA8r5t5Q9GrR4=)
20: 3231312e3130322e3234382e302f32312d3234203d3e2034383437.roa (hash: Oq/GjpVGMUDKb7ahdv94Jw/QkvSfPPwwMawTEz511Zw=)
21: 3230332e38362e35342e302f32332d3233203d3e203234313437.roa (hash: qrPNPGmkS1XHHj7dvp921g1Efab04Eu3HyMUsLNZTLY=)
22: 3230332e38362e35332e302f32342d3234203d3e203234313437.roa (hash: GZW0aT1mI2ydEgJpv0mu4u+h/q8ra7gJ/fnnxsz7CP0=)
23: 3231312e3130322e3234302e302f32312d3231203d3e2034383437.roa (hash: OuNc19cec5VulmUoNbFwnHh6nobKP43YHzim9Y3kzD4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:44:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:e5:7d:88:78:0a:6b:3c:43:1d:53:56:3b:d9:92:be:45:ce:84:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Validity
Not Before: Apr 17 12:04:43 2026 GMT
Not After : Apr 18 12:44:43 2026 GMT
Subject: CN=B40D12FF5ADAB8101FDD74320175E58D83622EA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:84:fa:01:20:65:90:ac:c3:25:58:46:0e:
39:69:d1:ed:a9:2b:46:39:d6:9c:e2:f8:82:68:ca:
47:b6:b1:90:19:83:43:2f:f1:3a:14:d6:f1:b0:e4:
e3:09:4d:95:1f:a8:7b:49:a0:6e:45:9a:3d:32:6d:
e8:97:dd:c3:ac:eb:dc:1a:ed:8e:96:20:a9:12:aa:
c7:b6:3b:7b:d1:6c:18:a6:2f:5e:4e:ec:40:77:89:
e3:d4:50:d5:1a:75:29:0d:42:34:72:b3:ef:02:a3:
73:da:be:4c:99:57:c8:eb:a9:dd:8f:bb:94:61:60:
6f:f6:23:88:5a:b7:cb:ea:b9:fa:0b:03:b6:c5:b7:
cc:68:a2:58:6b:57:6a:bb:d6:aa:05:df:39:84:74:
f4:42:57:10:bd:0e:26:51:6b:31:2c:bd:ac:82:f9:
36:ef:28:4f:d9:d1:33:15:ac:24:0a:82:fc:24:fe:
67:d6:99:2a:1d:85:04:c8:8e:4d:5d:61:ba:90:2b:
c8:db:91:ae:de:64:62:9a:41:57:e7:d9:63:6b:f6:
a3:c1:c3:b5:61:58:00:25:59:c2:b2:ec:54:3b:f9:
2f:3e:b0:a4:ed:ca:80:ad:f3:44:75:dd:b9:b8:b6:
f8:5a:cd:87:50:a2:83:ff:4e:d5:d6:99:d4:32:59:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0D:12:FF:5A:DA:B8:10:1F:DD:74:32:01:75:E5:8D:83:62:2E:A6
X509v3 Authority Key Identifier:
keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:74:b1:7f:1d:91:f5:6e:6f:66:3f:a2:63:b7:9d:2b:88:68:
dc:6f:e3:1a:f1:ab:b0:b0:79:6b:c3:e0:0b:f1:8b:cd:cc:b2:
8e:26:be:4c:9f:b7:15:77:2c:1d:76:4e:ee:71:ba:35:32:84:
97:89:68:ba:7f:37:67:ad:1c:77:08:8b:6c:f7:f7:ee:bc:69:
cd:a0:f9:8d:68:65:21:51:41:d0:74:1f:db:1a:f1:e4:a9:59:
f5:ea:c1:0f:b7:3d:65:d3:c4:41:7b:70:07:06:85:2b:c9:70:
8d:e5:34:d9:a7:78:0a:b8:f3:06:57:f9:51:cb:c0:71:ce:1b:
b3:ca:c7:cc:d3:de:5f:b2:b0:a4:16:b4:43:f6:81:8a:39:48:
05:a6:f4:02:3a:ef:bc:e1:3a:6a:e8:61:e0:6f:47:ad:05:f5:
b1:f8:14:fb:51:8e:ac:48:5b:8b:7f:e2:4d:5d:96:c4:2b:fa:
22:27:e7:71:db:41:cf:92:70:73:be:08:51:e3:70:02:b2:77:
01:75:81:e8:db:3a:32:40:dc:8c:11:37:96:6b:d9:9f:c0:8b:
b8:ee:93:65:a5:c2:e1:0b:6f:d6:a4:12:42:05:4a:72:e6:00:
a9:b1:b9:a7:54:31:9e:c8:5a:b2:ef:ec:06:68:1e:d6:ce:e5:
09:76:b7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:28:29 2026 by rpki-client