
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
File: A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft (raw, json)
Hash identifier: Vv14gK/GyLTGwiqvGPA9ouDqQ8jc5DtRtVhboOWIfsg=
Subject key identifier: DB:91:59:A9:08:84:52:57:08:05:7E:3D:F1:36:B2:AC:E3:24:3B:19
Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Certificate serial: 165C837074B9775CC3F791F9CD0AC451A00D86FF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
Manifest number: 013C
Signing time: Wed 14 Oct 2026 12:04:06 +0000
Manifest this update: Wed 14 Oct 2026 11:59:06 +0000
Manifest next update: Sat 17 Oct 2026 21:19:06 +0000
Files and hashes: 1: 3230332e38362e34332e302f32342d3234203d3e203234313437.roa (hash: KAFhdO3yt9Ku7r/Veg9pGOh1yJ/ksXYA8r5t5Q9GrR4=)
2: A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl (hash: Me+yppTXRiM84ewrmZXksVZgE/g2NUGLqoqygGMv4Sw=)
3: 3231392e3233352e3230372e302f32342d3234203d3e203234313437.roa (hash: Ol05ujiu93BtjhqGQ+WlieMkmygulOYjoIsurKH7T0c=)
4: 3231312e3130322e3234382e302f32312d3234203d3e2034383437.roa (hash: Oq/GjpVGMUDKb7ahdv94Jw/QkvSfPPwwMawTEz511Zw=)
5: 3231392e3233352e3139322e302f32342d3234203d3e203234313437.roa (hash: qtTgYatGvSNFTC6OFpTmEbcwwa3g6HwXVA0Ip2Px3xw=)
6: 3230332e38362e33322e302f31392d3234203d3e203234313437.roa (hash: XDCVULdB42agXinP9bNu7bR26p/WgU+Ydt0+EBrlVrI=)
7: 3230332e38362e34342e302f32342d3234203d3e203234313437.roa (hash: wIHg02Mx683aITJJCQSu1ItskF03DI8H6fuVpC8rq74=)
8: 3231312e3130322e3234302e302f32312d3231203d3e2034383437.roa (hash: OuNc19cec5VulmUoNbFwnHh6nobKP43YHzim9Y3kzD4=)
9: 3230332e38362e34392e302f32342d3234203d3e203234313437.roa (hash: GxtOA4gw3IUgIx3k4sXIueBQkr72Q7f98AQ06CTYthw=)
10: 3230332e38362e35332e302f32342d3234203d3e203234313437.roa (hash: GZW0aT1mI2ydEgJpv0mu4u+h/q8ra7gJ/fnnxsz7CP0=)
11: 3230332e38362e36312e302f32342d3234203d3e203234313437.roa (hash: BDN34o2PeLUuH7mUNKqvJMOmkHM7PlrsPh5Q9Hsq5P4=)
12: 3230332e38362e35342e302f32332d3233203d3e203234313437.roa (hash: qrPNPGmkS1XHHj7dvp921g1Efab04Eu3HyMUsLNZTLY=)
13: 3231392e3233352e3139332e302f32342d3234203d3e203234313437.roa (hash: Nu0jpaTn4Fdv3bxm5NPIkyN0IrZp5kWxSz8smX/CQR8=)
14: 3230332e38362e35342e302f32342d3234203d3e203234313437.roa (hash: JIBRdGWpBW+adIGFLzrSbUhh/kt/vlw9SyeRkgMCJM8=)
15: 3230332e38362e35352e302f32342d3234203d3e203234313437.roa (hash: ZojEaFjtdgor13jSa7GyZGMBWWXJenaYyF2n+BjUBOg=)
16: 3230332e38362e34352e302f32342d3234203d3e203234313437.roa (hash: Nnd05xuUr2b4yGoh1bQE2fwywCCOmLsbEnz6TIRDa1k=)
17: 3230332e38362e36302e302f32342d3234203d3e203234313437.roa (hash: BJZbR0lfoznCin3ZjtaBIQgGi5zQKhes89YrWdoFQs8=)
18: 3131332e3230382e3131362e302f32322d3232203d3e2034383038.roa (hash: ExT2KfjA0A6E9yvmoTz1Y7ZxZgtn7LoRJKMSgNn4JQU=)
19: 3230332e38362e34382e302f32342d3234203d3e203234313437.roa (hash: ejzbVl97r5mOdJYA953Vk21BI5BB0TVZrbPRe544gDc=)
20: 3230332e38362e36322e302f32342d3234203d3e203234313437.roa (hash: LEggqkanD8YXk+XFnT/2KdUJ9g96lm9p2YSqWsX8J9A=)
21: 3230332e38362e35322e302f32342d3234203d3e203234313437.roa (hash: r4KefndZnU7luOV0QPcOqGP6CinPwbiKpD8RZV56f5E=)
22: 3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa (hash: Oe4lgNDRYqcDE8SGWHciOR4xQCmgOD/0eAWVb3S/6uQ=)
23: 3230332e38362e35312e302f32342d3234203d3e203234313437.roa (hash: 5Nl4P4yjyaYsIWRUhf5zhO8ZOngx1vp1Piv9zXxY44w=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 21:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:5c:83:70:74:b9:77:5c:c3:f7:91:f9:cd:0a:c4:51:a0:0d:86:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Validity
Not Before: Oct 14 11:59:06 2026 GMT
Not After : Oct 17 21:19:06 2026 GMT
Subject: CN=DB9159A90884525708057E3DF136B2ACE3243B19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:4a:89:e7:24:ad:a7:b2:04:0e:a1:03:b6:
37:3c:3d:1d:bb:5b:44:da:ee:79:bd:d0:5e:5d:5a:
9c:47:ac:9d:7e:08:99:3f:c5:91:c8:e1:cd:9e:a9:
bc:0f:f0:26:36:93:ae:da:e9:a1:79:6c:37:1d:10:
02:e0:59:79:b5:e6:f5:af:8e:06:a9:9d:fa:4a:35:
11:80:06:f5:4c:48:55:ba:fa:b4:49:ff:b7:f7:99:
c8:39:76:d4:7d:36:ef:1b:2c:31:39:59:73:38:c9:
b7:96:de:6e:8e:2b:16:96:ab:84:1c:ae:a2:d0:37:
a4:96:95:0b:cc:d7:70:e9:89:26:42:2d:d7:13:5d:
6b:c3:54:46:b9:ba:7a:48:67:30:a1:4d:c5:66:1d:
ee:57:fc:09:01:43:83:78:4e:f8:86:8a:2f:0c:cc:
15:24:e9:7f:a1:35:84:fc:2c:c1:e8:7f:7d:1c:a6:
58:f2:45:5d:ad:40:d2:17:92:f0:84:01:41:95:bd:
16:11:3d:8b:f3:7e:b4:95:31:c1:68:5f:74:d6:26:
0e:1e:3f:88:f0:99:e0:84:7c:e3:bc:d5:2e:4a:14:
23:39:ee:e0:b4:b0:b0:18:23:7f:43:44:80:34:63:
e8:ee:e3:ba:ce:46:e4:ca:93:7e:8d:d3:7b:e2:c2:
16:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:91:59:A9:08:84:52:57:08:05:7E:3D:F1:36:B2:AC:E3:24:3B:19
X509v3 Authority Key Identifier:
keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ce:c8:99:ce:1f:d1:5e:1e:c1:4f:dc:32:42:cf:2f:0a:0d:
87:91:9d:32:ef:1d:51:23:e7:35:4e:9a:d9:7f:f9:bb:56:32:
4a:c3:63:c3:37:9f:80:13:d4:bb:fd:77:65:0d:b6:62:56:e8:
4f:88:83:25:d6:fc:ec:78:2f:c9:cf:a3:71:d6:5a:b9:c2:ab:
20:17:55:21:10:9b:f6:b6:19:45:8d:9d:3a:7b:72:66:36:eb:
a2:a3:85:75:49:16:ae:cb:99:0b:eb:56:fd:f4:02:ab:09:2c:
fd:4d:88:5f:ac:57:36:85:47:6e:ca:ac:e5:e3:d5:fe:51:16:
da:6d:4e:76:bb:ec:9c:e2:0a:e1:51:83:bc:b4:70:eb:9e:74:
1d:ac:8e:fa:4f:a5:6d:2e:b3:83:89:b4:a5:15:05:e6:6b:9f:
85:58:6b:32:e7:65:70:30:ec:b6:39:8c:ae:e6:59:06:99:7a:
c2:9c:62:54:f1:49:2f:e0:6a:69:c1:b0:15:e5:69:11:3c:51:
51:bb:0d:57:4d:63:27:e9:cb:c3:29:f4:74:09:5e:93:e6:cc:
3f:54:89:0d:9a:27:a8:10:46:10:a5:4c:bd:ad:bc:a8:cc:83:
a5:54:fd:fd:68:f4:9f:73:98:01:c0:d0:49:66:5c:25:d1:2a:
40:cf:eb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:23:41 2026 by rpki-client