
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
File: A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft (raw, json)
Hash identifier: U0h//MC32xEK7jcqR0nJfPnNxQRrQHfidZGXab+uIWI=
Subject key identifier: 6B:D6:45:6C:3A:89:01:2A:49:79:C6:52:27:D2:02:16:D1:9C:1F:26
Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Certificate serial: 652744BAEA587AA814A1E088F49F13D60FBCAA9E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
Manifest number: FF
Signing time: Wed 29 Jul 2026 11:29:16 +0000
Manifest this update: Wed 29 Jul 2026 11:24:16 +0000
Manifest next update: Thu 30 Jul 2026 13:06:16 +0000
Files and hashes: 1: 3231392e3233352e3230372e302f32342d3234203d3e203234313437.roa (hash: Ol05ujiu93BtjhqGQ+WlieMkmygulOYjoIsurKH7T0c=)
2: 3230332e38362e36322e302f32342d3234203d3e203234313437.roa (hash: LEggqkanD8YXk+XFnT/2KdUJ9g96lm9p2YSqWsX8J9A=)
3: 3230332e38362e34332e302f32342d3234203d3e203234313437.roa (hash: KAFhdO3yt9Ku7r/Veg9pGOh1yJ/ksXYA8r5t5Q9GrR4=)
4: 3230332e38362e34392e302f32342d3234203d3e203234313437.roa (hash: GxtOA4gw3IUgIx3k4sXIueBQkr72Q7f98AQ06CTYthw=)
5: A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl (hash: z5npBuDZMYtFTVVX1eTQKCaBQBobJWxSB81EmWmF8Hc=)
6: 3230332e38362e34352e302f32342d3234203d3e203234313437.roa (hash: Nnd05xuUr2b4yGoh1bQE2fwywCCOmLsbEnz6TIRDa1k=)
7: 3230332e38362e35322e302f32342d3234203d3e203234313437.roa (hash: r4KefndZnU7luOV0QPcOqGP6CinPwbiKpD8RZV56f5E=)
8: 3231392e3233352e3139332e302f32342d3234203d3e203234313437.roa (hash: Nu0jpaTn4Fdv3bxm5NPIkyN0IrZp5kWxSz8smX/CQR8=)
9: 3230332e38362e33322e302f31392d3234203d3e203234313437.roa (hash: XDCVULdB42agXinP9bNu7bR26p/WgU+Ydt0+EBrlVrI=)
10: 3230332e38362e35332e302f32342d3234203d3e203234313437.roa (hash: GZW0aT1mI2ydEgJpv0mu4u+h/q8ra7gJ/fnnxsz7CP0=)
11: 3230332e38362e36302e302f32342d3234203d3e203234313437.roa (hash: BJZbR0lfoznCin3ZjtaBIQgGi5zQKhes89YrWdoFQs8=)
12: 3231312e3130322e3234382e302f32312d3234203d3e2034383437.roa (hash: Oq/GjpVGMUDKb7ahdv94Jw/QkvSfPPwwMawTEz511Zw=)
13: 3131332e3230382e3131362e302f32322d3232203d3e2034383038.roa (hash: ExT2KfjA0A6E9yvmoTz1Y7ZxZgtn7LoRJKMSgNn4JQU=)
14: 3230332e38362e36312e302f32342d3234203d3e203234313437.roa (hash: BDN34o2PeLUuH7mUNKqvJMOmkHM7PlrsPh5Q9Hsq5P4=)
15: 3231392e3233352e3139322e302f32342d3234203d3e203234313437.roa (hash: qtTgYatGvSNFTC6OFpTmEbcwwa3g6HwXVA0Ip2Px3xw=)
16: 3231312e3130322e3234302e302f32312d3231203d3e2034383437.roa (hash: OuNc19cec5VulmUoNbFwnHh6nobKP43YHzim9Y3kzD4=)
17: 3230332e38362e35342e302f32332d3233203d3e203234313437.roa (hash: qrPNPGmkS1XHHj7dvp921g1Efab04Eu3HyMUsLNZTLY=)
18: 3230332e38362e35342e302f32342d3234203d3e203234313437.roa (hash: JIBRdGWpBW+adIGFLzrSbUhh/kt/vlw9SyeRkgMCJM8=)
19: 3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa (hash: Oe4lgNDRYqcDE8SGWHciOR4xQCmgOD/0eAWVb3S/6uQ=)
20: 3230332e38362e34382e302f32342d3234203d3e203234313437.roa (hash: ejzbVl97r5mOdJYA953Vk21BI5BB0TVZrbPRe544gDc=)
21: 3230332e38362e35312e302f32342d3234203d3e203234313437.roa (hash: 5Nl4P4yjyaYsIWRUhf5zhO8ZOngx1vp1Piv9zXxY44w=)
22: 3230332e38362e34342e302f32342d3234203d3e203234313437.roa (hash: wIHg02Mx683aITJJCQSu1ItskF03DI8H6fuVpC8rq74=)
23: 3230332e38362e35352e302f32342d3234203d3e203234313437.roa (hash: ZojEaFjtdgor13jSa7GyZGMBWWXJenaYyF2n+BjUBOg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 13:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:27:44:ba:ea:58:7a:a8:14:a1:e0:88:f4:9f:13:d6:0f:bc:aa:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Validity
Not Before: Jul 29 11:24:16 2026 GMT
Not After : Jul 30 13:06:16 2026 GMT
Subject: CN=6BD6456C3A89012A4979C65227D20216D19C1F26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:68:b1:81:89:93:60:e5:f8:44:05:2a:46:
78:f8:0e:cd:41:cc:f9:45:af:1c:c7:5f:f8:a0:82:
2e:63:09:dd:e2:d5:30:d2:6c:12:b0:ec:95:da:f1:
fa:ad:bd:30:90:12:16:10:4f:ea:69:06:e7:3a:77:
03:de:a5:39:99:0a:0e:0f:76:55:dc:57:a2:00:f2:
23:e9:bc:0b:72:2a:9a:49:96:91:ca:f6:9a:29:6f:
cd:8b:f7:ae:bc:ca:10:a0:7f:fa:18:4f:6f:d5:37:
53:79:58:8d:73:ea:30:49:fb:c5:bf:e6:7b:41:73:
4e:f8:3a:75:bb:7e:b6:96:85:ea:32:98:16:cd:b5:
92:0a:42:a6:04:f0:5c:a2:7a:01:9c:3b:48:98:05:
5d:0c:86:5b:64:47:92:12:2b:fd:c9:30:06:04:71:
5f:cf:99:2b:0a:b9:34:66:90:d7:da:dd:43:a7:89:
a5:49:17:07:8c:dd:97:8e:7d:4a:87:cf:eb:f4:81:
d6:d2:11:20:06:dd:3b:4e:4f:00:c6:dd:97:5f:46:
9f:26:9d:cc:89:c7:58:e5:55:d9:d7:9e:aa:97:db:
0c:c3:87:82:5d:23:ba:59:4a:8b:ff:43:f4:f2:82:
d3:6a:a3:26:ad:20:09:b2:6e:62:56:9b:d3:89:c8:
32:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D6:45:6C:3A:89:01:2A:49:79:C6:52:27:D2:02:16:D1:9C:1F:26
X509v3 Authority Key Identifier:
keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a0:cc:e9:fc:d1:f7:d5:32:83:76:5a:01:d2:7f:2f:f3:dd:
91:af:22:e3:7f:0b:de:fa:ce:70:c0:1c:38:0d:7d:4d:77:b4:
95:35:b4:67:04:54:9e:7b:ce:1c:0b:75:f4:01:f8:4d:43:04:
71:6e:26:01:57:45:54:21:1b:fe:8b:79:da:66:99:e1:35:84:
24:c2:dc:e9:56:d3:59:69:da:0b:6d:e2:cd:2b:87:90:62:23:
ac:98:17:e6:3b:75:45:77:eb:f1:5e:01:f6:de:15:cb:fb:a0:
e8:99:18:ac:ed:da:5a:b0:87:9e:09:54:c9:a7:df:8b:8b:30:
53:bf:54:35:15:88:80:98:6c:ff:fc:66:3c:1d:e1:0d:17:4c:
01:24:16:91:c1:8f:35:db:a1:44:9f:ac:d7:93:90:7d:80:19:
71:f5:1a:76:1f:89:c2:69:2b:14:74:39:c6:5d:77:df:94:a7:
a5:bb:39:4c:c5:4a:9f:3e:1a:41:bb:fc:c4:5d:f7:e5:a3:27:
58:3f:64:32:79:8e:0d:28:50:15:f0:8e:cb:f9:ec:40:f9:a2:
61:76:13:9a:a4:bc:69:98:a5:1d:cd:59:23:e5:4c:89:3e:3c:
39:64:c3:9a:bc:c1:72:f2:64:f9:08:e9:9c:04:a0:4a:fb:82:
29:17:57:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:07:56 2026 by rpki-client