$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft File: A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft (raw, json) Hash identifier: vLLRetYOotfBBumH5Wml4kPjZf7LTMH6SzATp8YVL04= Subject key identifier: 84:20:19:0D:5F:AC:6B:87:A0:9B:93:33:66:43:2F:69:96:3F:07:2D Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Certificate serial: 51139F4CD23EDF1C7727ADA04499C2E9C8EA11ED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 19:23:16 +0000 Manifest this update: Sun 01 Mar 2026 19:18:16 +0000 Manifest next update: Mon 02 Mar 2026 22:11:16 +0000 Files and hashes: 1: 3230332e38362e36312e302f32342d3234203d3e203234313437.roa (hash: BDN34o2PeLUuH7mUNKqvJMOmkHM7PlrsPh5Q9Hsq5P4=) 2: 3230332e38362e36322e302f32342d3234203d3e203234313437.roa (hash: LEggqkanD8YXk+XFnT/2KdUJ9g96lm9p2YSqWsX8J9A=) 3: 3230332e38362e36302e302f32342d3234203d3e203234313437.roa (hash: BJZbR0lfoznCin3ZjtaBIQgGi5zQKhes89YrWdoFQs8=) 4: 3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa (hash: /iGkkIqO0FSP5CywowzeIsIdOQnf8YsmMX+nUyXOQLk=) 5: 3230332e38362e34392e302f32342d3234203d3e203234313437.roa (hash: GxtOA4gw3IUgIx3k4sXIueBQkr72Q7f98AQ06CTYthw=) 6: 3230332e38362e33322e302f31392d3234203d3e203234313437.roa (hash: XDCVULdB42agXinP9bNu7bR26p/WgU+Ydt0+EBrlVrI=) 7: A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl (hash: RlHYw9Ys1YKb4CmBg2N2ZqYKvIwbHGGEemM6MtwXSlE=) 8: 3230332e38362e34332e302f32342d3234203d3e203234313437.roa (hash: KAFhdO3yt9Ku7r/Veg9pGOh1yJ/ksXYA8r5t5Q9GrR4=) 9: 3230332e38362e35352e302f32342d3234203d3e203234313437.roa (hash: ZojEaFjtdgor13jSa7GyZGMBWWXJenaYyF2n+BjUBOg=) 10: 3230332e38362e35332e302f32342d3234203d3e203234313437.roa (hash: GZW0aT1mI2ydEgJpv0mu4u+h/q8ra7gJ/fnnxsz7CP0=) 11: 3230332e38362e35322e302f32342d3234203d3e203234313437.roa (hash: r4KefndZnU7luOV0QPcOqGP6CinPwbiKpD8RZV56f5E=) 12: 3231312e3130322e3234302e302f32312d3231203d3e2034383437.roa (hash: OuNc19cec5VulmUoNbFwnHh6nobKP43YHzim9Y3kzD4=) 13: 3230332e38362e34342e302f32342d3234203d3e203234313437.roa (hash: wIHg02Mx683aITJJCQSu1ItskF03DI8H6fuVpC8rq74=) 14: 3231392e3233352e3230372e302f32342d3234203d3e203234313437.roa (hash: Ol05ujiu93BtjhqGQ+WlieMkmygulOYjoIsurKH7T0c=) 15: 3230332e38362e35312e302f32342d3234203d3e203234313437.roa (hash: 5Nl4P4yjyaYsIWRUhf5zhO8ZOngx1vp1Piv9zXxY44w=) 16: 3230332e38362e35342e302f32332d3233203d3e203234313437.roa (hash: qrPNPGmkS1XHHj7dvp921g1Efab04Eu3HyMUsLNZTLY=) 17: 3230332e38362e34382e302f32342d3234203d3e203234313437.roa (hash: ejzbVl97r5mOdJYA953Vk21BI5BB0TVZrbPRe544gDc=) 18: 3230332e38362e35342e302f32342d3234203d3e203234313437.roa (hash: JIBRdGWpBW+adIGFLzrSbUhh/kt/vlw9SyeRkgMCJM8=) 19: 3231392e3233352e3139332e302f32342d3234203d3e203234313437.roa (hash: Nu0jpaTn4Fdv3bxm5NPIkyN0IrZp5kWxSz8smX/CQR8=) 20: 3231312e3130322e3234382e302f32312d3234203d3e2034383437.roa (hash: Oq/GjpVGMUDKb7ahdv94Jw/QkvSfPPwwMawTEz511Zw=) 21: 3230332e38362e34352e302f32342d3234203d3e203234313437.roa (hash: Nnd05xuUr2b4yGoh1bQE2fwywCCOmLsbEnz6TIRDa1k=) 22: 3131332e3230382e3131362e302f32322d3232203d3e2034383038.roa (hash: aFwpRcl+lZeNzPOeiXM99Ies8yJ6dTHYIt0xhDzQl5M=) 23: 3231392e3233352e3139322e302f32342d3234203d3e203234313437.roa (hash: qtTgYatGvSNFTC6OFpTmEbcwwa3g6HwXVA0Ip2Px3xw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 22:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:13:9f:4c:d2:3e:df:1c:77:27:ad:a0:44:99:c2:e9:c8:ea:11:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Validity Not Before: Mar 1 19:18:16 2026 GMT Not After : Mar 2 22:11:16 2026 GMT Subject: CN=8420190D5FAC6B87A09B933366432F69963F072D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c7:d7:44:fc:38:ce:73:27:dd:d5:19:34:c1: a4:34:76:47:3f:24:00:89:a4:e9:e9:f0:56:b2:b1: 56:cd:2e:b6:b2:47:63:bf:12:34:73:4d:aa:97:4f: 59:c5:19:09:45:20:74:0e:50:4c:73:4b:d4:a0:b1: e5:48:9e:4d:38:23:94:45:c5:8c:cd:06:cd:ad:17: 43:42:3b:6f:a0:90:d4:7b:fb:be:86:f9:ea:8e:2a: 51:ef:96:08:5d:ea:ea:22:18:b4:52:d3:fc:5b:e6: d7:46:3d:98:e5:c3:2c:e6:e7:db:c8:de:ae:a6:1e: a8:2b:c4:96:6c:01:b5:5c:dc:78:7b:89:07:4c:ca: da:dc:0d:cf:13:5c:8f:ae:7d:a1:fe:2a:a7:49:f5: ca:e5:50:f7:b8:9a:78:6b:f9:ea:45:c2:dd:d2:01: 8e:74:db:2d:27:88:40:85:8d:3b:ba:93:a4:3f:66: df:a2:87:67:fe:e7:a4:77:a2:06:89:6c:52:0a:4f: 53:4c:51:f9:9d:76:6e:12:ce:22:9a:05:bd:1d:01: fc:af:6f:87:ae:d7:2e:f7:c9:a7:35:40:01:49:25: 32:4a:91:4d:d0:4c:ce:33:9f:d4:2f:2b:d0:b2:f3: 51:dd:43:c9:50:ae:be:fb:2c:d6:a5:63:10:c7:94: b3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:20:19:0D:5F:AC:6B:87:A0:9B:93:33:66:43:2F:69:96:3F:07:2D X509v3 Authority Key Identifier: keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ff:50:0c:19:82:05:f9:16:4e:bd:00:dc:cb:4e:2f:63:ac: cb:c8:d6:b3:ce:c3:ff:4a:87:0b:32:26:e2:82:7f:5b:ca:34: 6d:96:fe:20:be:f3:d4:2f:c7:9f:b5:bb:db:a7:a4:cc:84:c7: 6e:b3:ae:06:bd:fc:2d:18:ee:c6:fc:80:86:a6:64:51:5e:01: f4:a0:26:ce:9f:f1:84:bb:b0:42:82:a8:f5:92:08:a4:f7:32: 28:94:33:86:e6:47:a3:37:87:49:af:00:bf:b5:9a:18:b5:92: 14:39:71:68:ed:78:0a:3b:e2:ce:9b:31:15:1e:c5:36:7e:bd: e3:8d:7a:27:36:2a:4e:1f:b7:64:d9:0e:ce:bf:3c:11:18:b5: aa:84:36:b1:77:19:67:a4:14:44:b3:f5:a8:b3:82:65:cc:8d: 5e:bf:1b:53:c1:55:c0:e3:53:97:55:84:7a:23:de:aa:5d:6d: 24:10:3d:44:74:2d:26:e9:c2:46:61:53:1e:3f:f0:2f:3d:2a: 67:3c:7f:33:2e:c3:15:19:47:b2:1b:e6:19:f0:1f:c3:78:f9: 9f:ac:04:ce:ad:ae:3a:b7:a4:48:c2:ba:11:3a:04:a0:ae:76: 29:91:28:37:34:a4:27:a4:bb:ec:75:2c:d1:00:69:1e:ae:ef: 08:e7:e4:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUROfTNI+3xx3J62gRJnC6cjqEe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUz MTYzQ0ZDMTAeFw0yNjAzMDExOTE4MTZaFw0yNjAzMDIyMjExMTZaMDMxMTAvBgNV BAMTKDg0MjAxOTBENUZBQzZCODdBMDlCOTMzMzY2NDMyRjY5OTYzRjA3MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSx9dE/DjOcyfd1Rk0waQ0dkc/ JACJpOnp8FaysVbNLrayR2O/EjRzTaqXT1nFGQlFIHQOUExzS9SgseVInk04I5RF xYzNBs2tF0NCO2+gkNR7+76G+eqOKlHvlghd6uoiGLRS0/xb5tdGPZjlwyzm59vI 3q6mHqgrxJZsAbVc3Hh7iQdMytrcDc8TXI+ufaH+KqdJ9crlUPe4mnhr+epFwt3S AY502y0niECFjTu6k6Q/Zt+ih2f+56R3ogaJbFIKT1NMUfmddm4SziKaBb0dAfyv b4eu1y73yac1QAFJJTJKkU3QTM4zn9QvK9Cy81HdQ8lQrr77LNalYxDHlLPXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhCAZDV+sa4egm5MzZkMvaZY/By0wHwYDVR0j BBgwFoAUoUxUMaAHL1vYgkLapXFp7jFjz8EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODA3NTAxMS8wL0ExNEM1NDMxQTAwNzJGNUJEODgyNDJEQUE1NzE2 OUVFMzE2M0NGQzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUzMTYzQ0ZDMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgwNzUwMTEvMC9BMTRDNTQzMUEwMDcy RjVCRDg4MjQyREFBNTcxNjlFRTMxNjNDRkMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/9QDBmCBfkW Tr0A3MtOL2Osy8jWs87D/0qHCzIm4oJ/W8o0bZb+IL7z1C/Hn7W726ekzITHbrOu Br38LRjuxvyAhqZkUV4B9KAmzp/xhLuwQoKo9ZIIpPcyKJQzhuZHozeHSa8Av7Wa GLWSFDlxaO14CjvizpsxFR7FNn694416JzYqTh+3ZNkOzr88ERi1qoQ2sXcZZ6QU RLP1qLOCZcyNXr8bU8FVwONTl1WEeiPeql1tJBA9RHQtJunCRmFTHj/wLz0qZzx/ My7DFRlHshvmGfAfw3j5n6wEzq2uOrekSMK6EToEoK52KZEoNzSkJ6S77HUs0QBp Hq7vCOfkMQ== -----END CERTIFICATE-----Generated at Mon Mar 2 13:45:16 2026 by rpki-client