$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft File: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft (raw, json) Hash identifier: OeMf0bVbHqyzdvn/g6j4BwJULa/Jk5OUDCCAXBFNMzY= Subject key identifier: 63:83:99:86:B1:10:E6:83:CD:58:7E:5E:8C:9E:D9:5E:C8:2A:71:A1 Authority key identifier: 11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD Certificate issuer: /CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Certificate serial: 08FBF46666C56689899904BA3564537FD543102C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft Manifest number: FF Signing time: Wed 29 Jul 2026 03:43:21 +0000 Manifest this update: Wed 29 Jul 2026 03:38:21 +0000 Manifest next update: Thu 30 Jul 2026 06:00:21 +0000 Files and hashes: 1: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl (hash: 2w8PWzy+jCAeS3VcCVz9qGolMSSEWivifiAoUbF5Yww=) 2: 3130332e36372e3137332e302f32342d3234203d3e20313333313939.roa (hash: LsfX/Qz7oiSmvhoASN2bYrrYlqmPqtrZrf42D4a7EoY=) 3: 3130332e36372e3137342e302f32342d3234203d3e20313333313939.roa (hash: +lmwIsVwUKU3fDx85LpvNKXD+KIwMRfnuwxwq6ORUYQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:fb:f4:66:66:c5:66:89:89:99:04:ba:35:64:53:7f:d5:43:10:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Validity Not Before: Jul 29 03:38:21 2026 GMT Not After : Jul 30 06:00:21 2026 GMT Subject: CN=63839986B110E683CD587E5E8C9ED95EC82A71A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a2:8d:0f:a6:86:de:93:c0:4c:1f:93:fd:40: f9:f3:fa:d7:ed:97:ec:b2:00:b3:0d:76:ca:9c:84: 78:e4:d2:1f:7c:c1:f9:10:88:6c:ad:94:5c:14:9a: f3:a1:cb:ac:2d:fc:0a:1a:ba:a0:31:95:6c:5e:e8: b1:52:81:17:86:98:52:ed:1e:33:c8:36:8a:bc:b9: ae:15:d4:63:ab:c3:75:5a:67:43:cf:0a:20:5f:f2: 07:82:27:be:ca:ea:ba:48:f1:c3:a0:c2:39:9b:fe: 37:97:09:f5:09:4e:7d:7f:ed:5e:29:9b:00:cc:37: 4b:84:c9:92:b3:c8:03:e2:9f:a7:5b:30:6b:2d:58: 4d:1b:ab:84:bb:0c:47:ed:2b:c0:5e:45:22:ff:4f: 81:d4:d1:09:f5:e2:86:ce:79:0b:40:78:c4:96:5d: 95:3a:43:36:3d:c8:a7:eb:e8:12:72:d2:3c:1e:8c: 24:23:cb:32:c4:f8:81:e8:7e:6c:dd:8f:2a:bd:65: 54:31:e5:5b:d2:25:79:d0:c5:d3:f9:61:92:f2:27: 35:ee:84:89:ef:d3:7f:db:9a:d0:f7:20:b8:f4:41: 6d:29:c3:71:79:e8:cf:ec:3d:83:4f:b2:ba:3a:19: bf:86:9e:60:15:45:b4:5e:0d:ab:6e:ec:40:b1:a1: e5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:83:99:86:B1:10:E6:83:CD:58:7E:5E:8C:9E:D9:5E:C8:2A:71:A1 X509v3 Authority Key Identifier: keyid:11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:be:00:de:d2:6e:47:b1:10:11:9a:fe:ad:f3:c8:e2:a6:e0: 99:4e:fb:6b:29:9e:5d:40:2a:2f:8c:87:d5:c7:9e:3f:22:93: 34:53:6c:31:8a:77:c2:8a:7a:eb:83:21:48:0d:cf:ba:89:46: 2c:44:03:8b:a6:cc:c9:67:48:05:c6:19:70:2e:d1:98:f7:17: 02:7f:65:4b:d9:ff:7f:a3:66:34:d5:d0:4a:e5:52:13:9b:76: e9:c4:ba:61:6f:c5:13:c8:a6:0f:39:53:83:6a:30:39:46:6e: 54:00:75:ca:ec:37:cd:2d:56:99:c1:1c:f7:54:3d:2d:4a:3f: cd:44:76:74:65:45:23:35:28:ba:32:3f:ce:b4:f1:ea:94:a9: 63:d6:1b:81:75:27:ed:76:15:91:c8:36:34:74:90:09:a7:62: cd:04:ff:29:ed:bd:b4:7e:7a:63:c9:cc:a6:54:82:ba:b0:ad: c6:cb:ab:d6:3c:f7:5a:50:79:16:57:8f:44:a7:23:a8:74:e3: a9:d9:28:27:89:04:ab:22:f6:eb:f5:60:04:39:59:a7:b7:b2: e3:bc:98:ca:5c:c3:89:c3:8f:e5:4d:24:f7:be:88:26:3b:64: d4:bc:a6:3e:72:c6:75:c6:f3:b7:f3:41:c1:fe:de:e9:7c:16: 7f:21:2d:c6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCPv0ZmbFZomJmQS6NWRTf9VDECwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZB MzRDNUVCRDAeFw0yNjA3MjkwMzM4MjFaFw0yNjA3MzAwNjAwMjFaMDMxMTAvBgNV BAMTKDYzODM5OTg2QjExMEU2ODNDRDU4N0U1RThDOUVEOTVFQzgyQTcxQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcoo0Ppobek8BMH5P9QPnz+tft l+yyALMNdsqchHjk0h98wfkQiGytlFwUmvOhy6wt/AoauqAxlWxe6LFSgReGmFLt HjPINoq8ua4V1GOrw3VaZ0PPCiBf8geCJ77K6rpI8cOgwjmb/jeXCfUJTn1/7V4p mwDMN0uEyZKzyAPin6dbMGstWE0bq4S7DEftK8BeRSL/T4HU0Qn14obOeQtAeMSW XZU6QzY9yKfr6BJy0jwejCQjyzLE+IHofmzdjyq9ZVQx5VvSJXnQxdP5YZLyJzXu hInv03/bmtD3ILj0QW0pw3F56M/sPYNPsro6Gb+GnmAVRbReDatu7ECxoeWxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUY4OZhrEQ5oPNWH5ejJ7ZXsgqcaEwHwYDVR0j BBgwFoAUEUy0khOaX1xITT4PsPI176NMXr0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTkxODQ2Ny8wLzExNENCNDkyMTM5QTVGNUM0ODREM0UwRkIwRjIz NUVGQTM0QzVFQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZBMzRDNUVCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5MTg0NjcvMC8xMTRDQjQ5MjEzOUE1 RjVDNDg0RDNFMEZCMEYyMzVFRkEzNEM1RUJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsr4A3tJuR7EQ EZr+rfPI4qbgmU77aymeXUAqL4yH1ceePyKTNFNsMYp3wop664MhSA3PuolGLEQD i6bMyWdIBcYZcC7RmPcXAn9lS9n/f6NmNNXQSuVSE5t26cS6YW/FE8imDzlTg2ow OUZuVAB1yuw3zS1WmcEc91Q9LUo/zUR2dGVFIzUoujI/zrTx6pSpY9YbgXUn7XYV kcg2NHSQCadizQT/Ke29tH56Y8nMplSCurCtxsur1jz3WlB5FlePRKcjqHTjqdko J4kEqyL26/VgBDlZp7ey47yYylzDicOP5U0k976IJjtk1LymPnLGdcbzt/NBwf7e 6XwWfyEtxg== -----END CERTIFICATE-----Generated at Wed Jul 29 23:13:59 2026 by rpki-client