$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft File: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft (raw, json) Hash identifier: XWJkGvXpeBxsoARL56u/+4/nw51QmRGlNejPaXNFa78= Subject key identifier: C0:0D:CA:58:32:52:2E:AD:C8:04:F3:41:91:6F:34:C5:48:C8:4D:31 Authority key identifier: 11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD Certificate issuer: /CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Certificate serial: 6F7C3B0FB4FEDAAC28B6ED57A9B473B2F8E7E152 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 07:48:17 +0000 Manifest this update: Mon 02 Mar 2026 07:43:17 +0000 Manifest next update: Tue 03 Mar 2026 10:11:17 +0000 Files and hashes: 1: 3130332e36372e3137332e302f32342d3234203d3e20313333313939.roa (hash: LsfX/Qz7oiSmvhoASN2bYrrYlqmPqtrZrf42D4a7EoY=) 2: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl (hash: EOMV1s3SOknHPL5Y0MxNbzvyi+fPtq8P2FF0+PGyUzI=) 3: 3130332e36372e3137342e302f32342d3234203d3e20313333313939.roa (hash: +lmwIsVwUKU3fDx85LpvNKXD+KIwMRfnuwxwq6ORUYQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:7c:3b:0f:b4:fe:da:ac:28:b6:ed:57:a9:b4:73:b2:f8:e7:e1:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Validity Not Before: Mar 2 07:43:17 2026 GMT Not After : Mar 3 10:11:17 2026 GMT Subject: CN=C00DCA5832522EADC804F341916F34C548C84D31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3b:6f:41:38:70:bf:bc:8c:87:e1:1b:90:84: 6e:5c:a1:ff:ac:a2:6e:ae:59:06:a6:ca:05:44:6b: a1:ae:1a:36:cc:5b:4b:f4:ef:47:c5:39:15:a8:a3: 6a:26:0e:05:1a:9a:b2:97:30:e1:b1:4c:8e:6e:7b: c1:68:f6:2d:e9:f2:44:e8:49:52:32:dd:2f:94:29: 85:10:1a:01:c2:10:39:4f:ee:b1:16:03:de:02:69: e8:40:a8:ce:6d:df:0f:38:03:aa:8b:bb:c9:6b:30: 84:74:46:0f:5e:3e:77:9e:77:f7:ef:ee:39:4d:de: 7a:b0:9e:8a:02:81:d2:7b:8e:65:23:70:63:b1:71: b3:b7:7d:54:1f:a6:2a:11:32:2a:aa:10:8a:d4:86: 50:6d:1d:7e:54:2d:a4:4c:62:a4:c6:56:f5:5f:47: 8c:17:81:8e:cb:e6:e3:5d:f2:83:fe:ca:c6:de:a1: da:48:d9:c6:3a:e6:32:82:6b:b6:cc:95:97:8c:67: 9b:6c:f0:be:90:8b:e4:72:c5:21:b8:fb:9b:94:8b: cc:b9:3a:49:df:40:24:11:1b:5b:37:8c:08:53:09: 2b:36:63:cd:02:59:92:ea:72:b7:6c:8e:6d:2e:2b: c3:e3:f6:5c:66:83:ed:da:e4:24:60:b5:ae:8d:4d: 8b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0D:CA:58:32:52:2E:AD:C8:04:F3:41:91:6F:34:C5:48:C8:4D:31 X509v3 Authority Key Identifier: keyid:11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b4:12:86:2a:50:5f:26:91:0c:ae:30:ab:c8:a1:ed:81:b1: c2:53:ce:ff:10:9f:1a:c8:76:2f:99:3e:2a:17:d1:34:14:1d: d0:ea:a0:b1:70:49:4c:48:69:58:b3:ff:ea:53:28:dc:da:b1: d2:81:23:e8:d1:37:99:fb:81:59:ce:6f:fc:35:9c:8c:44:e7: bd:71:ce:3d:f9:c1:d7:3b:c1:00:2c:50:da:56:47:6a:49:0a: 09:e9:3d:87:51:de:36:15:11:64:de:e6:14:51:17:37:64:70: 18:b9:c2:76:6c:9b:a7:98:13:89:ce:c7:a5:33:95:17:c6:fc: ca:dc:76:d5:be:9a:e2:a8:0e:f3:6e:d8:b9:7c:c3:1c:71:37: a0:ea:6f:db:94:ad:6a:e9:e6:e0:f3:1d:7b:9f:a5:22:35:45: 14:21:f6:84:ad:fc:7e:e7:c9:e9:c3:3e:55:2f:7a:56:39:3d: da:75:83:cc:f5:98:0a:fc:a9:22:92:4f:19:ce:22:36:5f:d4: 4d:ef:b5:7e:d6:ba:d7:0c:c5:8e:7c:09:be:4e:b8:17:e9:4f: e3:2b:16:2c:90:ba:f6:3c:37:cc:f3:ca:9a:bf:df:f4:b7:f8: bc:84:51:a8:38:e1:03:3d:d1:b1:30:2c:81:61:dd:9e:c5:18: e1:58:a3:42 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUb3w7D7T+2qwotu1XqbRzsvjn4VIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZB MzRDNUVCRDAeFw0yNjAzMDIwNzQzMTdaFw0yNjAzMDMxMDExMTdaMDMxMTAvBgNV BAMTKEMwMERDQTU4MzI1MjJFQURDODA0RjM0MTkxNkYzNEM1NDhDODREMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0O29BOHC/vIyH4RuQhG5cof+s om6uWQamygVEa6GuGjbMW0v070fFORWoo2omDgUamrKXMOGxTI5ue8Fo9i3p8kTo SVIy3S+UKYUQGgHCEDlP7rEWA94CaehAqM5t3w84A6qLu8lrMIR0Rg9ePneed/fv 7jlN3nqwnooCgdJ7jmUjcGOxcbO3fVQfpioRMiqqEIrUhlBtHX5ULaRMYqTGVvVf R4wXgY7L5uNd8oP+ysbeodpI2cY65jKCa7bMlZeMZ5ts8L6Qi+RyxSG4+5uUi8y5 OknfQCQRG1s3jAhTCSs2Y80CWZLqcrdsjm0uK8Pj9lxmg+3a5CRgta6NTYvLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwA3KWDJSLq3IBPNBkW80xUjITTEwHwYDVR0j BBgwFoAUEUy0khOaX1xITT4PsPI176NMXr0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTkxODQ2Ny8wLzExNENCNDkyMTM5QTVGNUM0ODREM0UwRkIwRjIz NUVGQTM0QzVFQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZBMzRDNUVCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5MTg0NjcvMC8xMTRDQjQ5MjEzOUE1 RjVDNDg0RDNFMEZCMEYyMzVFRkEzNEM1RUJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnrQShipQXyaR DK4wq8ih7YGxwlPO/xCfGsh2L5k+KhfRNBQd0OqgsXBJTEhpWLP/6lMo3Nqx0oEj 6NE3mfuBWc5v/DWcjETnvXHOPfnB1zvBACxQ2lZHakkKCek9h1HeNhURZN7mFFEX N2RwGLnCdmybp5gTic7HpTOVF8b8ytx21b6a4qgO827YuXzDHHE3oOpv25Staunm 4PMde5+lIjVFFCH2hK38fufJ6cM+VS96Vjk92nWDzPWYCvypIpJPGc4iNl/UTe+1 fta61wzFjnwJvk64F+lP4ysWLJC69jw3zPPKmr/f9Lf4vIRRqDjhAz3RsTAsgWHd nsUY4VijQg== -----END CERTIFICATE-----Generated at Mon Mar 2 19:05:20 2026 by rpki-client