
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
File: 14F2AE289734C6F9223A15F482EED7503BB5C42B.mft (raw, json)
Hash identifier: WvincrW1oyUrCyYzz4m9JMwQAyZ1jzBLeclSeQwb7BE=
Subject key identifier: 80:5C:0E:6A:6F:48:44:AF:3E:BD:59:A1:7C:EB:CB:8F:83:44:BC:38
Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B
Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
Certificate serial: 13F3340724FB544B7FBD4524D7E6D57D3AE8091E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
Manifest number: 0113
Signing time: Tue 13 Oct 2026 00:57:35 +0000
Manifest this update: Tue 13 Oct 2026 00:52:35 +0000
Manifest next update: Fri 16 Oct 2026 09:31:35 +0000
Files and hashes: 1: AS56040.roa (hash: S03Z930RtSoH79KDzS2k8drefwtjoeI56VCdlze2G38=)
2: AS136958.roa (hash: 1lLdYSrnIRbEu4dxKFeTEI02kvxqoyt4CS47V2g0UBk=)
3: AS4837.roa (hash: kaEOXHZ7gIhA8ZFL/Oz9k85AhlXsPEgPXsDitwFjc2s=)
4: AS140717.roa (hash: F4vKDqd+oRuW+dD54h6Z5jvEABTrqdWIPSBZ4SXxlOc=)
5: AS140292.roa (hash: wtC9Q7BhiYUo1Gn7JyysCgjfucI9tOaarVKcHpoqhxw=)
6: AS56046.roa (hash: wQaqBuQrNgi2Ezg6k6Tc0z3rRSK0zo5E90jO2sXzVVE=)
7: AS4808.roa (hash: z2TYzvlcywDhL0dWprMULk+6uLpj22l1z9RTTmZtv9E=)
8: AS9808.roa (hash: iZ56dlkspGmh1ahvcPF/GFXsutuOvohlkxlEb5OgMA8=)
9: AS23724.roa (hash: bXSOnuLFHwQ6WEShOo71xL2UuGOMqnSeoYRb0VKmFcM=)
10: 14F2AE289734C6F9223A15F482EED7503BB5C42B.crl (hash: m5uXepEmVT34jAKZi4AbL5OsujL707L5Wa6/h5FtT04=)
11: AS59089.roa (hash: ZTGG8hi/6ZD5YswkILRzPPrQMQwDyrtkUiOkaThWQjk=)
12: AS58466.roa (hash: LM9JbG7lyreiz1D+ixqDOBz5SUXAnqgEmr0CR4xkMW4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl
rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 09:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f3:34:07:24:fb:54:4b:7f:bd:45:24:d7:e6:d5:7d:3a:e8:09:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
Validity
Not Before: Oct 13 00:52:35 2026 GMT
Not After : Oct 16 09:31:35 2026 GMT
Subject: CN=805C0E6A6F4844AF3EBD59A17CEBCB8F8344BC38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:de:96:65:79:ef:41:2a:a2:9b:fb:23:89:
5c:0d:10:5e:e0:65:b1:0f:81:e4:07:7f:06:96:85:
ed:2f:e4:81:64:74:c3:24:db:b9:36:01:63:57:3b:
83:c5:de:16:01:f0:a2:d6:23:9e:03:d4:13:f2:3f:
0f:21:f9:27:7f:8f:ca:a0:d1:d9:bc:bf:cc:a1:69:
2d:14:9c:95:54:10:f2:aa:33:d4:4c:99:30:6d:78:
aa:39:9c:f5:dd:79:d4:73:dd:79:55:cf:6f:58:fe:
6c:59:1a:4e:56:01:66:5d:11:84:e1:b0:f3:6b:17:
92:0c:aa:89:f3:76:28:ce:cd:24:74:61:61:62:b6:
03:fd:92:2d:a9:72:5c:8e:40:4e:fc:a0:6f:0f:3d:
fd:32:85:cc:6e:e1:ef:96:1d:dd:99:06:fe:db:fd:
fa:14:03:b5:04:ca:1c:a7:e3:eb:15:92:03:67:5d:
7d:67:34:5c:a1:2b:9c:d7:c7:17:b6:41:dd:41:d9:
39:f9:22:33:6a:98:1e:39:a0:e2:ba:73:9b:ee:7d:
8a:80:76:24:8b:04:04:8d:e0:8b:ce:5f:5a:ca:99:
99:d7:81:a8:7d:16:cc:fc:73:ac:19:13:9d:a6:ef:
fb:d6:25:70:b2:41:bd:9f:2f:2e:c6:a0:f0:95:3c:
7c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5C:0E:6A:6F:48:44:AF:3E:BD:59:A1:7C:EB:CB:8F:83:44:BC:38
X509v3 Authority Key Identifier:
keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:36:ed:07:95:49:e0:60:7f:2d:2b:ed:7a:52:24:16:e4:9c:
5a:96:48:76:82:2f:06:85:fd:98:76:7c:6a:73:62:dc:93:90:
f6:39:97:38:9d:8c:bf:c0:a2:06:3e:2c:62:f0:42:80:9f:14:
b5:04:32:ce:b5:83:19:b5:f6:70:3e:b0:57:0c:45:66:cc:4c:
8a:a0:23:26:68:85:17:de:29:51:53:46:af:ee:10:aa:3a:ea:
a4:69:1d:a5:00:65:b4:40:6b:d9:eb:ba:22:78:e5:e7:23:9c:
c2:23:51:59:0b:26:7e:f3:d7:1c:e7:b9:80:ef:85:c1:38:24:
1f:61:af:35:5c:d2:48:17:a1:5f:e2:02:7d:75:3a:87:98:b9:
20:37:75:84:5f:a1:cd:57:75:4b:a9:5f:32:26:df:39:85:c5:
d0:f9:b0:23:94:7a:22:e3:4f:84:47:4f:38:f6:06:a2:42:42:
6f:a8:42:12:4e:df:d9:3c:58:32:75:1d:c8:fd:5b:c1:79:0d:
9a:65:b2:93:0c:ff:3b:46:c0:85:b8:e4:b4:70:93:b8:19:60:
55:93:5c:4d:68:0d:8a:8a:e5:5f:7a:88:8f:18:9a:54:68:ee:
62:c5:58:03:7c:5c:16:65:67:a0:5b:b4:88:a3:ff:a4:7b:8f:
f6:5f:31:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:32:58 2026 by rpki-client