$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft File: 14F2AE289734C6F9223A15F482EED7503BB5C42B.mft (raw, json) Hash identifier: lJEpes1Ah/7Bs5611Cv0hVMNv4M/bvy+NEFFSa4NR08= Subject key identifier: 36:46:C7:A9:DA:65:34:1D:CA:18:FD:EF:FD:A5:21:A0:29:DD:93:CF Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Certificate serial: 3B7509EB8B753B4CC55632171DD8951AE29A419F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft Manifest number: B0 Signing time: Wed 29 Jul 2026 10:54:12 +0000 Manifest this update: Wed 29 Jul 2026 10:49:12 +0000 Manifest next update: Thu 30 Jul 2026 11:02:12 +0000 Files and hashes: 1: AS59089.roa (hash: FZ2amEc2jacY0MY1b77loa5TKv2CCD6wo9elT+pF2zo=) 2: 14F2AE289734C6F9223A15F482EED7503BB5C42B.crl (hash: gZia6Og+QWQmZfEQFHGcpFANcQegVI5X/xLKCIerdQk=) 3: AS140292.roa (hash: wtC9Q7BhiYUo1Gn7JyysCgjfucI9tOaarVKcHpoqhxw=) 4: AS4837.roa (hash: kaEOXHZ7gIhA8ZFL/Oz9k85AhlXsPEgPXsDitwFjc2s=) 5: AS56046.roa (hash: wQaqBuQrNgi2Ezg6k6Tc0z3rRSK0zo5E90jO2sXzVVE=) 6: AS23724.roa (hash: bXSOnuLFHwQ6WEShOo71xL2UuGOMqnSeoYRb0VKmFcM=) 7: AS9808.roa (hash: iZ56dlkspGmh1ahvcPF/GFXsutuOvohlkxlEb5OgMA8=) 8: AS4808.roa (hash: z2TYzvlcywDhL0dWprMULk+6uLpj22l1z9RTTmZtv9E=) 9: AS140717.roa (hash: F4vKDqd+oRuW+dD54h6Z5jvEABTrqdWIPSBZ4SXxlOc=) 10: AS58466.roa (hash: LM9JbG7lyreiz1D+ixqDOBz5SUXAnqgEmr0CR4xkMW4=) 11: AS136958.roa (hash: 1lLdYSrnIRbEu4dxKFeTEI02kvxqoyt4CS47V2g0UBk=) 12: AS56040.roa (hash: iYGl/gNHGLrzYh+vcqbWhBRoH/rRahPy0AthZgqClSI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:75:09:eb:8b:75:3b:4c:c5:56:32:17:1d:d8:95:1a:e2:9a:41:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Validity Not Before: Jul 29 10:49:12 2026 GMT Not After : Jul 30 11:02:12 2026 GMT Subject: CN=3646C7A9DA65341DCA18FDEFFDA521A029DD93CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fb:0f:8a:91:91:17:8a:7b:13:6a:d9:1d:27: 08:12:ce:57:71:b8:bb:2b:a9:4e:27:a5:cd:d5:2f: 6e:ec:7c:aa:96:3a:d2:83:06:e1:e3:9f:f1:92:e4: 3b:0c:4b:45:21:39:f0:f9:1f:7f:48:45:76:6d:c3: 5d:63:3b:cd:7b:3a:4b:47:b5:b9:50:54:5e:73:33: 09:b5:4b:77:39:2f:5d:90:63:b2:92:35:29:4c:1d: 3e:db:9b:a2:a2:43:92:ab:c6:c5:36:08:f7:d2:19: 23:93:9a:e1:d8:9a:f9:44:65:d3:4c:55:a9:5e:48: 95:73:fc:67:7a:93:27:99:a7:66:60:99:35:f2:1a: 97:36:f1:ed:ec:d4:67:91:58:f5:a2:85:35:5a:5e: ab:4d:28:d4:d3:46:f0:e9:07:e7:bc:26:cb:0b:7f: 29:73:24:97:b4:35:92:58:29:74:46:59:54:67:8b: 82:a4:02:85:69:a9:a7:6f:8a:d5:27:0d:5d:bb:fd: f0:1e:94:02:29:5e:fe:37:61:64:6b:3b:84:86:2c: f8:f4:09:48:b7:ad:7c:75:fe:45:35:36:fa:9f:50: 4b:a6:0f:5c:bc:98:76:97:23:84:0e:93:5a:57:f9: 7b:ff:d9:8b:19:ca:a4:25:e7:2b:28:4b:b4:6a:4b: cc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:46:C7:A9:DA:65:34:1D:CA:18:FD:EF:FD:A5:21:A0:29:DD:93:CF X509v3 Authority Key Identifier: keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:59:53:6c:53:a5:bf:1f:c5:db:28:8e:e7:c5:a1:d9:bb:bb: e1:a4:57:b9:62:06:3b:fb:9a:ba:0d:db:0c:be:a2:39:d6:55: 51:3d:fd:80:d7:27:80:c0:49:9c:d7:d1:d4:9d:d1:a5:58:63: 0d:33:81:9e:90:c5:d1:80:44:4f:df:46:9f:ef:c4:18:c4:05: 39:4b:52:ff:a9:80:19:e5:86:95:c8:62:18:a0:12:4b:29:f2: cc:13:0b:24:7d:66:5c:49:1d:6d:ce:32:f1:73:38:6e:9e:6b: d1:a2:9c:d3:73:db:5a:93:aa:e6:87:76:2b:bf:88:0e:d5:32: 81:29:52:f2:97:a7:59:95:68:a1:fa:2d:2a:0f:47:dd:d5:6d: 83:f8:1d:e0:69:61:bb:5d:ef:87:31:c9:2c:2c:c2:a3:69:07: fc:ac:8c:ea:bd:fd:4f:93:eb:38:54:18:af:14:b9:4e:45:81: ca:bd:9b:eb:3d:51:7a:31:1e:39:6f:44:a4:d7:b7:d1:ca:db: 81:ca:a7:7a:1b:01:71:04:55:7e:d1:30:62:28:ca:92:89:de: ff:6d:5d:24:48:61:57:69:90:f5:36:32:77:53:5d:46:27:7e: 91:46:a7:1d:6c:d0:c3:49:69:e3:50:7e:97:f2:e9:c5:66:a4: 0d:d8:6f:41 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO3UJ64t1O0zFVjIXHdiVGuKaQZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz QkI1QzQyQjAeFw0yNjA3MjkxMDQ5MTJaFw0yNjA3MzAxMTAyMTJaMDMxMTAvBgNV BAMTKDM2NDZDN0E5REE2NTM0MURDQTE4RkRFRkZEQTUyMUEwMjlERDkzQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl+w+KkZEXinsTatkdJwgSzldx uLsrqU4npc3VL27sfKqWOtKDBuHjn/GS5DsMS0UhOfD5H39IRXZtw11jO817OktH tblQVF5zMwm1S3c5L12QY7KSNSlMHT7bm6KiQ5KrxsU2CPfSGSOTmuHYmvlEZdNM ValeSJVz/Gd6kyeZp2ZgmTXyGpc28e3s1GeRWPWihTVaXqtNKNTTRvDpB+e8JssL fylzJJe0NZJYKXRGWVRni4KkAoVpqadvitUnDV27/fAelAIpXv43YWRrO4SGLPj0 CUi3rXx1/kU1NvqfUEumD1y8mHaXI4QOk1pX+Xv/2YsZyqQl5ysoS7RqS8zvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNkbHqdplNB3KGP3v/aUhoCndk88wHwYDVR0j BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTkzNjQ5MjgzMjM1ODQwMDEvMC8xNEYyQUUyODk3MzRD NkY5MjIzQTE1RjQ4MkVFRDc1MDNCQjVDNDJCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1lTbFOlvx/F 2yiO58Wh2bu74aRXuWIGO/uaug3bDL6iOdZVUT39gNcngMBJnNfR1J3RpVhjDTOB npDF0YBET99Gn+/EGMQFOUtS/6mAGeWGlchiGKASSynyzBMLJH1mXEkdbc4y8XM4 bp5r0aKc03PbWpOq5od2K7+IDtUygSlS8penWZVoofotKg9H3dVtg/gd4Glhu13v hzHJLCzCo2kH/KyM6r39T5PrOFQYrxS5TkWByr2b6z1RejEeOW9EpNe30crbgcqn ehsBcQRVftEwYijKkone/21dJEhhV2mQ9TYyd1NdRid+kUanHWzQw0lp41B+l/Lp xWakDdhvQQ== -----END CERTIFICATE-----Generated at Wed Jul 29 12:07:37 2026 by rpki-client