$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft File: 14F2AE289734C6F9223A15F482EED7503BB5C42B.mft (raw, json) Hash identifier: PNiqq316UeIhIbjgU5PltLIYvxYk3MbzkF+VgpGOsgg= Subject key identifier: 87:C1:77:90:9C:A9:0A:80:67:BE:81:85:56:D8:8A:ED:2B:4B:73:2D Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Certificate serial: 20A9A3BF60D84273EC9C40EE5CA8DA47D0941EF4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft Manifest number: 73 Signing time: Sat 13 Jun 2026 18:12:04 +0000 Manifest this update: Sat 13 Jun 2026 18:07:04 +0000 Manifest next update: Sun 14 Jun 2026 22:10:04 +0000 Files and hashes: 1: AS140717.roa (hash: F4vKDqd+oRuW+dD54h6Z5jvEABTrqdWIPSBZ4SXxlOc=) 2: AS58466.roa (hash: LM9JbG7lyreiz1D+ixqDOBz5SUXAnqgEmr0CR4xkMW4=) 3: AS56046.roa (hash: wQaqBuQrNgi2Ezg6k6Tc0z3rRSK0zo5E90jO2sXzVVE=) 4: AS4837.roa (hash: kaEOXHZ7gIhA8ZFL/Oz9k85AhlXsPEgPXsDitwFjc2s=) 5: AS140292.roa (hash: wtC9Q7BhiYUo1Gn7JyysCgjfucI9tOaarVKcHpoqhxw=) 6: AS136958.roa (hash: 1lLdYSrnIRbEu4dxKFeTEI02kvxqoyt4CS47V2g0UBk=) 7: 14F2AE289734C6F9223A15F482EED7503BB5C42B.crl (hash: ZopxMVqoxYIEllZ8TlZ6X8TI9XJMV5U+oMjsaFLONAw=) 8: AS59089.roa (hash: FZ2amEc2jacY0MY1b77loa5TKv2CCD6wo9elT+pF2zo=) 9: AS56040.roa (hash: iYGl/gNHGLrzYh+vcqbWhBRoH/rRahPy0AthZgqClSI=) 10: AS9808.roa (hash: iZ56dlkspGmh1ahvcPF/GFXsutuOvohlkxlEb5OgMA8=) 11: AS4808.roa (hash: z2TYzvlcywDhL0dWprMULk+6uLpj22l1z9RTTmZtv9E=) 12: AS23724.roa (hash: bXSOnuLFHwQ6WEShOo71xL2UuGOMqnSeoYRb0VKmFcM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a9:a3:bf:60:d8:42:73:ec:9c:40:ee:5c:a8:da:47:d0:94:1e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Validity Not Before: Jun 13 18:07:04 2026 GMT Not After : Jun 14 22:10:04 2026 GMT Subject: CN=87C177909CA90A8067BE818556D88AED2B4B732D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:45:f3:7b:c1:b1:a4:83:e2:b9:1e:68:68:8d: 0b:51:b5:6c:38:c1:27:cc:45:49:49:04:ef:7d:16: 73:11:7b:ea:da:76:6b:b3:d8:ef:f8:d2:ff:8f:9a: f5:66:9e:21:4d:af:08:01:77:53:b2:d1:76:72:c3: 72:58:a8:e0:36:c0:47:0e:05:06:96:23:69:2c:0f: 53:d6:d3:a3:46:9b:77:33:08:07:78:b3:22:b0:47: 78:81:48:49:e6:46:02:89:6a:cd:bc:a7:88:4e:61: c0:2e:f4:86:78:3a:bd:aa:20:fc:eb:ab:62:4d:26: 35:30:32:9d:ac:21:fe:59:ba:5c:8e:be:9c:34:6e: 10:8b:cc:49:20:04:43:77:95:94:42:57:e8:07:8d: 0b:e4:f4:a1:64:0c:c5:43:e9:98:0f:48:81:a6:af: 2f:7f:6a:c2:60:37:52:19:3d:57:d4:d7:1e:0a:9b: 86:f9:85:cb:09:fc:f4:25:52:14:e9:69:ab:3f:30: aa:a4:f3:91:ad:2f:de:be:6e:f6:d1:62:c2:19:f6: 41:e0:1d:06:cd:d3:37:4e:60:cb:79:6f:f2:d6:e2: d9:0d:f3:be:8d:07:77:03:6b:b2:3e:97:8d:4c:9f: 99:b1:eb:17:34:4a:96:f2:ec:15:25:4c:fb:55:e5: 69:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C1:77:90:9C:A9:0A:80:67:BE:81:85:56:D8:8A:ED:2B:4B:73:2D X509v3 Authority Key Identifier: keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:2b:18:68:ec:25:20:e3:fa:cf:f8:b2:c9:8d:db:37:15:a0: 84:c3:6b:d1:a8:13:01:be:3a:ca:fa:2e:22:ea:1a:44:a9:f3: cd:00:fe:7a:1e:c8:81:5c:b5:44:8d:a0:a4:a9:60:bc:d8:ed: cc:6a:b9:ba:bb:dd:15:d5:8b:d4:f0:fe:c8:44:bc:eb:06:be: 23:02:40:15:21:88:e2:7d:fd:d7:83:96:9a:1e:b6:a0:72:6f: 98:6d:6a:30:36:75:de:7f:d7:57:05:a5:00:e9:10:7c:0a:83: 6a:ef:49:d2:c2:7b:52:f2:75:f6:59:7d:80:f2:c1:01:12:55: f5:94:b4:16:5a:f7:ef:90:2c:fa:80:46:db:c0:70:1d:06:5d: 47:04:96:66:e7:9a:b1:1a:86:1f:f3:90:72:1b:c1:2f:ef:76: ed:f7:5c:cf:31:e5:24:a8:be:eb:5b:07:6d:15:f6:63:2d:6d: f3:7d:4f:bc:d7:bb:63:8f:f5:0c:e7:05:be:10:e6:cd:c0:25: ab:a1:83:58:16:15:9e:20:24:44:2a:33:9e:1e:86:23:5e:cb: 39:9a:cd:ef:2b:0a:7d:dc:17:6c:c4:d6:85:27:d6:89:99:61: 11:e5:94:3f:d9:52:9b:d4:50:36:3d:ad:09:c6:6b:6c:68:50: 5f:32:d4:cf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIKmjv2DYQnPsnEDuXKjaR9CUHvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz QkI1QzQyQjAeFw0yNjA2MTMxODA3MDRaFw0yNjA2MTQyMjEwMDRaMDMxMTAvBgNV BAMTKDg3QzE3NzkwOUNBOTBBODA2N0JFODE4NTU2RDg4QUVEMkI0QjczMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0RfN7wbGkg+K5HmhojQtRtWw4 wSfMRUlJBO99FnMRe+radmuz2O/40v+PmvVmniFNrwgBd1Oy0XZyw3JYqOA2wEcO BQaWI2ksD1PW06NGm3czCAd4syKwR3iBSEnmRgKJas28p4hOYcAu9IZ4Or2qIPzr q2JNJjUwMp2sIf5ZulyOvpw0bhCLzEkgBEN3lZRCV+gHjQvk9KFkDMVD6ZgPSIGm ry9/asJgN1IZPVfU1x4Km4b5hcsJ/PQlUhTpaas/MKqk85GtL96+bvbRYsIZ9kHg HQbN0zdOYMt5b/LW4tkN876NB3cDa7I+l41Mn5mx6xc0Spby7BUlTPtV5WkxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUh8F3kJypCoBnvoGFVtiK7StLcy0wHwYDVR0j BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTkzNjQ5MjgzMjM1ODQwMDEvMC8xNEYyQUUyODk3MzRD NkY5MjIzQTE1RjQ4MkVFRDc1MDNCQjVDNDJCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCsYaOwlIOP6 z/iyyY3bNxWghMNr0agTAb46yvouIuoaRKnzzQD+eh7IgVy1RI2gpKlgvNjtzGq5 urvdFdWL1PD+yES86wa+IwJAFSGI4n3914OWmh62oHJvmG1qMDZ13n/XVwWlAOkQ fAqDau9J0sJ7UvJ19ll9gPLBARJV9ZS0Flr375As+oBG28BwHQZdRwSWZueasRqG H/OQchvBL+927fdczzHlJKi+61sHbRX2Yy1t831PvNe7Y4/1DOcFvhDmzcAlq6GD WBYVniAkRCoznh6GI17LOZrN7ysKfdwXbMTWhSfWiZlhEeWUP9lSm9RQNj2tCcZr bGhQXzLUzw== -----END CERTIFICATE-----Generated at Sun Jun 14 00:46:56 2026 by rpki-client