$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft File: 14F2AE289734C6F9223A15F482EED7503BB5C42B.mft (raw, json) Hash identifier: +FqxEJxpcH6M0cPrzQHjry5MrU3HA6tKye3APY3GDss= Subject key identifier: 48:C0:DF:6B:AC:EC:B6:7B:79:B1:75:B1:DB:6D:2D:DF:4C:45:94:F7 Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Certificate serial: 0FC840DB20444343161F92FE74551ABFC32347CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft Manifest number: AF Signing time: Tue 28 Jul 2026 15:52:11 +0000 Manifest this update: Tue 28 Jul 2026 15:47:11 +0000 Manifest next update: Wed 29 Jul 2026 18:51:11 +0000 Files and hashes: 1: AS56046.roa (hash: wQaqBuQrNgi2Ezg6k6Tc0z3rRSK0zo5E90jO2sXzVVE=) 2: AS56040.roa (hash: iYGl/gNHGLrzYh+vcqbWhBRoH/rRahPy0AthZgqClSI=) 3: AS9808.roa (hash: iZ56dlkspGmh1ahvcPF/GFXsutuOvohlkxlEb5OgMA8=) 4: AS23724.roa (hash: bXSOnuLFHwQ6WEShOo71xL2UuGOMqnSeoYRb0VKmFcM=) 5: 14F2AE289734C6F9223A15F482EED7503BB5C42B.crl (hash: VugqDFaI7MwVXBDnJJQZvY5GVQItbCmduYgbiScy4Q4=) 6: AS136958.roa (hash: 1lLdYSrnIRbEu4dxKFeTEI02kvxqoyt4CS47V2g0UBk=) 7: AS59089.roa (hash: FZ2amEc2jacY0MY1b77loa5TKv2CCD6wo9elT+pF2zo=) 8: AS140292.roa (hash: wtC9Q7BhiYUo1Gn7JyysCgjfucI9tOaarVKcHpoqhxw=) 9: AS4808.roa (hash: z2TYzvlcywDhL0dWprMULk+6uLpj22l1z9RTTmZtv9E=) 10: AS4837.roa (hash: kaEOXHZ7gIhA8ZFL/Oz9k85AhlXsPEgPXsDitwFjc2s=) 11: AS58466.roa (hash: LM9JbG7lyreiz1D+ixqDOBz5SUXAnqgEmr0CR4xkMW4=) 12: AS140717.roa (hash: F4vKDqd+oRuW+dD54h6Z5jvEABTrqdWIPSBZ4SXxlOc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c8:40:db:20:44:43:43:16:1f:92:fe:74:55:1a:bf:c3:23:47:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Validity Not Before: Jul 28 15:47:11 2026 GMT Not After : Jul 29 18:51:11 2026 GMT Subject: CN=48C0DF6BACECB67B79B175B1DB6D2DDF4C4594F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:de:a5:6c:56:16:ef:0e:8e:7d:66:9b:38:36: 01:34:9c:f7:4f:26:8b:91:1a:27:ed:86:1c:13:27: cf:96:1b:e1:97:c5:09:4e:ac:00:d9:11:2e:fb:33: 51:4a:03:28:b9:8b:18:1c:46:0c:62:ea:24:25:92: 9f:74:26:3d:b0:8f:51:5a:38:20:a5:b4:68:87:b2: 46:34:7d:28:4a:fa:d4:2d:f7:9f:74:f1:0a:55:b8: 1c:ea:a3:39:c6:83:6a:02:b4:8d:f7:20:81:72:83: 24:d6:cf:45:60:bb:34:c8:be:bf:06:8f:01:f3:72: 0e:9a:a6:4f:7b:5e:31:c8:6b:5d:ce:b2:5b:49:df: 88:d7:77:da:91:47:11:9d:18:f9:ae:0a:83:a3:e4: e3:e1:77:6d:b4:25:08:c6:24:6f:bd:b3:0a:83:5c: 7d:ac:8a:93:07:bc:0c:5d:d0:bd:eb:ff:2c:48:40: 09:29:df:2b:27:45:b3:72:57:19:dc:98:bc:3c:13: 6b:02:e5:9d:80:f7:fb:71:62:1b:9f:6c:b0:fc:e6: 18:8f:a0:e5:ea:28:85:6d:02:f9:3b:d6:92:a8:88: d9:76:de:9a:ee:fb:80:e9:86:98:15:d0:e0:45:7f: 05:2e:01:b1:39:6c:18:b7:5b:ca:6b:22:3d:34:de: 72:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C0:DF:6B:AC:EC:B6:7B:79:B1:75:B1:DB:6D:2D:DF:4C:45:94:F7 X509v3 Authority Key Identifier: keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ea:cb:5e:7c:92:1f:bc:3d:75:3d:88:0d:e1:a5:41:62:87: 0c:cc:dc:75:e1:01:0f:1e:38:5a:79:72:b5:af:9b:3d:ff:2f: f0:cf:f5:ed:ae:67:c0:c1:aa:8d:41:3a:03:8e:73:01:43:a8: 46:6b:66:9e:54:48:c9:b3:83:99:ec:e9:81:83:d7:ad:57:a8: 15:7e:89:c5:08:9e:77:74:28:3b:97:78:ad:d4:67:95:19:52: 7d:4a:56:c9:f0:5b:3a:af:1c:22:2b:af:4e:91:d1:4f:2e:29: d1:ac:63:b9:2e:81:aa:2c:eb:5e:ae:fe:a8:30:93:2f:eb:43: 6b:74:f1:ca:a7:50:58:4e:c1:d7:60:28:55:d6:75:45:54:02: 8a:f2:b2:6e:0e:9c:05:d9:73:da:e7:5e:c3:dd:f4:5d:0e:00: 4e:7b:37:a6:eb:5e:d5:8d:c6:45:4d:16:9f:08:9a:2c:23:31: 05:e5:af:2e:45:27:f6:7e:b2:e3:88:2d:a0:a7:52:a1:52:db: 09:0f:a9:12:09:66:21:6a:b0:07:e2:e9:46:f4:4a:bd:f2:8c: cf:ce:3f:e3:f3:6f:83:f2:3b:65:67:c4:25:bd:ac:6f:9c:06: 41:1f:c2:12:e6:a0:29:e8:1e:cb:10:4a:78:a9:05:a6:46:05: 45:49:d5:3c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUD8hA2yBEQ0MWH5L+dFUav8MjR84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz QkI1QzQyQjAeFw0yNjA3MjgxNTQ3MTFaFw0yNjA3MjkxODUxMTFaMDMxMTAvBgNV BAMTKDQ4QzBERjZCQUNFQ0I2N0I3OUIxNzVCMURCNkQyRERGNEM0NTk0RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM3qVsVhbvDo59Zps4NgE0nPdP JouRGifthhwTJ8+WG+GXxQlOrADZES77M1FKAyi5ixgcRgxi6iQlkp90Jj2wj1Fa OCCltGiHskY0fShK+tQt95908QpVuBzqoznGg2oCtI33IIFygyTWz0VguzTIvr8G jwHzcg6apk97XjHIa13OsltJ34jXd9qRRxGdGPmuCoOj5OPhd220JQjGJG+9swqD XH2sipMHvAxd0L3r/yxIQAkp3ysnRbNyVxncmLw8E2sC5Z2A9/txYhufbLD85hiP oOXqKIVtAvk71pKoiNl23pru+4DphpgV0OBFfwUuAbE5bBi3W8prIj003nJDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSMDfa6zstnt5sXWx220t30xFlPcwHwYDVR0j BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTkzNjQ5MjgzMjM1ODQwMDEvMC8xNEYyQUUyODk3MzRD NkY5MjIzQTE1RjQ4MkVFRDc1MDNCQjVDNDJCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZerLXnySH7w9 dT2IDeGlQWKHDMzcdeEBDx44Wnlyta+bPf8v8M/17a5nwMGqjUE6A45zAUOoRmtm nlRIybODmezpgYPXrVeoFX6JxQied3QoO5d4rdRnlRlSfUpWyfBbOq8cIiuvTpHR Ty4p0axjuS6BqizrXq7+qDCTL+tDa3TxyqdQWE7B12AoVdZ1RVQCivKybg6cBdlz 2udew930XQ4ATns3pute1Y3GRU0WnwiaLCMxBeWvLkUn9n6y44gtoKdSoVLbCQ+p EglmIWqwB+LpRvRKvfKMz84/4/Nvg/I7ZWfEJb2sb5wGQR/CEuagKegeyxBKeKkF pkYFRUnVPA== -----END CERTIFICATE-----Generated at Wed Jul 29 07:39:51 2026 by rpki-client