
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
File: A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft (raw, json)
Hash identifier: Jy8GWJYhOBIsBO4DXNOO1mYaeIGyrW5edjRV5YoTtJs=
Subject key identifier: F1:7D:BA:1D:0A:DA:E3:B9:DD:20:F4:6E:82:57:0F:42:A1:50:49:C4
Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Certificate serial: 63EFEFDB9C086DF8FBE3D1D1E80CD073238D57AD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
Manifest number: FC
Signing time: Mon 27 Jul 2026 05:58:30 +0000
Manifest this update: Mon 27 Jul 2026 05:53:30 +0000
Manifest next update: Tue 28 Jul 2026 06:49:30 +0000
Files and hashes: 1: 3231392e3233352e3139322e302f32342d3234203d3e203234313437.roa (hash: qtTgYatGvSNFTC6OFpTmEbcwwa3g6HwXVA0Ip2Px3xw=)
2: 3231392e3233352e3230372e302f32342d3234203d3e203234313437.roa (hash: Ol05ujiu93BtjhqGQ+WlieMkmygulOYjoIsurKH7T0c=)
3: 3230332e38362e34342e302f32342d3234203d3e203234313437.roa (hash: wIHg02Mx683aITJJCQSu1ItskF03DI8H6fuVpC8rq74=)
4: A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl (hash: 1fhhS724Q2EcnFimUdtn2OTvWafmPUOI1Gbhob2af6U=)
5: 3230332e38362e34352e302f32342d3234203d3e203234313437.roa (hash: Nnd05xuUr2b4yGoh1bQE2fwywCCOmLsbEnz6TIRDa1k=)
6: 3230332e38362e36312e302f32342d3234203d3e203234313437.roa (hash: BDN34o2PeLUuH7mUNKqvJMOmkHM7PlrsPh5Q9Hsq5P4=)
7: 3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa (hash: Oe4lgNDRYqcDE8SGWHciOR4xQCmgOD/0eAWVb3S/6uQ=)
8: 3230332e38362e34392e302f32342d3234203d3e203234313437.roa (hash: GxtOA4gw3IUgIx3k4sXIueBQkr72Q7f98AQ06CTYthw=)
9: 3230332e38362e35322e302f32342d3234203d3e203234313437.roa (hash: r4KefndZnU7luOV0QPcOqGP6CinPwbiKpD8RZV56f5E=)
10: 3230332e38362e34382e302f32342d3234203d3e203234313437.roa (hash: ejzbVl97r5mOdJYA953Vk21BI5BB0TVZrbPRe544gDc=)
11: 3231392e3233352e3139332e302f32342d3234203d3e203234313437.roa (hash: Nu0jpaTn4Fdv3bxm5NPIkyN0IrZp5kWxSz8smX/CQR8=)
12: 3230332e38362e33322e302f31392d3234203d3e203234313437.roa (hash: XDCVULdB42agXinP9bNu7bR26p/WgU+Ydt0+EBrlVrI=)
13: 3230332e38362e36322e302f32342d3234203d3e203234313437.roa (hash: LEggqkanD8YXk+XFnT/2KdUJ9g96lm9p2YSqWsX8J9A=)
14: 3230332e38362e36302e302f32342d3234203d3e203234313437.roa (hash: BJZbR0lfoznCin3ZjtaBIQgGi5zQKhes89YrWdoFQs8=)
15: 3230332e38362e35342e302f32342d3234203d3e203234313437.roa (hash: JIBRdGWpBW+adIGFLzrSbUhh/kt/vlw9SyeRkgMCJM8=)
16: 3230332e38362e35352e302f32342d3234203d3e203234313437.roa (hash: ZojEaFjtdgor13jSa7GyZGMBWWXJenaYyF2n+BjUBOg=)
17: 3230332e38362e35342e302f32332d3233203d3e203234313437.roa (hash: qrPNPGmkS1XHHj7dvp921g1Efab04Eu3HyMUsLNZTLY=)
18: 3230332e38362e35332e302f32342d3234203d3e203234313437.roa (hash: GZW0aT1mI2ydEgJpv0mu4u+h/q8ra7gJ/fnnxsz7CP0=)
19: 3230332e38362e34332e302f32342d3234203d3e203234313437.roa (hash: KAFhdO3yt9Ku7r/Veg9pGOh1yJ/ksXYA8r5t5Q9GrR4=)
20: 3230332e38362e35312e302f32342d3234203d3e203234313437.roa (hash: 5Nl4P4yjyaYsIWRUhf5zhO8ZOngx1vp1Piv9zXxY44w=)
21: 3131332e3230382e3131362e302f32322d3232203d3e2034383038.roa (hash: ExT2KfjA0A6E9yvmoTz1Y7ZxZgtn7LoRJKMSgNn4JQU=)
22: 3231312e3130322e3234382e302f32312d3234203d3e2034383437.roa (hash: Oq/GjpVGMUDKb7ahdv94Jw/QkvSfPPwwMawTEz511Zw=)
23: 3231312e3130322e3234302e302f32312d3231203d3e2034383437.roa (hash: OuNc19cec5VulmUoNbFwnHh6nobKP43YHzim9Y3kzD4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 06:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:ef:ef:db:9c:08:6d:f8:fb:e3:d1:d1:e8:0c:d0:73:23:8d:57:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Validity
Not Before: Jul 27 05:53:30 2026 GMT
Not After : Jul 28 06:49:30 2026 GMT
Subject: CN=F17DBA1D0ADAE3B9DD20F46E82570F42A15049C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:a0:c2:75:6e:f4:9f:4c:cb:54:84:e3:61:
b5:56:8a:fe:70:17:0b:f8:df:c4:49:cf:92:e3:12:
ff:56:d2:ab:9f:b7:a1:64:65:01:42:32:21:bc:46:
3b:99:86:ef:e7:b6:0a:73:d3:16:07:c5:95:ad:f2:
99:94:b7:00:ad:71:ee:87:dd:b7:cc:14:03:64:0e:
fb:76:54:b8:d9:9e:50:4f:56:7c:ed:6e:cc:8b:a9:
04:5e:e7:87:b8:e1:88:9f:bb:7b:fc:58:c9:4c:b8:
b8:30:51:8e:5a:d8:01:5b:e8:a7:33:62:41:8b:50:
1d:19:d4:1f:a8:ce:cf:53:c5:ab:a3:f5:17:56:ee:
56:5b:55:e7:38:bb:fb:81:bd:f6:c6:61:e8:b2:fc:
fa:2e:df:b6:05:28:20:30:93:49:3c:93:52:a4:46:
d5:26:f5:66:73:4c:90:30:ca:bf:00:b0:ff:ac:d2:
ab:7f:2d:8f:21:ad:e9:7d:83:02:7b:e4:ee:57:f8:
5a:e0:96:25:f7:e4:58:6e:15:23:75:68:9e:a9:7b:
3a:84:42:35:e6:05:71:2f:5c:50:ab:e3:4e:80:46:
be:6e:5e:1e:9c:ba:e5:0e:33:e8:11:66:04:fc:ae:
d8:72:e9:fa:4f:61:30:2f:33:a5:d0:96:51:65:7a:
2f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7D:BA:1D:0A:DA:E3:B9:DD:20:F4:6E:82:57:0F:42:A1:50:49:C4
X509v3 Authority Key Identifier:
keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:69:0e:b8:15:f6:b1:9c:68:b9:d1:32:f3:39:d2:e1:f6:27:
ed:e0:0d:bd:26:5b:88:8d:26:9b:24:2c:41:8c:9d:e1:a0:e2:
ab:42:e7:88:6f:18:39:05:f8:6d:40:e0:e7:94:a2:30:3b:5d:
a1:67:19:dd:3d:d4:86:bf:0f:c9:33:48:e9:d9:0e:9f:f7:50:
6d:fa:cc:52:aa:55:e3:b4:af:dc:61:97:5e:dd:5d:42:70:24:
fd:94:d5:43:d0:79:14:d4:c6:6e:b4:ae:e3:46:6f:ad:ea:9f:
7e:35:b6:b6:a8:73:22:d5:51:e1:ec:cd:39:c4:32:c7:59:75:
81:d6:2b:ed:31:9a:ff:08:48:d5:b9:df:ca:cd:59:c1:6e:3b:
e9:9d:5b:71:3a:bf:5e:3c:7e:55:6a:fb:91:48:5c:6e:c6:5a:
f0:9d:3f:b2:c2:85:ff:33:5f:35:cc:82:4c:11:54:6d:c3:3b:
a3:56:38:5c:6b:90:2b:f0:63:9c:82:c0:65:9f:84:e2:3b:a4:
9a:4f:28:f0:09:92:ff:07:26:31:07:15:31:3d:c6:9e:5a:0b:
6a:13:b5:41:47:76:77:26:25:19:32:cb:87:40:09:35:4d:59:
1b:e4:a8:2b:5b:76:1d:f0:2f:a3:18:2b:eb:e7:24:9b:b8:cb:
0f:e3:95:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:15:13 2026 by rpki-client