$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft File: A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft (raw, json) Hash identifier: 4zsibQtFDm6Y3NXKenZw4VL7rTeuN9lP/oF41GAvZbk= Subject key identifier: F5:13:61:96:B3:D0:0C:00:6A:AC:D9:75:32:20:6B:EA:11:2F:91:F9 Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Certificate serial: 0139B444C67EADC1333BB277819C647D949513B9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft Manifest number: 012D Signing time: Thu 10 Sep 2026 09:06:05 +0000 Manifest this update: Thu 10 Sep 2026 09:01:05 +0000 Manifest next update: Sun 13 Sep 2026 13:14:05 +0000 Files and hashes: 1: 3230332e38362e35312e302f32342d3234203d3e203234313437.roa (hash: 5Nl4P4yjyaYsIWRUhf5zhO8ZOngx1vp1Piv9zXxY44w=) 2: 3230332e38362e35342e302f32342d3234203d3e203234313437.roa (hash: JIBRdGWpBW+adIGFLzrSbUhh/kt/vlw9SyeRkgMCJM8=) 3: 3230332e38362e35322e302f32342d3234203d3e203234313437.roa (hash: r4KefndZnU7luOV0QPcOqGP6CinPwbiKpD8RZV56f5E=) 4: 3231392e3233352e3230372e302f32342d3234203d3e203234313437.roa (hash: Ol05ujiu93BtjhqGQ+WlieMkmygulOYjoIsurKH7T0c=) 5: 3230332e38362e36312e302f32342d3234203d3e203234313437.roa (hash: BDN34o2PeLUuH7mUNKqvJMOmkHM7PlrsPh5Q9Hsq5P4=) 6: 3230332e38362e34332e302f32342d3234203d3e203234313437.roa (hash: KAFhdO3yt9Ku7r/Veg9pGOh1yJ/ksXYA8r5t5Q9GrR4=) 7: A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl (hash: b0NkftmnOxz4Rdxtziirha6H74FOfnuprJ3QpRXVxXU=) 8: 3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa (hash: Oe4lgNDRYqcDE8SGWHciOR4xQCmgOD/0eAWVb3S/6uQ=) 9: 3230332e38362e34352e302f32342d3234203d3e203234313437.roa (hash: Nnd05xuUr2b4yGoh1bQE2fwywCCOmLsbEnz6TIRDa1k=) 10: 3231312e3130322e3234382e302f32312d3234203d3e2034383437.roa (hash: Oq/GjpVGMUDKb7ahdv94Jw/QkvSfPPwwMawTEz511Zw=) 11: 3131332e3230382e3131362e302f32322d3232203d3e2034383038.roa (hash: ExT2KfjA0A6E9yvmoTz1Y7ZxZgtn7LoRJKMSgNn4JQU=) 12: 3230332e38362e36322e302f32342d3234203d3e203234313437.roa (hash: LEggqkanD8YXk+XFnT/2KdUJ9g96lm9p2YSqWsX8J9A=) 13: 3230332e38362e35332e302f32342d3234203d3e203234313437.roa (hash: GZW0aT1mI2ydEgJpv0mu4u+h/q8ra7gJ/fnnxsz7CP0=) 14: 3230332e38362e34382e302f32342d3234203d3e203234313437.roa (hash: ejzbVl97r5mOdJYA953Vk21BI5BB0TVZrbPRe544gDc=) 15: 3231312e3130322e3234302e302f32312d3231203d3e2034383437.roa (hash: OuNc19cec5VulmUoNbFwnHh6nobKP43YHzim9Y3kzD4=) 16: 3230332e38362e33322e302f31392d3234203d3e203234313437.roa (hash: XDCVULdB42agXinP9bNu7bR26p/WgU+Ydt0+EBrlVrI=) 17: 3231392e3233352e3139322e302f32342d3234203d3e203234313437.roa (hash: qtTgYatGvSNFTC6OFpTmEbcwwa3g6HwXVA0Ip2Px3xw=) 18: 3231392e3233352e3139332e302f32342d3234203d3e203234313437.roa (hash: Nu0jpaTn4Fdv3bxm5NPIkyN0IrZp5kWxSz8smX/CQR8=) 19: 3230332e38362e34342e302f32342d3234203d3e203234313437.roa (hash: wIHg02Mx683aITJJCQSu1ItskF03DI8H6fuVpC8rq74=) 20: 3230332e38362e35352e302f32342d3234203d3e203234313437.roa (hash: ZojEaFjtdgor13jSa7GyZGMBWWXJenaYyF2n+BjUBOg=) 21: 3230332e38362e36302e302f32342d3234203d3e203234313437.roa (hash: BJZbR0lfoznCin3ZjtaBIQgGi5zQKhes89YrWdoFQs8=) 22: 3230332e38362e35342e302f32332d3233203d3e203234313437.roa (hash: qrPNPGmkS1XHHj7dvp921g1Efab04Eu3HyMUsLNZTLY=) 23: 3230332e38362e34392e302f32342d3234203d3e203234313437.roa (hash: GxtOA4gw3IUgIx3k4sXIueBQkr72Q7f98AQ06CTYthw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:39:b4:44:c6:7e:ad:c1:33:3b:b2:77:81:9c:64:7d:94:95:13:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Validity Not Before: Sep 10 09:01:05 2026 GMT Not After : Sep 13 13:14:05 2026 GMT Subject: CN=F5136196B3D00C006AACD97532206BEA112F91F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1e:bb:d8:50:43:bb:3f:d5:d7:14:1a:fc:39: 0e:99:19:e1:2a:05:9d:be:6b:5b:07:7f:c3:8f:d5: 50:86:3b:aa:a1:1c:59:26:55:05:17:cb:6c:62:f8: 3d:05:ef:7a:1f:f0:97:75:11:7b:d9:4a:b7:18:18: a4:cc:f1:ed:43:3d:7f:dc:83:0d:97:26:76:e7:61: fd:49:28:f7:70:53:4f:f0:4c:8d:15:46:88:35:b5: 37:b7:09:14:6d:c2:fe:b0:de:13:e0:7e:3a:55:e0: 48:db:dc:db:b7:54:68:4a:44:f9:e2:a0:8a:db:5f: f2:53:aa:b1:ed:71:d3:b9:e1:1e:73:12:59:16:b1: 87:07:65:83:88:ba:60:39:c0:4b:9a:c3:3f:a4:9a: 7f:40:d7:4c:b2:b0:46:7e:dd:61:91:ac:b2:95:d8: a9:09:3c:a9:f9:85:b5:3b:7b:80:ec:24:5f:a2:dd: 7c:f9:24:e4:8e:50:fb:a6:93:6d:29:b8:54:c5:de: f3:e3:f9:c0:fc:c3:ca:2e:fd:8d:7c:92:c8:a0:e1: c3:20:eb:43:75:d1:c1:a2:da:bc:89:79:50:08:f8: 0d:c0:14:50:f8:ef:05:41:55:75:d7:a7:1f:e2:49: e2:92:21:f7:99:9e:e8:a2:4c:3b:df:9f:3b:fe:e1: ce:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:13:61:96:B3:D0:0C:00:6A:AC:D9:75:32:20:6B:EA:11:2F:91:F9 X509v3 Authority Key Identifier: keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:be:9e:64:ff:e0:bb:53:3c:b2:e8:d2:e7:18:fe:1c:85:81: f1:a8:1f:3d:d3:37:d6:58:9c:74:d1:39:c6:00:61:99:dd:48: 81:c6:0d:c9:dc:23:e3:a0:c6:4b:e7:1f:e7:32:1a:38:d2:f2: ba:71:d2:7b:07:35:9c:a4:b3:14:42:25:be:06:3f:67:ef:b8: 7b:c7:92:82:1e:94:c6:ab:97:23:6f:32:dc:66:d5:5d:ab:77: 7b:3f:1b:1c:f7:ce:a6:d7:52:da:a8:3d:3b:44:dd:ee:bc:42: ee:af:8f:99:1e:02:c4:4a:e9:5c:a7:bf:b0:de:a2:5e:b5:e7: 00:0c:e4:30:aa:7c:c6:5e:97:f1:3f:94:58:ac:1e:d5:51:26: 56:29:cb:26:ea:13:46:92:10:df:30:e9:77:9e:74:80:7d:8e: 74:02:23:f7:f2:36:e5:b3:3d:b0:59:70:20:70:92:02:3b:df: bf:d2:86:25:a8:e2:42:6a:e3:d3:af:9a:7a:fd:2b:89:c3:30: a1:70:a2:6b:fb:b8:de:f6:88:61:a8:9f:8b:5d:92:03:d1:e0: 2a:2c:a6:b4:cf:76:28:a0:eb:1d:0a:1a:a3:d2:06:13:c9:aa: f5:a6:ba:f2:1d:c3:bc:00:91:35:f7:1d:17:ec:ba:2e:7e:64: 55:91:69:73 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUATm0RMZ+rcEzO7J3gZxkfZSVE7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUz MTYzQ0ZDMTAeFw0yNjA5MTAwOTAxMDVaFw0yNjA5MTMxMzE0MDVaMDMxMTAvBgNV BAMTKEY1MTM2MTk2QjNEMDBDMDA2QUFDRDk3NTMyMjA2QkVBMTEyRjkxRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2HrvYUEO7P9XXFBr8OQ6ZGeEq BZ2+a1sHf8OP1VCGO6qhHFkmVQUXy2xi+D0F73of8Jd1EXvZSrcYGKTM8e1DPX/c gw2XJnbnYf1JKPdwU0/wTI0VRog1tTe3CRRtwv6w3hPgfjpV4Ejb3Nu3VGhKRPni oIrbX/JTqrHtcdO54R5zElkWsYcHZYOIumA5wEuawz+kmn9A10yysEZ+3WGRrLKV 2KkJPKn5hbU7e4DsJF+i3Xz5JOSOUPumk20puFTF3vPj+cD8w8ou/Y18ksig4cMg 60N10cGi2ryJeVAI+A3AFFD47wVBVXXXpx/iSeKSIfeZnuiiTDvfnzv+4c4BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9RNhlrPQDABqrNl1MiBr6hEvkfkwHwYDVR0j BBgwFoAUoUxUMaAHL1vYgkLapXFp7jFjz8EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODA3NTAxMS8wL0ExNEM1NDMxQTAwNzJGNUJEODgyNDJEQUE1NzE2 OUVFMzE2M0NGQzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUzMTYzQ0ZDMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgwNzUwMTEvMC9BMTRDNTQzMUEwMDcy RjVCRDg4MjQyREFBNTcxNjlFRTMxNjNDRkMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1r6eZP/gu1M8 sujS5xj+HIWB8agfPdM31licdNE5xgBhmd1IgcYNydwj46DGS+cf5zIaONLyunHS ewc1nKSzFEIlvgY/Z++4e8eSgh6UxquXI28y3GbVXat3ez8bHPfOptdS2qg9O0Td 7rxC7q+PmR4CxErpXKe/sN6iXrXnAAzkMKp8xl6X8T+UWKwe1VEmVinLJuoTRpIQ 3zDpd550gH2OdAIj9/I25bM9sFlwIHCSAjvfv9KGJajiQmrj06+aev0ricMwoXCi a/u43vaIYaifi12SA9HgKiymtM92KKDrHQoao9IGE8mq9aa68h3DvACRNfcdF+y6 Ln5kVZFpcw== -----END CERTIFICATE-----Generated at Thu Sep 10 16:22:35 2026 by rpki-client