
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
File: A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft (raw, json)
Hash identifier: MWM5gCLgGxNB+jxWCHVeQa1bvDgKuSx0UWX1LjFquqQ=
Subject key identifier: 7A:5C:27:5A:B8:1B:15:92:C1:90:FE:36:95:3E:07:E4:33:F0:AC:0A
Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Certificate serial: 53A8C7A62528216B8F9F4AFCE1BEFF71099AEEA8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
Manifest number: 0142
Signing time: Wed 28 Oct 2026 10:40:43 +0000
Manifest this update: Wed 28 Oct 2026 10:35:43 +0000
Manifest next update: Sat 31 Oct 2026 14:40:43 +0000
Files and hashes: 1: 3231392e3233352e3230372e302f32342d3234203d3e203234313437.roa (hash: Ol05ujiu93BtjhqGQ+WlieMkmygulOYjoIsurKH7T0c=)
2: 3230332e38362e34342e302f32342d3234203d3e203234313437.roa (hash: wIHg02Mx683aITJJCQSu1ItskF03DI8H6fuVpC8rq74=)
3: 3231392e3233352e3139332e302f32342d3234203d3e203234313437.roa (hash: Nu0jpaTn4Fdv3bxm5NPIkyN0IrZp5kWxSz8smX/CQR8=)
4: 3231312e3130322e3234302e302f32312d3231203d3e2034383437.roa (hash: OuNc19cec5VulmUoNbFwnHh6nobKP43YHzim9Y3kzD4=)
5: 3230332e38362e35322e302f32342d3234203d3e203234313437.roa (hash: r4KefndZnU7luOV0QPcOqGP6CinPwbiKpD8RZV56f5E=)
6: 3230332e38362e35332e302f32342d3234203d3e203234313437.roa (hash: GZW0aT1mI2ydEgJpv0mu4u+h/q8ra7gJ/fnnxsz7CP0=)
7: 3231312e3130322e3234382e302f32312d3234203d3e2034383437.roa (hash: Oq/GjpVGMUDKb7ahdv94Jw/QkvSfPPwwMawTEz511Zw=)
8: 3230332e38362e35312e302f32342d3234203d3e203234313437.roa (hash: 5Nl4P4yjyaYsIWRUhf5zhO8ZOngx1vp1Piv9zXxY44w=)
9: 3230332e38362e35342e302f32342d3234203d3e203234313437.roa (hash: JIBRdGWpBW+adIGFLzrSbUhh/kt/vlw9SyeRkgMCJM8=)
10: 3230332e38362e34352e302f32342d3234203d3e203234313437.roa (hash: Nnd05xuUr2b4yGoh1bQE2fwywCCOmLsbEnz6TIRDa1k=)
11: 3230332e38362e36302e302f32342d3234203d3e203234313437.roa (hash: BJZbR0lfoznCin3ZjtaBIQgGi5zQKhes89YrWdoFQs8=)
12: 3230332e38362e36322e302f32342d3234203d3e203234313437.roa (hash: LEggqkanD8YXk+XFnT/2KdUJ9g96lm9p2YSqWsX8J9A=)
13: 3231392e3233352e3139322e302f32342d3234203d3e203234313437.roa (hash: qtTgYatGvSNFTC6OFpTmEbcwwa3g6HwXVA0Ip2Px3xw=)
14: 3230332e38362e34392e302f32342d3234203d3e203234313437.roa (hash: GxtOA4gw3IUgIx3k4sXIueBQkr72Q7f98AQ06CTYthw=)
15: 3230332e38362e34332e302f32342d3234203d3e203234313437.roa (hash: KAFhdO3yt9Ku7r/Veg9pGOh1yJ/ksXYA8r5t5Q9GrR4=)
16: 3230332e38362e34382e302f32342d3234203d3e203234313437.roa (hash: ejzbVl97r5mOdJYA953Vk21BI5BB0TVZrbPRe544gDc=)
17: 3230332e38362e36312e302f32342d3234203d3e203234313437.roa (hash: BDN34o2PeLUuH7mUNKqvJMOmkHM7PlrsPh5Q9Hsq5P4=)
18: 3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa (hash: Oe4lgNDRYqcDE8SGWHciOR4xQCmgOD/0eAWVb3S/6uQ=)
19: 3230332e38362e35352e302f32342d3234203d3e203234313437.roa (hash: ZojEaFjtdgor13jSa7GyZGMBWWXJenaYyF2n+BjUBOg=)
20: 3230332e38362e35342e302f32332d3233203d3e203234313437.roa (hash: qrPNPGmkS1XHHj7dvp921g1Efab04Eu3HyMUsLNZTLY=)
21: A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl (hash: M9zinlws9gTzxHHRdivz8MB5j3pQWlOgYuR9wOlmTDA=)
22: 3230332e38362e33322e302f31392d3234203d3e203234313437.roa (hash: XDCVULdB42agXinP9bNu7bR26p/WgU+Ydt0+EBrlVrI=)
23: 3131332e3230382e3131362e302f32322d3232203d3e2034383038.roa (hash: ExT2KfjA0A6E9yvmoTz1Y7ZxZgtn7LoRJKMSgNn4JQU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:40:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a8:c7:a6:25:28:21:6b:8f:9f:4a:fc:e1:be:ff:71:09:9a:ee:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Validity
Not Before: Oct 28 10:35:43 2026 GMT
Not After : Oct 31 14:40:43 2026 GMT
Subject: CN=7A5C275AB81B1592C190FE36953E07E433F0AC0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:31:eb:8d:54:5c:bf:c2:d4:7b:e7:eb:8c:
89:05:b9:89:97:5a:31:a5:69:71:5a:86:76:15:af:
63:b6:f5:66:10:34:42:64:16:6e:8f:41:59:67:a9:
3e:1b:6e:0b:93:6c:8c:f1:9d:f7:63:de:69:3a:39:
cd:04:63:17:f0:b2:7d:49:24:90:7a:b4:68:68:5a:
33:f6:ca:b6:79:17:a6:f0:64:f5:15:d5:c8:2c:b4:
bf:6e:d8:35:c7:d5:09:7d:5c:e8:5c:62:2a:82:11:
8b:00:11:a7:51:45:b2:e2:03:5d:c2:03:75:59:dc:
4c:2f:23:98:86:81:77:dc:80:47:f6:6c:39:65:f7:
f8:6b:ea:51:42:8a:85:40:7b:97:2a:c3:4b:f9:a8:
12:91:4e:0f:7b:36:64:90:b7:b3:74:be:8f:ef:0c:
04:9f:c0:d0:7e:7d:a3:7e:65:00:d8:0e:9b:a9:72:
ae:93:ee:29:aa:6a:dd:19:96:06:43:86:33:6f:93:
b3:76:4c:90:1a:ab:32:87:6f:00:50:b7:ec:44:81:
0b:cc:64:37:e6:99:11:a2:40:ca:ce:d0:a5:5a:62:
91:18:d2:77:8d:a6:ee:f4:fa:a3:7c:83:d9:74:f2:
76:11:b8:c7:b4:80:7d:26:3d:14:51:cd:1c:d7:10:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5C:27:5A:B8:1B:15:92:C1:90:FE:36:95:3E:07:E4:33:F0:AC:0A
X509v3 Authority Key Identifier:
keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1b:0c:2a:16:98:28:74:82:7b:03:1a:8f:13:8b:34:c4:c8:
a6:8b:33:54:29:f6:ac:92:3a:45:70:e2:95:3b:66:39:cc:17:
90:e9:78:5c:36:82:61:11:a4:99:84:7c:83:8e:7f:d8:ad:7e:
dd:6a:1a:be:a9:16:fe:8f:57:bb:14:75:f3:21:b0:f4:df:dc:
97:a9:41:7d:8a:56:05:a0:66:90:7e:69:41:4a:50:36:6e:5d:
a4:fb:2d:c5:8d:c3:fa:e9:3a:14:49:9e:86:41:08:8f:4a:92:
2d:90:91:6c:e8:c6:9b:90:30:cd:0c:71:70:1f:cc:2f:12:ff:
5e:f6:e0:59:c0:d5:a3:d0:11:19:2a:9a:44:32:bb:fa:5b:d8:
35:7e:18:97:32:b6:81:56:bc:a9:bb:09:0c:bf:93:2f:5a:db:
cf:51:1b:db:89:39:69:f1:61:3e:ac:a0:47:30:9e:d7:7f:ba:
20:66:0b:e9:35:6e:ec:51:ca:35:06:bc:f8:75:ed:57:f1:e2:
b2:6c:c8:76:8a:12:07:9a:fc:0b:bf:c3:7e:19:ff:7b:4d:e0:
ec:19:a1:5d:0f:45:0e:c5:2f:24:a8:37:77:c6:c2:05:0d:78:
42:ec:4b:6f:af:b8:a8:98:8a:30:93:09:6d:03:fe:47:f0:21:
02:27:43:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:19:11 2026 by rpki-client