$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft File: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft (raw, json) Hash identifier: 0mIxyeKGodTj4n3xNX9ztzvPZbImAsO2XxKNA+VQCtc= Subject key identifier: 81:C7:AC:0F:64:81:C8:8B:4C:F3:FD:C1:0E:EE:DE:18:B9:8D:E2:21 Authority key identifier: 11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD Certificate issuer: /CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Certificate serial: 19AB83CEB8DEEE32F4AE7606DFCC6F9C018761DA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft Manifest number: AE Signing time: Fri 29 May 2026 16:03:01 +0000 Manifest this update: Fri 29 May 2026 15:58:01 +0000 Manifest next update: Sat 30 May 2026 18:44:01 +0000 Files and hashes: 1: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl (hash: ThgdD/CnBpELC7YIYVMh4Vw3RDC/dNzUh1lfD3w+gsQ=) 2: 3130332e36372e3137332e302f32342d3234203d3e20313333313939.roa (hash: LsfX/Qz7oiSmvhoASN2bYrrYlqmPqtrZrf42D4a7EoY=) 3: 3130332e36372e3137342e302f32342d3234203d3e20313333313939.roa (hash: +lmwIsVwUKU3fDx85LpvNKXD+KIwMRfnuwxwq6ORUYQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ab:83:ce:b8:de:ee:32:f4:ae:76:06:df:cc:6f:9c:01:87:61:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Validity Not Before: May 29 15:58:01 2026 GMT Not After : May 30 18:44:01 2026 GMT Subject: CN=81C7AC0F6481C88B4CF3FDC10EEEDE18B98DE221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:47:ec:f0:43:bc:8f:f1:dc:6b:11:c3:85:6f: 87:9c:ff:ca:1a:6f:f4:02:96:d5:25:e0:a2:ea:85: 60:9f:4f:f8:df:da:30:82:39:75:f8:f0:35:4b:64: d0:0d:49:11:e8:78:12:0b:08:1f:fa:79:e0:5b:ef: 08:ce:8f:aa:5e:02:36:b1:65:6b:9f:1f:42:f6:69: a8:1e:23:81:15:19:42:c8:9e:2d:46:32:66:61:d1: 29:61:a3:55:d7:92:c2:10:14:33:88:e8:8b:69:9b: 57:5c:d6:68:5e:68:9f:7f:f4:ca:39:a3:7b:31:46: 75:68:5a:c3:6d:b8:59:47:e6:47:8d:3a:be:71:13: e7:49:9b:be:5c:c9:5c:21:e6:3c:06:3a:0f:b5:e0: 68:02:8f:3a:e6:ea:2f:d9:cb:f1:3a:1b:2a:34:67: 40:27:47:37:4a:2b:98:8b:34:bc:22:b4:68:42:54: 69:5a:35:cc:58:85:35:d3:cc:ea:af:88:b7:3f:e1: 78:da:8a:3e:54:f9:8a:25:f8:8f:fc:5d:17:0e:a3: e5:cb:48:19:19:8b:49:61:a5:9c:1d:80:20:5b:40: 10:20:04:e5:bd:c1:30:83:b5:42:f1:5f:31:9d:c6: 99:6b:40:06:82:11:a2:ac:da:3e:05:6e:3c:e5:54: d7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C7:AC:0F:64:81:C8:8B:4C:F3:FD:C1:0E:EE:DE:18:B9:8D:E2:21 X509v3 Authority Key Identifier: keyid:11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:22:fe:ad:1c:b9:34:05:66:17:3b:d9:47:9a:60:7a:bc:43: a9:9f:d3:77:e8:fd:fe:ac:7a:4c:83:4d:47:17:32:94:48:ca: 91:c3:b8:71:a9:8f:3e:ed:aa:e7:c7:dd:3f:7d:d2:55:03:e9: 87:30:19:fe:41:2f:1b:44:c1:a1:d6:74:2a:ba:8a:e0:0d:64: 6c:e6:91:c8:95:74:a1:b6:f6:9f:e0:8d:33:2d:37:a0:fc:32: 25:89:50:30:90:74:a4:ed:70:9e:09:41:ef:f4:b8:60:66:09: 31:f9:45:af:7d:ed:52:26:27:2a:ec:62:87:3f:51:39:09:63: 29:df:1a:25:e7:e3:ea:40:07:5c:b1:31:92:8b:82:7d:64:eb: 5b:8c:dd:52:02:de:51:36:0b:3c:7d:97:32:7c:32:35:a0:38: 6e:c6:d5:c6:b0:e9:07:7d:54:ca:7d:73:1a:50:9e:9a:3b:2f: 44:a5:4c:6f:d7:07:cc:2e:09:5b:e9:d6:78:af:27:e7:b5:81: 30:a0:69:fd:c9:c6:3f:55:5b:ca:c5:5e:8e:19:cd:87:db:7c: 0d:cb:43:38:42:39:4e:f1:d4:da:85:2c:ab:fe:2a:a9:62:de: 82:98:2f:6b:20:7f:7e:b6:f0:07:56:e1:66:95:2a:ce:48:8d: 3b:3e:4e:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGauDzrje7jL0rnYG38xvnAGHYdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZB MzRDNUVCRDAeFw0yNjA1MjkxNTU4MDFaFw0yNjA1MzAxODQ0MDFaMDMxMTAvBgNV BAMTKDgxQzdBQzBGNjQ4MUM4OEI0Q0YzRkRDMTBFRUVERTE4Qjk4REUyMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjR+zwQ7yP8dxrEcOFb4ec/8oa b/QCltUl4KLqhWCfT/jf2jCCOXX48DVLZNANSRHoeBILCB/6eeBb7wjOj6peAjax ZWufH0L2aageI4EVGULIni1GMmZh0Slho1XXksIQFDOI6Itpm1dc1mheaJ9/9Mo5 o3sxRnVoWsNtuFlH5keNOr5xE+dJm75cyVwh5jwGOg+14GgCjzrm6i/Zy/E6Gyo0 Z0AnRzdKK5iLNLwitGhCVGlaNcxYhTXTzOqviLc/4Xjaij5U+Yol+I/8XRcOo+XL SBkZi0lhpZwdgCBbQBAgBOW9wTCDtULxXzGdxplrQAaCEaKs2j4FbjzlVNd5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgcesD2SByItM8/3BDu7eGLmN4iEwHwYDVR0j BBgwFoAUEUy0khOaX1xITT4PsPI176NMXr0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTkxODQ2Ny8wLzExNENCNDkyMTM5QTVGNUM0ODREM0UwRkIwRjIz NUVGQTM0QzVFQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZBMzRDNUVCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5MTg0NjcvMC8xMTRDQjQ5MjEzOUE1 RjVDNDg0RDNFMEZCMEYyMzVFRkEzNEM1RUJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjiL+rRy5NAVm FzvZR5pgerxDqZ/Td+j9/qx6TINNRxcylEjKkcO4camPPu2q58fdP33SVQPphzAZ /kEvG0TBodZ0KrqK4A1kbOaRyJV0obb2n+CNMy03oPwyJYlQMJB0pO1wnglB7/S4 YGYJMflFr33tUiYnKuxihz9ROQljKd8aJefj6kAHXLExkouCfWTrW4zdUgLeUTYL PH2XMnwyNaA4bsbVxrDpB31Uyn1zGlCemjsvRKVMb9cHzC4JW+nWeK8n57WBMKBp /cnGP1VbysVejhnNh9t8DctDOEI5TvHU2oUsq/4qqWLegpgvayB/frbwB1bhZpUq zkiNOz5O8Q== -----END CERTIFICATE-----Generated at Fri May 29 22:05:49 2026 by rpki-client