$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft File: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft (raw, json) Hash identifier: A82zEZ2Ui3G9DMpegPQGIUTCLiCLXUlQfizgScEoVzI= Subject key identifier: 73:56:DE:4C:D7:C1:16:C7:16:75:2F:55:9B:40:2B:DF:08:40:D5:88 Authority key identifier: 11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD Certificate issuer: /CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Certificate serial: 4BBDF50255F8CBAD5AF550482D915124D595D4DD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft Manifest number: 56 Signing time: Tue 24 Mar 2026 07:19:25 +0000 Manifest this update: Tue 24 Mar 2026 07:14:25 +0000 Manifest next update: Wed 25 Mar 2026 11:10:25 +0000 Files and hashes: 1: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl (hash: MLcHbeNnCXrbMUe8xDZMy45B5I66o3fbnU1rOw2iSsQ=) 2: 3130332e36372e3137332e302f32342d3234203d3e20313333313939.roa (hash: LsfX/Qz7oiSmvhoASN2bYrrYlqmPqtrZrf42D4a7EoY=) 3: 3130332e36372e3137342e302f32342d3234203d3e20313333313939.roa (hash: +lmwIsVwUKU3fDx85LpvNKXD+KIwMRfnuwxwq6ORUYQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 05:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:bd:f5:02:55:f8:cb:ad:5a:f5:50:48:2d:91:51:24:d5:95:d4:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Validity Not Before: Mar 24 07:14:25 2026 GMT Not After : Mar 25 11:10:25 2026 GMT Subject: CN=7356DE4CD7C116C716752F559B402BDF0840D588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:78:fc:3a:ce:15:d2:cf:4f:cb:31:f1:49:4c: 0d:57:9f:4f:57:e4:95:34:ec:22:b9:86:7c:d9:1a: 4d:d0:45:4c:2f:87:b1:c7:8b:1d:a9:19:6d:c8:f8: 7e:ce:11:7e:46:6f:89:79:58:a6:1b:bd:ac:5f:8e: 33:0e:ff:d1:0c:4b:2d:c1:2a:9b:35:39:71:df:77: d8:90:ee:46:e5:aa:90:b2:5d:e6:6e:60:60:23:8a: 00:40:d8:6c:4a:cd:96:50:52:3c:50:9f:3e:a9:da: 23:a1:c8:5b:6a:b6:34:8a:e8:6f:80:53:5c:00:cd: e8:9e:58:51:28:37:99:63:ff:37:ea:da:ef:e4:a6: 99:39:83:3c:36:db:3f:ff:8a:ab:27:3a:31:1e:45: b2:51:40:63:39:eb:59:94:c0:c6:6a:c2:9e:42:a9: a3:07:ac:6b:c6:1a:db:89:b7:20:eb:db:ff:b2:43: 31:12:33:4b:e1:fa:3a:36:dc:f2:c6:46:f0:58:14: 0d:22:6e:48:fa:25:d8:1c:06:9d:60:ab:82:8c:6d: ac:0a:0c:e6:9d:06:da:26:c6:1f:91:ba:88:78:41: 41:e7:a7:b2:c8:bb:06:33:4f:02:30:ce:ac:71:51: e1:21:7b:ef:17:30:8d:e2:46:7d:fd:25:d7:8f:f7: 33:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:56:DE:4C:D7:C1:16:C7:16:75:2F:55:9B:40:2B:DF:08:40:D5:88 X509v3 Authority Key Identifier: keyid:11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:1c:0f:ab:ce:f0:da:dc:f9:ab:ad:f4:5c:83:82:8f:9a:3f: ad:f5:04:a2:63:fc:81:3d:80:25:e0:bb:6f:a2:5e:4f:fe:3e: 0f:41:09:7b:66:07:77:b9:c4:20:f2:e6:2b:f9:0c:88:b7:1b: fc:68:09:bb:6c:eb:f2:1d:44:5b:5e:2e:c3:78:4c:ce:02:ff: 86:6c:19:43:3f:30:fb:9e:99:24:af:73:2c:f7:b7:25:e0:13: b7:dd:9e:52:04:06:15:0e:9e:95:bd:25:19:98:29:ee:c7:14: aa:10:db:94:88:19:a8:a2:78:87:6f:16:db:82:8e:13:41:73: 88:30:87:e9:82:bb:63:4e:96:79:7f:aa:d4:0e:a7:26:03:15: 6a:10:9f:ef:ae:96:88:a2:0c:1d:29:27:b8:85:56:40:52:31: 71:0c:ec:a2:65:d9:fe:7c:4c:0a:9a:5e:9a:b3:74:82:00:84: 23:90:db:f1:55:9d:d9:4d:09:c5:20:5a:f6:37:92:66:88:f8: f1:97:6f:b7:d2:52:dd:ba:19:81:17:72:8f:b3:21:8e:6f:d0: eb:b3:ff:c5:ba:92:d6:51:18:29:a9:26:af:a0:2f:1e:5c:6b: 20:b7:7a:f0:c4:9d:ab:d4:65:3a:83:36:7f:08:46:c5:e3:f1: f4:08:9d:61 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUS731AlX4y61a9VBILZFRJNWV1N0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZB MzRDNUVCRDAeFw0yNjAzMjQwNzE0MjVaFw0yNjAzMjUxMTEwMjVaMDMxMTAvBgNV BAMTKDczNTZERTRDRDdDMTE2QzcxNjc1MkY1NTlCNDAyQkRGMDg0MEQ1ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvePw6zhXSz0/LMfFJTA1Xn09X 5JU07CK5hnzZGk3QRUwvh7HHix2pGW3I+H7OEX5Gb4l5WKYbvaxfjjMO/9EMSy3B Kps1OXHfd9iQ7kblqpCyXeZuYGAjigBA2GxKzZZQUjxQnz6p2iOhyFtqtjSK6G+A U1wAzeieWFEoN5lj/zfq2u/kppk5gzw22z//iqsnOjEeRbJRQGM561mUwMZqwp5C qaMHrGvGGtuJtyDr2/+yQzESM0vh+jo23PLGRvBYFA0ibkj6JdgcBp1gq4KMbawK DOadBtomxh+Ruoh4QUHnp7LIuwYzTwIwzqxxUeEhe+8XMI3iRn39JdeP9zN/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUc1beTNfBFscWdS9Vm0Ar3whA1YgwHwYDVR0j BBgwFoAUEUy0khOaX1xITT4PsPI176NMXr0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTkxODQ2Ny8wLzExNENCNDkyMTM5QTVGNUM0ODREM0UwRkIwRjIz NUVGQTM0QzVFQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZBMzRDNUVCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5MTg0NjcvMC8xMTRDQjQ5MjEzOUE1 RjVDNDg0RDNFMEZCMEYyMzVFRkEzNEM1RUJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBwPq87w2tz5 q630XIOCj5o/rfUEomP8gT2AJeC7b6JeT/4+D0EJe2YHd7nEIPLmK/kMiLcb/GgJ u2zr8h1EW14uw3hMzgL/hmwZQz8w+56ZJK9zLPe3JeATt92eUgQGFQ6elb0lGZgp 7scUqhDblIgZqKJ4h28W24KOE0FziDCH6YK7Y06WeX+q1A6nJgMVahCf766WiKIM HSknuIVWQFIxcQzsomXZ/nxMCppemrN0ggCEI5Db8VWd2U0JxSBa9jeSZoj48Zdv t9JS3boZgRdyj7Mhjm/Q67P/xbqS1lEYKakmr6AvHlxrILd68MSdq9RlOoM2fwhG xePx9AidYQ== -----END CERTIFICATE-----Generated at Tue Mar 24 09:26:19 2026 by rpki-client