$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft File: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft (raw, json) Hash identifier: WPEw4B2LRfhvIKreTOFK1KzSBbISE/tkF8Oj+iO6yh8= Subject key identifier: 41:10:A8:43:C3:7C:08:2B:71:45:94:1E:3B:58:C7:51:FD:9A:AD:A9 Authority key identifier: 11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD Certificate issuer: /CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Certificate serial: 27753669FC2EA1BCB33109AFA4388536962A0C9E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft Manifest number: 013D Signing time: Tue 13 Oct 2026 12:38:01 +0000 Manifest this update: Tue 13 Oct 2026 12:33:01 +0000 Manifest next update: Fri 16 Oct 2026 23:01:01 +0000 Files and hashes: 1: 3130332e36372e3137332e302f32342d3234203d3e20313333313939.roa (hash: LsfX/Qz7oiSmvhoASN2bYrrYlqmPqtrZrf42D4a7EoY=) 2: 3130332e36372e3137342e302f32342d3234203d3e20313333313939.roa (hash: +lmwIsVwUKU3fDx85LpvNKXD+KIwMRfnuwxwq6ORUYQ=) 3: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl (hash: 2EFJSNh74bajiJqxzXDGMkQbRXOztvFMZt403sl5TuY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 23:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:75:36:69:fc:2e:a1:bc:b3:31:09:af:a4:38:85:36:96:2a:0c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Validity Not Before: Oct 13 12:33:01 2026 GMT Not After : Oct 16 23:01:01 2026 GMT Subject: CN=4110A843C37C082B7145941E3B58C751FD9AADA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:be:91:4f:ef:70:e9:e6:48:08:49:da:5f:21: 03:cd:a2:f2:30:2d:dc:e5:08:b0:00:ca:42:19:10: 49:64:d1:28:c2:a9:3d:39:eb:50:5a:2b:ed:7d:f3: 25:e5:3c:dd:5d:8c:fe:b2:d3:07:a3:48:d3:12:d6: 14:cc:13:86:63:ef:21:a8:a7:e0:8d:0a:e6:c2:88: 52:ec:7d:4b:a7:9d:1c:67:8e:b5:53:a1:91:bc:3d: de:d2:80:e7:51:a1:38:5d:21:3a:22:1e:fd:62:96: 38:b6:dc:f4:4e:2c:1a:1e:d6:02:b1:a9:73:a5:bf: 7b:c0:50:a7:22:93:0c:ac:74:18:99:f4:98:f1:10: 4c:b6:e9:ae:78:6e:d7:b8:69:65:74:44:e3:1a:de: 11:25:af:26:e9:d2:81:bb:43:26:c9:c6:b6:a8:90: 34:25:0a:ec:ee:e6:bc:47:11:80:90:fe:54:57:dc: ef:78:5d:63:94:7d:38:da:30:71:9a:d3:75:c7:03: a8:bf:3e:1a:73:5b:47:2c:89:10:d3:e3:ab:5c:b7: 5f:67:92:46:4b:36:8d:5e:95:17:b4:19:ed:8a:c0: f2:da:0f:80:0b:9b:1a:6e:2f:db:50:0c:a8:b2:65: 9f:fb:81:be:7a:4a:15:94:cd:26:d4:e1:5a:fc:0e: 27:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:10:A8:43:C3:7C:08:2B:71:45:94:1E:3B:58:C7:51:FD:9A:AD:A9 X509v3 Authority Key Identifier: keyid:11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:25:f9:f2:34:f3:6d:b0:d0:cd:b4:18:be:fa:fe:13:7d:a1: 19:34:84:83:07:40:39:5c:93:ea:36:38:58:1d:50:ca:3c:34: ac:6d:8c:e1:bd:3f:82:9e:05:f0:b2:e3:71:6d:13:e3:33:3c: 9f:2a:b7:2c:df:8a:71:d9:d1:1d:91:15:bf:07:5b:e5:45:96: a2:d7:d8:b5:0b:f7:10:62:35:3b:40:8a:9d:f6:b6:e7:10:bd: 6b:da:67:19:73:ca:3e:61:39:e7:d5:3c:33:ef:a7:ed:ef:8e: 7d:b4:ae:f3:a3:30:25:67:c8:23:5e:72:8b:9d:51:36:f1:db: 9f:e6:91:38:ae:06:2d:d5:93:65:be:5a:b6:b4:c0:ac:eb:94: 8b:5e:48:ff:9c:2a:72:9b:1a:ff:92:7f:42:c5:29:88:bb:e4: 71:e0:50:a0:63:c2:f6:b9:c1:3e:cc:d2:c1:b4:3e:d7:9e:36: 70:a0:21:83:7e:f7:1b:9e:d0:8c:6c:c5:7d:63:24:ed:ae:ba: 54:c3:e0:0d:ac:6c:25:16:58:6b:b7:ae:0d:a1:c9:dc:f6:19: 4c:74:f8:32:dc:d8:7c:d5:f4:2d:45:81:fd:85:e1:7d:3e:bc: 7e:e8:71:aa:7a:52:75:be:85:bb:38:ea:b3:62:e1:fe:11:6a: a9:10:97:90 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ3U2afwuobyzMQmvpDiFNpYqDJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZB MzRDNUVCRDAeFw0yNjEwMTMxMjMzMDFaFw0yNjEwMTYyMzAxMDFaMDMxMTAvBgNV BAMTKDQxMTBBODQzQzM3QzA4MkI3MTQ1OTQxRTNCNThDNzUxRkQ5QUFEQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuvpFP73Dp5kgISdpfIQPNovIw LdzlCLAAykIZEElk0SjCqT0561BaK+198yXlPN1djP6y0wejSNMS1hTME4Zj7yGo p+CNCubCiFLsfUunnRxnjrVToZG8Pd7SgOdRoThdIToiHv1ilji23PROLBoe1gKx qXOlv3vAUKcikwysdBiZ9JjxEEy26a54bte4aWV0ROMa3hElrybp0oG7QybJxrao kDQlCuzu5rxHEYCQ/lRX3O94XWOUfTjaMHGa03XHA6i/PhpzW0csiRDT46tct19n kkZLNo1elRe0Ge2KwPLaD4ALmxpuL9tQDKiyZZ/7gb56ShWUzSbU4Vr8DifxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQRCoQ8N8CCtxRZQeO1jHUf2arakwHwYDVR0j BBgwFoAUEUy0khOaX1xITT4PsPI176NMXr0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTkxODQ2Ny8wLzExNENCNDkyMTM5QTVGNUM0ODREM0UwRkIwRjIz NUVGQTM0QzVFQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZBMzRDNUVCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5MTg0NjcvMC8xMTRDQjQ5MjEzOUE1 RjVDNDg0RDNFMEZCMEYyMzVFRkEzNEM1RUJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSX58jTzbbDQ zbQYvvr+E32hGTSEgwdAOVyT6jY4WB1Qyjw0rG2M4b0/gp4F8LLjcW0T4zM8nyq3 LN+KcdnRHZEVvwdb5UWWotfYtQv3EGI1O0CKnfa25xC9a9pnGXPKPmE559U8M++n 7e+OfbSu86MwJWfII15yi51RNvHbn+aROK4GLdWTZb5atrTArOuUi15I/5wqcpsa /5J/QsUpiLvkceBQoGPC9rnBPszSwbQ+1542cKAhg373G57QjGzFfWMk7a66VMPg DaxsJRZYa7euDaHJ3PYZTHT4MtzYfNX0LUWB/YXhfT68fuhxqnpSdb6Fuzjqs2Lh /hFqqRCXkA== -----END CERTIFICATE-----Generated at Wed Oct 14 16:02:25 2026 by rpki-client