$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft File: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft (raw, json) Hash identifier: mn5werlKEuiL22djyYNEFwTLXIu1BAMjaZbyiHjIKL8= Subject key identifier: 8A:8E:45:FA:E4:B1:86:45:9B:DF:3B:39:CE:4C:6D:AB:76:FD:79:87 Authority key identifier: 11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD Certificate issuer: /CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Certificate serial: 2CFBC619D125F373E5ABD196CB8A9E75AA6D75D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft Manifest number: EB Signing time: Tue 14 Jul 2026 02:55:15 +0000 Manifest this update: Tue 14 Jul 2026 02:50:15 +0000 Manifest next update: Wed 15 Jul 2026 05:08:15 +0000 Files and hashes: 1: 3130332e36372e3137342e302f32342d3234203d3e20313333313939.roa (hash: +lmwIsVwUKU3fDx85LpvNKXD+KIwMRfnuwxwq6ORUYQ=) 2: 3130332e36372e3137332e302f32342d3234203d3e20313333313939.roa (hash: LsfX/Qz7oiSmvhoASN2bYrrYlqmPqtrZrf42D4a7EoY=) 3: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl (hash: sTSVf1wppBHpkM4NmdKVRsvbXeNucSrWmjwrnENTaT0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 05:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fb:c6:19:d1:25:f3:73:e5:ab:d1:96:cb:8a:9e:75:aa:6d:75:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Validity Not Before: Jul 14 02:50:15 2026 GMT Not After : Jul 15 05:08:15 2026 GMT Subject: CN=8A8E45FAE4B186459BDF3B39CE4C6DAB76FD7987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:77:d7:45:ea:3f:b0:24:24:bb:b9:52:68:6d: a8:b0:b1:2e:82:76:84:92:52:29:0c:77:00:75:69: f1:89:2b:5f:c6:77:e9:0a:87:9d:a0:c8:89:0f:84: 08:49:65:34:c6:0b:ac:35:fa:cc:c6:3d:17:10:f9: ed:9b:58:6f:ee:ba:d7:aa:6f:38:e0:9e:c3:2d:2c: b0:25:e4:e0:96:0a:41:19:4d:99:eb:02:f0:07:28: 79:66:5c:65:c8:2b:b3:4f:d1:64:b7:03:8a:57:77: fe:19:e5:72:e2:d8:18:02:77:af:08:5e:47:e7:bb: 04:4c:68:bf:f0:8c:84:e8:bd:fa:81:bd:43:a4:f5: 8e:61:93:be:5f:72:89:33:72:5b:1f:3b:ed:bb:de: 24:e3:e7:7a:e1:07:81:38:52:4d:a0:fa:de:dc:1a: e2:cf:16:a5:67:f8:75:64:1e:98:4a:1d:6a:1f:1f: 28:2a:4a:0e:ed:c7:15:63:67:4e:37:1e:d7:10:fe: 97:9d:8c:5e:d6:c1:f1:09:8d:22:e9:a3:42:5b:02: 58:f4:69:97:39:60:8b:fd:15:b4:a8:c3:21:8f:f5: 62:c2:32:69:38:e0:44:9f:2c:2b:59:da:b9:60:eb: 59:42:db:57:67:42:4a:24:68:95:51:5a:1a:45:b3: f8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8E:45:FA:E4:B1:86:45:9B:DF:3B:39:CE:4C:6D:AB:76:FD:79:87 X509v3 Authority Key Identifier: keyid:11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:fa:a8:4f:8e:e6:f5:7c:65:1a:8c:e3:6c:64:f7:4c:0c:81: f7:f7:aa:6f:01:0f:58:a4:8e:10:b6:82:87:d6:cc:0e:cc:33: f4:f2:41:3a:b1:d2:e5:4d:40:76:35:3d:97:15:47:40:f2:4b: 19:b5:4a:7b:cc:77:ed:34:eb:a9:f3:ca:9d:ff:c0:27:36:00: 5e:e1:ba:22:18:30:5a:b4:02:d2:31:23:e7:64:8f:f5:7d:43: 4b:47:c9:86:a0:6b:d3:e9:78:dc:53:20:f8:97:fa:de:6d:ab: d4:85:19:78:61:16:cf:b6:ac:48:ab:55:d0:37:95:6c:0d:69: 41:67:8a:b9:af:00:9b:48:c0:85:50:e8:5f:94:4e:31:25:43: 0f:12:0a:ca:34:7e:8f:ae:11:ea:43:92:bb:5b:e0:87:86:16: 73:e5:3e:6b:d4:d2:2b:11:51:69:4a:fa:39:3f:79:f1:70:f2: ac:9e:87:8b:bc:49:d0:4b:b1:b2:ee:21:d6:d1:01:db:e8:b1: e5:b5:79:27:c8:4b:6d:f0:df:f6:b7:96:b8:c6:56:af:dc:87: 0d:2c:44:3e:64:23:74:0c:35:41:cb:9f:ab:90:0a:11:0e:5a: e2:d1:d2:be:1e:c6:98:fe:5a:b6:55:00:00:7d:ef:a0:a0:cc: 7e:5d:a1:16 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULPvGGdEl83Plq9GWy4qedaptddUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZB MzRDNUVCRDAeFw0yNjA3MTQwMjUwMTVaFw0yNjA3MTUwNTA4MTVaMDMxMTAvBgNV BAMTKDhBOEU0NUZBRTRCMTg2NDU5QkRGM0IzOUNFNEM2REFCNzZGRDc5ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkd9dF6j+wJCS7uVJobaiwsS6C doSSUikMdwB1afGJK1/Gd+kKh52gyIkPhAhJZTTGC6w1+szGPRcQ+e2bWG/uuteq bzjgnsMtLLAl5OCWCkEZTZnrAvAHKHlmXGXIK7NP0WS3A4pXd/4Z5XLi2BgCd68I XkfnuwRMaL/wjITovfqBvUOk9Y5hk75fcokzclsfO+273iTj53rhB4E4Uk2g+t7c GuLPFqVn+HVkHphKHWofHygqSg7txxVjZ043HtcQ/pedjF7WwfEJjSLpo0JbAlj0 aZc5YIv9FbSowyGP9WLCMmk44ESfLCtZ2rlg61lC21dnQkokaJVRWhpFs/ihAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUio5F+uSxhkWb3zs5zkxtq3b9eYcwHwYDVR0j BBgwFoAUEUy0khOaX1xITT4PsPI176NMXr0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTkxODQ2Ny8wLzExNENCNDkyMTM5QTVGNUM0ODREM0UwRkIwRjIz NUVGQTM0QzVFQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZBMzRDNUVCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5MTg0NjcvMC8xMTRDQjQ5MjEzOUE1 RjVDNDg0RDNFMEZCMEYyMzVFRkEzNEM1RUJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofqoT47m9Xxl GozjbGT3TAyB9/eqbwEPWKSOELaCh9bMDswz9PJBOrHS5U1AdjU9lxVHQPJLGbVK e8x37TTrqfPKnf/AJzYAXuG6IhgwWrQC0jEj52SP9X1DS0fJhqBr0+l43FMg+Jf6 3m2r1IUZeGEWz7asSKtV0DeVbA1pQWeKua8Am0jAhVDoX5ROMSVDDxIKyjR+j64R 6kOSu1vgh4YWc+U+a9TSKxFRaUr6OT958XDyrJ6Hi7xJ0Euxsu4h1tEB2+ix5bV5 J8hLbfDf9reWuMZWr9yHDSxEPmQjdAw1Qcufq5AKEQ5a4tHSvh7GmP5atlUAAH3v oKDMfl2hFg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:10:17 2026 by rpki-client