$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft File: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft (raw, json) Hash identifier: HLOYvpTdg/CfJtZV74TMNpJYjuWrlMMxD7UQAzDQuMI= Subject key identifier: 10:8B:DF:2C:B2:F5:FE:E1:34:65:70:AE:23:CE:F8:31:F5:8F:A1:A1 Authority key identifier: 11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD Certificate issuer: /CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Certificate serial: 4D475B89423264EF33D9DDCB764FFD27DDC1AF21 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft Manifest number: 0128 Signing time: Fri 28 Aug 2026 09:13:39 +0000 Manifest this update: Fri 28 Aug 2026 09:08:39 +0000 Manifest next update: Mon 31 Aug 2026 11:11:39 +0000 Files and hashes: 1: 3130332e36372e3137342e302f32342d3234203d3e20313333313939.roa (hash: +lmwIsVwUKU3fDx85LpvNKXD+KIwMRfnuwxwq6ORUYQ=) 2: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl (hash: 91WC6Y9K/t7ifYGZszAsKKLrrseTELMtD7jpum0ag14=) 3: 3130332e36372e3137332e302f32342d3234203d3e20313333313939.roa (hash: LsfX/Qz7oiSmvhoASN2bYrrYlqmPqtrZrf42D4a7EoY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:47:5b:89:42:32:64:ef:33:d9:dd:cb:76:4f:fd:27:dd:c1:af:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Validity Not Before: Aug 28 09:08:39 2026 GMT Not After : Aug 31 11:11:39 2026 GMT Subject: CN=108BDF2CB2F5FEE1346570AE23CEF831F58FA1A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0e:bc:bb:16:3d:d9:4a:a2:f9:46:9c:65:de: 16:98:21:35:4c:c3:e9:40:d8:e8:1a:91:0b:cd:be: 8d:a7:e0:4e:14:c6:50:40:ab:9d:7c:e7:a8:a2:4a: 20:b4:d2:96:3a:ff:37:1c:6e:15:c1:3b:b5:01:49: 1f:5b:24:b1:9d:55:24:d7:d0:17:ed:87:63:c2:d8: 9a:ee:98:89:ad:63:84:95:e7:85:f7:cc:5c:6a:31: 87:08:df:56:70:8b:af:56:2d:b9:c8:71:8d:52:5a: f4:78:26:fa:18:8c:f3:22:0d:1b:b1:96:10:42:34: e9:68:80:5d:7a:56:9f:d7:c3:06:83:db:3e:ad:04: e8:a3:f8:11:06:54:fb:93:21:79:95:10:de:82:70: 52:2e:86:b0:4d:5e:f5:c4:00:0f:19:29:9c:ed:c3: 86:69:68:9a:29:53:24:d2:e4:d2:86:a4:c4:d6:c0: b1:be:c1:e9:9c:27:bc:a2:c0:3a:09:5d:61:fb:8e: 83:56:3c:52:36:69:d2:4e:06:f8:7d:a1:a2:75:56: dd:03:a1:cd:a2:57:d1:6a:ee:da:f0:d5:22:7a:46: d1:a1:c1:71:51:fd:04:98:51:c2:b4:e9:d2:36:4e: b6:10:e3:12:ac:e7:e1:0d:c9:99:1f:69:c3:2c:6d: e2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8B:DF:2C:B2:F5:FE:E1:34:65:70:AE:23:CE:F8:31:F5:8F:A1:A1 X509v3 Authority Key Identifier: keyid:11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f6:8a:6c:74:7e:30:d6:30:d7:e4:80:98:30:2c:86:c1:16: 61:d2:35:5d:b3:f6:1c:a9:bf:86:cd:6c:a2:cd:5d:00:9e:99: 5f:f6:b9:2f:a6:eb:88:90:36:14:ab:6d:91:d5:a6:ad:a7:23: 2f:c9:c6:bc:54:43:e6:1e:d4:0c:a5:55:5c:1e:1f:a6:d1:70: f3:47:15:d2:75:33:7d:cb:36:c8:a0:88:49:ec:d9:f5:f3:8e: 17:c6:38:51:ab:c8:2f:ae:65:6c:f0:2b:c2:e9:9a:4a:ce:23: a5:ca:87:73:dd:c4:33:56:2e:91:fd:bd:2f:45:57:df:4b:1c: 57:71:19:d8:fa:1b:d9:c1:aa:cf:27:78:c6:7f:cf:ec:15:33: ca:f7:21:c2:57:ca:3f:13:42:b6:2a:14:23:85:74:5d:f2:38: 3d:7b:b5:90:5e:ce:b1:a8:7f:db:84:e4:51:7c:50:30:0f:0a: bf:73:b2:2f:e8:31:2c:28:bc:5f:ce:74:04:4f:37:18:d9:3c: e2:0d:0c:12:f5:a3:6b:a7:2d:41:e2:ed:20:12:92:b8:52:08: 39:ed:73:a5:46:3a:96:f3:a2:4b:1f:2e:89:41:d6:b2:64:3e: 79:0c:3f:a5:c2:39:c3:c9:df:b4:0a:e2:67:a2:f1:61:7f:ac: 1a:3e:15:97 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTUdbiUIyZO8z2d3Ldk/9J93BryEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZB MzRDNUVCRDAeFw0yNjA4MjgwOTA4MzlaFw0yNjA4MzExMTExMzlaMDMxMTAvBgNV BAMTKDEwOEJERjJDQjJGNUZFRTEzNDY1NzBBRTIzQ0VGODMxRjU4RkExQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSDry7Fj3ZSqL5Rpxl3haYITVM w+lA2OgakQvNvo2n4E4UxlBAq51856iiSiC00pY6/zccbhXBO7UBSR9bJLGdVSTX 0Bfth2PC2JrumImtY4SV54X3zFxqMYcI31Zwi69WLbnIcY1SWvR4JvoYjPMiDRux lhBCNOlogF16Vp/XwwaD2z6tBOij+BEGVPuTIXmVEN6CcFIuhrBNXvXEAA8ZKZzt w4ZpaJopUyTS5NKGpMTWwLG+wemcJ7yiwDoJXWH7joNWPFI2adJOBvh9oaJ1Vt0D oc2iV9Fq7trw1SJ6RtGhwXFR/QSYUcK06dI2TrYQ4xKs5+ENyZkfacMsbeKBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEIvfLLL1/uE0ZXCuI874MfWPoaEwHwYDVR0j BBgwFoAUEUy0khOaX1xITT4PsPI176NMXr0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTkxODQ2Ny8wLzExNENCNDkyMTM5QTVGNUM0ODREM0UwRkIwRjIz NUVGQTM0QzVFQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZBMzRDNUVCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5MTg0NjcvMC8xMTRDQjQ5MjEzOUE1 RjVDNDg0RDNFMEZCMEYyMzVFRkEzNEM1RUJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPaKbHR+MNYw 1+SAmDAshsEWYdI1XbP2HKm/hs1sos1dAJ6ZX/a5L6briJA2FKttkdWmracjL8nG vFRD5h7UDKVVXB4fptFw80cV0nUzfcs2yKCISezZ9fOOF8Y4UavIL65lbPArwuma Ss4jpcqHc93EM1Yukf29L0VX30scV3EZ2Pob2cGqzyd4xn/P7BUzyvchwlfKPxNC tioUI4V0XfI4PXu1kF7Osah/24TkUXxQMA8Kv3OyL+gxLCi8X850BE83GNk84g0M EvWja6ctQeLtIBKSuFIIOe1zpUY6lvOiSx8uiUHWsmQ+eQw/pcI5w8nftAriZ6Lx YX+sGj4Vlw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:57 2026 by rpki-client