$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft File: 14F2AE289734C6F9223A15F482EED7503BB5C42B.mft (raw, json) Hash identifier: WsknRb5aStdJzbK32mBqWgFfXkh9itSJmO0EDUAUrOY= Subject key identifier: A8:0F:B2:0F:7A:C8:03:C4:B5:7C:A7:0E:4C:7A:26:D3:76:4D:B6:93 Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Certificate serial: 2A5FED97D9B39F808E0E907D3261C3E3F971D7C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft Manifest number: 0B Signing time: Mon 27 Apr 2026 04:18:40 +0000 Manifest this update: Mon 27 Apr 2026 04:13:40 +0000 Manifest next update: Tue 28 Apr 2026 06:08:40 +0000 Files and hashes: 1: 3132302e3133322e38382e302f32322d3232203d3e203539303839.roa (hash: mQ719dBo8AjeVcNBY2cnlvFp490X4F9JzO9bEemtk78=) 2: 3132302e3133322e38382e302f32322d3232203d3e203233373234.roa (hash: 7+ZC8yPFzf/dzFxJeP5KMrdX5vymzjGA7Kg7zZMiZFo=) 3: 14F2AE289734C6F9223A15F482EED7503BB5C42B.crl (hash: F1yh6AuQWNgLSm5RZSI1r7egPXWrhm4qJyiXyUY7HZc=) 4: 3132302e3133322e38382e302f32322d3232203d3e2039383038.roa (hash: kVDtH86KTjJ0SIKAoAsxqLxXUQxqUNK9oGhyJSXpZH4=) 5: 3132302e3133322e38382e302f32322d3232203d3e2034383038.roa (hash: 8MaiuuBuVrJs+znc9BJtvUpyHg3LI4T48lZuF5Asiq8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 06:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5f:ed:97:d9:b3:9f:80:8e:0e:90:7d:32:61:c3:e3:f9:71:d7:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Validity Not Before: Apr 27 04:13:40 2026 GMT Not After : Apr 28 06:08:40 2026 GMT Subject: CN=A80FB20F7AC803C4B57CA70E4C7A26D3764DB693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6c:a9:b3:0e:85:07:9d:84:55:7f:59:e9:74: ec:77:57:4d:7d:2f:80:a2:cf:b5:d5:29:bb:a1:77: 25:4d:de:dc:79:6b:7c:45:67:8d:62:78:bb:93:7e: 1b:c5:3d:1a:d7:4e:55:ff:45:dc:33:36:96:7e:d5: da:e8:a5:b1:c9:0d:8e:6d:7f:b7:b2:0b:0a:1f:5e: b0:4f:3c:cf:7b:76:b9:84:a1:ea:79:77:6c:bc:e7: 2d:92:a0:f1:94:65:33:e7:b7:66:54:f5:33:fd:6c: fb:b2:96:83:31:db:4b:7b:13:34:f0:a2:48:ff:5e: 7f:ab:0a:bd:12:8f:b1:7d:80:a3:d8:30:f0:0c:82: f2:04:6d:3f:7c:cd:3b:36:8a:a6:bd:3e:44:0b:05: a5:69:56:e5:28:56:f2:8f:68:66:b7:c7:88:67:44: f0:20:d1:35:19:12:54:43:b6:ce:e1:38:94:7f:07: 01:03:32:9c:35:03:01:3d:5b:5d:17:1e:03:4b:dc: 95:0a:bc:07:38:97:73:67:2d:bc:74:00:24:af:86: 09:60:b6:fc:ba:d8:ca:de:f0:ed:17:4e:d0:b7:c9: ae:27:6f:54:5a:98:27:81:44:28:54:83:04:7c:a9: 82:11:65:27:65:b1:8c:52:91:92:0e:05:39:70:74: c4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0F:B2:0F:7A:C8:03:C4:B5:7C:A7:0E:4C:7A:26:D3:76:4D:B6:93 X509v3 Authority Key Identifier: keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c9:7b:b0:c4:1a:63:4a:e5:4f:4f:c5:b6:3a:0d:cf:42:0c: 24:c1:4b:f1:f4:88:1f:5e:c3:aa:7c:ed:98:70:ce:a8:46:66: 68:87:4b:8b:e0:35:37:74:8d:5a:02:73:fe:34:67:5c:7d:cb: dc:27:e2:24:7c:df:66:b6:3d:01:db:ff:e7:18:c0:70:3b:84: bd:f6:43:e5:00:93:65:cb:15:3d:47:4e:70:4d:91:59:d2:a1: 30:54:53:42:e1:fb:2a:14:82:c0:9e:1b:4f:6d:52:e8:d9:9b: ed:a2:bf:9a:f4:4c:76:2e:f5:cb:00:84:96:f0:3f:2f:12:c7: 15:62:72:63:80:f2:ce:bf:78:8a:70:22:98:1b:00:13:9a:56: a1:62:98:64:ab:f1:f5:c2:c8:97:83:a9:ea:63:b6:a0:c7:39: ca:9d:17:47:a4:80:9e:b6:e7:90:73:f1:a6:66:58:c4:38:92: 71:df:fa:d7:9e:ad:11:f7:d3:62:f4:63:84:9c:81:1f:da:b2: 6f:6c:14:6e:fe:3f:87:29:dc:79:ac:ec:cf:c3:59:d7:b6:27: 8b:c5:92:ed:f9:a6:64:a0:e9:1c:88:f5:cb:8f:b0:80:48:2d: d4:37:4d:3c:48:7b:39:ef:c8:7a:00:d0:32:1f:3e:b2:cd:0d: eb:ae:88:35 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKl/tl9mzn4CODpB9MmHD4/lx18QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz QkI1QzQyQjAeFw0yNjA0MjcwNDEzNDBaFw0yNjA0MjgwNjA4NDBaMDMxMTAvBgNV BAMTKEE4MEZCMjBGN0FDODAzQzRCNTdDQTcwRTRDN0EyNkQzNzY0REI2OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEbKmzDoUHnYRVf1npdOx3V019 L4Ciz7XVKbuhdyVN3tx5a3xFZ41ieLuTfhvFPRrXTlX/RdwzNpZ+1dropbHJDY5t f7eyCwofXrBPPM97drmEoep5d2y85y2SoPGUZTPnt2ZU9TP9bPuyloMx20t7EzTw okj/Xn+rCr0Sj7F9gKPYMPAMgvIEbT98zTs2iqa9PkQLBaVpVuUoVvKPaGa3x4hn RPAg0TUZElRDts7hOJR/BwEDMpw1AwE9W10XHgNL3JUKvAc4l3NnLbx0ACSvhglg tvy62Mre8O0XTtC3ya4nb1RamCeBRChUgwR8qYIRZSdlsYxSkZIOBTlwdMQRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqA+yD3rIA8S1fKcOTHom03ZNtpMwHwYDVR0j BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTkzNjQ5MjgzMjM1ODQwMDEvMC8xNEYyQUUyODk3MzRD NkY5MjIzQTE1RjQ4MkVFRDc1MDNCQjVDNDJCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsl7sMQaY0rl T0/FtjoNz0IMJMFL8fSIH17DqnztmHDOqEZmaIdLi+A1N3SNWgJz/jRnXH3L3Cfi JHzfZrY9Adv/5xjAcDuEvfZD5QCTZcsVPUdOcE2RWdKhMFRTQuH7KhSCwJ4bT21S 6Nmb7aK/mvRMdi71ywCElvA/LxLHFWJyY4Dyzr94inAimBsAE5pWoWKYZKvx9cLI l4Op6mO2oMc5yp0XR6SAnrbnkHPxpmZYxDiScd/6156tEffTYvRjhJyBH9qyb2wU bv4/hynceazsz8NZ17Yni8WS7fmmZKDpHIj1y4+wgEgt1DdNPEh7Oe/IegDQMh8+ ss0N666INQ== -----END CERTIFICATE-----Generated at Mon Apr 27 15:29:47 2026 by rpki-client