
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
File: 14F2AE289734C6F9223A15F482EED7503BB5C42B.mft (raw, json)
Hash identifier: b7Ti0EWpiXXMAlaXzSIdMbWWF40ZdQC1DcbgFqit0v4=
Subject key identifier: E9:64:9B:28:6A:D0:FE:19:96:36:83:49:C7:7A:13:63:92:DF:62:BB
Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B
Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
Certificate serial: 585551E6629C786A99131CA320AE6ED2FC624C10
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
Manifest number: 0118
Signing time: Sat 24 Oct 2026 16:41:49 +0000
Manifest this update: Sat 24 Oct 2026 16:36:49 +0000
Manifest next update: Tue 27 Oct 2026 18:26:49 +0000
Files and hashes: 1: 14F2AE289734C6F9223A15F482EED7503BB5C42B.crl (hash: ygmnt4FKcJ9Jeu4RePNSf8VNtr/MHSyr0rBPwOcNxzA=)
2: AS140717.roa (hash: F4vKDqd+oRuW+dD54h6Z5jvEABTrqdWIPSBZ4SXxlOc=)
3: AS4837.roa (hash: kaEOXHZ7gIhA8ZFL/Oz9k85AhlXsPEgPXsDitwFjc2s=)
4: AS4808.roa (hash: z2TYzvlcywDhL0dWprMULk+6uLpj22l1z9RTTmZtv9E=)
5: AS56046.roa (hash: wQaqBuQrNgi2Ezg6k6Tc0z3rRSK0zo5E90jO2sXzVVE=)
6: AS9808.roa (hash: iZ56dlkspGmh1ahvcPF/GFXsutuOvohlkxlEb5OgMA8=)
7: AS58466.roa (hash: LM9JbG7lyreiz1D+ixqDOBz5SUXAnqgEmr0CR4xkMW4=)
8: AS140292.roa (hash: wtC9Q7BhiYUo1Gn7JyysCgjfucI9tOaarVKcHpoqhxw=)
9: AS59089.roa (hash: ZTGG8hi/6ZD5YswkILRzPPrQMQwDyrtkUiOkaThWQjk=)
10: AS136958.roa (hash: 1lLdYSrnIRbEu4dxKFeTEI02kvxqoyt4CS47V2g0UBk=)
11: AS56040.roa (hash: S03Z930RtSoH79KDzS2k8drefwtjoeI56VCdlze2G38=)
12: AS23724.roa (hash: bXSOnuLFHwQ6WEShOo71xL2UuGOMqnSeoYRb0VKmFcM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl
rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 18:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:55:51:e6:62:9c:78:6a:99:13:1c:a3:20:ae:6e:d2:fc:62:4c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
Validity
Not Before: Oct 24 16:36:49 2026 GMT
Not After : Oct 27 18:26:49 2026 GMT
Subject: CN=E9649B286AD0FE1996368349C77A136392DF62BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6f:49:42:8d:8d:dc:4d:ff:22:af:23:7b:f3:
d1:27:0e:86:a9:6b:28:d4:61:4a:c2:11:d3:e5:24:
aa:e5:dd:d1:3a:2f:e6:bd:9c:5b:f8:8f:b0:57:89:
19:db:09:cd:d2:95:8f:78:7a:37:9c:3d:5f:10:64:
73:38:49:2f:5f:34:13:15:4e:e6:94:ba:3b:20:13:
7e:01:5b:fb:e1:b1:9e:8d:e6:43:38:73:97:4d:c4:
45:a9:49:ad:9e:e7:e6:4b:83:e0:fa:e0:fd:d1:29:
35:85:9c:8f:ee:1b:3e:ae:52:ec:48:6a:1a:87:56:
50:69:9e:3e:5e:be:f5:72:9b:a0:5d:79:a4:75:70:
05:05:a1:49:88:c0:24:f8:7a:04:e8:2e:52:a7:86:
97:cf:ed:e2:28:55:20:3f:ae:c5:66:b8:8d:c5:25:
b7:c8:4f:eb:82:2d:f3:8a:30:b8:4f:5f:56:dc:cd:
69:2a:6f:b5:f0:61:11:04:59:37:03:c8:3d:a9:e0:
59:df:8c:ad:8e:30:dc:68:c4:a0:d9:45:99:b1:d7:
24:32:c3:91:af:ae:b5:33:14:07:f7:17:17:f8:0e:
33:1c:65:50:7a:ed:3c:06:43:ac:a4:a2:d0:03:24:
f6:c2:80:d5:05:ce:c4:0d:d4:27:7a:5e:10:92:35:
1f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:64:9B:28:6A:D0:FE:19:96:36:83:49:C7:7A:13:63:92:DF:62:BB
X509v3 Authority Key Identifier:
keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5d:63:34:78:6d:e8:c8:4f:4a:06:79:b6:61:58:dc:cf:21:
75:0d:25:b4:24:a4:b3:96:2c:48:c2:ac:5b:56:8e:49:bb:64:
74:4f:02:17:fc:4a:40:77:23:4c:a5:e5:55:96:3d:87:22:28:
2a:7c:9d:b0:cd:ef:92:38:69:3e:8b:ee:7f:dd:15:56:dd:b4:
60:f9:45:aa:32:35:72:49:73:65:04:b1:15:5d:ab:4d:d5:a9:
ea:80:65:69:bd:72:01:75:2d:5e:69:96:94:35:27:8b:1e:90:
c1:41:8e:46:41:09:41:39:9d:42:22:bd:c9:76:a2:9b:9d:c5:
59:37:f1:21:8c:97:33:7a:a6:1b:f3:a1:a1:ce:8e:ee:48:ce:
e6:3c:d7:78:c9:93:fd:f4:56:94:ca:a4:70:1c:c1:a6:86:c5:
94:ac:4f:28:d3:9c:70:27:f0:d0:c1:22:90:77:54:1c:ca:5b:
2e:a3:96:a1:78:d5:ee:c1:be:73:8f:c7:c9:a7:59:72:63:2a:
7c:a1:bb:11:ce:53:bd:41:b8:7d:b4:bd:68:1f:a0:f3:cd:16:
be:8f:ff:5d:6d:2c:91:e9:7a:ae:c7:ea:f3:50:0b:fa:5f:cb:
9e:5b:db:db:93:28:ea:0d:61:04:71:24:4e:02:bc:4c:a6:9b:
34:ee:24:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:45:56 2026 by rpki-client