$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft File: 14F2AE289734C6F9223A15F482EED7503BB5C42B.mft (raw, json) Hash identifier: ybg9kvS2nKmoaSYZm7mCkhF5uO4xdFnqcBtFUTJBUDc= Subject key identifier: E2:72:34:09:83:51:AD:C2:73:5E:DF:14:B5:C4:39:71:80:35:7E:B7 Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Certificate serial: 0576EB53C6743B3F1E3A4E83075E55F8E826850B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft Manifest number: 0104 Signing time: Tue 08 Sep 2026 15:09:23 +0000 Manifest this update: Tue 08 Sep 2026 15:04:23 +0000 Manifest next update: Fri 11 Sep 2026 17:09:23 +0000 Files and hashes: 1: AS59089.roa (hash: ZTGG8hi/6ZD5YswkILRzPPrQMQwDyrtkUiOkaThWQjk=) 2: 14F2AE289734C6F9223A15F482EED7503BB5C42B.crl (hash: mcwzQENI/Y1ORi8Kcr9MqGUNXnDVk7xOgVuV0M5J73Y=) 3: AS140717.roa (hash: F4vKDqd+oRuW+dD54h6Z5jvEABTrqdWIPSBZ4SXxlOc=) 4: AS23724.roa (hash: bXSOnuLFHwQ6WEShOo71xL2UuGOMqnSeoYRb0VKmFcM=) 5: AS4808.roa (hash: z2TYzvlcywDhL0dWprMULk+6uLpj22l1z9RTTmZtv9E=) 6: AS56040.roa (hash: S03Z930RtSoH79KDzS2k8drefwtjoeI56VCdlze2G38=) 7: AS56046.roa (hash: wQaqBuQrNgi2Ezg6k6Tc0z3rRSK0zo5E90jO2sXzVVE=) 8: AS4837.roa (hash: kaEOXHZ7gIhA8ZFL/Oz9k85AhlXsPEgPXsDitwFjc2s=) 9: AS58466.roa (hash: LM9JbG7lyreiz1D+ixqDOBz5SUXAnqgEmr0CR4xkMW4=) 10: AS140292.roa (hash: wtC9Q7BhiYUo1Gn7JyysCgjfucI9tOaarVKcHpoqhxw=) 11: AS136958.roa (hash: 1lLdYSrnIRbEu4dxKFeTEI02kvxqoyt4CS47V2g0UBk=) 12: AS9808.roa (hash: iZ56dlkspGmh1ahvcPF/GFXsutuOvohlkxlEb5OgMA8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:76:eb:53:c6:74:3b:3f:1e:3a:4e:83:07:5e:55:f8:e8:26:85:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Validity Not Before: Sep 8 15:04:23 2026 GMT Not After : Sep 11 17:09:23 2026 GMT Subject: CN=E27234098351ADC2735EDF14B5C4397180357EB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f2:1a:d7:d5:94:3c:f7:75:dd:ab:eb:97:9f: ba:a7:e1:ac:78:65:db:3f:cc:3e:a4:31:af:ef:bb: f6:ab:59:36:03:e0:7b:30:fb:48:4b:e8:91:e8:14: e4:af:ae:a4:2b:c6:fb:50:d9:47:8f:c7:59:50:8d: 90:e9:19:87:bc:49:3b:81:4b:1a:17:91:c0:33:bc: 83:4d:dc:f7:5e:a6:01:e3:f8:ab:8d:50:78:b4:12: 56:b4:b4:9f:67:b8:93:28:d0:94:0f:26:ee:b1:27: 72:df:eb:5a:d1:c4:f5:97:96:ba:6f:f7:df:cd:70: 61:ce:87:9f:10:a1:e9:2c:20:af:80:c3:f2:4a:91: 36:54:b7:00:6b:43:9a:dc:c2:c6:c9:0e:cb:89:6f: 9f:61:30:e0:4e:2e:2a:4b:73:41:a8:3a:e6:d6:a7: 07:14:70:0c:eb:97:9c:b6:36:9c:0b:c8:f8:81:27: 69:2b:cf:23:ba:dc:29:73:c5:a0:82:6d:98:35:f5: 9e:23:c9:c4:59:9b:12:6b:f3:49:7a:d3:38:d2:32: 3b:51:81:af:d6:d1:14:b0:35:83:d5:49:c1:e3:c7: fa:98:c6:6c:af:b2:a3:85:a7:ea:25:41:1e:a9:32: e2:98:2c:9b:a8:9c:c0:c3:db:3c:c0:a5:3a:c3:08: 42:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:72:34:09:83:51:AD:C2:73:5E:DF:14:B5:C4:39:71:80:35:7E:B7 X509v3 Authority Key Identifier: keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:3e:ff:83:db:9a:c9:2d:13:89:ad:a8:ce:fa:bb:5a:c0:35: 31:bb:62:47:88:03:d1:00:d9:84:5f:2c:1f:b8:82:ca:5d:aa: f3:b6:73:8b:5c:70:ec:25:d0:39:91:7d:12:bf:bd:63:ea:8f: a2:9d:ea:9f:64:b6:70:d4:ce:ae:0a:7b:ff:d9:b2:bc:ca:25: bf:ec:43:8f:d7:75:95:2c:15:bf:b2:bd:80:33:b9:27:e9:5d: c9:1b:43:56:99:95:33:62:d4:c7:c7:82:95:15:a7:04:8c:fa: 71:ee:8a:83:59:dc:33:bc:c8:fb:3a:0f:92:6e:93:74:da:60: 11:66:d2:2b:f6:07:92:ba:3d:5a:cc:e2:2b:3c:7a:7d:ca:58: de:4b:d0:63:51:1e:f4:e3:ad:15:e2:91:9b:76:4f:86:06:a5: 11:e6:6b:66:af:9c:8f:3f:3e:f8:69:71:ee:e6:3e:5e:19:7e: 98:15:6c:34:b3:da:b1:32:8a:e4:70:f6:9a:c5:ad:d8:eb:7b: 4b:38:4e:62:60:56:8a:31:0f:da:b6:2b:bc:69:f2:a6:a2:e3: 78:f6:99:ce:21:6e:08:fd:ce:09:88:b9:bb:87:f9:a3:8e:25: 37:6b:15:10:be:8a:27:c2:a1:75:b5:8a:22:1b:6f:18:60:ca: b1:0b:94:cb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBXbrU8Z0Oz8eOk6DB15V+OgmhQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz QkI1QzQyQjAeFw0yNjA5MDgxNTA0MjNaFw0yNjA5MTExNzA5MjNaMDMxMTAvBgNV BAMTKEUyNzIzNDA5ODM1MUFEQzI3MzVFREYxNEI1QzQzOTcxODAzNTdFQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx8hrX1ZQ893Xdq+uXn7qn4ax4 Zds/zD6kMa/vu/arWTYD4Hsw+0hL6JHoFOSvrqQrxvtQ2UePx1lQjZDpGYe8STuB SxoXkcAzvINN3PdepgHj+KuNUHi0Ela0tJ9nuJMo0JQPJu6xJ3Lf61rRxPWXlrpv 99/NcGHOh58QoeksIK+Aw/JKkTZUtwBrQ5rcwsbJDsuJb59hMOBOLipLc0GoOubW pwcUcAzrl5y2NpwLyPiBJ2krzyO63ClzxaCCbZg19Z4jycRZmxJr80l60zjSMjtR ga/W0RSwNYPVScHjx/qYxmyvsqOFp+olQR6pMuKYLJuonMDD2zzApTrDCEKdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4nI0CYNRrcJzXt8UtcQ5cYA1frcwHwYDVR0j BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTkzNjQ5MjgzMjM1ODQwMDEvMC8xNEYyQUUyODk3MzRD NkY5MjIzQTE1RjQ4MkVFRDc1MDNCQjVDNDJCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUz7/g9uayS0T ia2ozvq7WsA1MbtiR4gD0QDZhF8sH7iCyl2q87Zzi1xw7CXQOZF9Er+9Y+qPop3q n2S2cNTOrgp7/9myvMolv+xDj9d1lSwVv7K9gDO5J+ldyRtDVpmVM2LUx8eClRWn BIz6ce6Kg1ncM7zI+zoPkm6TdNpgEWbSK/YHkro9WsziKzx6fcpY3kvQY1Ee9OOt FeKRm3ZPhgalEeZrZq+cjz8++Glx7uY+Xhl+mBVsNLPasTKK5HD2msWt2Ot7SzhO YmBWijEP2rYrvGnypqLjePaZziFuCP3OCYi5u4f5o44lN2sVEL6KJ8KhdbWKIhtv GGDKsQuUyw== -----END CERTIFICATE-----Generated at Thu Sep 10 14:04:18 2026 by rpki-client