$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft File: 14F2AE289734C6F9223A15F482EED7503BB5C42B.mft (raw, json) Hash identifier: +jAX1yxTR0odyzfkqPvbPPM1yO6ayRNPZqc+S6VaTkE= Subject key identifier: 07:D3:FF:85:AB:38:7D:33:DF:7E:57:10:81:61:02:6C:64:FA:E1:94 Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Certificate serial: 288ED2CCEBA2CDE3A1E057431F9BD9181046DA24 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft Manifest number: AD Signing time: Mon 27 Jul 2026 07:08:39 +0000 Manifest this update: Mon 27 Jul 2026 07:03:39 +0000 Manifest next update: Tue 28 Jul 2026 07:15:39 +0000 Files and hashes: 1: AS59089.roa (hash: FZ2amEc2jacY0MY1b77loa5TKv2CCD6wo9elT+pF2zo=) 2: AS9808.roa (hash: iZ56dlkspGmh1ahvcPF/GFXsutuOvohlkxlEb5OgMA8=) 3: 14F2AE289734C6F9223A15F482EED7503BB5C42B.crl (hash: 6VOIKFYAQMJbFJH6v08Yqe0rehkk5xIAjbULS54oVzg=) 4: AS56040.roa (hash: iYGl/gNHGLrzYh+vcqbWhBRoH/rRahPy0AthZgqClSI=) 5: AS23724.roa (hash: bXSOnuLFHwQ6WEShOo71xL2UuGOMqnSeoYRb0VKmFcM=) 6: AS58466.roa (hash: LM9JbG7lyreiz1D+ixqDOBz5SUXAnqgEmr0CR4xkMW4=) 7: AS136958.roa (hash: 1lLdYSrnIRbEu4dxKFeTEI02kvxqoyt4CS47V2g0UBk=) 8: AS56046.roa (hash: wQaqBuQrNgi2Ezg6k6Tc0z3rRSK0zo5E90jO2sXzVVE=) 9: AS140717.roa (hash: F4vKDqd+oRuW+dD54h6Z5jvEABTrqdWIPSBZ4SXxlOc=) 10: AS4837.roa (hash: kaEOXHZ7gIhA8ZFL/Oz9k85AhlXsPEgPXsDitwFjc2s=) 11: AS4808.roa (hash: z2TYzvlcywDhL0dWprMULk+6uLpj22l1z9RTTmZtv9E=) 12: AS140292.roa (hash: wtC9Q7BhiYUo1Gn7JyysCgjfucI9tOaarVKcHpoqhxw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 07:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:8e:d2:cc:eb:a2:cd:e3:a1:e0:57:43:1f:9b:d9:18:10:46:da:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Validity Not Before: Jul 27 07:03:39 2026 GMT Not After : Jul 28 07:15:39 2026 GMT Subject: CN=07D3FF85AB387D33DF7E57108161026C64FAE194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:47:dd:f7:87:32:9e:03:8f:cc:a7:7d:d0:cf: 03:6a:3e:1e:e4:60:98:cb:6b:16:5f:8a:a0:2f:99: 13:4f:2b:8c:95:de:93:68:27:83:2e:a8:ce:37:74: 0a:47:97:93:c6:f9:7e:e6:87:a8:a9:9d:26:7d:e9: c5:aa:f5:4a:c5:1e:fa:0d:36:96:1b:36:7b:b4:9c: c4:0f:1f:06:a4:9a:3d:60:74:74:21:f3:5d:d8:28: 81:ed:1e:e4:7c:d1:b0:12:4b:ce:56:53:70:dc:9c: f6:7a:a9:4b:8e:01:c2:cf:c0:00:96:b0:d1:db:13: eb:91:94:e3:23:59:f7:78:79:a1:3c:5c:5c:0f:bf: ee:73:7d:66:d1:b6:db:4f:70:f0:2f:eb:ff:8b:7a: d8:d2:1c:74:ad:2c:9d:4a:86:48:8c:4b:26:46:87: 53:ab:03:73:5c:f6:88:d6:ec:f6:5b:cf:bc:9f:4a: 32:8a:bd:2f:b0:ad:3a:86:08:2f:df:0f:58:ee:b4: eb:b1:da:f9:ff:b9:a6:dd:20:fc:94:54:10:9f:cb: 99:ea:4a:e0:22:d1:2f:93:62:b4:64:c5:d5:26:19: 88:63:50:b4:d8:ea:38:1b:27:1f:65:a7:a6:14:21: 5b:32:14:33:f5:f5:2e:04:76:b9:a1:12:f2:4e:c4: eb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D3:FF:85:AB:38:7D:33:DF:7E:57:10:81:61:02:6C:64:FA:E1:94 X509v3 Authority Key Identifier: keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:60:48:89:4e:c9:93:9a:a7:63:40:63:fc:2e:97:14:ba:70: ba:9e:15:e5:6b:e8:2a:d3:bc:58:b2:ca:61:2b:2d:f0:03:45: ee:80:4f:ea:62:53:83:51:3e:47:29:9b:42:dc:09:e6:ef:88: 4c:40:c0:62:9c:63:8f:0b:a9:26:92:98:a8:4d:08:7e:c3:8e: d3:4e:5c:e8:00:ea:08:53:2e:e2:f3:49:91:3b:16:d5:a2:61: c8:8b:94:43:0f:3e:9b:43:8e:b7:14:e0:b1:cb:10:b0:2d:14: 01:27:07:d9:a0:f0:24:41:4d:2d:5c:cc:a2:07:48:82:8b:6d: 0a:0d:ac:5d:1b:70:37:83:44:e7:ab:7a:e7:8f:b1:e7:63:a1: 51:04:15:52:30:8a:c0:1c:db:53:70:49:dc:f8:27:cb:34:1e: db:8f:ac:2a:4a:89:a4:a8:2c:a0:96:c7:33:2c:77:5d:0a:55: cb:53:6f:69:9e:55:ef:80:26:a9:d4:34:f8:bf:9e:d1:83:95: bd:3f:e5:42:49:42:3f:b9:82:0a:b2:fa:1c:0e:b8:79:30:8e: 49:41:67:4d:42:1d:58:dc:37:6e:5a:84:79:a4:96:cf:fd:cc: 58:e7:4c:9b:0d:63:fb:6a:80:d0:c5:d9:1a:9a:b6:f6:d3:bf: bc:51:68:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKI7SzOuizeOh4FdDH5vZGBBG2iQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz QkI1QzQyQjAeFw0yNjA3MjcwNzAzMzlaFw0yNjA3MjgwNzE1MzlaMDMxMTAvBgNV BAMTKDA3RDNGRjg1QUIzODdEMzNERjdFNTcxMDgxNjEwMjZDNjRGQUUxOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0R933hzKeA4/Mp33QzwNqPh7k YJjLaxZfiqAvmRNPK4yV3pNoJ4MuqM43dApHl5PG+X7mh6ipnSZ96cWq9UrFHvoN NpYbNnu0nMQPHwakmj1gdHQh813YKIHtHuR80bASS85WU3DcnPZ6qUuOAcLPwACW sNHbE+uRlOMjWfd4eaE8XFwPv+5zfWbRtttPcPAv6/+LetjSHHStLJ1KhkiMSyZG h1OrA3Nc9ojW7PZbz7yfSjKKvS+wrTqGCC/fD1jutOux2vn/uabdIPyUVBCfy5nq SuAi0S+TYrRkxdUmGYhjULTY6jgbJx9lp6YUIVsyFDP19S4EdrmhEvJOxOsXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUB9P/has4fTPfflcQgWECbGT64ZQwHwYDVR0j BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTkzNjQ5MjgzMjM1ODQwMDEvMC8xNEYyQUUyODk3MzRD NkY5MjIzQTE1RjQ4MkVFRDc1MDNCQjVDNDJCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2BIiU7Jk5qn Y0Bj/C6XFLpwup4V5WvoKtO8WLLKYSst8ANF7oBP6mJTg1E+RymbQtwJ5u+ITEDA YpxjjwupJpKYqE0IfsOO005c6ADqCFMu4vNJkTsW1aJhyIuUQw8+m0OOtxTgscsQ sC0UAScH2aDwJEFNLVzMogdIgottCg2sXRtwN4NE56t654+x52OhUQQVUjCKwBzb U3BJ3PgnyzQe24+sKkqJpKgsoJbHMyx3XQpVy1NvaZ5V74AmqdQ0+L+e0YOVvT/l QklCP7mCCrL6HA64eTCOSUFnTUIdWNw3blqEeaSWz/3MWOdMmw1j+2qA0MXZGpq2 9tO/vFFozg== -----END CERTIFICATE-----Generated at Mon Jul 27 11:15:43 2026 by rpki-client