$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft File: A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft (raw, json) Hash identifier: I4bNq5Wj+ELMmpUH6/u9b0XwJ4zkVzI+SryFktPYDWU= Subject key identifier: 13:7A:04:BC:C8:DA:AD:77:E6:3E:65:B9:1A:58:33:EC:14:07:01:5A Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Certificate serial: 630C20B117EC7C98A68F54510F7957C7A59FF82A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft Manifest number: 58 Signing time: Thu 26 Mar 2026 01:33:28 +0000 Manifest this update: Thu 26 Mar 2026 01:28:28 +0000 Manifest next update: Fri 27 Mar 2026 02:49:28 +0000 Files and hashes: 1: 3231312e3130322e3234302e302f32312d3231203d3e2034383437.roa (hash: OuNc19cec5VulmUoNbFwnHh6nobKP43YHzim9Y3kzD4=) 2: 3230332e38362e36302e302f32342d3234203d3e203234313437.roa (hash: BJZbR0lfoznCin3ZjtaBIQgGi5zQKhes89YrWdoFQs8=) 3: 3230332e38362e36312e302f32342d3234203d3e203234313437.roa (hash: BDN34o2PeLUuH7mUNKqvJMOmkHM7PlrsPh5Q9Hsq5P4=) 4: 3131332e3230382e3131362e302f32322d3232203d3e2034383038.roa (hash: aFwpRcl+lZeNzPOeiXM99Ies8yJ6dTHYIt0xhDzQl5M=) 5: 3231392e3233352e3139332e302f32342d3234203d3e203234313437.roa (hash: Nu0jpaTn4Fdv3bxm5NPIkyN0IrZp5kWxSz8smX/CQR8=) 6: A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl (hash: WnMqxwIa9Lzscl7i5UYCx9s9Cp9gC6vjyZTxGaL8zwM=) 7: 3230332e38362e35312e302f32342d3234203d3e203234313437.roa (hash: 5Nl4P4yjyaYsIWRUhf5zhO8ZOngx1vp1Piv9zXxY44w=) 8: 3230332e38362e36322e302f32342d3234203d3e203234313437.roa (hash: LEggqkanD8YXk+XFnT/2KdUJ9g96lm9p2YSqWsX8J9A=) 9: 3230332e38362e35322e302f32342d3234203d3e203234313437.roa (hash: r4KefndZnU7luOV0QPcOqGP6CinPwbiKpD8RZV56f5E=) 10: 3230332e38362e33322e302f31392d3234203d3e203234313437.roa (hash: XDCVULdB42agXinP9bNu7bR26p/WgU+Ydt0+EBrlVrI=) 11: 3231392e3233352e3139322e302f32342d3234203d3e203234313437.roa (hash: qtTgYatGvSNFTC6OFpTmEbcwwa3g6HwXVA0Ip2Px3xw=) 12: 3230332e38362e34352e302f32342d3234203d3e203234313437.roa (hash: Nnd05xuUr2b4yGoh1bQE2fwywCCOmLsbEnz6TIRDa1k=) 13: 3230332e38362e34382e302f32342d3234203d3e203234313437.roa (hash: ejzbVl97r5mOdJYA953Vk21BI5BB0TVZrbPRe544gDc=) 14: 3230332e38362e35342e302f32342d3234203d3e203234313437.roa (hash: JIBRdGWpBW+adIGFLzrSbUhh/kt/vlw9SyeRkgMCJM8=) 15: 3230332e38362e35342e302f32332d3233203d3e203234313437.roa (hash: qrPNPGmkS1XHHj7dvp921g1Efab04Eu3HyMUsLNZTLY=) 16: 3230332e38362e35332e302f32342d3234203d3e203234313437.roa (hash: GZW0aT1mI2ydEgJpv0mu4u+h/q8ra7gJ/fnnxsz7CP0=) 17: 3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa (hash: /iGkkIqO0FSP5CywowzeIsIdOQnf8YsmMX+nUyXOQLk=) 18: 3231392e3233352e3230372e302f32342d3234203d3e203234313437.roa (hash: Ol05ujiu93BtjhqGQ+WlieMkmygulOYjoIsurKH7T0c=) 19: 3230332e38362e34392e302f32342d3234203d3e203234313437.roa (hash: GxtOA4gw3IUgIx3k4sXIueBQkr72Q7f98AQ06CTYthw=) 20: 3230332e38362e34332e302f32342d3234203d3e203234313437.roa (hash: KAFhdO3yt9Ku7r/Veg9pGOh1yJ/ksXYA8r5t5Q9GrR4=) 21: 3230332e38362e34342e302f32342d3234203d3e203234313437.roa (hash: wIHg02Mx683aITJJCQSu1ItskF03DI8H6fuVpC8rq74=) 22: 3230332e38362e35352e302f32342d3234203d3e203234313437.roa (hash: ZojEaFjtdgor13jSa7GyZGMBWWXJenaYyF2n+BjUBOg=) 23: 3231312e3130322e3234382e302f32312d3234203d3e2034383437.roa (hash: Oq/GjpVGMUDKb7ahdv94Jw/QkvSfPPwwMawTEz511Zw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 02:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:0c:20:b1:17:ec:7c:98:a6:8f:54:51:0f:79:57:c7:a5:9f:f8:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Validity Not Before: Mar 26 01:28:28 2026 GMT Not After : Mar 27 02:49:28 2026 GMT Subject: CN=137A04BCC8DAAD77E63E65B91A5833EC1407015A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:27:69:68:03:de:bf:2a:9b:01:84:3f:e4: 6d:a1:19:fa:be:07:e1:2a:22:7f:3f:60:bc:e8:76: 4b:54:c7:e8:08:8a:22:eb:8d:19:cf:86:5e:ad:21: 0b:58:60:f8:6e:6a:cc:f0:79:47:2a:55:d6:36:ce: e7:ab:56:a0:40:68:76:d7:39:ee:92:49:b6:c4:18: d7:ff:26:e9:23:e3:67:d2:fd:3e:23:aa:3a:e1:48: db:a7:af:0e:e8:f9:e1:9b:1d:49:03:82:9c:f6:a7: 07:55:5b:c7:08:fc:2b:a6:c5:81:be:58:60:20:bc: 04:1d:3b:f1:67:64:a0:ff:63:77:be:2c:fa:b9:0b: 19:db:62:a2:36:76:a6:5a:1e:cf:3a:cf:8b:ee:be: 0a:be:5f:38:03:21:61:61:78:64:7f:ea:e6:52:84: b6:64:c2:0d:6e:02:aa:ac:ab:2d:21:ee:fd:3a:41: f1:1e:6a:bf:3d:29:7e:76:a7:e7:1d:40:ef:48:e4: 61:1f:75:09:64:d4:b8:fc:37:30:fb:dd:f6:66:e6: 61:31:ee:ec:e1:e4:ba:02:63:f1:39:4f:cc:ea:91: d6:e4:f0:5c:08:45:22:7c:08:be:ed:c6:e5:4a:bd: 28:00:4a:72:72:07:0d:20:c8:af:be:d1:6d:13:ea: 45:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7A:04:BC:C8:DA:AD:77:E6:3E:65:B9:1A:58:33:EC:14:07:01:5A X509v3 Authority Key Identifier: keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:da:d2:be:22:2e:35:14:a0:28:34:94:bf:0a:52:d5:0c:66: 45:52:3e:af:79:a2:80:e3:aa:ba:f1:c3:97:bb:2f:dd:08:f3: cb:64:2b:d3:b3:9a:64:64:40:71:c4:10:e4:e4:ae:46:e2:61: 48:42:eb:6b:b9:31:3a:c1:74:0d:ac:77:8f:08:73:c2:0a:b1: 96:84:2b:da:79:3c:1e:aa:66:f9:b9:fd:37:34:2c:11:15:af: 6d:c2:9d:90:88:56:2a:8e:bb:44:06:e1:ab:29:e9:6c:3f:1c: 0b:fe:59:a7:4c:79:ad:bb:8d:96:50:f2:da:af:c8:1c:02:33: a7:95:4a:9a:0f:0f:cc:b5:15:ef:40:10:80:24:bf:a5:b6:3c: 60:ec:bf:3e:26:51:59:80:dd:96:8f:8e:5d:8f:78:2c:dd:e4: e0:d1:4c:70:b1:bf:d6:11:90:fc:61:b8:89:d8:d6:4b:00:31: c9:62:f2:0e:59:05:28:52:04:82:1e:d1:bf:c5:a8:f7:18:94: dc:03:c3:4c:42:72:aa:03:c7:5f:ed:c8:b5:a3:b0:5f:09:48: 01:b4:1b:11:ca:e0:a7:1b:2b:51:e3:d7:f1:cf:02:32:70:3c: da:36:28:de:6e:86:ec:f4:55:87:35:d1:08:e2:e1:b0:57:a5: f3:50:9b:0f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYwwgsRfsfJimj1RRD3lXx6Wf+CowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUz MTYzQ0ZDMTAeFw0yNjAzMjYwMTI4MjhaFw0yNjAzMjcwMjQ5MjhaMDMxMTAvBgNV BAMTKDEzN0EwNEJDQzhEQUFENzdFNjNFNjVCOTFBNTgzM0VDMTQwNzAxNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvydpaAPevyqbAYQ/5G2hGfq+ B+EqIn8/YLzodktUx+gIiiLrjRnPhl6tIQtYYPhuaszweUcqVdY2zuerVqBAaHbX Oe6SSbbEGNf/Jukj42fS/T4jqjrhSNunrw7o+eGbHUkDgpz2pwdVW8cI/CumxYG+ WGAgvAQdO/FnZKD/Y3e+LPq5CxnbYqI2dqZaHs86z4vuvgq+XzgDIWFheGR/6uZS hLZkwg1uAqqsqy0h7v06QfEear89KX52p+cdQO9I5GEfdQlk1Lj8NzD73fZm5mEx 7uzh5LoCY/E5T8zqkdbk8FwIRSJ8CL7txuVKvSgASnJyBw0gyK++0W0T6kV3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUE3oEvMjarXfmPmW5Glgz7BQHAVowHwYDVR0j BBgwFoAUoUxUMaAHL1vYgkLapXFp7jFjz8EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODA3NTAxMS8wL0ExNEM1NDMxQTAwNzJGNUJEODgyNDJEQUE1NzE2 OUVFMzE2M0NGQzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUzMTYzQ0ZDMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgwNzUwMTEvMC9BMTRDNTQzMUEwMDcy RjVCRDg4MjQyREFBNTcxNjlFRTMxNjNDRkMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINrSviIuNRSg KDSUvwpS1QxmRVI+r3migOOquvHDl7sv3Qjzy2Qr07OaZGRAccQQ5OSuRuJhSELr a7kxOsF0Dax3jwhzwgqxloQr2nk8Hqpm+bn9NzQsERWvbcKdkIhWKo67RAbhqynp bD8cC/5Zp0x5rbuNllDy2q/IHAIzp5VKmg8PzLUV70AQgCS/pbY8YOy/PiZRWYDd lo+OXY94LN3k4NFMcLG/1hGQ/GG4idjWSwAxyWLyDlkFKFIEgh7Rv8Wo9xiU3APD TEJyqgPHX+3ItaOwXwlIAbQbEcrgpxsrUePX8c8CMnA82jYo3m6G7PRVhzXRCOLh sFel81CbDw== -----END CERTIFICATE-----Generated at Thu Mar 26 18:50:13 2026 by rpki-client