
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
File: A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft (raw, json)
Hash identifier: lYWzMZvt3qbqsW5M6OHea6ubjmfSJu1dg01PxvzqOAE=
Subject key identifier: 28:4B:8D:3A:FB:11:D1:D9:AE:93:15:8B:4E:97:44:BD:6F:53:14:D5
Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
Certificate issuer: /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Certificate serial: 7CD4E087E259C15B2DD5F915086740F1269523E1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
Manifest number: 98
Signing time: Wed 13 May 2026 06:11:00 +0000
Manifest this update: Wed 13 May 2026 06:06:00 +0000
Manifest next update: Thu 14 May 2026 08:40:00 +0000
Files and hashes: 1: 3131332e3230382e3131362e302f32322d3232203d3e2034383038.roa (hash: aFwpRcl+lZeNzPOeiXM99Ies8yJ6dTHYIt0xhDzQl5M=)
2: 3231312e3130322e3234302e302f32312d3231203d3e2034383437.roa (hash: OuNc19cec5VulmUoNbFwnHh6nobKP43YHzim9Y3kzD4=)
3: 3230332e38362e36312e302f32342d3234203d3e203234313437.roa (hash: BDN34o2PeLUuH7mUNKqvJMOmkHM7PlrsPh5Q9Hsq5P4=)
4: 3231392e3233352e3230372e302f32342d3234203d3e203234313437.roa (hash: Ol05ujiu93BtjhqGQ+WlieMkmygulOYjoIsurKH7T0c=)
5: 3230332e38362e33322e302f31392d3234203d3e203234313437.roa (hash: XDCVULdB42agXinP9bNu7bR26p/WgU+Ydt0+EBrlVrI=)
6: 3231312e3130322e3234382e302f32312d3234203d3e2034383437.roa (hash: Oq/GjpVGMUDKb7ahdv94Jw/QkvSfPPwwMawTEz511Zw=)
7: 3230332e38362e36302e302f32342d3234203d3e203234313437.roa (hash: BJZbR0lfoznCin3ZjtaBIQgGi5zQKhes89YrWdoFQs8=)
8: 3231392e3233352e3139332e302f32342d3234203d3e203234313437.roa (hash: Nu0jpaTn4Fdv3bxm5NPIkyN0IrZp5kWxSz8smX/CQR8=)
9: 3230332e38362e34382e302f32342d3234203d3e203234313437.roa (hash: ejzbVl97r5mOdJYA953Vk21BI5BB0TVZrbPRe544gDc=)
10: 3231392e3233352e3139322e302f32342d3234203d3e203234313437.roa (hash: qtTgYatGvSNFTC6OFpTmEbcwwa3g6HwXVA0Ip2Px3xw=)
11: A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl (hash: LRurpygIdRSNzJEPbNffJYkAg8ahzerALf3L7E16/yM=)
12: 3230332e38362e35322e302f32342d3234203d3e203234313437.roa (hash: r4KefndZnU7luOV0QPcOqGP6CinPwbiKpD8RZV56f5E=)
13: 3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa (hash: /iGkkIqO0FSP5CywowzeIsIdOQnf8YsmMX+nUyXOQLk=)
14: 3230332e38362e34392e302f32342d3234203d3e203234313437.roa (hash: GxtOA4gw3IUgIx3k4sXIueBQkr72Q7f98AQ06CTYthw=)
15: 3230332e38362e34342e302f32342d3234203d3e203234313437.roa (hash: wIHg02Mx683aITJJCQSu1ItskF03DI8H6fuVpC8rq74=)
16: 3230332e38362e34332e302f32342d3234203d3e203234313437.roa (hash: KAFhdO3yt9Ku7r/Veg9pGOh1yJ/ksXYA8r5t5Q9GrR4=)
17: 3230332e38362e35312e302f32342d3234203d3e203234313437.roa (hash: 5Nl4P4yjyaYsIWRUhf5zhO8ZOngx1vp1Piv9zXxY44w=)
18: 3230332e38362e36322e302f32342d3234203d3e203234313437.roa (hash: LEggqkanD8YXk+XFnT/2KdUJ9g96lm9p2YSqWsX8J9A=)
19: 3230332e38362e35342e302f32332d3233203d3e203234313437.roa (hash: qrPNPGmkS1XHHj7dvp921g1Efab04Eu3HyMUsLNZTLY=)
20: 3230332e38362e35352e302f32342d3234203d3e203234313437.roa (hash: ZojEaFjtdgor13jSa7GyZGMBWWXJenaYyF2n+BjUBOg=)
21: 3230332e38362e35342e302f32342d3234203d3e203234313437.roa (hash: JIBRdGWpBW+adIGFLzrSbUhh/kt/vlw9SyeRkgMCJM8=)
22: 3230332e38362e34352e302f32342d3234203d3e203234313437.roa (hash: Nnd05xuUr2b4yGoh1bQE2fwywCCOmLsbEnz6TIRDa1k=)
23: 3230332e38362e35332e302f32342d3234203d3e203234313437.roa (hash: GZW0aT1mI2ydEgJpv0mu4u+h/q8ra7gJ/fnnxsz7CP0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:d4:e0:87:e2:59:c1:5b:2d:d5:f9:15:08:67:40:f1:26:95:23:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Validity
Not Before: May 13 06:06:00 2026 GMT
Not After : May 14 08:40:00 2026 GMT
Subject: CN=284B8D3AFB11D1D9AE93158B4E9744BD6F5314D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:17:a1:2d:c3:2e:ff:bc:1e:57:27:07:fb:
7c:cb:af:63:b5:85:fd:30:57:9d:42:67:4b:20:b8:
28:54:10:50:56:af:64:1a:c3:02:c2:e2:a0:c0:ab:
b3:fe:23:07:d9:da:31:3e:8a:83:54:33:7a:cd:21:
0d:d4:c9:51:47:38:02:a1:0e:c9:77:53:2b:00:0b:
a7:fb:b7:3c:b4:dc:81:42:c5:a3:3e:a8:d2:30:3b:
58:93:2b:ee:a3:24:cf:55:a6:b0:07:a9:99:9b:ab:
75:cb:60:dd:25:34:dd:91:4d:84:72:dd:30:ac:5b:
da:9a:9d:3e:1d:ec:bf:9a:7e:73:00:ab:88:fc:a4:
21:5b:d3:7a:b0:f3:a9:48:7c:8b:ba:b1:2e:52:ca:
5e:a8:08:8b:e2:a2:97:86:78:25:2c:39:6e:81:9d:
c5:12:cb:2c:c4:e1:1f:e4:0a:f3:8e:da:e8:de:70:
0a:c1:b7:60:17:02:c5:6a:c9:92:5a:65:7a:ff:75:
6d:11:e3:43:04:76:bf:00:53:e3:2c:bb:51:73:2a:
ca:18:29:82:fd:4f:89:97:18:4b:41:a5:4b:63:65:
17:81:e8:89:20:d7:87:62:18:d1:da:bd:d0:33:75:
0e:d9:cb:bd:d7:e8:75:77:f2:f1:8b:97:66:dc:60:
20:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4B:8D:3A:FB:11:D1:D9:AE:93:15:8B:4E:97:44:BD:6F:53:14:D5
X509v3 Authority Key Identifier:
keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:12:f4:a4:b4:b0:27:e4:96:02:3c:e9:fd:f0:8b:b8:1c:a3:
65:b4:b9:b6:e3:09:ff:f9:0d:62:c4:4c:4a:85:fd:08:b3:9e:
7f:cb:f6:06:7c:57:9f:ab:b2:58:5c:76:5c:ad:e3:9e:9e:e1:
71:74:d7:9b:c4:62:a1:c1:e2:2d:ed:ea:6e:4a:15:06:8d:02:
94:59:58:29:2c:91:22:90:69:2b:ff:94:14:5e:31:23:f0:9d:
02:1a:1b:04:d1:c2:f9:21:de:0c:cc:1e:52:5c:90:3a:05:96:
f3:e2:b8:0b:09:a4:78:a0:42:9d:67:3e:0d:5e:1f:46:be:2d:
73:1e:cb:0f:e6:a1:5f:51:66:8c:53:30:1f:f3:94:05:47:0a:
62:50:e9:07:4d:65:e0:b5:1f:be:54:b1:72:fb:a8:2d:91:ec:
d6:ca:91:39:8c:8e:3f:4f:ad:c0:ad:78:ae:b3:c3:f1:ff:dd:
63:90:94:4d:42:21:f8:5a:25:91:1d:27:d3:be:5f:be:0d:69:
ad:0b:21:b5:28:85:18:7f:19:36:23:cb:33:9c:a4:8b:f5:82:
16:75:be:21:16:ca:8f:aa:2d:44:21:12:a4:20:84:d9:f3:9e:
9c:4a:f5:55:1d:03:3c:41:4a:3a:79:1c:77:a9:80:c2:dd:7c:
b0:13:3a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:38:13 2026 by rpki-client