
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft
File: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft (raw, json)
Hash identifier: hNAdYgQFoKqLJUCH+vOSDFilh1c9tmspP32WWEz0Kvk=
Subject key identifier: B2:38:D1:78:75:3E:44:0E:2D:2F:49:40:3C:28:2A:FA:B4:8E:16:31
Authority key identifier: 11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD
Certificate issuer: /CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD
Certificate serial: 1C934AC6D57434CE6D6CC759F3E5400D1A35885C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft
Manifest number: 98
Signing time: Wed 13 May 2026 03:55:55 +0000
Manifest this update: Wed 13 May 2026 03:50:55 +0000
Manifest next update: Thu 14 May 2026 04:25:55 +0000
Files and hashes: 1: 3130332e36372e3137342e302f32342d3234203d3e20313333313939.roa (hash: +lmwIsVwUKU3fDx85LpvNKXD+KIwMRfnuwxwq6ORUYQ=)
2: 3130332e36372e3137332e302f32342d3234203d3e20313333313939.roa (hash: LsfX/Qz7oiSmvhoASN2bYrrYlqmPqtrZrf42D4a7EoY=)
3: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl (hash: n2zWUL5O/7TOJLV+70zDot1KtqCBZ2xKFFLDQe3bCOE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:25:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:93:4a:c6:d5:74:34:ce:6d:6c:c7:59:f3:e5:40:0d:1a:35:88:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD
Validity
Not Before: May 13 03:50:55 2026 GMT
Not After : May 14 04:25:55 2026 GMT
Subject: CN=B238D178753E440E2D2F49403C282AFAB48E1631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:5b:67:1f:54:12:73:58:ee:b1:8a:48:5c:
94:7b:cd:55:b1:9e:71:bf:26:83:f3:dd:ae:b7:92:
51:05:00:5e:a5:ec:e6:46:12:c7:eb:0d:10:8e:da:
9d:24:1d:8e:5d:83:63:4d:92:fb:07:a8:0b:99:b2:
ef:be:67:fa:85:f4:c6:d1:a7:a0:7c:16:97:d8:91:
ea:97:79:4f:fa:03:7b:c6:48:01:06:18:06:81:1f:
0d:7c:ff:23:94:7b:c8:ed:9d:1b:ec:2f:e1:3f:98:
67:40:63:ad:38:e0:47:e6:12:bd:57:f6:4c:93:37:
de:9c:26:a9:1a:f8:1d:b2:d3:3c:57:18:d4:04:4c:
06:cc:2c:91:c5:e6:a1:5c:fe:ff:32:d8:a0:8b:4d:
ec:17:e9:e6:c4:da:6c:a8:6b:cc:8e:e9:07:4e:d5:
d9:00:72:54:cd:c6:9c:eb:ad:3d:a4:d2:3b:64:ed:
f9:e7:77:aa:6a:80:c7:69:1f:7e:61:32:22:c7:de:
1c:cf:14:c7:75:7d:4a:2b:ca:b5:7b:de:8d:63:8b:
dc:c3:64:11:e4:cf:07:a0:f7:3b:98:82:5a:5d:e1:
ee:06:57:55:58:b5:86:78:dc:ae:06:4a:5b:3a:04:
96:3b:d4:24:44:d3:1b:db:2c:3c:83:9f:c7:f7:f6:
ac:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:38:D1:78:75:3E:44:0E:2D:2F:49:40:3C:28:2A:FA:B4:8E:16:31
X509v3 Authority Key Identifier:
keyid:11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:dc:51:72:8b:6c:a5:1c:16:7d:86:ca:de:08:ed:5a:4f:12:
af:37:e5:f4:14:f6:6d:ff:d4:aa:16:26:8c:2f:43:38:6e:50:
99:22:be:52:70:ab:25:31:14:71:76:1d:60:97:5f:33:10:fb:
24:49:46:38:25:99:bc:6b:bc:17:ce:95:fb:de:3d:4d:ad:00:
32:5e:8c:9b:5e:9d:e7:3d:2c:fb:28:15:c0:05:87:28:86:6e:
10:f9:a8:b3:da:70:5e:c5:dd:0f:88:62:5a:34:6f:29:83:4f:
ed:06:b6:f7:a8:20:73:d7:f4:40:a8:7d:b5:cb:05:5c:d9:42:
f1:87:7e:73:e4:1b:ed:0b:2b:30:7d:ac:89:df:29:e5:a7:0e:
71:e8:72:70:50:80:e6:4b:49:7c:ff:5d:6b:32:da:51:0b:28:
15:57:6c:ed:bb:39:82:ec:a0:6c:25:67:92:b3:60:ce:a7:52:
6b:ea:61:54:09:98:86:71:e7:1e:ad:c3:bb:3d:87:86:93:36:
ef:c2:a3:34:9d:be:26:3a:61:7d:e7:2d:ee:c5:1b:d8:28:ed:
c6:98:ca:e9:b9:17:6a:58:18:66:5e:b9:14:c7:b6:87:0d:4c:
64:8b:ab:c6:ee:28:5d:46:b7:d0:a6:b7:ed:30:50:42:49:3c:
e2:6c:e9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:23:55 2026 by rpki-client