$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft File: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft (raw, json) Hash identifier: YP4p8/iT6PF7Lo+XHzIgyYBNmWbzzegv5/8y+rldTxo= Subject key identifier: AE:EF:A9:CB:93:97:D1:4D:17:60:E3:20:83:02:7E:7B:34:85:7A:35 Authority key identifier: 11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD Certificate issuer: /CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Certificate serial: 74AF9CE479EF1AD129F5BA9B1411968DD1EB8D11 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 17:38:28 +0000 Manifest this update: Thu 26 Mar 2026 17:33:28 +0000 Manifest next update: Fri 27 Mar 2026 17:58:28 +0000 Files and hashes: 1: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl (hash: imaalSqgOlcULgku8wt9t2hLR0Ees9BfFk3qMMhWQdg=) 2: 3130332e36372e3137342e302f32342d3234203d3e20313333313939.roa (hash: +lmwIsVwUKU3fDx85LpvNKXD+KIwMRfnuwxwq6ORUYQ=) 3: 3130332e36372e3137332e302f32342d3234203d3e20313333313939.roa (hash: LsfX/Qz7oiSmvhoASN2bYrrYlqmPqtrZrf42D4a7EoY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:af:9c:e4:79:ef:1a:d1:29:f5:ba:9b:14:11:96:8d:d1:eb:8d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Validity Not Before: Mar 26 17:33:28 2026 GMT Not After : Mar 27 17:58:28 2026 GMT Subject: CN=AEEFA9CB9397D14D1760E32083027E7B34857A35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:54:24:37:a1:99:64:32:7d:8a:9f:cd:e9:f2: 26:57:7b:c3:0e:15:da:61:c7:a6:e9:19:45:b9:63: fb:85:3b:2f:78:f8:b5:2b:d8:79:a5:c1:44:34:c3: 3e:9f:4a:ed:51:55:89:c2:99:a3:75:02:83:3d:37: 61:32:36:90:c5:ce:ec:c8:b0:a9:8c:45:a8:96:9d: bd:37:d4:77:b9:69:e9:b4:ad:6e:6b:11:de:27:29: 3b:b9:5e:ce:49:7f:ff:70:3f:61:9c:71:9c:75:2c: 7f:d8:dd:f9:68:a2:9c:3a:f0:f6:4e:57:7e:11:05: 2f:1c:89:05:b4:1c:8a:2b:05:20:5e:7d:e8:df:e6: 98:2c:89:6e:81:92:f0:b7:f5:57:be:6a:a8:c9:cb: b7:30:aa:11:de:18:20:1c:02:b1:30:d7:a8:62:ad: f2:9b:98:ec:dc:e4:42:52:a7:7c:58:6a:90:6c:93: 79:68:21:48:87:0c:8e:09:27:c4:f1:1c:a2:cb:ae: ee:8a:a0:d8:91:21:72:6f:dd:0c:99:b8:12:64:39: bc:ee:bf:ee:50:ef:94:21:7e:bd:e2:c9:f2:64:27: d7:d9:05:49:68:e5:3b:39:36:20:cf:62:cd:df:b0: 07:60:45:19:32:b3:8f:0d:a4:d3:ca:d7:9b:73:49: 17:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EF:A9:CB:93:97:D1:4D:17:60:E3:20:83:02:7E:7B:34:85:7A:35 X509v3 Authority Key Identifier: keyid:11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:70:64:7c:09:3d:fa:1a:58:b4:bb:4f:57:27:ea:1f:27:71: e0:e2:b5:4d:c9:69:a7:8f:cd:11:13:59:5f:66:12:4d:2d:ba: 24:b9:f5:fe:cc:c2:8b:c6:89:e0:43:01:5c:83:8f:17:e8:46: ce:86:4b:07:42:2e:2c:bf:50:c7:56:95:46:31:94:28:12:49: 28:8f:ef:e6:1b:b5:47:d6:84:3c:27:1d:af:61:5b:aa:d3:af: f6:9c:d7:07:3f:ad:b0:19:0e:e7:47:02:a4:d1:f1:9c:e8:54: 01:d3:2e:da:31:7b:85:cc:59:ed:de:ac:86:d0:c5:e6:38:09: f1:68:aa:09:71:a2:19:1a:5e:4f:ab:85:05:54:51:6a:94:4f: 3f:2d:77:f6:44:49:84:bc:6b:f0:e2:e1:23:a2:d0:1c:1b:9a: 90:48:8d:29:93:2e:28:f6:3d:ca:92:4a:4e:f1:9a:64:07:81: cf:63:29:82:41:31:58:27:96:ec:37:55:a2:f2:58:b3:48:96: 2d:d6:8c:4a:d8:2c:f3:4e:9b:41:69:84:17:9f:16:e6:71:31: 7b:ad:5a:2b:61:14:e0:33:8e:a6:ac:15:44:6e:b8:a7:d9:f3: b1:31:8e:ba:50:ed:9e:ad:f7:0c:c4:a3:e7:d8:89:76:2b:8a: 6e:10:c2:6c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdK+c5HnvGtEp9bqbFBGWjdHrjREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZB MzRDNUVCRDAeFw0yNjAzMjYxNzMzMjhaFw0yNjAzMjcxNzU4MjhaMDMxMTAvBgNV BAMTKEFFRUZBOUNCOTM5N0QxNEQxNzYwRTMyMDgzMDI3RTdCMzQ4NTdBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSVCQ3oZlkMn2Kn83p8iZXe8MO Fdphx6bpGUW5Y/uFOy94+LUr2HmlwUQ0wz6fSu1RVYnCmaN1AoM9N2EyNpDFzuzI sKmMRaiWnb031He5aem0rW5rEd4nKTu5Xs5Jf/9wP2GccZx1LH/Y3floopw68PZO V34RBS8ciQW0HIorBSBefejf5pgsiW6BkvC39Ve+aqjJy7cwqhHeGCAcArEw16hi rfKbmOzc5EJSp3xYapBsk3loIUiHDI4JJ8TxHKLLru6KoNiRIXJv3QyZuBJkObzu v+5Q75Qhfr3iyfJkJ9fZBUlo5Ts5NiDPYs3fsAdgRRkys48NpNPK15tzSRcJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUru+py5OX0U0XYOMggwJ+ezSFejUwHwYDVR0j BBgwFoAUEUy0khOaX1xITT4PsPI176NMXr0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTkxODQ2Ny8wLzExNENCNDkyMTM5QTVGNUM0ODREM0UwRkIwRjIz NUVGQTM0QzVFQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZBMzRDNUVCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5MTg0NjcvMC8xMTRDQjQ5MjEzOUE1 RjVDNDg0RDNFMEZCMEYyMzVFRkEzNEM1RUJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnBkfAk9+hpY tLtPVyfqHydx4OK1Tclpp4/NERNZX2YSTS26JLn1/szCi8aJ4EMBXIOPF+hGzoZL B0IuLL9Qx1aVRjGUKBJJKI/v5hu1R9aEPCcdr2FbqtOv9pzXBz+tsBkO50cCpNHx nOhUAdMu2jF7hcxZ7d6shtDF5jgJ8WiqCXGiGRpeT6uFBVRRapRPPy139kRJhLxr 8OLhI6LQHBuakEiNKZMuKPY9ypJKTvGaZAeBz2MpgkExWCeW7DdVovJYs0iWLdaM Stgs806bQWmEF58W5nExe61aK2EU4DOOpqwVRG64p9nzsTGOulDtnq33DMSj59iJ diuKbhDCbA== -----END CERTIFICATE-----Generated at Fri Mar 27 05:13:45 2026 by rpki-client