$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft File: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft (raw, json) Hash identifier: S/1MQnS9QUfMzF0IKdMskJb+Qumt8xp8+voFkBsR94Q= Subject key identifier: F1:CF:8B:94:82:C5:3B:BA:C1:F7:9D:60:FA:99:E1:84:CA:1B:7F:93 Authority key identifier: 11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD Certificate issuer: /CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Certificate serial: 76DC4E710EC110B5509C9175A584985D31D64FA0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft Manifest number: F8 Signing time: Fri 24 Jul 2026 00:04:53 +0000 Manifest this update: Thu 23 Jul 2026 23:59:53 +0000 Manifest next update: Sat 25 Jul 2026 01:14:53 +0000 Files and hashes: 1: 3130332e36372e3137332e302f32342d3234203d3e20313333313939.roa (hash: LsfX/Qz7oiSmvhoASN2bYrrYlqmPqtrZrf42D4a7EoY=) 2: 114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl (hash: cnYJBB1C1xgGFbbGgd7v02VX/qvTZOymjF4Hxn86g70=) 3: 3130332e36372e3137342e302f32342d3234203d3e20313333313939.roa (hash: +lmwIsVwUKU3fDx85LpvNKXD+KIwMRfnuwxwq6ORUYQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:dc:4e:71:0e:c1:10:b5:50:9c:91:75:a5:84:98:5d:31:d6:4f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD Validity Not Before: Jul 23 23:59:53 2026 GMT Not After : Jul 25 01:14:53 2026 GMT Subject: CN=F1CF8B9482C53BBAC1F79D60FA99E184CA1B7F93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8b:4f:76:4d:51:5f:6f:b0:99:a5:26:a0:0a: cf:7d:33:48:89:19:fb:d6:70:75:28:3f:1b:5d:35: bb:87:35:b6:67:d2:c4:c4:44:b5:a8:f2:17:3c:10: 92:e5:c9:d3:7c:9d:b4:09:5e:2b:3e:f5:26:29:f5: 3e:b8:50:da:32:68:62:d5:94:a8:70:a4:71:99:fe: a7:02:31:53:4c:4d:a8:a1:aa:26:bd:18:7e:a8:12: 19:d1:bc:03:3c:4c:03:55:c3:81:47:99:78:4c:c8: 5c:8b:70:da:fe:c6:b8:50:31:93:22:58:4e:37:fa: 5c:48:66:cc:26:95:89:97:2a:dd:94:4a:90:0b:e2: b3:84:df:78:7b:bd:63:da:bb:22:8a:c7:b4:c8:e8: 3f:7d:61:00:dd:59:75:fd:09:b9:95:49:e9:64:ce: e2:7f:28:f7:c3:a1:dc:40:9d:9f:4e:89:ad:c6:26: 70:50:e5:f4:62:8a:46:a3:47:cb:e3:2f:8b:b8:db: 3f:58:ff:84:f8:bb:dc:d3:79:02:87:18:95:49:f0: 73:b8:ee:ea:17:db:be:f1:8e:cb:80:7b:be:20:e9: 32:0d:d9:96:52:4e:f6:f8:34:e1:66:7c:40:9b:4e: b8:07:26:d6:f1:c0:85:33:a7:8a:e2:b0:70:a8:01: 2d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CF:8B:94:82:C5:3B:BA:C1:F7:9D:60:FA:99:E1:84:CA:1B:7F:93 X509v3 Authority Key Identifier: keyid:11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c3:88:35:5b:c8:83:0d:04:ef:0f:66:1c:ab:80:35:c5:33: dd:a8:c5:32:10:6a:c7:63:c1:6a:e3:cc:21:15:81:01:b0:9f: 50:2a:58:94:f5:fb:da:dc:d0:f5:90:3d:30:16:a4:db:2c:eb: 9d:7a:3b:72:30:88:18:2f:93:76:95:73:48:cf:3a:89:18:e6: 93:0d:4c:21:f9:f8:c3:bb:f0:83:96:2f:8d:d6:d5:74:4c:bb: 60:ce:5e:7d:72:2e:08:17:c1:8e:52:14:99:3b:20:1d:83:e7: de:26:96:19:87:8a:e1:18:08:41:b2:27:0f:dc:b3:a4:8e:b3: 06:29:da:0e:a3:5f:f3:bd:1e:7e:c8:df:79:ae:10:d7:ad:c7: cb:a7:7d:fd:d0:cb:25:32:b0:d2:d5:f5:af:2a:65:4b:7b:37: fc:e7:0a:71:3c:f8:20:58:7c:00:53:db:a7:65:6a:45:f4:69: 42:9d:ff:eb:c3:55:55:52:ed:83:e4:ac:8b:66:bf:6e:ac:35: d5:f7:72:b2:93:b4:63:33:d5:45:3c:68:d7:98:47:3f:ff:39: 86:78:d4:81:e8:b9:ab:8d:2e:d0:7e:a8:30:73:76:e7:fd:d5: e2:b5:53:87:79:f9:87:cc:78:d8:fc:23:88:16:25:eb:26:cb: 64:a1:61:e5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdtxOcQ7BELVQnJF1pYSYXTHWT6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZB MzRDNUVCRDAeFw0yNjA3MjMyMzU5NTNaFw0yNjA3MjUwMTE0NTNaMDMxMTAvBgNV BAMTKEYxQ0Y4Qjk0ODJDNTNCQkFDMUY3OUQ2MEZBOTlFMTg0Q0ExQjdGOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzi092TVFfb7CZpSagCs99M0iJ GfvWcHUoPxtdNbuHNbZn0sTERLWo8hc8EJLlydN8nbQJXis+9SYp9T64UNoyaGLV lKhwpHGZ/qcCMVNMTaihqia9GH6oEhnRvAM8TANVw4FHmXhMyFyLcNr+xrhQMZMi WE43+lxIZswmlYmXKt2USpAL4rOE33h7vWPauyKKx7TI6D99YQDdWXX9CbmVSelk zuJ/KPfDodxAnZ9Oia3GJnBQ5fRiikajR8vjL4u42z9Y/4T4u9zTeQKHGJVJ8HO4 7uoX277xjsuAe74g6TIN2ZZSTvb4NOFmfECbTrgHJtbxwIUzp4risHCoAS27AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8c+LlILFO7rB951g+pnhhMobf5MwHwYDVR0j BBgwFoAUEUy0khOaX1xITT4PsPI176NMXr0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTkxODQ2Ny8wLzExNENCNDkyMTM5QTVGNUM0ODREM0UwRkIwRjIz NUVGQTM0QzVFQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTE0Q0I0OTIxMzlBNUY1QzQ4NEQzRTBGQjBGMjM1RUZBMzRDNUVCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk5MTg0NjcvMC8xMTRDQjQ5MjEzOUE1 RjVDNDg0RDNFMEZCMEYyMzVFRkEzNEM1RUJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMOINVvIgw0E 7w9mHKuANcUz3ajFMhBqx2PBauPMIRWBAbCfUCpYlPX72tzQ9ZA9MBak2yzrnXo7 cjCIGC+TdpVzSM86iRjmkw1MIfn4w7vwg5YvjdbVdEy7YM5efXIuCBfBjlIUmTsg HYPn3iaWGYeK4RgIQbInD9yzpI6zBinaDqNf870efsjfea4Q163Hy6d9/dDLJTKw 0tX1ryplS3s3/OcKcTz4IFh8AFPbp2VqRfRpQp3/68NVVVLtg+Ssi2a/bqw11fdy spO0YzPVRTxo15hHP/85hnjUgei5q40u0H6oMHN25/3V4rVTh3n5h8x42PwjiBYl 6ybLZKFh5Q== -----END CERTIFICATE-----Generated at Fri Jul 24 17:17:35 2026 by rpki-client