$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft File: 14F2AE289734C6F9223A15F482EED7503BB5C42B.mft (raw, json) Hash identifier: h49MlZ4CGzOkiWpd2ITWtGgOsxVCaiGzFNwQmkSG+YI= Subject key identifier: 2A:BC:E3:98:45:60:A2:69:4A:32:30:D5:3C:23:B1:17:2D:C0:3A:03 Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Certificate serial: 0A8B4580357B446D6E64EA74FF955337CF47050D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft Manifest number: 21 Signing time: Wed 13 May 2026 02:40:53 +0000 Manifest this update: Wed 13 May 2026 02:35:53 +0000 Manifest next update: Thu 14 May 2026 04:44:53 +0000 Files and hashes: 1: 3132302e3133322e38382e302f32322d3232203d3e2039383038.roa (hash: kVDtH86KTjJ0SIKAoAsxqLxXUQxqUNK9oGhyJSXpZH4=) 2: 3132302e3133322e38382e302f32322d3232203d3e203539303839.roa (hash: mQ719dBo8AjeVcNBY2cnlvFp490X4F9JzO9bEemtk78=) 3: 3132302e3133322e33362e302f32322d3232203d3e2034383038.roa (hash: EeArdCpRM86jcPIOp52OsMzRNb6BcSzXh7zE9govyhE=) 4: 3132302e3133322e33362e302f32322d3232203d3e203539303839.roa (hash: u2YafuC08I8QVlV/WHKEmx9y0bx1Z12YHc/lbMEN1h0=) 5: 3132302e3133322e38382e302f32322d3232203d3e203233373234.roa (hash: 7+ZC8yPFzf/dzFxJeP5KMrdX5vymzjGA7Kg7zZMiZFo=) 6: 3132302e3133322e33362e302f32322d3232203d3e2039383038.roa (hash: 1/WYgSW+leef+B8tBKQpDlnFlQ1g3KmII2/ngHoH7Lo=) 7: 3132302e3133322e33362e302f32322d3232203d3e203233373234.roa (hash: 4XjR2vaiCv4/KLH16fmDdK+5xDx6lGWeHO2wv2/7OHM=) 8: 14F2AE289734C6F9223A15F482EED7503BB5C42B.crl (hash: nGSP5+oAeCqcQUVX3eev3wYmyNqf0sRh3fvB3unef/s=) 9: 3132302e3133322e38382e302f32322d3232203d3e2034383038.roa (hash: 8MaiuuBuVrJs+znc9BJtvUpyHg3LI4T48lZuF5Asiq8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:8b:45:80:35:7b:44:6d:6e:64:ea:74:ff:95:53:37:cf:47:05:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B Validity Not Before: May 13 02:35:53 2026 GMT Not After : May 14 04:44:53 2026 GMT Subject: CN=2ABCE3984560A2694A3230D53C23B1172DC03A03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:53:44:e5:e8:04:d2:66:57:36:19:3d:d7:e3: 89:47:97:bd:03:70:85:57:48:b5:12:2c:e9:5f:c4: 24:fe:36:dc:34:55:4c:3e:d5:6f:76:2a:af:3f:0d: 03:9d:3e:ea:2d:66:7e:c1:a2:34:c1:0b:10:3d:dc: f0:7e:1a:0d:2b:24:fa:06:44:94:b7:eb:2c:99:2a: 85:07:fe:e3:c6:f8:59:17:80:fa:cb:4d:4f:f9:8f: bb:36:b7:fc:3b:0d:b5:6e:b7:d0:78:31:42:57:25: 75:cd:6f:d3:c8:53:a0:aa:4e:c1:57:cc:1e:a9:2b: 53:7c:d7:f9:83:54:99:a3:2e:5e:5a:1c:e4:9d:bd: 67:26:30:d1:0c:07:c6:43:d6:55:a5:17:5f:45:71: 4c:9f:e8:16:9d:e1:86:a0:94:21:0a:ca:75:9a:ff: ca:0a:61:f9:9a:2d:ca:0f:42:4f:e0:17:09:42:24: c4:c9:c1:74:3d:75:bd:72:5b:67:7b:d2:6c:ef:f6: 08:8b:04:f4:ce:16:6a:7f:db:57:fe:76:30:0d:87: ee:65:e2:b8:de:84:74:07:5a:f0:1b:0a:11:01:d9: 4e:92:ab:c9:24:cf:31:c6:dc:ac:1e:08:cb:f7:66: 9b:67:ca:f6:2f:65:cf:e2:23:cd:c0:3a:3d:af:a8: 36:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BC:E3:98:45:60:A2:69:4A:32:30:D5:3C:23:B1:17:2D:C0:3A:03 X509v3 Authority Key Identifier: keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:16:35:ac:10:d9:bc:88:f5:fb:ef:2d:3a:ba:89:fa:68:c7: c2:43:5d:3c:2d:f5:48:e5:10:c2:8e:25:02:4d:a4:1f:af:c3: 57:ea:4c:d1:5a:d9:12:99:21:47:99:ac:9f:33:b7:09:07:ba: d7:49:28:f5:f1:60:22:d7:2c:26:f3:1f:8a:aa:ab:07:88:20: b2:a0:05:6b:8b:e0:b0:a0:d6:c7:6b:59:a7:c5:aa:3c:cd:ca: af:8d:0a:f9:53:77:0a:7a:53:0c:7a:f7:76:a4:7f:ff:4e:bf: 02:56:6c:6c:90:23:b9:93:00:f2:58:f1:58:9d:25:25:6d:cb: c9:3d:14:61:1f:c1:7a:8b:51:97:16:fe:17:9f:d0:74:02:e2: e2:92:24:56:91:b0:f9:3a:66:39:48:22:96:a7:ca:31:e2:61: 43:68:b3:cf:b7:6a:93:cd:84:a2:87:c0:8e:60:bd:e9:71:66: 7f:8c:db:5b:04:45:1d:d9:d8:5e:e4:34:52:86:f9:e7:bb:26: 94:b4:9d:56:0b:32:83:2c:89:31:6f:25:c5:e9:9a:7e:28:06: 94:54:f1:d4:62:68:22:31:2e:74:16:c7:06:94:5c:54:6d:67: d5:a1:a6:bc:68:d9:ee:6f:6a:06:88:1e:20:eb:82:91:f5:80: fd:c6:ef:60 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCotFgDV7RG1uZOp0/5VTN89HBQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz QkI1QzQyQjAeFw0yNjA1MTMwMjM1NTNaFw0yNjA1MTQwNDQ0NTNaMDMxMTAvBgNV BAMTKDJBQkNFMzk4NDU2MEEyNjk0QTMyMzBENTNDMjNCMTE3MkRDMDNBMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrU0Tl6ATSZlc2GT3X44lHl70D cIVXSLUSLOlfxCT+Ntw0VUw+1W92Kq8/DQOdPuotZn7BojTBCxA93PB+Gg0rJPoG RJS36yyZKoUH/uPG+FkXgPrLTU/5j7s2t/w7DbVut9B4MUJXJXXNb9PIU6CqTsFX zB6pK1N81/mDVJmjLl5aHOSdvWcmMNEMB8ZD1lWlF19FcUyf6Bad4YaglCEKynWa /8oKYfmaLcoPQk/gFwlCJMTJwXQ9db1yW2d70mzv9giLBPTOFmp/21f+djANh+5l 4rjehHQHWvAbChEB2U6Sq8kkzzHG3KweCMv3ZptnyvYvZc/iI83AOj2vqDZJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKrzjmEVgomlKMjDVPCOxFy3AOgMwHwYDVR0j BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTkzNjQ5MjgzMjM1ODQwMDEvMC8xNEYyQUUyODk3MzRD NkY5MjIzQTE1RjQ4MkVFRDc1MDNCQjVDNDJCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxY1rBDZvIj1 ++8tOrqJ+mjHwkNdPC31SOUQwo4lAk2kH6/DV+pM0VrZEpkhR5msnzO3CQe610ko 9fFgItcsJvMfiqqrB4ggsqAFa4vgsKDWx2tZp8WqPM3Kr40K+VN3CnpTDHr3dqR/ /06/AlZsbJAjuZMA8ljxWJ0lJW3LyT0UYR/BeotRlxb+F5/QdALi4pIkVpGw+Tpm OUgilqfKMeJhQ2izz7dqk82EoofAjmC96XFmf4zbWwRFHdnYXuQ0Uob557smlLSd VgsygyyJMW8lxemafigGlFTx1GJoIjEudBbHBpRcVG1n1aGmvGjZ7m9qBogeIOuC kfWA/cbvYA== -----END CERTIFICATE-----Generated at Wed May 13 14:08:41 2026 by rpki-client