
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
File: 14F2AE289734C6F9223A15F482EED7503BB5C42B.mft (raw, json)
Hash identifier: IKrsevtVhyvl5f1iBNWIJ+y0RPQTNQBDYHSTrozLNyc=
Subject key identifier: D1:27:2D:C7:77:B5:2D:81:BB:13:20:51:BD:8C:42:25:1B:30:2E:F1
Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B
Certificate issuer: /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
Certificate serial: 07901783DF1F7C2112F4FC946DE9239D572743FE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
Manifest number: 0111
Signing time: Thu 08 Oct 2026 05:47:19 +0000
Manifest this update: Thu 08 Oct 2026 05:42:19 +0000
Manifest next update: Sun 11 Oct 2026 15:43:19 +0000
Files and hashes: 1: AS140292.roa (hash: wtC9Q7BhiYUo1Gn7JyysCgjfucI9tOaarVKcHpoqhxw=)
2: AS59089.roa (hash: ZTGG8hi/6ZD5YswkILRzPPrQMQwDyrtkUiOkaThWQjk=)
3: AS56040.roa (hash: S03Z930RtSoH79KDzS2k8drefwtjoeI56VCdlze2G38=)
4: AS23724.roa (hash: bXSOnuLFHwQ6WEShOo71xL2UuGOMqnSeoYRb0VKmFcM=)
5: AS4808.roa (hash: z2TYzvlcywDhL0dWprMULk+6uLpj22l1z9RTTmZtv9E=)
6: AS4837.roa (hash: kaEOXHZ7gIhA8ZFL/Oz9k85AhlXsPEgPXsDitwFjc2s=)
7: AS56046.roa (hash: wQaqBuQrNgi2Ezg6k6Tc0z3rRSK0zo5E90jO2sXzVVE=)
8: 14F2AE289734C6F9223A15F482EED7503BB5C42B.crl (hash: kRfK+pLKcwcOduYSDXNJHxEEzshcwiwMTum3Zy2nq0c=)
9: AS140717.roa (hash: F4vKDqd+oRuW+dD54h6Z5jvEABTrqdWIPSBZ4SXxlOc=)
10: AS136958.roa (hash: 1lLdYSrnIRbEu4dxKFeTEI02kvxqoyt4CS47V2g0UBk=)
11: AS58466.roa (hash: LM9JbG7lyreiz1D+ixqDOBz5SUXAnqgEmr0CR4xkMW4=)
12: AS9808.roa (hash: iZ56dlkspGmh1ahvcPF/GFXsutuOvohlkxlEb5OgMA8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl
rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 15:43:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:90:17:83:df:1f:7c:21:12:f4:fc:94:6d:e9:23:9d:57:27:43:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
Validity
Not Before: Oct 8 05:42:19 2026 GMT
Not After : Oct 11 15:43:19 2026 GMT
Subject: CN=D1272DC777B52D81BB132051BD8C42251B302EF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dc:98:a6:c3:2d:1b:ef:97:3f:af:14:8b:d0:
85:e8:14:60:88:c9:dc:1e:21:19:f1:08:bf:df:13:
24:78:04:ec:73:74:fe:b7:65:3b:00:4c:b8:1f:fc:
11:ed:fc:8a:f8:f7:f1:1b:68:09:35:b5:d4:4b:34:
8d:85:47:7c:e0:5a:7d:11:45:21:35:6a:13:e8:4e:
6f:7b:1f:16:97:69:72:55:6a:4c:1c:a3:7c:b9:79:
07:ba:32:d1:87:69:d6:7e:41:75:e4:9b:20:5c:6b:
d3:59:bf:d4:4c:31:93:c0:e4:81:c1:c4:91:49:aa:
15:77:a4:f8:f4:59:b7:14:75:33:7f:61:4a:0a:93:
42:44:00:42:bb:b5:7f:e5:12:75:18:0a:f5:dd:f0:
43:33:82:9e:80:40:5d:f1:62:7f:39:79:10:f5:ad:
3d:f8:91:fa:bd:a7:96:0c:a7:38:90:41:7b:8d:ee:
6e:82:d1:af:fb:cb:ac:bd:cf:f2:c6:92:cb:a7:77:
80:cb:19:e4:2e:4a:fe:ac:18:94:ff:83:c3:86:a2:
27:9f:b0:08:a4:40:12:2e:3c:4b:57:ed:8e:89:3b:
52:ef:15:83:d0:65:72:97:86:6a:3d:c6:fe:00:04:
0f:be:a2:af:a6:5b:40:4b:6a:9f:04:8b:6c:8f:21:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:27:2D:C7:77:B5:2D:81:BB:13:20:51:BD:8C:42:25:1B:30:2E:F1
X509v3 Authority Key Identifier:
keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:13:90:68:bf:06:6d:b8:6f:a0:a1:82:c6:c1:7a:eb:19:30:
4f:c4:41:db:ba:cf:d3:8e:ae:37:00:96:d4:58:7b:50:06:03:
df:d5:c1:a4:bf:a3:da:63:6b:3b:70:34:6b:59:c6:4b:84:fb:
79:99:df:c5:87:e7:d5:3f:48:d4:05:ea:41:8d:8a:91:31:cc:
d8:ba:58:8f:da:03:81:61:8d:82:c0:2b:ba:33:bc:ff:14:ab:
d9:24:8d:b8:82:14:2b:cc:bd:da:c1:54:e5:75:25:dc:bf:57:
4b:e6:ad:25:0c:da:0d:56:66:ae:31:24:10:07:fd:d4:91:48:
96:bf:9f:33:6f:b9:94:22:0e:28:85:98:66:5f:4b:2d:57:5d:
ce:28:b0:16:26:8e:71:0b:b3:c3:d6:68:c4:5b:0b:02:00:24:
a3:4e:fc:c3:b7:d6:cc:3e:77:1b:f0:dd:16:8c:0d:0d:fb:e2:
85:79:db:26:8a:2e:ca:4b:65:c4:dc:7a:e9:c5:f0:09:2d:87:
c4:ee:e0:f5:3f:5c:df:ec:f3:eb:46:b7:47:f2:10:2e:e4:d5:
ac:64:a2:0e:df:e3:34:63:59:26:71:44:8e:42:4b:3f:19:08:
28:22:56:4f:22:9f:b7:4f:40:f0:25:7a:38:ab:c0:e7:ce:cb:
09:f3:a6:8a
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUB5AXg98ffCES9PyUbekjnVcnQ/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz
QkI1QzQyQjAeFw0yNjEwMDgwNTQyMTlaFw0yNjEwMTExNTQzMTlaMDMxMTAvBgNV
BAMTKEQxMjcyREM3NzdCNTJEODFCQjEzMjA1MUJEOEM0MjI1MUIzMDJFRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY3Jimwy0b75c/rxSL0IXoFGCI
ydweIRnxCL/fEyR4BOxzdP63ZTsATLgf/BHt/Ir49/EbaAk1tdRLNI2FR3zgWn0R
RSE1ahPoTm97HxaXaXJVakwco3y5eQe6MtGHadZ+QXXkmyBca9NZv9RMMZPA5IHB
xJFJqhV3pPj0WbcUdTN/YUoKk0JEAEK7tX/lEnUYCvXd8EMzgp6AQF3xYn85eRD1
rT34kfq9p5YMpziQQXuN7m6C0a/7y6y9z/LGksund4DLGeQuSv6sGJT/g8OGoief
sAikQBIuPEtX7Y6JO1LvFYPQZXKXhmo9xv4ABA++oq+mW0BLap8Ei2yPIXnnAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU0Sctx3e1LYG7EyBRvYxCJRswLvEwHwYDVR0j
BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE
NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTkzNjQ5MjgzMjM1ODQwMDEvMC8xNEYyQUUyODk3MzRD
NkY5MjIzQTE1RjQ4MkVFRDc1MDNCQjVDNDJCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYhOQaL8Gbbhv
oKGCxsF66xkwT8RB27rP046uNwCW1Fh7UAYD39XBpL+j2mNrO3A0a1nGS4T7eZnf
xYfn1T9I1AXqQY2KkTHM2LpYj9oDgWGNgsArujO8/xSr2SSNuIIUK8y92sFU5XUl
3L9XS+atJQzaDVZmrjEkEAf91JFIlr+fM2+5lCIOKIWYZl9LLVddziiwFiaOcQuz
w9ZoxFsLAgAko078w7fWzD53G/DdFowNDfvihXnbJoouyktlxNx66cXwCS2HxO7g
9T9c3+zz60a3R/IQLuTVrGSiDt/jNGNZJnFEjkJLPxkIKCJWTyKft09A8CV6OKvA
587LCfOmig==
-----END CERTIFICATE-----
Generated at Fri Oct 9 21:05:19 2026 by rpki-client