$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft File: 46C13E5032045116B0FA54934DD7BFCA0483335A.mft (raw, json) Hash identifier: J4EXAqeXfjZZV3KE5R3jc/WpbYp23Bpl2pG5BvRsN6I= Subject key identifier: 05:F4:33:8B:53:79:EA:A9:83:CC:70:88:23:29:23:1E:E0:E3:2B:91 Authority key identifier: 46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A Certificate issuer: /CN=46C13E5032045116B0FA54934DD7BFCA0483335A Certificate serial: 2BBAD9D7FC3745A13EC1D150C2B50C1E4ED59331 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 09:38:28 +0000 Manifest this update: Thu 26 Mar 2026 09:33:28 +0000 Manifest next update: Fri 27 Mar 2026 12:12:28 +0000 Files and hashes: 1: 3231392e3233352e3135322e302f32312d3231203d3e203435303734.roa (hash: WSpXWtSav0n/mxgQsU+45a8xYf8rGnUkY+KgxqJpb44=) 2: 3231392e3233352e3132382e302f32312d3231203d3e2039383037.roa (hash: WgqZHu54HYvCrSjVeZSV7S2ptAQ1a+xoyVFAd7XUP1I=) 3: 323430303a356130303a3a2f33322d3332203d3e2039383037.roa (hash: LogFkd2wHLYxjTnS7A6XZRJU7XgOiWX8cKqHZgMnfdc=) 4: 3231392e3233352e3133362e302f32312d3231203d3e2039383037.roa (hash: 9EWw+3yvD8wWr9/mlEXgpw2TuO9rB0T1PMKPebwR0kY=) 5: 46C13E5032045116B0FA54934DD7BFCA0483335A.crl (hash: 87OHIGu8ESlPu7EXUeY15BgogDo7BbZXRkMsKwM+5oY=) 6: 3231392e3233352e3134342e302f32312d3231203d3e2039383037.roa (hash: Wi/t+st603WnA7TssvGC3DzTJ3V3irpX2WC1oBapI5U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ba:d9:d7:fc:37:45:a1:3e:c1:d1:50:c2:b5:0c:1e:4e:d5:93:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46C13E5032045116B0FA54934DD7BFCA0483335A Validity Not Before: Mar 26 09:33:28 2026 GMT Not After : Mar 27 12:12:28 2026 GMT Subject: CN=05F4338B5379EAA983CC70882329231EE0E32B91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c4:57:35:18:5d:89:ef:45:49:4e:38:60:6c: 1b:98:9d:16:e1:05:1b:0a:a0:22:05:98:10:09:3d: 1a:bd:96:55:e6:96:56:32:d0:c8:2d:2a:b2:51:ff: 03:ec:17:be:65:3b:4d:96:1d:89:04:c1:dd:e1:43: 14:c9:cf:fa:6c:69:4f:08:51:14:98:3c:1d:ec:51: 77:bc:b5:1d:86:c6:68:72:3a:91:e6:d6:3d:48:6d: 01:2c:fa:8d:9f:30:4b:79:c3:e8:55:dd:43:28:49: db:7e:63:7d:d8:74:a5:3c:1c:d2:78:2b:f4:ac:33: 10:9d:a5:1d:92:8a:60:1c:d8:7a:59:71:2a:1a:d9: c8:08:cb:38:35:de:44:3b:bd:bf:a1:01:47:9b:bc: ee:5b:da:6e:2c:b1:92:f5:9a:e8:b4:16:6b:48:8a: 69:f6:24:1a:8e:93:66:7a:08:ed:3e:d0:f5:3e:e8: 8a:a4:b2:cb:8b:a0:a1:f0:e1:91:86:36:cf:e0:5b: 89:6a:70:d5:32:5b:6b:25:12:9b:4e:32:90:ad:aa: e0:5f:a2:2e:b1:92:9f:34:08:9e:05:f2:3d:a9:f5: 1c:eb:b4:dd:f2:97:a1:ad:e3:db:fd:06:12:8e:26: b7:fc:f9:bf:7e:ca:dc:83:fd:0f:ee:e4:92:94:dc: 6d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F4:33:8B:53:79:EA:A9:83:CC:70:88:23:29:23:1E:E0:E3:2B:91 X509v3 Authority Key Identifier: keyid:46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:fa:6f:bf:07:70:40:3e:33:a3:92:ba:a7:b6:2b:ba:a0:7d: 88:db:49:41:46:f0:1c:26:f8:58:be:37:90:55:93:f7:0f:92: 94:15:b6:15:d9:ce:69:13:f0:62:53:c1:c8:8b:e3:16:28:d7: d2:bf:77:7d:1f:1a:76:c0:07:46:2d:f1:f4:86:7e:3e:f8:95: 31:a9:1d:ed:67:13:95:14:ab:ec:b1:14:98:9a:21:02:3f:92: 64:d9:f6:2c:12:48:a4:e1:38:db:84:b9:1e:34:65:5c:18:dc: 9b:88:52:78:a0:66:54:b5:78:ad:f1:30:b2:4d:35:1d:56:f7: c9:a9:17:fc:03:50:f7:ab:bd:e0:f6:48:70:ab:0b:b5:d8:19: ae:e2:e9:db:ff:65:aa:99:de:84:31:85:92:1b:d5:f5:0e:a5: 05:a6:2e:a7:dc:1f:1a:05:42:7f:4c:0d:f3:ce:53:0d:3e:c2: 5e:98:c0:23:2a:3a:09:a5:d0:5e:85:cc:b1:3b:e8:b0:c9:e7: 6a:ad:cc:30:8b:8f:ac:27:31:13:80:ce:50:95:89:2b:4c:92: fd:82:2f:db:af:f2:26:a8:3b:b2:7d:01:99:ad:42:52:05:ad: 77:c9:b6:82:c5:28:f5:9a:79:72:f6:5f:c8:6f:85:e9:30:22: 4c:21:2f:46 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK7rZ1/w3RaE+wdFQwrUMHk7VkzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZDMTNFNTAzMjA0NTExNkIwRkE1NDkzNEREN0JGQ0Ew NDgzMzM1QTAeFw0yNjAzMjYwOTMzMjhaFw0yNjAzMjcxMjEyMjhaMDMxMTAvBgNV BAMTKDA1RjQzMzhCNTM3OUVBQTk4M0NDNzA4ODIzMjkyMzFFRTBFMzJCOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyxFc1GF2J70VJTjhgbBuYnRbh BRsKoCIFmBAJPRq9llXmllYy0MgtKrJR/wPsF75lO02WHYkEwd3hQxTJz/psaU8I URSYPB3sUXe8tR2GxmhyOpHm1j1IbQEs+o2fMEt5w+hV3UMoSdt+Y33YdKU8HNJ4 K/SsMxCdpR2SimAc2HpZcSoa2cgIyzg13kQ7vb+hAUebvO5b2m4ssZL1mui0FmtI imn2JBqOk2Z6CO0+0PU+6IqkssuLoKHw4ZGGNs/gW4lqcNUyW2slEptOMpCtquBf oi6xkp80CJ4F8j2p9RzrtN3yl6Gt49v9BhKOJrf8+b9+ytyD/Q/u5JKU3G29AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBfQzi1N56qmDzHCIIykjHuDjK5EwHwYDVR0j BBgwFoAURsE+UDIEURaw+lSTTde/ygSDM1owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODAwOTQ3NS8wLzQ2QzEzRTUwMzIwNDUxMTZCMEZBNTQ5MzRERDdC RkNBMDQ4MzMzNUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDZDMTNFNTAzMjA0NTExNkIwRkE1NDkzNEREN0JGQ0EwNDgzMzM1QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgwMDk0NzUvMC80NkMxM0U1MDMyMDQ1 MTE2QjBGQTU0OTM0REQ3QkZDQTA0ODMzMzVBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvpvvwdwQD4z o5K6p7YruqB9iNtJQUbwHCb4WL43kFWT9w+SlBW2FdnOaRPwYlPByIvjFijX0r93 fR8adsAHRi3x9IZ+PviVMakd7WcTlRSr7LEUmJohAj+SZNn2LBJIpOE424S5HjRl XBjcm4hSeKBmVLV4rfEwsk01HVb3yakX/ANQ96u94PZIcKsLtdgZruLp2/9lqpne hDGFkhvV9Q6lBaYup9wfGgVCf0wN885TDT7CXpjAIyo6CaXQXoXMsTvosMnnaq3M MIuPrCcxE4DOUJWJK0yS/YIv26/yJqg7sn0Bma1CUgWtd8m2gsUo9Zp5cvZfyG+F 6TAiTCEvRg== -----END CERTIFICATE-----Generated at Fri Mar 27 00:36:03 2026 by rpki-client