
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
File: 0A46107CA3AC888E94D84BCA2952BB23CA716933.mft (raw, json)
Hash identifier: Iav+Zu5AQgS/dLghvT+STrjy819tyg78woAOfIj1bXY=
Subject key identifier: A9:9E:69:4E:45:F0:41:F9:01:8B:1A:B9:24:08:77:30:CC:D3:B8:DD
Authority key identifier: 0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33
Certificate issuer: /CN=0A46107CA3AC888E94D84BCA2952BB23CA716933
Certificate serial: 7858C7715AB9ACA4E6ECFEC7CCA2E0FF78DC3892
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
Manifest number: F7
Signing time: Fri 24 Jul 2026 00:14:54 +0000
Manifest this update: Fri 24 Jul 2026 00:09:54 +0000
Manifest next update: Sat 25 Jul 2026 00:14:54 +0000
Files and hashes: 1: 3130332e3135392e3132322e302f32332d3234203d3e20313331343834.roa (hash: iUeqJBmQDAxt+pLGYhWrJK3Odd/B3nT7dclLKwf5UO0=)
2: 323430363a643134303a3a2f33322d3438203d3e20313331343834.roa (hash: wf8jpicWFamaHqIJZ6H9jcZ7cuCMGJQ7VOd7B3RXT9U=)
3: 323430363a643134303a383030303a3a2f33342d3438203d3e203439353434.roa (hash: PAf824Q9bOcvX8QACkiCfMY2g1dz/7XRXFxJEVpkmfE=)
4: 323430363a643134303a383030303a3a2f33342d3438203d3e20313331343834.roa (hash: sQQIzWo0IvL/3jgG/tni7qytQXBkoZCTScUs3d/Uek0=)
5: 0A46107CA3AC888E94D84BCA2952BB23CA716933.crl (hash: VCKyy83VDb9fT6yS19tk5OvDySrId29ln8/WSWZkbrQ=)
6: 323430363a643134303a3a2f33322d3438203d3e203439353434.roa (hash: g7LIdaEG3sFtKdbTj2hBz13e6bXgQUd18mWYt6svPTs=)
7: 3130332e3135392e3132322e302f32332d3234203d3e203439353434.roa (hash: rubDoThyXxAtKd7cHar1Xe+H3PklUmIYuQDvQvtMaCY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:58:c7:71:5a:b9:ac:a4:e6:ec:fe:c7:cc:a2:e0:ff:78:dc:38:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A46107CA3AC888E94D84BCA2952BB23CA716933
Validity
Not Before: Jul 24 00:09:54 2026 GMT
Not After : Jul 25 00:14:54 2026 GMT
Subject: CN=A99E694E45F041F9018B1AB924087730CCD3B8DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:e3:53:1a:88:84:50:f0:06:20:4d:8f:cc:
27:b2:d4:70:5f:8a:91:91:40:62:74:88:d2:70:c7:
fd:72:43:c4:ff:60:1e:25:b9:19:ca:35:38:8d:a5:
fd:a5:76:3f:dc:46:4e:5b:b0:96:83:b0:60:f1:0a:
be:32:35:8b:5b:d4:5a:ea:7a:fd:8c:41:b3:e2:b6:
a0:d8:1a:c5:30:54:2d:50:0e:12:46:a8:51:4d:5f:
69:f2:47:f4:ee:39:9f:95:2c:48:07:26:c7:5f:0a:
f9:66:0c:e4:22:c1:13:8b:a3:79:18:52:2c:16:de:
93:90:e3:97:73:a4:28:13:51:21:f0:cc:a3:d7:2f:
7c:b4:19:f9:7f:ae:53:34:74:4b:17:b1:a6:03:5f:
48:17:06:c7:bc:0e:c4:86:98:b0:65:b1:d7:b1:cc:
4d:20:3c:1b:b8:08:b9:52:56:b1:24:7f:3c:c9:4b:
ae:aa:e0:e2:4e:bf:c4:86:1c:4b:ae:69:f3:1a:ee:
a6:2b:51:48:3e:25:21:15:ef:86:af:e4:e9:d2:82:
d2:31:cd:9f:e4:db:da:28:7b:a4:d8:3e:e2:e1:ec:
2a:b8:7d:e1:7c:28:7b:64:a1:eb:b1:e5:c5:56:0f:
06:78:82:98:5f:4d:6c:a6:15:80:7c:c9:6c:ad:80:
1b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9E:69:4E:45:F0:41:F9:01:8B:1A:B9:24:08:77:30:CC:D3:B8:DD
X509v3 Authority Key Identifier:
keyid:0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:35:cc:02:9f:a6:db:f3:07:bb:da:d1:b7:e9:a7:1e:b0:5b:
62:f3:dd:83:98:fd:29:d1:bf:af:b4:92:dc:d8:95:97:1d:e1:
9b:01:ad:4d:e4:15:7a:5d:a4:07:a4:db:d7:7a:50:f2:fb:81:
55:0a:c6:34:c9:91:b7:7f:d4:51:93:ec:3d:73:a4:b8:6a:7c:
3c:e5:dd:a0:96:66:48:52:20:26:2b:b8:79:06:1b:f3:b9:39:
4e:65:3c:a4:4a:ad:f9:f4:b8:4b:55:97:8b:ef:bc:55:ee:ec:
7b:c5:1d:24:47:66:40:4f:ff:a5:e0:5f:b8:c5:c6:44:6e:c4:
82:27:f3:5b:48:e6:1f:5a:b0:21:48:04:8b:d4:e0:32:58:20:
36:39:01:3a:96:7f:db:89:c8:4a:5d:08:32:b4:9b:c8:fe:77:
e5:b7:84:2c:14:c9:64:59:3e:ed:13:43:83:55:29:13:1e:82:
94:5f:bf:66:b1:ac:ad:6a:74:8e:66:99:67:9c:61:bd:fd:b3:
dd:58:f4:78:9e:ac:0a:77:5f:79:42:b3:6f:51:2c:00:bb:95:
32:b9:f4:bc:e4:82:5b:9e:56:c4:33:4c:1d:a1:3d:92:f4:c7:
fc:44:23:01:bc:06:20:a0:05:b0:d5:d2:43:f3:48:12:71:f5:
ed:7f:c1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:12:25 2026 by rpki-client