
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
File: 0A46107CA3AC888E94D84BCA2952BB23CA716933.mft (raw, json)
Hash identifier: OH24WF6CitM25t1GUROlaqgkOUZ+2sHExWhDXfX1HOU=
Subject key identifier: 8A:7E:0D:92:40:CE:5E:75:C6:7F:B0:D0:0F:DF:A1:EE:56:78:AE:01
Authority key identifier: 0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33
Certificate issuer: /CN=0A46107CA3AC888E94D84BCA2952BB23CA716933
Certificate serial: 24A7596D6FE347037E8BA0912C50FF47512C311C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
Manifest number: 97
Signing time: Wed 13 May 2026 00:55:49 +0000
Manifest this update: Wed 13 May 2026 00:50:49 +0000
Manifest next update: Thu 14 May 2026 02:21:49 +0000
Files and hashes: 1: 3130332e3135392e3132322e302f32332d3234203d3e20313331343834.roa (hash: iUeqJBmQDAxt+pLGYhWrJK3Odd/B3nT7dclLKwf5UO0=)
2: 3130332e3135392e3132322e302f32332d3234203d3e203439353434.roa (hash: rubDoThyXxAtKd7cHar1Xe+H3PklUmIYuQDvQvtMaCY=)
3: 323430363a643134303a383030303a3a2f33342d3438203d3e20313331343834.roa (hash: sQQIzWo0IvL/3jgG/tni7qytQXBkoZCTScUs3d/Uek0=)
4: 323430363a643134303a383030303a3a2f33342d3438203d3e203439353434.roa (hash: PAf824Q9bOcvX8QACkiCfMY2g1dz/7XRXFxJEVpkmfE=)
5: 323430363a643134303a3a2f33322d3438203d3e20313331343834.roa (hash: wf8jpicWFamaHqIJZ6H9jcZ7cuCMGJQ7VOd7B3RXT9U=)
6: 0A46107CA3AC888E94D84BCA2952BB23CA716933.crl (hash: tzRopVgx/cUYrf1eS9BpTzRitH+9cPUGPKjYKQaPBUs=)
7: 323430363a643134303a3a2f33322d3438203d3e203439353434.roa (hash: g7LIdaEG3sFtKdbTj2hBz13e6bXgQUd18mWYt6svPTs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:a7:59:6d:6f:e3:47:03:7e:8b:a0:91:2c:50:ff:47:51:2c:31:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A46107CA3AC888E94D84BCA2952BB23CA716933
Validity
Not Before: May 13 00:50:49 2026 GMT
Not After : May 14 02:21:49 2026 GMT
Subject: CN=8A7E0D9240CE5E75C67FB0D00FDFA1EE5678AE01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:87:14:dd:97:81:27:c2:c7:92:80:ef:5d:c0:
3b:24:25:96:96:68:88:11:e4:cf:de:23:dc:b2:f0:
b4:c2:9c:45:20:38:40:cb:11:32:4b:b6:db:2a:8c:
85:00:a2:15:76:bb:ee:08:e5:1a:47:ed:40:5f:93:
84:b8:93:c5:7c:90:00:3d:fc:2b:f8:9e:9a:29:8b:
ad:dd:65:d6:60:cf:48:ae:66:73:18:d1:bc:14:bf:
49:4a:9e:de:3e:b5:14:f7:51:8a:cb:4b:c1:29:56:
e7:cc:57:1b:38:b8:a0:1c:79:c6:f1:49:61:88:af:
72:29:5d:77:07:e7:f0:6c:32:16:ab:b8:24:20:72:
ca:e9:81:b3:47:69:39:25:fd:23:aa:81:cc:8d:30:
d3:25:82:49:7a:d4:ae:3b:38:01:c3:b3:0e:e3:b7:
7f:f2:35:56:fa:fd:d1:49:68:10:fb:8c:72:d5:3f:
2f:2e:8a:d1:72:92:5c:54:aa:7c:39:5b:89:2c:f1:
0b:3a:6b:42:9a:3b:69:1d:98:41:da:9f:dc:7f:7b:
92:be:89:3d:1c:79:95:55:b0:c6:b8:99:b1:3f:4a:
b0:3c:77:07:8f:40:3f:ce:1f:3c:14:cd:63:ac:34:
d3:de:99:d2:32:11:7b:24:57:66:64:d5:95:b5:b6:
23:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7E:0D:92:40:CE:5E:75:C6:7F:B0:D0:0F:DF:A1:EE:56:78:AE:01
X509v3 Authority Key Identifier:
keyid:0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e2:3d:27:37:1b:0a:92:8d:9a:b7:34:0c:32:01:86:ce:e4:
15:b4:5b:ad:64:fc:35:ce:ed:ae:ec:8f:43:4c:83:54:4e:86:
ee:1b:5d:0b:07:16:37:bf:eb:eb:33:bd:c2:82:ae:b5:df:ba:
63:e2:37:2d:23:7b:ce:7e:01:f4:ef:6e:01:fa:e2:a2:17:c9:
db:32:06:23:54:a5:1b:f4:a5:7d:57:0a:f6:8f:34:89:21:8a:
73:f1:72:de:0d:14:5f:42:4c:14:47:60:2e:37:3c:e0:03:9b:
82:81:ed:c8:6f:a1:ad:9a:ff:20:08:e4:86:2e:9f:2c:7c:b6:
9e:cb:a3:d4:0f:8c:68:39:b5:b4:ec:0e:19:6d:cf:c1:75:94:
f8:60:fd:83:83:7f:a7:3a:51:f3:b0:23:45:94:0c:92:db:3a:
36:5b:65:ce:2c:f8:45:b1:37:93:fd:96:10:45:88:8a:87:ce:
40:1f:1c:8d:42:a8:89:03:a5:15:09:be:04:c7:29:24:4f:ca:
21:48:68:a6:31:71:c0:52:0b:4a:46:c3:a1:fc:9d:d7:7b:f1:
f0:55:fc:d1:d2:4f:97:a0:84:57:4c:c6:1d:c1:02:ec:1f:3a:
98:85:6e:72:52:ca:11:62:f3:21:ef:08:d2:0d:dd:64:66:ed:
b3:d1:c9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:35:47 2026 by rpki-client