$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft File: 0A46107CA3AC888E94D84BCA2952BB23CA716933.mft (raw, json) Hash identifier: PwbOU5x232COPBFqTkONqXyEqsB7vRQLV7KvffxpyPE= Subject key identifier: E0:AC:3D:D6:CD:75:55:57:42:34:5D:5E:5E:E4:60:D1:73:3A:1B:A9 Authority key identifier: 0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 Certificate issuer: /CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Certificate serial: 2E02E8B85CA82A03F60A110B4C3205A3D4694CEE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft Manifest number: 0132 Signing time: Thu 24 Sep 2026 10:26:46 +0000 Manifest this update: Thu 24 Sep 2026 10:21:46 +0000 Manifest next update: Sun 27 Sep 2026 11:42:46 +0000 Files and hashes: 1: 323430363a643134303a3a2f33322d3438203d3e20313331343834.roa (hash: wf8jpicWFamaHqIJZ6H9jcZ7cuCMGJQ7VOd7B3RXT9U=) 2: 3130332e3135392e3132322e302f32332d3234203d3e20313331343834.roa (hash: iUeqJBmQDAxt+pLGYhWrJK3Odd/B3nT7dclLKwf5UO0=) 3: 323430363a643134303a383030303a3a2f33342d3438203d3e203439353434.roa (hash: PAf824Q9bOcvX8QACkiCfMY2g1dz/7XRXFxJEVpkmfE=) 4: 3130332e3135392e3132322e302f32332d3234203d3e203439353434.roa (hash: rubDoThyXxAtKd7cHar1Xe+H3PklUmIYuQDvQvtMaCY=) 5: 0A46107CA3AC888E94D84BCA2952BB23CA716933.crl (hash: AzNZLk/oqyC4rxO960Ox+AgteOFdGEnYGLMArTVO79g=) 6: 323430363a643134303a3a2f33322d3438203d3e203439353434.roa (hash: g7LIdaEG3sFtKdbTj2hBz13e6bXgQUd18mWYt6svPTs=) 7: 323430363a643134303a383030303a3a2f33342d3438203d3e20313331343834.roa (hash: sQQIzWo0IvL/3jgG/tni7qytQXBkoZCTScUs3d/Uek0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 11:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:02:e8:b8:5c:a8:2a:03:f6:0a:11:0b:4c:32:05:a3:d4:69:4c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Validity Not Before: Sep 24 10:21:46 2026 GMT Not After : Sep 27 11:42:46 2026 GMT Subject: CN=E0AC3DD6CD75555742345D5E5EE460D1733A1BA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:15:10:ba:cd:a8:2f:be:f9:dd:9a:5b:bd:f7: a2:a2:8d:9a:a7:26:9f:fc:55:16:d0:a0:3c:b9:19: 4a:06:b4:6f:3e:20:91:2d:a5:04:81:1e:a5:54:bc: 08:e4:ee:7f:a1:58:28:cc:c7:f4:7f:71:78:ac:b1: 4d:7f:73:40:bf:a1:1d:20:7c:7a:5c:19:2b:76:db: 1b:66:47:33:0f:20:0e:13:28:f8:d6:f3:9d:85:d7: 57:f7:c8:79:bb:84:29:4f:cf:ee:b8:40:5b:38:b3: c5:bc:b8:d6:c1:8e:b4:ed:82:76:ba:fd:ad:2a:64: db:71:2c:08:3d:68:ba:38:c3:19:e9:85:03:69:02: b1:04:2d:f1:3d:01:10:3d:fc:37:4d:86:3d:ac:b9: 1b:26:3a:5e:cc:6d:91:2e:e1:e8:63:8a:19:a9:8f: 1b:16:09:fc:96:ac:aa:05:29:5b:e4:82:58:de:70: 27:26:ac:dc:e3:ae:fc:70:40:b3:d3:4f:08:c2:af: ad:87:be:a9:96:1a:04:e8:23:64:33:76:d3:b8:18: 36:36:f2:84:e0:51:41:9e:db:d8:6b:07:7d:73:76: 8e:3a:b5:7b:0e:42:56:b8:83:4d:51:95:9b:80:b1: e3:7e:c4:1f:5b:45:fa:ff:c4:b9:20:ef:c1:a7:6b: 6c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AC:3D:D6:CD:75:55:57:42:34:5D:5E:5E:E4:60:D1:73:3A:1B:A9 X509v3 Authority Key Identifier: keyid:0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:86:1a:fb:27:67:eb:da:12:18:4f:32:91:22:61:39:f7:1b: 29:7d:29:47:a7:50:d1:8b:3b:c7:b5:0b:e5:29:5a:aa:89:bf: e0:b1:a4:8e:91:f6:75:6d:bc:5e:02:d3:79:2a:96:c4:8b:dd: 91:b5:e7:e3:81:83:cd:61:9c:44:9d:0d:ec:72:33:63:84:21: 6d:c7:7e:c7:1e:c4:85:53:94:45:94:6a:15:56:12:c0:fe:78: 4b:be:58:a7:aa:1c:ec:65:03:05:e3:0f:59:a7:6b:1f:23:83: 12:a7:e5:4b:47:3f:f4:61:2d:72:a5:e4:f5:23:20:91:88:04: e9:99:e8:09:07:85:c6:1f:e4:89:77:39:8f:ae:cd:34:cc:3d: 31:9e:da:91:9f:9a:c2:d5:ae:07:1b:3e:81:72:e1:90:c3:c0: 67:b6:09:12:cc:4d:9d:24:87:c2:c6:2e:7e:e1:85:89:2c:7c: aa:e4:bd:a8:07:79:fe:a5:8f:a2:0f:17:72:6f:6f:aa:74:f7: 41:2c:a2:e7:f6:4b:41:a4:6e:a2:de:d3:72:b9:17:89:60:c0: 7c:13:7b:41:cf:b9:78:45:3f:b8:9e:ac:4e:ae:e8:39:db:96: 86:40:9c:97:12:e6:04:ab:18:69:11:4a:bf:d0:01:19:da:bc: a2:c7:ca:e0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULgLouFyoKgP2ChELTDIFo9RpTO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjND QTcxNjkzMzAeFw0yNjA5MjQxMDIxNDZaFw0yNjA5MjcxMTQyNDZaMDMxMTAvBgNV BAMTKEUwQUMzREQ2Q0Q3NTU1NTc0MjM0NUQ1RTVFRTQ2MEQxNzMzQTFCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0FRC6zagvvvndmlu996KijZqn Jp/8VRbQoDy5GUoGtG8+IJEtpQSBHqVUvAjk7n+hWCjMx/R/cXissU1/c0C/oR0g fHpcGSt22xtmRzMPIA4TKPjW852F11f3yHm7hClPz+64QFs4s8W8uNbBjrTtgna6 /a0qZNtxLAg9aLo4wxnphQNpArEELfE9ARA9/DdNhj2suRsmOl7MbZEu4ehjihmp jxsWCfyWrKoFKVvkgljecCcmrNzjrvxwQLPTTwjCr62HvqmWGgToI2QzdtO4GDY2 8oTgUUGe29hrB31zdo46tXsOQla4g01RlZuAseN+xB9bRfr/xLkg78Gna2z/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4Kw91s11VVdCNF1eXuRg0XM6G6kwHwYDVR0j BBgwFoAUCkYQfKOsiI6U2EvKKVK7I8pxaTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTYyNjExNC8wLzBBNDYxMDdDQTNBQzg4OEU5NEQ4NEJDQTI5NTJC QjIzQ0E3MTY5MzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjNDQTcxNjkzMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2MjYxMTQvMC8wQTQ2MTA3Q0EzQUM4 ODhFOTREODRCQ0EyOTUyQkIyM0NBNzE2OTMzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIYa+ydn69oS GE8ykSJhOfcbKX0pR6dQ0Ys7x7UL5Slaqom/4LGkjpH2dW28XgLTeSqWxIvdkbXn 44GDzWGcRJ0N7HIzY4Qhbcd+xx7EhVOURZRqFVYSwP54S75Yp6oc7GUDBeMPWadr HyODEqflS0c/9GEtcqXk9SMgkYgE6ZnoCQeFxh/kiXc5j67NNMw9MZ7akZ+awtWu Bxs+gXLhkMPAZ7YJEsxNnSSHwsYufuGFiSx8quS9qAd5/qWPog8Xcm9vqnT3QSyi 5/ZLQaRuot7TcrkXiWDAfBN7Qc+5eEU/uJ6sTq7oOduWhkCclxLmBKsYaRFKv9AB Gdq8osfK4A== -----END CERTIFICATE-----Generated at Fri Sep 25 04:24:56 2026 by rpki-client