$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft File: 0A46107CA3AC888E94D84BCA2952BB23CA716933.mft (raw, json) Hash identifier: WP3HwR7gg7R+2Is9FrmxsGyz8qa1sXEeEvAjDTG1cmk= Subject key identifier: 25:A5:A5:90:49:E6:C9:21:9B:E8:8C:F7:DD:ED:C0:DC:7C:B4:5E:C9 Authority key identifier: 0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 Certificate issuer: /CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Certificate serial: 7FE6DF7311D6D636B44B627E24B244991D1A563B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft Manifest number: 58 Signing time: Thu 26 Mar 2026 00:43:28 +0000 Manifest this update: Thu 26 Mar 2026 00:38:28 +0000 Manifest next update: Fri 27 Mar 2026 01:01:28 +0000 Files and hashes: 1: 3130332e3135392e3132322e302f32332d3234203d3e203439353434.roa (hash: rubDoThyXxAtKd7cHar1Xe+H3PklUmIYuQDvQvtMaCY=) 2: 323430363a643134303a3a2f33322d3438203d3e20313331343834.roa (hash: wf8jpicWFamaHqIJZ6H9jcZ7cuCMGJQ7VOd7B3RXT9U=) 3: 0A46107CA3AC888E94D84BCA2952BB23CA716933.crl (hash: DOE1fehYZ0w1AIBC7VJlITlgev1ddocUQ1b+t5E77Bs=) 4: 323430363a643134303a383030303a3a2f33342d3438203d3e203439353434.roa (hash: PAf824Q9bOcvX8QACkiCfMY2g1dz/7XRXFxJEVpkmfE=) 5: 3130332e3135392e3132322e302f32332d3234203d3e20313331343834.roa (hash: iUeqJBmQDAxt+pLGYhWrJK3Odd/B3nT7dclLKwf5UO0=) 6: 323430363a643134303a3a2f33322d3438203d3e203439353434.roa (hash: g7LIdaEG3sFtKdbTj2hBz13e6bXgQUd18mWYt6svPTs=) 7: 323430363a643134303a383030303a3a2f33342d3438203d3e20313331343834.roa (hash: sQQIzWo0IvL/3jgG/tni7qytQXBkoZCTScUs3d/Uek0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e6:df:73:11:d6:d6:36:b4:4b:62:7e:24:b2:44:99:1d:1a:56:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Validity Not Before: Mar 26 00:38:28 2026 GMT Not After : Mar 27 01:01:28 2026 GMT Subject: CN=25A5A59049E6C9219BE88CF7DDEDC0DC7CB45EC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:fc:34:b3:d1:f5:d9:a1:fd:15:79:38:33: 31:a5:14:8b:56:03:71:80:26:b9:ca:c2:eb:1c:b9: af:d9:64:7f:88:b4:7f:f3:50:53:fd:36:82:84:87: f3:17:5d:c6:26:55:2c:b1:81:ed:8f:84:5f:db:f4: 79:d2:17:7a:c0:64:64:9e:fc:ed:ec:9e:fb:1b:1f: bf:ee:37:73:4b:63:60:44:2c:74:5f:a7:69:84:45: a5:0e:52:8c:78:e2:0b:6c:d3:e9:42:f3:17:b1:65: 0b:eb:5c:bb:cc:aa:d0:fd:03:73:f2:0d:3d:4d:49: 36:43:e1:23:f4:fb:27:29:14:9c:99:fb:14:9e:64: 5e:40:df:00:2b:8d:19:e9:f6:13:8a:d5:88:cb:c3: 49:9c:f0:c7:97:48:68:0a:ed:02:48:54:9f:43:f7: c3:c2:12:91:4b:a7:80:ab:4b:ad:b1:1e:90:63:36: 3f:e9:2c:ce:a4:4c:7b:3e:af:ea:08:87:9c:12:ea: 86:e8:1a:ad:7b:34:9d:3c:09:41:1d:e4:85:36:c3: 68:b7:8c:f6:1b:e4:d0:08:4a:28:85:fe:98:6c:7e: 65:8c:4c:18:10:a1:c2:39:fe:b9:d4:e0:de:2b:a9: 3a:b4:95:12:22:a0:5f:69:16:98:44:16:3e:d4:69: e5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A5:A5:90:49:E6:C9:21:9B:E8:8C:F7:DD:ED:C0:DC:7C:B4:5E:C9 X509v3 Authority Key Identifier: keyid:0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:6a:96:e5:b2:4e:57:f1:ae:41:9b:e2:21:6d:dd:9d:01:7b: 31:4c:e5:4b:c7:98:8c:fd:b1:35:d0:00:f1:f7:15:84:de:b7: 00:29:b2:41:0b:12:64:74:cf:07:8c:db:b8:12:a8:a5:7c:98: 1c:09:66:10:85:e0:64:0c:19:02:21:c2:51:d2:95:e0:72:1c: 3f:60:fc:e9:74:69:ee:2e:cb:28:ea:26:c7:68:7c:4b:ae:7f: ab:45:39:09:b7:99:3e:38:d9:a8:85:ce:d0:f5:ab:4e:be:3c: 92:19:ae:0c:a0:bd:13:d6:76:e0:38:4c:fc:06:06:f8:6f:c4: d9:69:45:6d:f6:9f:1b:64:08:89:b5:c1:7d:b3:32:8c:c6:35: 96:b4:be:6d:4b:22:96:48:e1:cb:b9:32:27:e2:a1:73:77:21: d1:f1:52:51:8d:24:e0:72:d0:8c:45:02:49:0a:d1:b2:84:b8: ba:61:18:1a:c2:71:28:9a:5d:dc:b6:ac:22:49:41:1c:4e:99: ef:ee:b8:2a:8a:bb:ec:68:44:31:88:eb:6e:32:6d:ed:3f:ed: 8f:ac:54:fd:44:7a:b7:e9:3b:b7:de:9a:17:76:6d:6d:3d:e3: f2:d8:ce:ec:9a:29:ec:51:02:87:81:d9:0e:2f:99:9d:c4:0d: 3c:cf:4e:58 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf+bfcxHW1ja0S2J+JLJEmR0aVjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjND QTcxNjkzMzAeFw0yNjAzMjYwMDM4MjhaFw0yNjAzMjcwMTAxMjhaMDMxMTAvBgNV BAMTKDI1QTVBNTkwNDlFNkM5MjE5QkU4OENGN0RERURDMERDN0NCNDVFQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFXPw0s9H12aH9FXk4MzGlFItW A3GAJrnKwuscua/ZZH+ItH/zUFP9NoKEh/MXXcYmVSyxge2PhF/b9HnSF3rAZGSe /O3snvsbH7/uN3NLY2BELHRfp2mERaUOUox44gts0+lC8xexZQvrXLvMqtD9A3Py DT1NSTZD4SP0+ycpFJyZ+xSeZF5A3wArjRnp9hOK1YjLw0mc8MeXSGgK7QJIVJ9D 98PCEpFLp4CrS62xHpBjNj/pLM6kTHs+r+oIh5wS6oboGq17NJ08CUEd5IU2w2i3 jPYb5NAISiiF/phsfmWMTBgQocI5/rnU4N4rqTq0lRIioF9pFphEFj7UaeUrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJaWlkEnmySGb6Iz33e3A3Hy0XskwHwYDVR0j BBgwFoAUCkYQfKOsiI6U2EvKKVK7I8pxaTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTYyNjExNC8wLzBBNDYxMDdDQTNBQzg4OEU5NEQ4NEJDQTI5NTJC QjIzQ0E3MTY5MzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjNDQTcxNjkzMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2MjYxMTQvMC8wQTQ2MTA3Q0EzQUM4 ODhFOTREODRCQ0EyOTUyQkIyM0NBNzE2OTMzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWqW5bJOV/Gu QZviIW3dnQF7MUzlS8eYjP2xNdAA8fcVhN63ACmyQQsSZHTPB4zbuBKopXyYHAlm EIXgZAwZAiHCUdKV4HIcP2D86XRp7i7LKOomx2h8S65/q0U5CbeZPjjZqIXO0PWr Tr48khmuDKC9E9Z24DhM/AYG+G/E2WlFbfafG2QIibXBfbMyjMY1lrS+bUsilkjh y7kyJ+Khc3ch0fFSUY0k4HLQjEUCSQrRsoS4umEYGsJxKJpd3LasIklBHE6Z7+64 Koq77GhEMYjrbjJt7T/tj6xU/UR6t+k7t96aF3ZtbT3j8tjO7Jop7FECh4HZDi+Z ncQNPM9OWA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:28:29 2026 by rpki-client