$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft File: 0A46107CA3AC888E94D84BCA2952BB23CA716933.mft (raw, json) Hash identifier: TOB0X5XK6hSPbIXsjzhRkuhcXJd6wiESr3Xz782M+tU= Subject key identifier: 7F:67:A1:3B:E3:C0:02:67:F7:BF:5E:83:99:D1:2A:AF:89:3B:7F:35 Authority key identifier: 0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 Certificate issuer: /CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Certificate serial: 1292C2B0E114CEE1E4BB37C5BACDB739DB769692 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 17:03:28 +0000 Manifest this update: Thu 26 Mar 2026 16:58:28 +0000 Manifest next update: Fri 27 Mar 2026 20:27:28 +0000 Files and hashes: 1: 3130332e3135392e3132322e302f32332d3234203d3e20313331343834.roa (hash: iUeqJBmQDAxt+pLGYhWrJK3Odd/B3nT7dclLKwf5UO0=) 2: 3130332e3135392e3132322e302f32332d3234203d3e203439353434.roa (hash: rubDoThyXxAtKd7cHar1Xe+H3PklUmIYuQDvQvtMaCY=) 3: 323430363a643134303a3a2f33322d3438203d3e203439353434.roa (hash: g7LIdaEG3sFtKdbTj2hBz13e6bXgQUd18mWYt6svPTs=) 4: 323430363a643134303a383030303a3a2f33342d3438203d3e20313331343834.roa (hash: sQQIzWo0IvL/3jgG/tni7qytQXBkoZCTScUs3d/Uek0=) 5: 323430363a643134303a383030303a3a2f33342d3438203d3e203439353434.roa (hash: PAf824Q9bOcvX8QACkiCfMY2g1dz/7XRXFxJEVpkmfE=) 6: 323430363a643134303a3a2f33322d3438203d3e20313331343834.roa (hash: wf8jpicWFamaHqIJZ6H9jcZ7cuCMGJQ7VOd7B3RXT9U=) 7: 0A46107CA3AC888E94D84BCA2952BB23CA716933.crl (hash: HqYZCdZkfECTxqPYoniT7T/r7+/swH+hg5ZclsWtwIo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:92:c2:b0:e1:14:ce:e1:e4:bb:37:c5:ba:cd:b7:39:db:76:96:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Validity Not Before: Mar 26 16:58:28 2026 GMT Not After : Mar 27 20:27:28 2026 GMT Subject: CN=7F67A13BE3C00267F7BF5E8399D12AAF893B7F35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:8f:e6:fb:b7:0b:41:ba:22:f0:3a:f4:56:b6: 75:07:b5:69:d7:c5:39:45:43:3f:bd:10:d3:dd:75: 47:99:eb:6a:24:dc:a8:76:cd:7d:59:4c:88:2a:18: b1:02:f2:d7:18:68:ca:bf:d2:99:a4:9e:50:aa:f6: b1:7b:0e:06:c8:4c:43:c0:aa:1d:a9:88:71:2f:d8: 6c:af:17:2c:d4:95:21:4e:fe:45:26:14:97:ca:46: 10:40:73:c9:86:6b:ff:7b:e2:8b:a6:06:5d:22:48: 61:04:49:72:0a:28:05:6e:d2:64:da:16:58:6c:0d: 08:16:22:63:07:b6:58:80:07:bc:4c:89:f3:f2:d7: 49:6c:88:38:82:a3:48:e5:57:e1:d0:d8:4e:fe:aa: 60:c5:bc:6e:f7:82:46:04:88:0e:1b:65:b4:be:e5: 49:f3:0c:16:82:d5:1c:88:eb:3e:07:29:8a:cb:a3: c5:e5:94:a7:d3:8d:62:99:ce:9e:3b:2c:d3:22:84: 7b:82:e8:64:cb:b3:a9:e8:d4:ba:21:71:15:8d:b4: d3:88:d8:7f:a8:d3:a8:3d:41:8e:81:95:56:fd:bf: 72:c6:ed:42:cf:6c:d3:7f:64:3b:0e:c9:6b:9f:78: 6b:c4:c7:2d:ab:4d:01:f4:f2:7a:0d:33:66:e1:aa: 18:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:67:A1:3B:E3:C0:02:67:F7:BF:5E:83:99:D1:2A:AF:89:3B:7F:35 X509v3 Authority Key Identifier: keyid:0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f7:61:82:a1:a5:66:d8:e0:5e:5a:c1:cc:ed:58:a8:60:2b: 0a:dc:6b:ba:2d:96:93:4b:bd:bc:ea:6c:95:9d:43:36:89:7b: e6:45:31:c2:14:7c:c3:af:ee:50:a5:ec:f6:6a:08:5b:0c:57: 79:0a:25:a9:7d:03:98:78:97:34:da:33:39:81:d0:e1:07:1c: 5e:19:f8:c9:c6:80:29:30:a7:c5:aa:ab:86:d8:ce:39:2b:20: ea:a1:9f:a5:94:54:dc:ec:39:1c:fa:20:09:fc:15:ff:82:58: df:16:9e:d0:1d:f6:aa:76:5a:73:a8:df:02:4d:5e:50:28:9d: ac:46:1e:a8:c0:59:a5:ce:85:1c:af:ea:96:f8:34:50:88:a6: 01:1b:1f:a6:5d:48:cd:4f:94:4f:1b:e6:15:ee:5e:3e:9e:e3: 60:e2:b9:ff:a8:7f:b1:19:b7:68:f7:85:a6:75:f3:bc:2f:fa: f4:10:80:3e:c7:20:29:fe:a8:e3:7b:f9:a7:ec:88:21:16:fe: 21:3a:51:5c:f7:4f:5c:5c:cb:61:54:d6:cc:9c:d0:37:1d:c6: 42:e3:c6:02:8d:9c:a9:71:43:fb:8e:fd:b0:a4:07:26:7f:d9: 5f:28:83:59:f8:82:b6:ae:e0:bf:43:46:c8:f2:ca:02:5b:66: 73:4c:a4:d1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEpLCsOEUzuHkuzfFus23Odt2lpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjND QTcxNjkzMzAeFw0yNjAzMjYxNjU4MjhaFw0yNjAzMjcyMDI3MjhaMDMxMTAvBgNV BAMTKDdGNjdBMTNCRTNDMDAyNjdGN0JGNUU4Mzk5RDEyQUFGODkzQjdGMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0j+b7twtBuiLwOvRWtnUHtWnX xTlFQz+9ENPddUeZ62ok3Kh2zX1ZTIgqGLEC8tcYaMq/0pmknlCq9rF7DgbITEPA qh2piHEv2GyvFyzUlSFO/kUmFJfKRhBAc8mGa/974oumBl0iSGEESXIKKAVu0mTa FlhsDQgWImMHtliAB7xMifPy10lsiDiCo0jlV+HQ2E7+qmDFvG73gkYEiA4bZbS+ 5UnzDBaC1RyI6z4HKYrLo8XllKfTjWKZzp47LNMihHuC6GTLs6no1LohcRWNtNOI 2H+o06g9QY6BlVb9v3LG7ULPbNN/ZDsOyWufeGvExy2rTQH08noNM2bhqhjxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUf2ehO+PAAmf3v16DmdEqr4k7fzUwHwYDVR0j BBgwFoAUCkYQfKOsiI6U2EvKKVK7I8pxaTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTYyNjExNC8wLzBBNDYxMDdDQTNBQzg4OEU5NEQ4NEJDQTI5NTJC QjIzQ0E3MTY5MzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjNDQTcxNjkzMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2MjYxMTQvMC8wQTQ2MTA3Q0EzQUM4 ODhFOTREODRCQ0EyOTUyQkIyM0NBNzE2OTMzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefdhgqGlZtjg XlrBzO1YqGArCtxrui2Wk0u9vOpslZ1DNol75kUxwhR8w6/uUKXs9moIWwxXeQol qX0DmHiXNNozOYHQ4QccXhn4ycaAKTCnxaqrhtjOOSsg6qGfpZRU3Ow5HPogCfwV /4JY3xae0B32qnZac6jfAk1eUCidrEYeqMBZpc6FHK/qlvg0UIimARsfpl1IzU+U TxvmFe5ePp7jYOK5/6h/sRm3aPeFpnXzvC/69BCAPscgKf6o43v5p+yIIRb+ITpR XPdPXFzLYVTWzJzQNx3GQuPGAo2cqXFD+479sKQHJn/ZXyiDWfiCtq7gv0NGyPLK Altmc0yk0Q== -----END CERTIFICATE-----Generated at Fri Mar 27 03:40:04 2026 by rpki-client