$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft File: 46C13E5032045116B0FA54934DD7BFCA0483335A.mft (raw, json) Hash identifier: 8N+XzYQXse1KANC0zdmkjdAnAUSqCj14KACH53/JbRU= Subject key identifier: 77:A0:C9:E7:B8:7C:77:7C:5E:D1:78:6A:D2:EF:D4:54:FC:53:EE:C8 Authority key identifier: 46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A Certificate issuer: /CN=46C13E5032045116B0FA54934DD7BFCA0483335A Certificate serial: 0F1014D7FD0DF48523E14457B11E77A58B77F1F2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 05:24:40 +0000 Manifest this update: Fri 17 Apr 2026 05:19:40 +0000 Manifest next update: Sat 18 Apr 2026 08:09:40 +0000 Files and hashes: 1: 3231392e3233352e3132382e302f32312d3231203d3e2039383037.roa (hash: WgqZHu54HYvCrSjVeZSV7S2ptAQ1a+xoyVFAd7XUP1I=) 2: 3231392e3233352e3134342e302f32312d3231203d3e2039383037.roa (hash: Wi/t+st603WnA7TssvGC3DzTJ3V3irpX2WC1oBapI5U=) 3: 3231392e3233352e3135322e302f32312d3231203d3e203435303734.roa (hash: WSpXWtSav0n/mxgQsU+45a8xYf8rGnUkY+KgxqJpb44=) 4: 323430303a356130303a3a2f33322d3332203d3e2039383037.roa (hash: LogFkd2wHLYxjTnS7A6XZRJU7XgOiWX8cKqHZgMnfdc=) 5: 46C13E5032045116B0FA54934DD7BFCA0483335A.crl (hash: 1cAfltcj3cs47t3WjQ5WFWqfBPMvqGCjO8Z/6JlCdPU=) 6: 3231392e3233352e3133362e302f32312d3231203d3e2039383037.roa (hash: 9EWw+3yvD8wWr9/mlEXgpw2TuO9rB0T1PMKPebwR0kY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:10:14:d7:fd:0d:f4:85:23:e1:44:57:b1:1e:77:a5:8b:77:f1:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46C13E5032045116B0FA54934DD7BFCA0483335A Validity Not Before: Apr 17 05:19:40 2026 GMT Not After : Apr 18 08:09:40 2026 GMT Subject: CN=77A0C9E7B87C777C5ED1786AD2EFD454FC53EEC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:2e:e4:13:4a:e6:92:6b:1c:8d:0d:f5:2b: 95:ad:f2:21:4e:38:79:6d:ea:04:61:06:a3:ef:38: d5:c6:94:23:6e:a3:c4:85:c2:89:0c:b6:7e:98:b7: 2d:3a:f7:6b:ce:68:66:27:08:6d:f6:e0:6a:d6:52: 4c:e7:c5:75:90:28:10:36:96:81:54:48:3d:3a:4d: df:5a:28:eb:13:80:ca:ec:81:75:b7:79:25:3c:b6: 39:41:7c:e1:b5:a1:8a:c1:6c:af:56:10:a6:87:f9: c8:a6:a8:00:0f:58:16:c6:60:af:48:6c:f9:af:43: c6:dc:3e:0a:d4:ba:2c:bd:11:ea:17:6e:ca:1c:12: cb:b8:09:56:6c:b8:61:87:23:c9:16:59:b2:3f:12: 4f:1f:ad:ca:50:ab:bb:c3:55:bf:84:6b:d6:4b:58: b9:0d:95:6d:98:6d:5a:8f:03:7e:6e:b8:22:24:2d: 1f:3a:a4:5b:e8:eb:30:d4:18:ee:91:87:57:cb:54: e9:dc:8b:60:64:b9:ae:15:4a:e6:2b:dc:f4:6e:e1: 35:fb:51:b3:0e:58:6d:c5:69:f1:57:a9:36:f3:7a: f5:94:98:90:4d:05:99:3a:88:6b:9f:58:e8:3b:6e: cd:b9:ab:5c:46:f5:94:55:25:66:70:68:ef:9e:d6: 59:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A0:C9:E7:B8:7C:77:7C:5E:D1:78:6A:D2:EF:D4:54:FC:53:EE:C8 X509v3 Authority Key Identifier: keyid:46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:44:42:6f:3e:76:67:ec:aa:f1:e0:02:c9:c9:61:db:d3:f5: 2a:05:7a:62:da:b8:c3:8a:44:45:41:04:cf:70:d1:16:b5:9c: c5:f1:4a:b2:8f:86:e8:4f:e0:f1:90:c8:a1:5b:6c:0a:2f:e4: 27:82:5a:9a:f7:3c:bb:df:f7:77:04:5f:0d:ae:fe:a0:63:b9: 2d:4e:d3:8c:b4:c6:6b:f1:c9:cd:e3:cc:af:f6:20:46:e3:28: 38:46:e4:b2:25:01:c7:3e:35:86:e9:18:75:a4:21:18:3a:2d: 6a:75:ab:9d:e6:cf:40:4b:bf:f8:05:50:b3:6f:f9:61:3b:06: 98:25:68:c5:86:fe:5f:a9:46:2e:de:e6:77:3c:bf:be:e4:1d: 9d:ac:d4:a1:9a:4a:e1:fc:fd:c6:63:89:5f:e6:f3:5e:5c:d5: 4a:1b:68:ee:54:b9:12:55:73:70:2e:31:bb:3c:c0:7c:7d:98: 28:3c:ee:a0:39:2d:81:5b:72:a4:93:98:75:b8:a5:af:3c:12: 65:66:0a:6b:f1:ea:c7:05:54:0e:8f:94:2e:29:ed:62:1d:a8: 34:53:ca:ab:ac:92:3f:f2:23:24:cc:9a:96:fa:6c:72:d0:65: e1:80:89:e3:2d:f2:49:39:c5:f8:2f:24:e9:1a:c9:89:4b:52: 2e:05:b5:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDxAU1/0N9IUj4URXsR53pYt38fIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZDMTNFNTAzMjA0NTExNkIwRkE1NDkzNEREN0JGQ0Ew NDgzMzM1QTAeFw0yNjA0MTcwNTE5NDBaFw0yNjA0MTgwODA5NDBaMDMxMTAvBgNV BAMTKDc3QTBDOUU3Qjg3Qzc3N0M1RUQxNzg2QUQyRUZENDU0RkM1M0VFQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcS7kE0rmkmscjQ31K5Wt8iFO OHlt6gRhBqPvONXGlCNuo8SFwokMtn6Yty0692vOaGYnCG324GrWUkznxXWQKBA2 loFUSD06Td9aKOsTgMrsgXW3eSU8tjlBfOG1oYrBbK9WEKaH+cimqAAPWBbGYK9I bPmvQ8bcPgrUuiy9EeoXbsocEsu4CVZsuGGHI8kWWbI/Ek8frcpQq7vDVb+Ea9ZL WLkNlW2YbVqPA35uuCIkLR86pFvo6zDUGO6Rh1fLVOnci2Bkua4VSuYr3PRu4TX7 UbMOWG3FafFXqTbzevWUmJBNBZk6iGufWOg7bs25q1xG9ZRVJWZwaO+e1lnvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUd6DJ57h8d3xe0Xhq0u/UVPxT7sgwHwYDVR0j BBgwFoAURsE+UDIEURaw+lSTTde/ygSDM1owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODAwOTQ3NS8wLzQ2QzEzRTUwMzIwNDUxMTZCMEZBNTQ5MzRERDdC RkNBMDQ4MzMzNUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDZDMTNFNTAzMjA0NTExNkIwRkE1NDkzNEREN0JGQ0EwNDgzMzM1QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgwMDk0NzUvMC80NkMxM0U1MDMyMDQ1 MTE2QjBGQTU0OTM0REQ3QkZDQTA0ODMzMzVBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANERCbz52Z+yq 8eACyclh29P1KgV6Ytq4w4pERUEEz3DRFrWcxfFKso+G6E/g8ZDIoVtsCi/kJ4Ja mvc8u9/3dwRfDa7+oGO5LU7TjLTGa/HJzePMr/YgRuMoOEbksiUBxz41hukYdaQh GDotanWrnebPQEu/+AVQs2/5YTsGmCVoxYb+X6lGLt7mdzy/vuQdnazUoZpK4fz9 xmOJX+bzXlzVShto7lS5ElVzcC4xuzzAfH2YKDzuoDktgVtypJOYdbilrzwSZWYK a/HqxwVUDo+ULintYh2oNFPKq6ySP/IjJMyalvpsctBl4YCJ4y3ySTnF+C8k6RrJ iUtSLgW1MQ== -----END CERTIFICATE-----Generated at Fri Apr 17 16:01:04 2026 by rpki-client