
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
File: 0A46107CA3AC888E94D84BCA2952BB23CA716933.mft (raw, json)
Hash identifier: gC2WmHGJKo9jTYn6ypzNoU/e5qZkCamtNHSqUvBrwm0=
Subject key identifier: FC:90:68:5C:A3:B8:C1:7A:D1:16:98:CB:A3:3F:4C:20:61:47:42:E1
Authority key identifier: 0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33
Certificate issuer: /CN=0A46107CA3AC888E94D84BCA2952BB23CA716933
Certificate serial: 2AD60683B8ADFC2CCFA42285C683FAE3CDB0CF9A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
Manifest number: 0136
Signing time: Sat 03 Oct 2026 09:16:46 +0000
Manifest this update: Sat 03 Oct 2026 09:11:46 +0000
Manifest next update: Tue 06 Oct 2026 11:38:46 +0000
Files and hashes: 1: 3130332e3135392e3132322e302f32332d3234203d3e203439353434.roa (hash: rubDoThyXxAtKd7cHar1Xe+H3PklUmIYuQDvQvtMaCY=)
2: 3130332e3135392e3132322e302f32332d3234203d3e20313331343834.roa (hash: iUeqJBmQDAxt+pLGYhWrJK3Odd/B3nT7dclLKwf5UO0=)
3: 323430363a643134303a383030303a3a2f33342d3438203d3e20313331343834.roa (hash: sQQIzWo0IvL/3jgG/tni7qytQXBkoZCTScUs3d/Uek0=)
4: 0A46107CA3AC888E94D84BCA2952BB23CA716933.crl (hash: 5Pg/R3FDyWkpWNCa7D8axIi0I6CNbsuUGVhuECwL08Y=)
5: 323430363a643134303a383030303a3a2f33342d3438203d3e203439353434.roa (hash: PAf824Q9bOcvX8QACkiCfMY2g1dz/7XRXFxJEVpkmfE=)
6: 323430363a643134303a3a2f33322d3438203d3e20313331343834.roa (hash: wf8jpicWFamaHqIJZ6H9jcZ7cuCMGJQ7VOd7B3RXT9U=)
7: 323430363a643134303a3a2f33322d3438203d3e203439353434.roa (hash: g7LIdaEG3sFtKdbTj2hBz13e6bXgQUd18mWYt6svPTs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 11:38:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:d6:06:83:b8:ad:fc:2c:cf:a4:22:85:c6:83:fa:e3:cd:b0:cf:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A46107CA3AC888E94D84BCA2952BB23CA716933
Validity
Not Before: Oct 3 09:11:46 2026 GMT
Not After : Oct 6 11:38:46 2026 GMT
Subject: CN=FC90685CA3B8C17AD11698CBA33F4C20614742E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:d4:91:76:24:ca:49:63:2e:b6:d7:86:30:
0b:ce:11:26:c5:3c:4a:c6:c2:7f:2f:4f:7d:45:06:
3e:62:d1:21:f5:7b:3e:c8:2a:e4:10:c9:f8:cc:1c:
13:df:d3:80:8a:81:78:2d:c1:b0:45:78:72:5b:f9:
09:72:83:44:0a:4d:1c:2e:ea:97:a0:b1:03:1f:9f:
ff:5e:dc:1f:38:d1:01:6d:8c:dd:dc:41:f6:b6:88:
4b:f7:04:93:74:b3:41:a7:c2:e4:0f:8a:8d:dc:6e:
d8:28:91:61:27:22:ae:bd:d3:d1:2b:c8:f1:34:18:
00:bd:39:32:3d:d2:71:42:c6:8a:45:e0:6e:a9:52:
7c:af:3e:8a:4b:4a:11:94:07:23:6f:d9:ee:6b:eb:
1d:4e:ce:01:99:39:4a:42:b3:ad:eb:fa:4b:d1:1c:
0e:01:e8:9d:7d:0e:ac:d5:13:f9:e4:74:83:5f:4c:
be:61:6a:a1:c9:74:ca:e3:5f:99:b2:8b:6a:05:22:
d7:24:c5:fd:96:38:4a:ba:92:db:3d:64:e6:91:c0:
19:70:c9:bc:53:80:06:dc:11:b7:3e:2e:da:25:96:
35:b8:cb:0d:09:ff:78:27:c1:2b:39:bc:76:5c:1c:
71:31:dd:0d:cb:03:55:18:f0:8a:be:fc:42:d2:c8:
62:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:90:68:5C:A3:B8:C1:7A:D1:16:98:CB:A3:3F:4C:20:61:47:42:E1
X509v3 Authority Key Identifier:
keyid:0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a5:99:04:8c:28:51:03:a7:23:c3:0b:ac:56:24:f7:be:d0:
61:bb:d1:31:a3:65:e6:b5:0c:92:97:68:8e:c7:1b:50:ab:b2:
56:b9:8d:bf:7d:23:47:8e:0d:44:01:d9:1f:4b:6f:08:84:60:
2e:47:77:23:b3:19:3e:86:3a:ae:78:7c:fb:fa:3f:e2:99:c8:
0a:d4:ac:50:68:87:9e:83:ba:2b:16:1e:1a:e8:54:f0:3d:2f:
a9:a9:b2:1a:ba:dd:b5:51:f7:43:0a:af:7a:20:79:2b:b4:21:
ae:61:a4:6a:08:75:52:1c:69:c6:bf:b4:a1:3a:52:34:f1:82:
27:31:9b:8b:36:49:87:87:68:d4:0b:a9:93:8b:79:b4:7e:5e:
4a:0c:b3:4b:58:9e:74:27:8e:bb:96:a4:5e:17:71:40:99:4b:
16:10:de:60:b0:86:5d:b7:7e:51:b0:e5:8f:14:2b:f3:c1:60:
59:67:8f:3b:45:3b:c5:4c:fc:32:84:c4:f8:65:bf:43:c7:dd:
63:a5:9a:29:d3:54:ec:13:67:36:0d:b9:f8:65:05:50:c5:23:
e2:94:8e:88:47:29:3a:a4:a9:dc:5e:e3:eb:c1:2c:b2:f2:75:
33:f8:2b:73:1f:0d:7c:ec:54:97:36:3e:6b:2a:26:0b:ef:34:
c0:4d:c3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 23:08:02 2026 by rpki-client