$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft File: 0A46107CA3AC888E94D84BCA2952BB23CA716933.mft (raw, json) Hash identifier: 0IHUP8OPWvlUAlCKBRxabI8bO3vyiCyGa+dISdei24o= Subject key identifier: 00:CA:81:13:37:B7:2F:5E:F3:09:04:2A:1D:B7:06:66:5F:97:B1:2A Authority key identifier: 0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 Certificate issuer: /CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Certificate serial: 2970B9D7EAE7A134ACC435CFCF79C2ADEFB0362C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft Manifest number: FD Signing time: Tue 28 Jul 2026 15:42:10 +0000 Manifest this update: Tue 28 Jul 2026 15:37:10 +0000 Manifest next update: Wed 29 Jul 2026 19:32:10 +0000 Files and hashes: 1: 323430363a643134303a383030303a3a2f33342d3438203d3e20313331343834.roa (hash: sQQIzWo0IvL/3jgG/tni7qytQXBkoZCTScUs3d/Uek0=) 2: 0A46107CA3AC888E94D84BCA2952BB23CA716933.crl (hash: mQ/oUQNFlBb7Z3BFo9EUbycOn0BIhurYYkfMtP2KYZI=) 3: 3130332e3135392e3132322e302f32332d3234203d3e20313331343834.roa (hash: iUeqJBmQDAxt+pLGYhWrJK3Odd/B3nT7dclLKwf5UO0=) 4: 323430363a643134303a383030303a3a2f33342d3438203d3e203439353434.roa (hash: PAf824Q9bOcvX8QACkiCfMY2g1dz/7XRXFxJEVpkmfE=) 5: 323430363a643134303a3a2f33322d3438203d3e20313331343834.roa (hash: wf8jpicWFamaHqIJZ6H9jcZ7cuCMGJQ7VOd7B3RXT9U=) 6: 3130332e3135392e3132322e302f32332d3234203d3e203439353434.roa (hash: rubDoThyXxAtKd7cHar1Xe+H3PklUmIYuQDvQvtMaCY=) 7: 323430363a643134303a3a2f33322d3438203d3e203439353434.roa (hash: g7LIdaEG3sFtKdbTj2hBz13e6bXgQUd18mWYt6svPTs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:70:b9:d7:ea:e7:a1:34:ac:c4:35:cf:cf:79:c2:ad:ef:b0:36:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Validity Not Before: Jul 28 15:37:10 2026 GMT Not After : Jul 29 19:32:10 2026 GMT Subject: CN=00CA811337B72F5EF309042A1DB706665F97B12A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:05:12:e0:2e:d1:24:b2:f7:5e:eb:13:92:16: 5f:0a:fc:87:c8:cd:b1:3f:59:e4:ab:aa:0a:56:ba: 9b:fe:46:43:ea:7e:b2:b3:10:54:16:3a:8e:5d:42: 5a:5a:20:d9:6b:a9:dc:c6:95:f4:94:7d:b5:90:b5: 63:3f:f8:79:b9:78:75:bb:e2:a1:a4:d8:80:8e:07: 6a:99:af:f7:09:2f:84:cb:16:fa:a6:6c:b8:9f:f1: fd:f1:f1:49:4f:c7:75:ed:b4:7d:9a:ba:38:c3:f1: 76:80:16:e5:47:40:2e:c2:51:df:c6:39:2b:77:95: f6:cb:07:8a:7b:f2:f4:b4:a0:9b:1d:a8:c8:2b:78: e6:63:51:65:ce:61:86:c5:cc:55:a5:94:0e:fd:3e: 36:2d:f8:8a:2a:44:a7:d0:39:5a:09:c9:b4:c5:59: 61:6e:26:a1:8c:2d:ed:a2:bb:1c:87:64:02:c4:39: c5:54:f9:38:24:32:c3:77:cc:87:0c:38:f6:12:ab: ba:4b:e5:6d:a6:03:27:46:1f:68:eb:00:c2:e4:73: 40:c4:26:6a:3b:f6:0a:01:27:33:a6:8d:58:e8:7f: f4:06:66:e8:3f:68:a6:a5:26:66:d7:d6:fb:6c:23: 2d:ec:75:7d:22:74:81:f9:ca:18:e3:6b:93:53:fd: 43:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CA:81:13:37:B7:2F:5E:F3:09:04:2A:1D:B7:06:66:5F:97:B1:2A X509v3 Authority Key Identifier: keyid:0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c5:35:55:7e:7f:d8:8c:ae:e1:21:c8:8d:cd:c8:13:e7:71: 75:6e:e5:2f:85:67:32:4e:15:7b:1c:e9:ab:8c:6f:d7:cd:a8: 1a:c7:7f:08:e6:29:35:52:ba:56:fb:59:76:f4:3e:f5:96:a3: d1:c1:26:54:18:8d:4b:4a:3f:69:8e:81:d4:fb:2f:5a:4f:1b: fa:75:f2:a3:08:a0:fb:33:b6:9d:85:26:f6:73:87:d3:eb:eb: 11:cc:6e:b3:4b:6f:d0:33:51:65:23:e0:22:49:19:e5:3b:d4: a3:b8:53:c8:59:e5:e8:46:1e:9a:25:9d:32:a9:a7:e6:80:28: b4:a6:b6:44:3d:c3:11:dd:2e:ef:43:95:2a:c2:80:72:58:29: 5e:1c:0d:6e:88:58:ad:08:2b:da:03:19:9d:d3:ce:1d:9e:d0: 6d:7e:b7:fe:1f:57:8f:ab:67:40:35:05:03:97:0e:bd:da:94: da:1f:9e:1d:df:50:b9:ed:5a:fc:49:c5:12:c8:38:e4:7e:dc: 21:29:c9:2d:f3:01:76:63:9b:f4:e7:28:2f:55:9e:7d:1e:9c: 35:5c:a9:82:33:c9:48:65:5c:63:c9:c6:9e:f3:7d:13:73:a4: 27:e3:01:5b:be:3e:1b:f9:45:db:6c:fc:47:31:0d:c6:11:4f: fd:a5:4c:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKXC51+rnoTSsxDXPz3nCre+wNiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjND QTcxNjkzMzAeFw0yNjA3MjgxNTM3MTBaFw0yNjA3MjkxOTMyMTBaMDMxMTAvBgNV BAMTKDAwQ0E4MTEzMzdCNzJGNUVGMzA5MDQyQTFEQjcwNjY2NUY5N0IxMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRBRLgLtEksvde6xOSFl8K/IfI zbE/WeSrqgpWupv+RkPqfrKzEFQWOo5dQlpaINlrqdzGlfSUfbWQtWM/+Hm5eHW7 4qGk2ICOB2qZr/cJL4TLFvqmbLif8f3x8UlPx3XttH2aujjD8XaAFuVHQC7CUd/G OSt3lfbLB4p78vS0oJsdqMgreOZjUWXOYYbFzFWllA79PjYt+IoqRKfQOVoJybTF WWFuJqGMLe2iuxyHZALEOcVU+TgkMsN3zIcMOPYSq7pL5W2mAydGH2jrAMLkc0DE Jmo79goBJzOmjVjof/QGZug/aKalJmbX1vtsIy3sdX0idIH5yhjja5NT/UP7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAMqBEze3L17zCQQqHbcGZl+XsSowHwYDVR0j BBgwFoAUCkYQfKOsiI6U2EvKKVK7I8pxaTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTYyNjExNC8wLzBBNDYxMDdDQTNBQzg4OEU5NEQ4NEJDQTI5NTJC QjIzQ0E3MTY5MzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjNDQTcxNjkzMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2MjYxMTQvMC8wQTQ2MTA3Q0EzQUM4 ODhFOTREODRCQ0EyOTUyQkIyM0NBNzE2OTMzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMU1VX5/2Iyu 4SHIjc3IE+dxdW7lL4VnMk4Vexzpq4xv182oGsd/COYpNVK6VvtZdvQ+9Zaj0cEm VBiNS0o/aY6B1PsvWk8b+nXyowig+zO2nYUm9nOH0+vrEcxus0tv0DNRZSPgIkkZ 5TvUo7hTyFnl6EYemiWdMqmn5oAotKa2RD3DEd0u70OVKsKAclgpXhwNbohYrQgr 2gMZndPOHZ7QbX63/h9Xj6tnQDUFA5cOvdqU2h+eHd9Que1a/EnFEsg45H7cISnJ LfMBdmOb9OcoL1WefR6cNVypgjPJSGVcY8nGnvN9E3OkJ+MBW74+G/lF22z8RzEN xhFP/aVMdA== -----END CERTIFICATE-----Generated at Wed Jul 29 12:29:06 2026 by rpki-client