
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
File: 0A46107CA3AC888E94D84BCA2952BB23CA716933.mft (raw, json)
Hash identifier: QPtdlQMp8K7EOlH9dUqckLQP+o3ZBn8TU11VSwWTRyQ=
Subject key identifier: 66:51:C1:C0:82:59:BD:16:AF:CE:5B:64:29:01:5A:1C:8B:6A:52:3A
Authority key identifier: 0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33
Certificate issuer: /CN=0A46107CA3AC888E94D84BCA2952BB23CA716933
Certificate serial: 3C80F663A3D6BA8330B123DE5D4E98397BEECAC1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
Manifest number: C0
Signing time: Fri 12 Jun 2026 23:50:58 +0000
Manifest this update: Fri 12 Jun 2026 23:45:58 +0000
Manifest next update: Sun 14 Jun 2026 02:20:58 +0000
Files and hashes: 1: 3130332e3135392e3132322e302f32332d3234203d3e203439353434.roa (hash: rubDoThyXxAtKd7cHar1Xe+H3PklUmIYuQDvQvtMaCY=)
2: 3130332e3135392e3132322e302f32332d3234203d3e20313331343834.roa (hash: iUeqJBmQDAxt+pLGYhWrJK3Odd/B3nT7dclLKwf5UO0=)
3: 0A46107CA3AC888E94D84BCA2952BB23CA716933.crl (hash: O3SSw9HdmdadXpHXXd7PUmMWtZsMPGhE8/sNGaSFpAY=)
4: 323430363a643134303a3a2f33322d3438203d3e203439353434.roa (hash: g7LIdaEG3sFtKdbTj2hBz13e6bXgQUd18mWYt6svPTs=)
5: 323430363a643134303a3a2f33322d3438203d3e20313331343834.roa (hash: wf8jpicWFamaHqIJZ6H9jcZ7cuCMGJQ7VOd7B3RXT9U=)
6: 323430363a643134303a383030303a3a2f33342d3438203d3e203439353434.roa (hash: PAf824Q9bOcvX8QACkiCfMY2g1dz/7XRXFxJEVpkmfE=)
7: 323430363a643134303a383030303a3a2f33342d3438203d3e20313331343834.roa (hash: sQQIzWo0IvL/3jgG/tni7qytQXBkoZCTScUs3d/Uek0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 02:20:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:80:f6:63:a3:d6:ba:83:30:b1:23:de:5d:4e:98:39:7b:ee:ca:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A46107CA3AC888E94D84BCA2952BB23CA716933
Validity
Not Before: Jun 12 23:45:58 2026 GMT
Not After : Jun 14 02:20:58 2026 GMT
Subject: CN=6651C1C08259BD16AFCE5B6429015A1C8B6A523A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:54:03:6a:1e:53:0f:0c:41:bc:b7:0e:52:
0c:5d:25:92:a3:05:c3:d6:ed:9e:ca:c8:e6:b2:0b:
2b:91:9d:4f:97:ee:64:7a:67:7e:f1:2a:f1:09:3a:
2d:b5:fb:c1:df:5c:48:ab:b8:d5:e4:33:cd:8c:a3:
1a:d4:cc:b8:06:5f:72:cd:98:3c:55:74:d9:ca:66:
6d:94:e2:a4:a3:13:0d:4b:85:17:cc:cf:89:29:8d:
9e:6e:22:bb:8a:69:ac:4a:e1:61:22:8d:7a:07:13:
50:84:c2:64:d4:40:d3:81:d2:c4:c0:47:5a:33:52:
e6:f2:8d:f5:a1:4e:6c:06:3e:48:cd:37:9c:bf:71:
a3:d7:64:3a:db:cb:7c:94:d5:6e:34:2c:61:49:c0:
55:bb:db:6e:4c:a8:6e:c9:1c:ae:50:26:71:63:d3:
1b:3e:66:bf:62:fa:48:9a:6d:b6:1c:21:37:8a:e8:
76:39:9c:39:d6:fd:1d:c9:cc:12:f1:2e:c5:f5:34:
7e:e6:24:68:08:c0:42:79:8f:7d:c0:c9:a1:0d:35:
74:56:22:bd:e2:bc:21:9d:ef:f4:19:28:5a:b4:2b:
3a:10:61:e1:68:ae:96:08:44:a6:ee:52:70:22:01:
f5:3f:dc:f6:6f:b9:37:1b:65:35:75:82:15:e3:6d:
a7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:51:C1:C0:82:59:BD:16:AF:CE:5B:64:29:01:5A:1C:8B:6A:52:3A
X509v3 Authority Key Identifier:
keyid:0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bf:98:c4:95:68:8c:4a:5c:87:fd:0d:7e:fd:31:ae:4c:5a:
7c:3e:8d:6a:14:12:43:06:98:30:05:13:f3:58:d8:7c:ee:ea:
79:91:f0:6b:ef:8e:ef:a7:d3:8a:4d:7d:ef:b6:1c:a5:cd:af:
b7:1b:13:01:7c:ba:99:b1:0c:c1:0e:5c:d0:aa:47:ea:68:e9:
7a:62:d8:17:4b:4d:32:ec:69:ab:b2:af:2c:41:43:9d:ec:1b:
13:fb:96:29:de:be:91:1b:d2:89:9d:20:c6:e7:60:f7:56:25:
ec:05:fc:d1:17:15:f5:67:2f:c3:84:fc:a7:df:31:a9:9d:a3:
9c:32:fe:0c:57:4a:d7:fa:c0:6c:bd:8b:7d:03:14:69:1f:2e:
c0:04:27:7a:d5:5e:a5:82:34:5d:a8:41:23:f3:d9:15:6e:e1:
3a:f3:24:52:5e:13:a7:23:4b:c3:0b:61:44:7c:32:f1:67:36:
91:37:50:8f:0c:b3:45:d8:6b:63:fb:66:10:15:9c:85:cb:b2:
a6:75:a4:47:ea:a9:13:dc:d3:f1:8c:ab:73:ee:57:25:ed:6a:
cd:2d:93:42:e1:92:4e:c3:67:9a:0e:07:1a:6d:e4:bc:24:f7:
34:0f:f9:05:04:b5:80:fc:cd:73:8a:6c:16:cc:8d:83:2b:52:
ab:ab:aa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:14:26 2026 by rpki-client