$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft File: 0A46107CA3AC888E94D84BCA2952BB23CA716933.mft (raw, json) Hash identifier: B8xY6CoezngDOX3DlcDowcsyKdbAScUpQApYUTMIFmU= Subject key identifier: E8:CE:7C:D8:3F:9E:E1:2C:36:D5:15:24:BD:3C:4E:40:12:3A:96:05 Authority key identifier: 0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 Certificate issuer: /CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Certificate serial: 3EB43ED12B5ADDDA7D63F75566683FDC0CAFAF69 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft Manifest number: 75 Signing time: Fri 17 Apr 2026 00:24:37 +0000 Manifest this update: Fri 17 Apr 2026 00:19:37 +0000 Manifest next update: Sat 18 Apr 2026 02:14:37 +0000 Files and hashes: 1: 323430363a643134303a383030303a3a2f33342d3438203d3e203439353434.roa (hash: PAf824Q9bOcvX8QACkiCfMY2g1dz/7XRXFxJEVpkmfE=) 2: 3130332e3135392e3132322e302f32332d3234203d3e20313331343834.roa (hash: iUeqJBmQDAxt+pLGYhWrJK3Odd/B3nT7dclLKwf5UO0=) 3: 323430363a643134303a3a2f33322d3438203d3e20313331343834.roa (hash: wf8jpicWFamaHqIJZ6H9jcZ7cuCMGJQ7VOd7B3RXT9U=) 4: 323430363a643134303a3a2f33322d3438203d3e203439353434.roa (hash: g7LIdaEG3sFtKdbTj2hBz13e6bXgQUd18mWYt6svPTs=) 5: 3130332e3135392e3132322e302f32332d3234203d3e203439353434.roa (hash: rubDoThyXxAtKd7cHar1Xe+H3PklUmIYuQDvQvtMaCY=) 6: 0A46107CA3AC888E94D84BCA2952BB23CA716933.crl (hash: D4enP50m7moCVisCPaT/y+4nGxvLlqubZ9aeEur00Zk=) 7: 323430363a643134303a383030303a3a2f33342d3438203d3e20313331343834.roa (hash: sQQIzWo0IvL/3jgG/tni7qytQXBkoZCTScUs3d/Uek0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 02:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b4:3e:d1:2b:5a:dd:da:7d:63:f7:55:66:68:3f:dc:0c:af:af:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Validity Not Before: Apr 17 00:19:37 2026 GMT Not After : Apr 18 02:14:37 2026 GMT Subject: CN=E8CE7CD83F9EE12C36D51524BD3C4E40123A9605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:6c:97:81:95:2d:b5:30:0d:7c:4e:f3:71: 31:b7:0c:ee:fa:8d:2a:41:52:25:23:50:8b:8b:3c: 5d:b1:0a:14:7e:59:68:9a:9c:cc:92:77:14:5a:ce: ad:68:88:41:99:82:16:fb:27:3c:4e:4f:d4:d4:b0: c2:e3:2c:a3:83:9e:ce:40:c1:bb:3a:29:5d:90:3a: d0:2f:90:3e:78:1a:bb:85:99:b9:f4:29:d4:29:58: 73:10:ca:0b:d8:9b:52:da:16:e2:68:36:7d:6c:e0: 61:a0:f3:3d:4d:b4:ce:09:f7:29:bf:e6:77:87:ea: da:02:96:a5:4b:7b:ae:a7:c6:21:a5:25:da:bb:9c: c1:fc:37:93:4c:02:b7:03:ac:57:85:fd:1b:a5:3b: 87:9d:46:cc:73:49:3d:cf:12:07:28:ae:b3:be:9a: 65:5d:21:3e:c6:80:bd:3b:0c:26:73:96:66:59:c8: 39:cc:80:ec:82:af:34:6a:45:ea:d3:58:a0:86:f4: 2c:3f:a7:ed:cf:e1:91:22:39:c9:e4:f4:2d:fb:5a: ac:95:52:d4:67:40:25:df:2b:0b:ad:f7:26:ec:23: c2:84:76:c1:d1:be:d3:14:64:78:3f:2d:a7:ba:ff: 7c:96:af:c9:f3:8b:f9:63:fd:e9:11:71:62:b3:4c: c6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CE:7C:D8:3F:9E:E1:2C:36:D5:15:24:BD:3C:4E:40:12:3A:96:05 X509v3 Authority Key Identifier: keyid:0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:a5:26:af:51:26:0e:81:22:36:ed:bc:1c:be:34:f0:4d:b9: 98:d9:de:18:05:1b:4d:94:6d:4f:5f:4a:a7:35:01:0f:48:a9: 57:bd:e2:bf:0c:18:c2:7c:3d:a2:77:9e:4c:b8:25:7b:07:34: 57:51:c5:e4:28:02:66:17:d7:c6:07:30:12:d7:99:5b:a6:a4: 1e:7c:a5:a8:77:6c:4b:1c:f1:21:1f:07:ee:d2:02:17:d7:d4: cd:fe:00:22:2a:40:fb:d7:53:93:b5:8c:7b:c9:4f:f2:f9:8f: 09:20:41:18:73:63:63:52:ee:ce:d7:78:65:9b:43:2c:02:ff: f4:73:b9:d0:d1:f5:7a:63:46:8e:26:6c:d1:83:25:14:c8:c8: 6a:75:64:77:6b:3b:a2:76:26:6e:95:83:43:0d:f6:d3:5d:8f: 3b:14:b0:c5:7d:d7:4a:19:d3:7e:2e:b3:1d:2f:c1:87:c7:14: 5b:db:76:ff:1c:0d:a6:c6:d7:e7:12:47:8f:00:91:e7:72:ea: 9c:44:f0:2c:11:71:a3:e0:f1:aa:2f:2e:f4:a2:7a:d2:cb:54: 2a:7e:8a:a8:1d:11:a3:ab:70:d8:86:5f:97:51:bb:39:ea:df: 1b:92:b5:1f:0d:16:9c:f0:7a:b2:7e:91:47:8b:c5:e9:63:d9: 0f:ca:14:c9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPrQ+0Sta3dp9Y/dVZmg/3Ayvr2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjND QTcxNjkzMzAeFw0yNjA0MTcwMDE5MzdaFw0yNjA0MTgwMjE0MzdaMDMxMTAvBgNV BAMTKEU4Q0U3Q0Q4M0Y5RUUxMkMzNkQ1MTUyNEJEM0M0RTQwMTIzQTk2MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91WyXgZUttTANfE7zcTG3DO76 jSpBUiUjUIuLPF2xChR+WWianMySdxRazq1oiEGZghb7JzxOT9TUsMLjLKODns5A wbs6KV2QOtAvkD54GruFmbn0KdQpWHMQygvYm1LaFuJoNn1s4GGg8z1NtM4J9ym/ 5neH6toClqVLe66nxiGlJdq7nMH8N5NMArcDrFeF/RulO4edRsxzST3PEgcorrO+ mmVdIT7GgL07DCZzlmZZyDnMgOyCrzRqRerTWKCG9Cw/p+3P4ZEiOcnk9C37WqyV UtRnQCXfKwut9ybsI8KEdsHRvtMUZHg/Lae6/3yWr8nzi/lj/ekRcWKzTMb3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6M582D+e4Sw21RUkvTxOQBI6lgUwHwYDVR0j BBgwFoAUCkYQfKOsiI6U2EvKKVK7I8pxaTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTYyNjExNC8wLzBBNDYxMDdDQTNBQzg4OEU5NEQ4NEJDQTI5NTJC QjIzQ0E3MTY5MzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjNDQTcxNjkzMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2MjYxMTQvMC8wQTQ2MTA3Q0EzQUM4 ODhFOTREODRCQ0EyOTUyQkIyM0NBNzE2OTMzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqUmr1EmDoEi Nu28HL408E25mNneGAUbTZRtT19KpzUBD0ipV73ivwwYwnw9oneeTLglewc0V1HF 5CgCZhfXxgcwEteZW6akHnylqHdsSxzxIR8H7tICF9fUzf4AIipA+9dTk7WMe8lP 8vmPCSBBGHNjY1Luztd4ZZtDLAL/9HO50NH1emNGjiZs0YMlFMjIanVkd2s7onYm bpWDQw32012POxSwxX3XShnTfi6zHS/Bh8cUW9t2/xwNpsbX5xJHjwCR53LqnETw LBFxo+Dxqi8u9KJ60stUKn6KqB0Ro6tw2IZfl1G7OerfG5K1Hw0WnPB6sn6RR4vF 6WPZD8oUyQ== -----END CERTIFICATE-----Generated at Fri Apr 17 15:38:08 2026 by rpki-client