$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft File: 0A46107CA3AC888E94D84BCA2952BB23CA716933.mft (raw, json) Hash identifier: Z6hLxwvzs7ABQhKjoThfOEzFj8vIlbbRG7eX/OvoehI= Subject key identifier: E5:7C:55:B4:4C:55:88:8D:2E:EA:94:6B:A2:CB:64:1D:2D:97:0F:EC Authority key identifier: 0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 Certificate issuer: /CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Certificate serial: 3D7655EBA8DA2BB07FAAF7E8B111B5A337001F28 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 18:38:16 +0000 Manifest this update: Sun 01 Mar 2026 18:33:16 +0000 Manifest next update: Mon 02 Mar 2026 22:37:16 +0000 Files and hashes: 1: 323430363a643134303a383030303a3a2f33342d3438203d3e203439353434.roa (hash: PAf824Q9bOcvX8QACkiCfMY2g1dz/7XRXFxJEVpkmfE=) 2: 0A46107CA3AC888E94D84BCA2952BB23CA716933.crl (hash: Gzlo+BZfE6roLbWorEhGcb/0Y5trq6hiaOidmnEBU4I=) 3: 3130332e3135392e3132322e302f32332d3234203d3e203439353434.roa (hash: rubDoThyXxAtKd7cHar1Xe+H3PklUmIYuQDvQvtMaCY=) 4: 323430363a643134303a3a2f33322d3438203d3e203439353434.roa (hash: g7LIdaEG3sFtKdbTj2hBz13e6bXgQUd18mWYt6svPTs=) 5: 3130332e3135392e3132322e302f32332d3234203d3e20313331343834.roa (hash: iUeqJBmQDAxt+pLGYhWrJK3Odd/B3nT7dclLKwf5UO0=) 6: 323430363a643134303a3a2f33322d3438203d3e20313331343834.roa (hash: wf8jpicWFamaHqIJZ6H9jcZ7cuCMGJQ7VOd7B3RXT9U=) 7: 323430363a643134303a383030303a3a2f33342d3438203d3e20313331343834.roa (hash: sQQIzWo0IvL/3jgG/tni7qytQXBkoZCTScUs3d/Uek0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 22:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:76:55:eb:a8:da:2b:b0:7f:aa:f7:e8:b1:11:b5:a3:37:00:1f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Validity Not Before: Mar 1 18:33:16 2026 GMT Not After : Mar 2 22:37:16 2026 GMT Subject: CN=E57C55B44C55888D2EEA946BA2CB641D2D970FEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:b8:6a:78:37:7e:97:57:d6:db:b6:cb:4d: fa:44:1b:11:36:58:58:ad:c1:e9:35:28:08:c2:60: 70:d7:00:e9:c6:aa:e5:bb:a3:00:93:13:03:5d:1d: 39:99:17:28:2d:5f:4e:03:d7:5d:40:1b:b3:e6:f0: 26:59:4d:3f:ca:fa:02:54:76:5e:e9:dd:bd:a6:55: 53:04:0c:a1:de:76:c3:c0:20:8a:70:4e:0a:e2:ef: 22:72:b7:fc:f3:05:92:64:92:8a:d9:60:cd:86:b4: 51:a0:bc:8f:c7:c8:cc:be:01:8f:97:50:1c:74:75: 70:a8:f1:f0:a6:b4:2f:7e:e1:f4:a3:be:07:84:3c: 50:12:46:ca:f9:e6:d5:16:d7:52:93:d4:86:90:41: 0a:f3:27:78:3a:8c:30:1d:41:11:62:a7:8c:b9:cb: 1d:49:af:ba:05:ad:e1:b3:8f:e2:6a:93:f3:0a:2a: 51:8c:56:77:a0:04:30:d5:26:37:4c:ae:79:73:85: 9b:45:c2:14:0c:63:1d:2e:cc:b1:fa:27:af:f9:52: fe:46:b9:fc:6d:84:8e:20:20:04:87:8b:f3:6e:3e: b8:7a:55:6a:4a:04:03:16:10:95:d5:a9:45:a5:22: 8d:c0:64:e0:73:69:11:ca:c5:96:71:33:ae:28:cd: 16:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7C:55:B4:4C:55:88:8D:2E:EA:94:6B:A2:CB:64:1D:2D:97:0F:EC X509v3 Authority Key Identifier: keyid:0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:61:84:8a:4a:cd:7d:e8:40:f2:f9:31:63:af:4d:35:b7:c9: a2:7d:02:97:b6:e1:5d:35:e4:3c:bd:1e:00:a0:4f:4f:cc:cb: e9:ac:4b:b6:9d:3a:bb:b0:fc:e1:96:20:12:5b:63:81:a6:c8: 55:ee:ff:00:27:19:1d:e1:5c:2e:9c:64:0a:8d:7f:c8:d7:ef: 92:4c:9d:ef:6c:f9:6c:0a:53:ad:fa:4b:7d:77:7e:5f:0d:46: b5:84:7b:04:6a:90:40:d8:d6:a1:1f:fa:0d:2d:f6:89:c2:be: 3b:f9:76:f2:c4:b7:6c:47:27:b0:e4:10:0d:20:a5:33:1a:8e: 36:88:44:46:86:38:58:6a:5e:b6:dd:7e:48:f3:9e:cc:8a:f8: 0c:fc:7f:a3:49:3c:39:c5:d1:19:0c:c9:2c:7a:06:8c:ac:df: 3c:82:3e:ec:48:a2:5c:c9:df:9a:81:01:52:de:91:04:5b:3e: 35:8e:29:8d:67:68:27:4e:4a:52:0e:a7:9b:27:13:dd:75:03: 4b:0e:ce:97:6c:2b:ea:59:86:38:c7:ea:54:b4:76:8e:db:d2: cc:cb:76:af:d7:bf:a1:61:50:b1:67:2f:1a:b0:4f:4f:12:cd: 7f:29:71:f0:b0:29:40:7e:1a:92:27:ea:ed:8f:fb:58:44:27: 8f:50:2a:3f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPXZV66jaK7B/qvfosRG1ozcAHygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjND QTcxNjkzMzAeFw0yNjAzMDExODMzMTZaFw0yNjAzMDIyMjM3MTZaMDMxMTAvBgNV BAMTKEU1N0M1NUI0NEM1NTg4OEQyRUVBOTQ2QkEyQ0I2NDFEMkQ5NzBGRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7JLhqeDd+l1fW27bLTfpEGxE2 WFitwek1KAjCYHDXAOnGquW7owCTEwNdHTmZFygtX04D111AG7Pm8CZZTT/K+gJU dl7p3b2mVVMEDKHedsPAIIpwTgri7yJyt/zzBZJkkorZYM2GtFGgvI/HyMy+AY+X UBx0dXCo8fCmtC9+4fSjvgeEPFASRsr55tUW11KT1IaQQQrzJ3g6jDAdQRFip4y5 yx1Jr7oFreGzj+Jqk/MKKlGMVnegBDDVJjdMrnlzhZtFwhQMYx0uzLH6J6/5Uv5G ufxthI4gIASHi/NuPrh6VWpKBAMWEJXVqUWlIo3AZOBzaRHKxZZxM64ozRZNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5XxVtExViI0u6pRrostkHS2XD+wwHwYDVR0j BBgwFoAUCkYQfKOsiI6U2EvKKVK7I8pxaTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTYyNjExNC8wLzBBNDYxMDdDQTNBQzg4OEU5NEQ4NEJDQTI5NTJC QjIzQ0E3MTY5MzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjNDQTcxNjkzMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2MjYxMTQvMC8wQTQ2MTA3Q0EzQUM4 ODhFOTREODRCQ0EyOTUyQkIyM0NBNzE2OTMzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmGEikrNfehA 8vkxY69NNbfJon0Cl7bhXTXkPL0eAKBPT8zL6axLtp06u7D84ZYgEltjgabIVe7/ ACcZHeFcLpxkCo1/yNfvkkyd72z5bApTrfpLfXd+Xw1GtYR7BGqQQNjWoR/6DS32 icK+O/l28sS3bEcnsOQQDSClMxqONohERoY4WGpett1+SPOezIr4DPx/o0k8OcXR GQzJLHoGjKzfPII+7EiiXMnfmoEBUt6RBFs+NY4pjWdoJ05KUg6nmycT3XUDSw7O l2wr6lmGOMfqVLR2jtvSzMt2r9e/oWFQsWcvGrBPTxLNfylx8LApQH4akifq7Y/7 WEQnj1AqPw== -----END CERTIFICATE-----Generated at Mon Mar 2 09:52:51 2026 by rpki-client