
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
File: 46C13E5032045116B0FA54934DD7BFCA0483335A.mft (raw, json)
Hash identifier: SW1IQdEs95zGdp2Usa4squaWgzUYSekZJlzlX18pR5M=
Subject key identifier: 1A:B7:D2:F8:4D:C1:D8:6D:56:5D:A7:B7:00:8C:4B:B8:67:FD:CD:9A
Authority key identifier: 46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A
Certificate issuer: /CN=46C13E5032045116B0FA54934DD7BFCA0483335A
Certificate serial: 372CCE64CBF3D28DD9286CAB33DD9D4D36A490D0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
Manifest number: 2F
Signing time: Sun 22 Feb 2026 16:22:30 +0000
Manifest this update: Sun 22 Feb 2026 16:17:30 +0000
Manifest next update: Mon 23 Feb 2026 17:53:30 +0000
Files and hashes: 1: 323430303a356130303a3a2f33322d3332203d3e2039383037.roa (hash: LogFkd2wHLYxjTnS7A6XZRJU7XgOiWX8cKqHZgMnfdc=)
2: 3231392e3233352e3133362e302f32312d3231203d3e2039383037.roa (hash: 9EWw+3yvD8wWr9/mlEXgpw2TuO9rB0T1PMKPebwR0kY=)
3: 3231392e3233352e3134342e302f32312d3231203d3e2039383037.roa (hash: Wi/t+st603WnA7TssvGC3DzTJ3V3irpX2WC1oBapI5U=)
4: 3231392e3233352e3135322e302f32312d3231203d3e203435303734.roa (hash: WSpXWtSav0n/mxgQsU+45a8xYf8rGnUkY+KgxqJpb44=)
5: 3231392e3233352e3132382e302f32312d3231203d3e2039383037.roa (hash: WgqZHu54HYvCrSjVeZSV7S2ptAQ1a+xoyVFAd7XUP1I=)
6: 46C13E5032045116B0FA54934DD7BFCA0483335A.crl (hash: A7Vs2AQ4pB/i9nW7rEOLaXXIyzzswBVqO1dpc16SEV4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:2c:ce:64:cb:f3:d2:8d:d9:28:6c:ab:33:dd:9d:4d:36:a4:90:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46C13E5032045116B0FA54934DD7BFCA0483335A
Validity
Not Before: Feb 22 16:17:30 2026 GMT
Not After : Feb 23 17:53:30 2026 GMT
Subject: CN=1AB7D2F84DC1D86D565DA7B7008C4BB867FDCD9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:51:d3:60:a4:83:12:8a:7f:14:39:71:b7:15:
16:2d:44:82:dc:60:a5:aa:27:52:82:1d:ac:81:9b:
a6:2b:e0:9a:05:0a:d3:2c:ba:35:c9:8c:24:bd:8b:
18:60:b1:cf:7e:6c:33:bc:95:1a:9a:ed:9d:a5:f3:
99:d2:71:77:9b:f6:bf:b2:0b:cf:6f:23:ca:2a:2e:
86:ed:df:16:59:8b:e5:3d:eb:72:1a:a2:19:8f:a1:
29:c7:fe:3b:44:91:39:61:65:45:78:2b:3e:5e:ca:
80:67:3d:f2:e2:16:73:f8:04:8a:42:8a:c3:26:56:
56:d4:a3:be:88:d5:91:52:c8:39:d6:dc:5a:d2:7e:
7a:b5:d5:41:4c:6f:af:1c:15:ca:13:fe:16:3c:a8:
28:e3:c8:1f:96:02:aa:d6:d9:94:f6:25:9e:9d:2d:
c3:5b:e1:da:bb:22:9a:fa:0b:1f:e3:49:05:ea:c6:
65:be:05:17:0b:46:bd:e8:92:9f:a2:68:a1:9d:80:
db:14:27:a1:8b:cc:fb:36:9a:60:4b:61:9b:44:56:
60:07:54:c8:7b:d1:63:37:e0:2a:98:db:0c:f6:9a:
9f:27:83:39:57:70:59:7e:23:8c:6a:43:91:5b:2a:
86:a0:6b:11:a1:36:62:5e:c3:14:84:6a:02:d5:9b:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B7:D2:F8:4D:C1:D8:6D:56:5D:A7:B7:00:8C:4B:B8:67:FD:CD:9A
X509v3 Authority Key Identifier:
keyid:46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:dd:ae:db:2d:11:89:88:8f:75:f3:6a:70:89:07:93:ad:fb:
83:72:e1:12:c4:34:72:98:5f:44:72:cb:d5:5f:06:55:1f:4b:
c0:cc:0f:e0:3a:68:05:e0:09:10:3d:b1:af:2c:ab:09:c8:c6:
26:92:7b:7e:79:02:c9:14:6f:dc:92:d9:6b:c9:6c:47:b4:aa:
04:46:e5:3a:e6:29:3d:e0:1e:a2:df:2e:a4:31:72:73:fe:2d:
8c:61:3d:c4:3d:f4:da:b9:4f:eb:18:73:fb:49:af:71:9d:3d:
30:11:7e:00:79:71:4f:00:6d:a2:a2:86:d3:26:8e:00:6a:3b:
7b:75:86:11:60:c4:e8:39:70:76:b1:54:30:5d:00:83:f0:42:
19:b5:6e:45:30:cf:17:4a:a5:42:15:62:ec:0e:4c:e7:7a:78:
1b:b6:4c:53:9c:66:4f:f9:f0:f8:f6:5f:14:6d:4f:77:9c:5f:
cd:2a:e9:ec:98:b1:e1:0c:db:0e:41:af:dc:76:a2:2b:58:12:
aa:78:d5:a4:49:00:a0:82:3f:a6:fd:29:82:9f:8d:d2:12:74:
ca:6e:32:52:43:18:78:00:3e:77:13:5e:b1:5b:26:a9:51:cd:
6c:15:0b:1e:6c:a7:02:4f:c3:bb:74:93:42:aa:57:fc:d1:02:
9b:76:14:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:08:16 2026 by rpki-client