$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft File: 46C13E5032045116B0FA54934DD7BFCA0483335A.mft (raw, json) Hash identifier: Uf3cvYzYAztwJugziz9GJaA+tbUs+87rTT0Hg4wJgc0= Subject key identifier: DA:E9:38:34:85:57:84:1A:5E:98:F7:A1:88:43:52:F7:9A:64:3D:56 Authority key identifier: 46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A Certificate issuer: /CN=46C13E5032045116B0FA54934DD7BFCA0483335A Certificate serial: 6CA4FCF3A08BFD6A8F5008F6361B4AA06A1E9186 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft Manifest number: 0129 Signing time: Fri 28 Aug 2026 06:47:45 +0000 Manifest this update: Fri 28 Aug 2026 06:42:45 +0000 Manifest next update: Mon 31 Aug 2026 10:15:45 +0000 Files and hashes: 1: 3231392e3233352e3134342e302f32312d3231203d3e2039383037.roa (hash: Wi/t+st603WnA7TssvGC3DzTJ3V3irpX2WC1oBapI5U=) 2: 46C13E5032045116B0FA54934DD7BFCA0483335A.crl (hash: jcEo1upd3V27ejJe3KzzQ+ORsytPNbC9a90YwZGNr+8=) 3: 3231392e3233352e3132382e302f32312d3231203d3e2039383037.roa (hash: WgqZHu54HYvCrSjVeZSV7S2ptAQ1a+xoyVFAd7XUP1I=) 4: 3231392e3233352e3133362e302f32312d3231203d3e2039383037.roa (hash: 9EWw+3yvD8wWr9/mlEXgpw2TuO9rB0T1PMKPebwR0kY=) 5: 3231392e3233352e3135322e302f32312d3231203d3e203435303734.roa (hash: WSpXWtSav0n/mxgQsU+45a8xYf8rGnUkY+KgxqJpb44=) 6: 323430303a356130303a3a2f33322d3332203d3e2039383037.roa (hash: LogFkd2wHLYxjTnS7A6XZRJU7XgOiWX8cKqHZgMnfdc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 10:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:a4:fc:f3:a0:8b:fd:6a:8f:50:08:f6:36:1b:4a:a0:6a:1e:91:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46C13E5032045116B0FA54934DD7BFCA0483335A Validity Not Before: Aug 28 06:42:45 2026 GMT Not After : Aug 31 10:15:45 2026 GMT Subject: CN=DAE938348557841A5E98F7A1884352F79A643D56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6c:64:48:84:c8:b1:cf:da:bd:cf:d1:67:b6: a6:8e:21:cc:32:c8:a5:b9:5e:c3:49:d9:16:15:2d: e7:7a:2c:65:68:16:df:a5:0f:0a:c4:44:35:ca:ca: 8b:2f:cc:48:24:b4:e5:03:a3:7d:73:83:f7:74:f8: c0:c8:20:14:44:0b:12:f4:41:ec:46:3b:e8:df:50: aa:65:a3:84:9b:9c:03:ba:f3:af:10:55:82:1f:9b: 01:d2:13:80:1e:85:ff:a5:f9:2c:f7:15:06:fa:f4: 04:7b:9e:24:38:30:10:d6:21:56:b4:86:c8:a2:a9: 37:44:e0:35:eb:ed:a8:17:f2:6c:25:b9:da:80:31: a3:5d:70:d1:c7:e9:7c:36:67:07:02:d5:c3:db:57: 16:11:21:7c:5b:ee:b9:c2:b6:21:7e:88:2a:1d:bc: e1:9b:bb:98:e3:16:de:36:53:7c:db:1a:7d:0b:06: bb:ff:64:9b:fc:a1:46:65:66:c1:92:bf:26:ee:c8: 88:a7:c9:1e:67:2b:b2:e7:de:2a:e8:42:9c:d8:a0: e7:e7:55:76:c7:41:4f:69:48:d9:14:fe:19:7e:b1: 79:c9:43:6e:a3:2f:12:e1:0b:dc:fd:fc:fc:00:07: d0:54:7d:b3:60:5d:e7:e4:fa:25:2a:9a:bb:13:03: a1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E9:38:34:85:57:84:1A:5E:98:F7:A1:88:43:52:F7:9A:64:3D:56 X509v3 Authority Key Identifier: keyid:46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:26:75:94:55:5e:be:c8:2f:d3:54:99:d9:73:67:ba:4e:2d: 3b:28:32:4b:98:05:94:49:db:94:50:b1:c3:15:d8:67:ec:b3: 71:6c:3d:c8:bb:2e:76:52:f6:27:89:b7:53:54:6e:c2:c6:8d: 6c:06:f0:da:59:da:54:ae:b1:1d:10:fd:ce:ba:2a:34:28:e4: e6:b4:31:de:b3:c2:95:c6:19:ce:db:f4:17:70:9f:16:db:9f: 67:2a:a5:a8:3e:65:2e:21:f1:60:ab:d7:b1:9d:0f:bf:48:6b: ed:30:da:4f:13:53:1c:6f:76:07:1d:8b:32:e7:30:0c:c1:09: 1f:56:d1:01:15:d4:6a:da:d1:e7:54:33:ca:de:53:90:ae:13: 8a:52:51:8f:71:3d:43:30:37:84:b4:12:71:7d:ea:be:1a:fd: 8f:27:d2:d4:07:20:80:5c:10:43:97:12:7d:9f:b1:25:e4:f4: ca:5e:e7:46:50:e3:60:ef:84:62:d2:40:99:b3:21:c1:3b:0f: 72:43:e1:72:17:7d:c3:d2:54:2a:ef:5f:bf:04:ca:18:78:65: 22:d6:ac:a5:ec:ab:c3:ef:4f:3c:3a:c3:d3:ec:6a:18:ba:ba: 1f:e0:5c:e2:0d:fb:2d:80:19:1e:33:78:37:71:48:c6:cf:57: a2:cc:aa:b9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbKT886CL/WqPUAj2NhtKoGoekYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZDMTNFNTAzMjA0NTExNkIwRkE1NDkzNEREN0JGQ0Ew NDgzMzM1QTAeFw0yNjA4MjgwNjQyNDVaFw0yNjA4MzExMDE1NDVaMDMxMTAvBgNV BAMTKERBRTkzODM0ODU1Nzg0MUE1RTk4RjdBMTg4NDM1MkY3OUE2NDNENTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGbGRIhMixz9q9z9FntqaOIcwy yKW5XsNJ2RYVLed6LGVoFt+lDwrERDXKyosvzEgktOUDo31zg/d0+MDIIBRECxL0 QexGO+jfUKplo4SbnAO6868QVYIfmwHSE4Aehf+l+Sz3FQb69AR7niQ4MBDWIVa0 hsiiqTdE4DXr7agX8mwludqAMaNdcNHH6Xw2ZwcC1cPbVxYRIXxb7rnCtiF+iCod vOGbu5jjFt42U3zbGn0LBrv/ZJv8oUZlZsGSvybuyIinyR5nK7Ln3iroQpzYoOfn VXbHQU9pSNkU/hl+sXnJQ26jLxLhC9z9/PwAB9BUfbNgXefk+iUqmrsTA6HzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2uk4NIVXhBpemPehiENS95pkPVYwHwYDVR0j BBgwFoAURsE+UDIEURaw+lSTTde/ygSDM1owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODAwOTQ3NS8wLzQ2QzEzRTUwMzIwNDUxMTZCMEZBNTQ5MzRERDdC RkNBMDQ4MzMzNUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDZDMTNFNTAzMjA0NTExNkIwRkE1NDkzNEREN0JGQ0EwNDgzMzM1QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgwMDk0NzUvMC80NkMxM0U1MDMyMDQ1 MTE2QjBGQTU0OTM0REQ3QkZDQTA0ODMzMzVBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSZ1lFVevsgv 01SZ2XNnuk4tOygyS5gFlEnblFCxwxXYZ+yzcWw9yLsudlL2J4m3U1RuwsaNbAbw 2lnaVK6xHRD9zroqNCjk5rQx3rPClcYZztv0F3CfFtufZyqlqD5lLiHxYKvXsZ0P v0hr7TDaTxNTHG92Bx2LMucwDMEJH1bRARXUatrR51Qzyt5TkK4TilJRj3E9QzA3 hLQScX3qvhr9jyfS1AcggFwQQ5cSfZ+xJeT0yl7nRlDjYO+EYtJAmbMhwTsPckPh chd9w9JUKu9fvwTKGHhlItaspeyrw+9PPDrD0+xqGLq6H+Bc4g37LYAZHjN4N3FI xs9XosyquQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:32:44 2026 by rpki-client