$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft File: 46C13E5032045116B0FA54934DD7BFCA0483335A.mft (raw, json) Hash identifier: Fls7wP7g+Fq67h7WmByrnUIqJGGqgKKOmNwdTzRh8lw= Subject key identifier: C8:C2:5C:3B:3B:90:35:94:C4:C3:54:B8:8F:D4:A9:17:F9:A7:5D:6B Authority key identifier: 46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A Certificate issuer: /CN=46C13E5032045116B0FA54934DD7BFCA0483335A Certificate serial: 4ABDC727BCDDED112EF93CCDF80F3159F119C665 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft Manifest number: 71 Signing time: Sun 12 Apr 2026 17:34:16 +0000 Manifest this update: Sun 12 Apr 2026 17:29:16 +0000 Manifest next update: Mon 13 Apr 2026 19:10:16 +0000 Files and hashes: 1: 323430303a356130303a3a2f33322d3332203d3e2039383037.roa (hash: LogFkd2wHLYxjTnS7A6XZRJU7XgOiWX8cKqHZgMnfdc=) 2: 3231392e3233352e3132382e302f32312d3231203d3e2039383037.roa (hash: WgqZHu54HYvCrSjVeZSV7S2ptAQ1a+xoyVFAd7XUP1I=) 3: 3231392e3233352e3134342e302f32312d3231203d3e2039383037.roa (hash: Wi/t+st603WnA7TssvGC3DzTJ3V3irpX2WC1oBapI5U=) 4: 3231392e3233352e3135322e302f32312d3231203d3e203435303734.roa (hash: WSpXWtSav0n/mxgQsU+45a8xYf8rGnUkY+KgxqJpb44=) 5: 3231392e3233352e3133362e302f32312d3231203d3e2039383037.roa (hash: 9EWw+3yvD8wWr9/mlEXgpw2TuO9rB0T1PMKPebwR0kY=) 6: 46C13E5032045116B0FA54934DD7BFCA0483335A.crl (hash: iWonNsdChnezXg54oCsAnCzn8P3jrVRUYSFmOEUL4rk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 19:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:bd:c7:27:bc:dd:ed:11:2e:f9:3c:cd:f8:0f:31:59:f1:19:c6:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46C13E5032045116B0FA54934DD7BFCA0483335A Validity Not Before: Apr 12 17:29:16 2026 GMT Not After : Apr 13 19:10:16 2026 GMT Subject: CN=C8C25C3B3B903594C4C354B88FD4A917F9A75D6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:65:5a:83:59:1c:fa:f5:5d:2b:e8:97:44: 78:7d:49:35:2a:37:63:d8:05:38:c4:4f:9b:19:8f: 2d:50:b3:ce:e9:8c:04:78:24:bc:2c:93:5a:c4:2f: 3b:39:1a:72:c0:0e:88:95:53:a9:56:51:88:4e:ed: de:35:8f:df:ab:29:12:6d:7e:fa:8f:bf:78:9b:42: 86:5a:71:43:c2:8d:e7:ce:20:5b:a8:7d:81:cf:fa: 67:3d:b2:09:7c:12:ce:d9:8f:4c:10:29:3d:0f:db: 64:50:0e:38:fa:7c:ad:c0:96:0b:38:e0:1d:22:64: d0:ef:6f:d8:6f:2d:16:13:18:e6:6d:5f:87:72:62: 6a:b8:3a:aa:63:e5:15:bb:cb:0a:54:ea:b7:6b:9f: 1a:1a:b2:7d:70:9b:18:0b:7f:d9:52:7b:3f:e3:e4: 5b:20:42:53:e0:61:94:62:9b:8e:a1:19:b9:05:2d: 35:fd:13:3d:c1:54:be:3d:4d:b6:6d:38:27:c0:e1: e4:bf:c9:4d:07:c1:b0:71:d1:e7:5a:42:97:7f:01: 59:6b:f0:86:c6:17:7e:e9:50:4c:81:2a:05:73:51: 9d:0a:8b:c2:14:f6:0b:ba:24:1f:f7:68:ff:52:c2: 61:71:84:54:54:13:39:15:e5:9b:76:79:ca:98:43: 39:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C2:5C:3B:3B:90:35:94:C4:C3:54:B8:8F:D4:A9:17:F9:A7:5D:6B X509v3 Authority Key Identifier: keyid:46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c8:b6:7e:8d:49:9e:c2:f5:7a:43:d8:f0:53:ea:75:76:1f: fc:95:85:a8:5d:61:21:c4:e4:66:32:0a:44:16:7d:50:92:a7: b8:13:ff:46:c1:1c:26:bd:04:c9:15:4f:7b:60:04:ea:4f:43: 09:e6:dd:05:3e:91:9b:a6:98:8b:31:b5:ce:31:65:9d:9f:12: 7b:b5:a1:6c:23:0d:9d:1e:18:f9:a2:09:aa:b4:3e:d5:09:da: 6d:75:db:fe:05:2e:ef:05:69:77:25:75:27:8f:88:a6:e1:13: 9f:f9:c0:c5:48:31:c8:92:ee:d0:32:6e:60:a6:a2:43:d7:97: 8c:10:8a:c1:72:0c:5e:ff:df:7e:0a:93:b3:2f:66:5b:f7:b4: 2b:01:f1:9f:84:de:be:0f:f1:9d:35:35:65:fe:2f:9e:6f:91: 2d:e3:81:91:65:f4:27:ca:22:20:77:f0:d7:27:e2:ef:23:1a: 87:0a:ba:f6:01:b0:e6:f6:69:ef:8f:0a:c2:26:bd:98:b5:7f: 36:a2:27:ef:87:e7:1b:23:42:94:11:15:c4:77:3d:a7:68:97: ad:d1:51:b7:3b:fc:16:00:46:20:14:7b:99:3d:c2:9f:48:8a: a6:f3:c5:28:64:70:d5:64:46:b8:6a:5a:88:37:a3:6d:38:ea: ab:de:91:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSr3HJ7zd7REu+TzN+A8xWfEZxmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZDMTNFNTAzMjA0NTExNkIwRkE1NDkzNEREN0JGQ0Ew NDgzMzM1QTAeFw0yNjA0MTIxNzI5MTZaFw0yNjA0MTMxOTEwMTZaMDMxMTAvBgNV BAMTKEM4QzI1QzNCM0I5MDM1OTRDNEMzNTRCODhGRDRBOTE3RjlBNzVENkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9vWVag1kc+vVdK+iXRHh9STUq N2PYBTjET5sZjy1Qs87pjAR4JLwsk1rELzs5GnLADoiVU6lWUYhO7d41j9+rKRJt fvqPv3ibQoZacUPCjefOIFuofYHP+mc9sgl8Es7Zj0wQKT0P22RQDjj6fK3Algs4 4B0iZNDvb9hvLRYTGOZtX4dyYmq4Oqpj5RW7ywpU6rdrnxoasn1wmxgLf9lSez/j 5FsgQlPgYZRim46hGbkFLTX9Ez3BVL49TbZtOCfA4eS/yU0HwbBx0edaQpd/AVlr 8IbGF37pUEyBKgVzUZ0Ki8IU9gu6JB/3aP9SwmFxhFRUEzkV5Zt2ecqYQznFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyMJcOzuQNZTEw1S4j9SpF/mnXWswHwYDVR0j BBgwFoAURsE+UDIEURaw+lSTTde/ygSDM1owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODAwOTQ3NS8wLzQ2QzEzRTUwMzIwNDUxMTZCMEZBNTQ5MzRERDdC RkNBMDQ4MzMzNUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDZDMTNFNTAzMjA0NTExNkIwRkE1NDkzNEREN0JGQ0EwNDgzMzM1QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgwMDk0NzUvMC80NkMxM0U1MDMyMDQ1 MTE2QjBGQTU0OTM0REQ3QkZDQTA0ODMzMzVBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMi2fo1JnsL1 ekPY8FPqdXYf/JWFqF1hIcTkZjIKRBZ9UJKnuBP/RsEcJr0EyRVPe2AE6k9DCebd BT6Rm6aYizG1zjFlnZ8Se7WhbCMNnR4Y+aIJqrQ+1QnabXXb/gUu7wVpdyV1J4+I puETn/nAxUgxyJLu0DJuYKaiQ9eXjBCKwXIMXv/ffgqTsy9mW/e0KwHxn4Tevg/x nTU1Zf4vnm+RLeOBkWX0J8oiIHfw1yfi7yMahwq69gGw5vZp748Kwia9mLV/NqIn 74fnGyNClBEVxHc9p2iXrdFRtzv8FgBGIBR7mT3Cn0iKpvPFKGRw1WRGuGpaiDej bTjqq96RiQ== -----END CERTIFICATE-----Generated at Mon Apr 13 11:04:51 2026 by rpki-client