
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
File: 46C13E5032045116B0FA54934DD7BFCA0483335A.mft (raw, json)
Hash identifier: 2hIbVPY0TQGLaQNDlIqKsQko47n7O5aAFuD6/gmW0qc=
Subject key identifier: 16:BF:0F:A2:DB:ED:FA:FB:0A:B4:C5:53:54:AB:41:EF:E7:D6:B3:F9
Authority key identifier: 46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A
Certificate issuer: /CN=46C13E5032045116B0FA54934DD7BFCA0483335A
Certificate serial: 743455BE1FC509B2310A395020CBF8049791238C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
Manifest number: EC
Signing time: Tue 14 Jul 2026 04:30:26 +0000
Manifest this update: Tue 14 Jul 2026 04:25:26 +0000
Manifest next update: Wed 15 Jul 2026 05:22:26 +0000
Files and hashes: 1: 323430303a356130303a3a2f33322d3332203d3e2039383037.roa (hash: LogFkd2wHLYxjTnS7A6XZRJU7XgOiWX8cKqHZgMnfdc=)
2: 3231392e3233352e3133362e302f32312d3231203d3e2039383037.roa (hash: 9EWw+3yvD8wWr9/mlEXgpw2TuO9rB0T1PMKPebwR0kY=)
3: 3231392e3233352e3132382e302f32312d3231203d3e2039383037.roa (hash: WgqZHu54HYvCrSjVeZSV7S2ptAQ1a+xoyVFAd7XUP1I=)
4: 3231392e3233352e3134342e302f32312d3231203d3e2039383037.roa (hash: Wi/t+st603WnA7TssvGC3DzTJ3V3irpX2WC1oBapI5U=)
5: 46C13E5032045116B0FA54934DD7BFCA0483335A.crl (hash: I434wcjY96/9PoHAsQULXIz+cB8usWMA5kNvR0atbXE=)
6: 3231392e3233352e3135322e302f32312d3231203d3e203435303734.roa (hash: WSpXWtSav0n/mxgQsU+45a8xYf8rGnUkY+KgxqJpb44=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 05:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:34:55:be:1f:c5:09:b2:31:0a:39:50:20:cb:f8:04:97:91:23:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46C13E5032045116B0FA54934DD7BFCA0483335A
Validity
Not Before: Jul 14 04:25:26 2026 GMT
Not After : Jul 15 05:22:26 2026 GMT
Subject: CN=16BF0FA2DBEDFAFB0AB4C55354AB41EFE7D6B3F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:af:89:5e:1b:dd:f5:dd:ec:7a:2a:45:cc:
b7:76:f4:7a:0c:c9:1b:4e:d1:e5:88:ab:fe:6c:dc:
e2:84:2e:16:6b:00:17:2b:a8:f4:de:60:6f:b5:f8:
f0:8c:f8:28:4f:f6:33:ae:b6:fa:f3:e5:69:00:79:
6a:31:96:a6:9c:95:f7:ca:be:a6:7a:81:93:49:22:
2b:10:c6:c9:21:07:00:4b:97:24:04:24:39:16:29:
c0:90:0e:cc:52:d6:15:e5:ac:48:81:c4:f6:8b:26:
0a:5f:74:24:e7:c7:98:27:be:fc:77:cf:77:d2:ac:
e6:61:3d:74:e3:65:51:ce:a9:b9:93:0b:ba:3c:0c:
8d:0d:97:72:b4:57:c3:f7:96:a1:44:be:b7:fa:d4:
73:44:24:f6:7d:43:d7:b5:b0:a1:dd:24:69:8b:6d:
5a:57:c8:df:c8:ae:5e:85:31:f5:96:d0:d9:1e:32:
8d:88:84:9c:4f:f4:fd:32:b0:9f:65:93:cb:cf:3b:
4a:9a:58:c8:0d:97:1a:a4:3e:3c:93:e3:49:7f:cd:
3a:55:89:fd:61:22:4e:59:6d:d7:85:a4:9d:93:6e:
72:0c:d4:82:1c:fb:a7:2d:d3:d3:b7:b1:28:11:fe:
bc:f5:8d:4c:1c:9c:38:d8:6f:cb:de:46:23:10:65:
7c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BF:0F:A2:DB:ED:FA:FB:0A:B4:C5:53:54:AB:41:EF:E7:D6:B3:F9
X509v3 Authority Key Identifier:
keyid:46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:34:3a:af:fb:c5:5b:70:22:14:7c:62:00:4d:63:0f:33:3f:
35:b8:24:ce:74:3f:79:56:b5:8c:20:4c:4f:6c:48:46:d5:56:
a3:5f:a1:f1:ae:e5:74:b5:87:ea:5f:7e:2e:2f:3e:02:68:4a:
85:63:45:a7:c2:9e:16:fd:b9:ea:27:a7:d2:45:f0:c9:e4:34:
1b:d3:e4:fd:49:14:2e:01:4c:fa:08:35:a8:9e:31:09:b9:a6:
d7:73:07:55:84:1c:82:78:eb:92:ce:b0:eb:82:61:f9:f9:1d:
26:b7:db:8a:53:59:88:2c:e0:ac:2c:44:46:4b:b0:16:ee:26:
f5:4d:17:29:e1:18:65:56:da:c9:30:1d:99:0f:df:f1:eb:99:
74:4f:9f:9e:20:10:cc:2b:08:7b:8b:d4:6c:c2:0e:e6:43:1e:
da:dd:f8:7d:41:d5:09:2a:a2:07:68:49:a2:6d:1b:ce:16:29:
25:28:3a:4f:18:ec:97:dc:56:87:99:6e:88:5f:5c:3e:36:a1:
65:96:cd:9c:0b:74:d6:1b:9a:74:f6:bf:2b:d1:90:e0:83:00:
68:47:07:61:de:aa:3f:2a:74:38:a4:6f:a2:04:31:92:1e:d1:
12:ef:7f:99:33:d1:1e:b4:a1:0c:5e:f4:66:90:86:22:1c:11:
ff:0e:71:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:04:52 2026 by rpki-client