
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
File: 46C13E5032045116B0FA54934DD7BFCA0483335A.mft (raw, json)
Hash identifier: VaphOT5bF+TXizPUwYCzHZPzWVrGAqWIQDLXbS0W5Zg=
Subject key identifier: 65:41:54:8C:FF:90:69:13:D7:C1:4D:CB:FB:28:9A:F3:DE:BC:74:88
Authority key identifier: 46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A
Certificate issuer: /CN=46C13E5032045116B0FA54934DD7BFCA0483335A
Certificate serial: 4A44FA68A20B613B4F2E77AF57556ADFD88A11E4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
Manifest number: AF
Signing time: Fri 29 May 2026 10:02:46 +0000
Manifest this update: Fri 29 May 2026 09:57:46 +0000
Manifest next update: Sat 30 May 2026 13:58:46 +0000
Files and hashes: 1: 323430303a356130303a3a2f33322d3332203d3e2039383037.roa (hash: LogFkd2wHLYxjTnS7A6XZRJU7XgOiWX8cKqHZgMnfdc=)
2: 46C13E5032045116B0FA54934DD7BFCA0483335A.crl (hash: A4dJGCVskbZLRo0S0LYxiCDOZ5r1APjtztjovsc4Aac=)
3: 3231392e3233352e3134342e302f32312d3231203d3e2039383037.roa (hash: Wi/t+st603WnA7TssvGC3DzTJ3V3irpX2WC1oBapI5U=)
4: 3231392e3233352e3133362e302f32312d3231203d3e2039383037.roa (hash: 9EWw+3yvD8wWr9/mlEXgpw2TuO9rB0T1PMKPebwR0kY=)
5: 3231392e3233352e3132382e302f32312d3231203d3e2039383037.roa (hash: WgqZHu54HYvCrSjVeZSV7S2ptAQ1a+xoyVFAd7XUP1I=)
6: 3231392e3233352e3135322e302f32312d3231203d3e203435303734.roa (hash: WSpXWtSav0n/mxgQsU+45a8xYf8rGnUkY+KgxqJpb44=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 13:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:44:fa:68:a2:0b:61:3b:4f:2e:77:af:57:55:6a:df:d8:8a:11:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46C13E5032045116B0FA54934DD7BFCA0483335A
Validity
Not Before: May 29 09:57:46 2026 GMT
Not After : May 30 13:58:46 2026 GMT
Subject: CN=6541548CFF906913D7C14DCBFB289AF3DEBC7488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:21:90:55:9a:92:84:ee:ee:43:b6:3c:c3:
df:1f:3f:7f:49:be:54:af:8c:a1:86:9b:fa:8b:6d:
e8:1a:9e:d8:07:60:c7:9c:7e:8d:8c:f5:d0:5c:06:
47:6c:37:3c:2d:26:92:7f:8f:fd:03:19:9e:3d:ce:
51:f9:ce:77:74:de:3f:f0:a3:c4:40:f8:50:af:86:
de:e1:b4:00:14:f4:3d:cf:ae:37:c0:f6:33:9e:ba:
db:32:19:39:be:ce:43:60:0a:3d:b4:c7:5a:79:53:
3e:c3:ea:0e:25:71:8b:75:f2:b8:ef:8f:e8:ab:40:
9b:31:f1:ae:41:da:e8:b9:25:83:a5:67:b4:01:d9:
31:9b:ca:fb:5e:36:c9:35:33:31:06:40:5b:fa:c9:
0f:26:8c:9a:c1:e5:eb:3b:06:9c:ef:e9:2a:97:91:
89:77:01:21:6d:3e:ee:fc:27:29:1d:48:7f:12:ff:
7d:fc:bf:15:ee:ba:3b:48:95:7f:bb:a5:fd:b3:c2:
08:02:41:42:cc:ee:2b:db:bc:99:d5:70:d6:dd:41:
bf:76:73:47:d2:63:9f:82:49:0a:17:bc:5a:1b:b7:
b2:2c:15:bc:a4:ed:39:0d:92:63:fc:b3:34:d7:15:
da:48:d4:2e:35:32:8c:42:f8:92:55:3d:39:cd:2f:
e9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:41:54:8C:FF:90:69:13:D7:C1:4D:CB:FB:28:9A:F3:DE:BC:74:88
X509v3 Authority Key Identifier:
keyid:46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b8:28:2a:26:a2:0a:6c:bd:05:9e:35:60:49:d3:4a:89:e5:
bc:c1:99:91:56:36:8b:68:fd:8d:bc:53:ba:4b:70:ac:1e:c0:
6d:90:d6:f3:4d:78:6b:12:11:b7:46:16:4a:4f:03:f1:fd:38:
1b:35:d4:06:c8:e2:5f:b2:e2:91:8c:c5:4c:c9:c1:fa:61:1c:
2b:27:bc:96:1d:e7:ba:45:44:48:36:0d:f2:c7:65:27:d8:2d:
a4:bf:2b:07:19:b0:63:b7:25:7c:95:9f:51:a9:85:72:d4:ea:
a4:16:a3:e2:bc:e8:6a:ef:31:02:ba:ab:00:01:9b:d2:5d:25:
b0:20:ca:74:53:39:c4:41:7c:cf:24:4d:ab:99:0e:c7:50:ea:
c4:64:4a:18:7a:36:0f:f1:90:b5:4f:21:78:6a:49:4a:6a:75:
c6:39:57:cf:bb:0c:c1:4c:b1:b7:7a:3c:6c:7c:26:1c:fb:ae:
6e:68:cc:73:ac:35:7a:35:97:cf:d3:f4:5f:7e:37:1c:01:42:
34:dc:9b:3f:da:ad:64:a3:68:f6:aa:16:b9:c0:83:be:04:db:
7e:71:27:74:52:5d:14:ad:81:d4:0c:19:58:5d:b4:d4:e7:1c:
82:b8:08:e8:ff:2b:83:74:04:6a:80:0c:c9:1a:28:32:c2:84:
86:21:cf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:20 2026 by rpki-client