
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
File: 0A46107CA3AC888E94D84BCA2952BB23CA716933.mft (raw, json)
Hash identifier: GQWlD6WQL0OfJu9d9qLXFJIou2YBk9bARxpCQNpDa20=
Subject key identifier: B8:B9:29:87:BF:64:03:57:75:E6:43:CF:D2:1F:31:1D:4E:CB:DB:46
Authority key identifier: 0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33
Certificate issuer: /CN=0A46107CA3AC888E94D84BCA2952BB23CA716933
Certificate serial: 124A4F5213CB4D2832120B02BEBA78B61AE677F4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
Manifest number: 2F
Signing time: Sun 22 Feb 2026 21:57:30 +0000
Manifest this update: Sun 22 Feb 2026 21:52:30 +0000
Manifest next update: Tue 24 Feb 2026 00:30:30 +0000
Files and hashes: 1: 3130332e3135392e3132322e302f32332d3234203d3e203439353434.roa (hash: rubDoThyXxAtKd7cHar1Xe+H3PklUmIYuQDvQvtMaCY=)
2: 323430363a643134303a3a2f33322d3438203d3e203439353434.roa (hash: g7LIdaEG3sFtKdbTj2hBz13e6bXgQUd18mWYt6svPTs=)
3: 3130332e3135392e3132322e302f32332d3234203d3e20313331343834.roa (hash: iUeqJBmQDAxt+pLGYhWrJK3Odd/B3nT7dclLKwf5UO0=)
4: 323430363a643134303a383030303a3a2f33342d3438203d3e20313331343834.roa (hash: sQQIzWo0IvL/3jgG/tni7qytQXBkoZCTScUs3d/Uek0=)
5: 323430363a643134303a383030303a3a2f33342d3438203d3e203439353434.roa (hash: PAf824Q9bOcvX8QACkiCfMY2g1dz/7XRXFxJEVpkmfE=)
6: 0A46107CA3AC888E94D84BCA2952BB23CA716933.crl (hash: pRyFepdWEcp34Ay35UxEml6BzCjKft0DIJuf3q8k6PM=)
7: 323430363a643134303a3a2f33322d3438203d3e20313331343834.roa (hash: wf8jpicWFamaHqIJZ6H9jcZ7cuCMGJQ7VOd7B3RXT9U=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4a:4f:52:13:cb:4d:28:32:12:0b:02:be:ba:78:b6:1a:e6:77:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A46107CA3AC888E94D84BCA2952BB23CA716933
Validity
Not Before: Feb 22 21:52:30 2026 GMT
Not After : Feb 24 00:30:30 2026 GMT
Subject: CN=B8B92987BF64035775E643CFD21F311D4ECBDB46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:3e:ff:62:fe:d7:c2:6f:df:78:36:de:d7:
43:d4:8b:b7:97:75:d6:20:0b:49:db:f5:63:3c:29:
53:66:e8:ab:13:08:dd:56:84:2b:63:8d:25:a3:4a:
57:07:bd:3c:5b:a6:22:16:94:d1:41:f3:df:42:bb:
af:f4:79:0b:47:34:6f:36:20:83:0d:94:0d:e5:53:
9b:f4:44:10:04:eb:01:80:69:42:24:3f:dd:13:4d:
94:3e:ec:ab:38:78:00:4b:13:c5:d1:64:48:8a:7f:
39:b9:2c:76:2b:72:2c:ed:bf:c5:2c:b5:7d:c0:03:
d3:2e:15:23:26:20:91:fd:88:aa:d3:67:7c:d6:c4:
22:6d:34:ae:4a:b2:dd:1c:68:f9:6f:cd:7f:94:07:
0e:7e:b5:13:fd:67:ab:b4:ab:b7:91:4c:06:ba:36:
d1:62:fd:b6:17:43:c7:bb:10:99:17:cb:aa:25:04:
1a:8f:64:46:70:6a:02:ca:3d:b0:20:6b:b5:dd:a0:
a2:29:b1:a7:93:83:80:47:fa:21:5b:50:65:8d:bc:
2d:9b:db:0e:0b:80:26:24:06:07:ee:4c:9d:cc:d6:
d9:aa:00:f1:a5:10:88:55:c1:b0:d0:a9:98:12:13:
6a:12:94:81:e4:cd:8b:92:6b:b2:cb:6f:eb:16:46:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B9:29:87:BF:64:03:57:75:E6:43:CF:D2:1F:31:1D:4E:CB:DB:46
X509v3 Authority Key Identifier:
keyid:0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a7:42:9a:72:94:8b:4b:54:6f:2d:db:ab:f5:4f:05:fb:7f:
77:68:b9:33:49:24:c4:ec:11:b6:ad:bd:3f:30:bc:85:c0:74:
8f:14:35:0f:13:0d:7a:bd:96:01:cf:35:c1:1b:56:a2:bb:d8:
8d:87:da:af:e4:e9:73:9a:c2:1d:d9:13:91:dc:bb:99:c7:e3:
0c:5b:d7:a7:bd:fa:93:b5:72:4f:a3:f6:5c:77:4a:c4:85:e8:
b7:89:11:30:c1:7d:9f:63:f8:8d:44:63:30:ea:37:8e:bb:dd:
b7:c1:62:27:6b:ba:02:ff:7e:c9:c6:95:3d:95:eb:a5:35:25:
20:8a:a3:79:87:88:0c:46:71:3e:b6:88:ed:1e:e6:c6:00:a5:
b0:6c:be:93:21:e1:5f:af:90:08:36:6d:fe:f3:3b:f0:1a:e4:
6d:79:88:8b:3a:0d:5b:c9:a6:cc:9c:77:e9:45:67:bc:e6:35:
12:c5:6f:c1:3c:7d:de:af:56:81:27:bb:ba:72:21:ed:55:21:
f5:14:24:f0:58:36:9f:dd:31:d1:78:42:46:97:55:41:4e:ac:
fd:a4:f7:d6:a8:ba:d4:7d:7d:6e:67:e6:76:7e:38:1b:1c:83:
c9:f1:04:a6:64:ab:a9:02:df:2d:32:9e:04:d3:e2:dc:98:e6:
5e:23:80:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:06:12 2026 by rpki-client