$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft File: 0A46107CA3AC888E94D84BCA2952BB23CA716933.mft (raw, json) Hash identifier: ar0M8TVmgzcKeQLKuUG97iRqF56y92NEDvQiKgWbkbs= Subject key identifier: C8:BA:E6:93:9F:CB:85:CE:1C:05:F2:B1:20:7A:B8:9D:C3:F8:88:D8 Authority key identifier: 0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 Certificate issuer: /CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Certificate serial: 4EF452401770295410668E6E556174C09D665F80 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft Manifest number: 0126 Signing time: Fri 28 Aug 2026 06:47:56 +0000 Manifest this update: Fri 28 Aug 2026 06:42:56 +0000 Manifest next update: Mon 31 Aug 2026 10:10:56 +0000 Files and hashes: 1: 3130332e3135392e3132322e302f32332d3234203d3e203439353434.roa (hash: rubDoThyXxAtKd7cHar1Xe+H3PklUmIYuQDvQvtMaCY=) 2: 323430363a643134303a3a2f33322d3438203d3e20313331343834.roa (hash: wf8jpicWFamaHqIJZ6H9jcZ7cuCMGJQ7VOd7B3RXT9U=) 3: 3130332e3135392e3132322e302f32332d3234203d3e20313331343834.roa (hash: iUeqJBmQDAxt+pLGYhWrJK3Odd/B3nT7dclLKwf5UO0=) 4: 0A46107CA3AC888E94D84BCA2952BB23CA716933.crl (hash: mXBNNpoq1Y/uom0pfm4bsv7sTdwJ6jcpf4vDWmq5o7c=) 5: 323430363a643134303a383030303a3a2f33342d3438203d3e20313331343834.roa (hash: sQQIzWo0IvL/3jgG/tni7qytQXBkoZCTScUs3d/Uek0=) 6: 323430363a643134303a383030303a3a2f33342d3438203d3e203439353434.roa (hash: PAf824Q9bOcvX8QACkiCfMY2g1dz/7XRXFxJEVpkmfE=) 7: 323430363a643134303a3a2f33322d3438203d3e203439353434.roa (hash: g7LIdaEG3sFtKdbTj2hBz13e6bXgQUd18mWYt6svPTs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 10:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f4:52:40:17:70:29:54:10:66:8e:6e:55:61:74:c0:9d:66:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Validity Not Before: Aug 28 06:42:56 2026 GMT Not After : Aug 31 10:10:56 2026 GMT Subject: CN=C8BAE6939FCB85CE1C05F2B1207AB89DC3F888D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0c:ee:18:55:7c:ef:87:67:21:16:38:0a:f3: 09:b0:07:39:5f:84:05:5f:6c:5e:ea:61:67:2e:9d: 85:4d:ea:49:59:90:bb:5e:0b:da:88:57:8a:8e:b1: 31:9c:f6:8c:e5:a0:ca:b3:83:26:98:50:d1:fc:a0: e1:e4:e1:1f:87:c2:42:fb:77:46:f0:1e:a1:c8:14: ef:64:e9:0f:61:d5:a9:03:51:60:10:57:bf:0b:43: 8e:1f:2f:8a:4e:21:78:af:26:47:9e:73:6f:84:20: 91:07:16:d7:6e:c6:8c:03:14:7e:77:bb:a5:5b:18: 81:66:9a:3d:60:da:33:5a:1b:ce:39:4e:06:83:c7: b0:9b:2f:33:ca:08:a4:90:13:0b:80:e5:04:80:91: a1:86:9d:7c:40:ce:cc:8e:b7:ff:bf:13:6d:65:e7: 6c:d2:5d:74:1f:d5:bd:62:83:0c:f0:f0:e3:f5:07: 54:86:69:d5:4c:9c:21:4c:f3:13:1d:6e:20:1e:a0: 6e:44:ae:d6:16:43:38:ed:d3:80:ac:71:ef:f9:3f: 5d:99:91:07:64:f8:86:ca:36:87:1a:25:65:66:13: f3:6b:56:fd:c9:5c:b7:b9:46:8e:c1:f0:ba:63:ea: b9:cf:94:e7:a9:b8:12:73:5e:1b:0c:25:6b:1a:53: 9f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BA:E6:93:9F:CB:85:CE:1C:05:F2:B1:20:7A:B8:9D:C3:F8:88:D8 X509v3 Authority Key Identifier: keyid:0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f4:38:ee:74:e6:8b:9d:ce:7f:1f:f8:c1:4f:0f:dd:65:0b: 6f:f2:d4:52:b3:a1:2c:e8:84:bd:73:8d:ff:c5:39:c2:c5:6c: 9c:db:c8:9f:19:b6:d8:ed:2f:e1:ca:96:ae:29:ac:0e:30:bb: 6d:ef:ba:5d:f2:f6:5c:de:64:5f:6b:09:f1:45:3b:da:ff:cf: 03:35:15:11:ce:d0:ba:3b:a5:ad:d8:14:6a:bd:56:26:2e:19: 31:a9:a2:05:37:5f:99:79:b7:66:8e:cf:59:5c:af:db:52:55: 74:40:f8:16:d9:3f:ed:c1:8b:27:f4:d7:c2:a6:e0:25:10:d6: 7d:58:02:99:5b:15:58:80:bf:90:c4:7f:bd:44:f9:78:ac:c3: 4e:73:46:5a:3a:ee:a9:a0:9b:27:77:aa:2d:f8:36:32:b3:7e: 0e:37:b0:06:1f:8f:e4:b2:7a:65:f9:7b:e5:5e:ad:9a:b6:03: 82:55:14:03:9d:9a:6b:a6:80:09:3b:b9:97:1a:af:5c:db:17: 8f:b0:7d:cc:ad:2f:97:b2:6f:0d:e8:78:36:76:7a:ec:00:78: d0:91:bd:eb:e1:73:45:d3:c2:b8:90:60:a6:6b:8c:4d:79:29: 6a:72:c1:03:09:e1:7c:2c:e4:a2:31:5f:e3:ef:4c:bd:96:ce: 16:85:ce:cf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTvRSQBdwKVQQZo5uVWF0wJ1mX4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjND QTcxNjkzMzAeFw0yNjA4MjgwNjQyNTZaFw0yNjA4MzExMDEwNTZaMDMxMTAvBgNV BAMTKEM4QkFFNjkzOUZDQjg1Q0UxQzA1RjJCMTIwN0FCODlEQzNGODg4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6DO4YVXzvh2chFjgK8wmwBzlf hAVfbF7qYWcunYVN6klZkLteC9qIV4qOsTGc9ozloMqzgyaYUNH8oOHk4R+HwkL7 d0bwHqHIFO9k6Q9h1akDUWAQV78LQ44fL4pOIXivJkeec2+EIJEHFtduxowDFH53 u6VbGIFmmj1g2jNaG845TgaDx7CbLzPKCKSQEwuA5QSAkaGGnXxAzsyOt/+/E21l 52zSXXQf1b1igwzw8OP1B1SGadVMnCFM8xMdbiAeoG5ErtYWQzjt04Csce/5P12Z kQdk+IbKNocaJWVmE/NrVv3JXLe5Ro7B8Lpj6rnPlOepuBJzXhsMJWsaU59HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyLrmk5/Lhc4cBfKxIHq4ncP4iNgwHwYDVR0j BBgwFoAUCkYQfKOsiI6U2EvKKVK7I8pxaTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTYyNjExNC8wLzBBNDYxMDdDQTNBQzg4OEU5NEQ4NEJDQTI5NTJC QjIzQ0E3MTY5MzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjNDQTcxNjkzMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2MjYxMTQvMC8wQTQ2MTA3Q0EzQUM4 ODhFOTREODRCQ0EyOTUyQkIyM0NBNzE2OTMzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPQ47nTmi53O fx/4wU8P3WULb/LUUrOhLOiEvXON/8U5wsVsnNvInxm22O0v4cqWrimsDjC7be+6 XfL2XN5kX2sJ8UU72v/PAzUVEc7QujulrdgUar1WJi4ZMamiBTdfmXm3Zo7PWVyv 21JVdED4Ftk/7cGLJ/TXwqbgJRDWfVgCmVsVWIC/kMR/vUT5eKzDTnNGWjruqaCb J3eqLfg2MrN+DjewBh+P5LJ6Zfl75V6tmrYDglUUA52aa6aACTu5lxqvXNsXj7B9 zK0vl7JvDeh4NnZ67AB40JG96+FzRdPCuJBgpmuMTXkpanLBAwnhfCzkojFf4+9M vZbOFoXOzw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:20 2026 by rpki-client