$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft File: 0A46107CA3AC888E94D84BCA2952BB23CA716933.mft (raw, json) Hash identifier: Oi8Kd08NZbq/NZIE3S0urTd485+n635fN8ShwpApGkY= Subject key identifier: CD:40:1D:01:3F:6D:B1:39:53:FF:E6:68:79:45:61:B8:29:68:A3:F3 Authority key identifier: 0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 Certificate issuer: /CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Certificate serial: 5D06162760BCACD2EAA2A7F9FA20964EDF1BFB87 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft Manifest number: 70 Signing time: Mon 13 Apr 2026 06:34:17 +0000 Manifest this update: Mon 13 Apr 2026 06:29:17 +0000 Manifest next update: Tue 14 Apr 2026 06:41:17 +0000 Files and hashes: 1: 323430363a643134303a383030303a3a2f33342d3438203d3e203439353434.roa (hash: PAf824Q9bOcvX8QACkiCfMY2g1dz/7XRXFxJEVpkmfE=) 2: 323430363a643134303a3a2f33322d3438203d3e20313331343834.roa (hash: wf8jpicWFamaHqIJZ6H9jcZ7cuCMGJQ7VOd7B3RXT9U=) 3: 0A46107CA3AC888E94D84BCA2952BB23CA716933.crl (hash: YBiv7cWwtX4z6fTyQDKOJSVm8eWdFAbyRbHmNoC7KdE=) 4: 323430363a643134303a3a2f33322d3438203d3e203439353434.roa (hash: g7LIdaEG3sFtKdbTj2hBz13e6bXgQUd18mWYt6svPTs=) 5: 3130332e3135392e3132322e302f32332d3234203d3e203439353434.roa (hash: rubDoThyXxAtKd7cHar1Xe+H3PklUmIYuQDvQvtMaCY=) 6: 3130332e3135392e3132322e302f32332d3234203d3e20313331343834.roa (hash: iUeqJBmQDAxt+pLGYhWrJK3Odd/B3nT7dclLKwf5UO0=) 7: 323430363a643134303a383030303a3a2f33342d3438203d3e20313331343834.roa (hash: sQQIzWo0IvL/3jgG/tni7qytQXBkoZCTScUs3d/Uek0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:06:16:27:60:bc:ac:d2:ea:a2:a7:f9:fa:20:96:4e:df:1b:fb:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Validity Not Before: Apr 13 06:29:17 2026 GMT Not After : Apr 14 06:41:17 2026 GMT Subject: CN=CD401D013F6DB13953FFE668794561B82968A3F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:59:f9:70:0e:81:04:e8:10:2c:4f:55:ec:39: 58:52:eb:03:ea:8f:c8:35:fb:35:9e:97:2f:1f:4a: b8:14:d7:b0:a8:c6:71:49:c1:7f:67:f6:a3:a3:73: fa:ed:4e:c6:c6:db:28:69:a8:ea:dd:8b:94:23:3c: 9d:04:a1:bd:f1:69:12:6c:37:a9:02:b5:90:50:bb: 32:75:cd:a4:55:76:82:e3:dd:52:f3:32:cb:14:66: f3:8d:65:3a:67:42:b0:13:fb:bd:d4:d2:31:7c:71: 82:db:56:7d:fa:8d:2e:dc:13:e5:1a:e1:b8:37:2a: f7:43:06:08:78:be:a2:07:65:c7:0d:29:03:d4:88: 8b:a3:dd:8b:45:59:ea:57:49:d4:0e:64:67:09:0d: 4b:9f:c3:b9:6b:5d:1a:ff:3b:4e:06:bd:69:ed:19: d1:58:15:8f:81:6e:e2:4c:bc:7c:f1:f5:1b:50:cc: 59:1f:ef:f6:7e:6d:a8:38:4b:74:06:90:02:cc:d8: ad:79:8b:88:dd:83:4f:76:bf:54:c0:72:da:48:9e: 00:f5:1e:24:57:62:bf:31:af:81:62:c1:12:ec:bb: 16:61:3e:e1:94:0c:03:d6:69:65:55:0f:b3:a4:30: 94:08:f1:57:27:ab:d3:13:0c:06:0c:dc:f7:39:53: 68:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:40:1D:01:3F:6D:B1:39:53:FF:E6:68:79:45:61:B8:29:68:A3:F3 X509v3 Authority Key Identifier: keyid:0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f9:40:c1:48:d8:6c:4d:26:77:fd:f6:22:43:93:44:db:bc: 32:d0:f5:89:d3:19:d4:53:83:f8:97:52:0d:b9:ff:af:3e:ff: a6:3a:4a:43:31:3f:0f:ac:7c:ea:55:4c:a9:73:ee:04:57:13: 0d:a2:c4:9a:9a:68:85:c5:af:95:70:89:9e:97:02:59:db:23: 1b:f9:17:58:3f:e2:d5:15:c9:82:8f:c9:66:e6:34:ff:a6:29: c6:2a:e1:dd:40:7b:e0:e2:68:38:04:68:bb:ca:e9:ed:12:fb: c6:91:a1:e9:94:f7:3d:1b:96:a2:f7:45:8d:ec:a6:82:be:bc: 6b:28:bc:3a:69:a2:4b:d9:91:a5:51:3b:f3:dd:51:ab:82:bd: 7a:af:ad:b0:5a:4e:bf:11:e1:ed:8d:32:3a:ff:c6:cb:a8:f1: ef:96:df:d4:b2:25:86:f4:09:1f:c8:8e:1c:d2:58:37:3d:ae: a0:44:68:14:3a:a3:c2:34:83:74:25:e1:41:4c:a9:7a:ff:6d: a8:61:05:fd:0b:2a:fe:7e:eb:f9:57:9f:eb:68:c5:4c:a5:28: 68:ed:70:d6:bc:2e:78:1e:b4:b4:9f:61:e5:26:81:3f:e0:bd: a7:27:31:24:a5:62:d7:4a:8c:6c:19:31:76:d6:2d:77:81:66: 3c:02:60:59 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXQYWJ2C8rNLqoqf5+iCWTt8b+4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjND QTcxNjkzMzAeFw0yNjA0MTMwNjI5MTdaFw0yNjA0MTQwNjQxMTdaMDMxMTAvBgNV BAMTKENENDAxRDAxM0Y2REIxMzk1M0ZGRTY2ODc5NDU2MUI4Mjk2OEEzRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDWflwDoEE6BAsT1XsOVhS6wPq j8g1+zWely8fSrgU17CoxnFJwX9n9qOjc/rtTsbG2yhpqOrdi5QjPJ0Eob3xaRJs N6kCtZBQuzJ1zaRVdoLj3VLzMssUZvONZTpnQrAT+73U0jF8cYLbVn36jS7cE+Ua 4bg3KvdDBgh4vqIHZccNKQPUiIuj3YtFWepXSdQOZGcJDUufw7lrXRr/O04GvWnt GdFYFY+BbuJMvHzx9RtQzFkf7/Z+bag4S3QGkALM2K15i4jdg092v1TActpIngD1 HiRXYr8xr4FiwRLsuxZhPuGUDAPWaWVVD7OkMJQI8Vcnq9MTDAYM3Pc5U2hPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzUAdAT9tsTlT/+ZoeUVhuCloo/MwHwYDVR0j BBgwFoAUCkYQfKOsiI6U2EvKKVK7I8pxaTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTYyNjExNC8wLzBBNDYxMDdDQTNBQzg4OEU5NEQ4NEJDQTI5NTJC QjIzQ0E3MTY5MzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjNDQTcxNjkzMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2MjYxMTQvMC8wQTQ2MTA3Q0EzQUM4 ODhFOTREODRCQ0EyOTUyQkIyM0NBNzE2OTMzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYflAwUjYbE0m d/32IkOTRNu8MtD1idMZ1FOD+JdSDbn/rz7/pjpKQzE/D6x86lVMqXPuBFcTDaLE mppohcWvlXCJnpcCWdsjG/kXWD/i1RXJgo/JZuY0/6Ypxirh3UB74OJoOARou8rp 7RL7xpGh6ZT3PRuWovdFjeymgr68ayi8OmmiS9mRpVE7891Rq4K9eq+tsFpOvxHh 7Y0yOv/Gy6jx75bf1LIlhvQJH8iOHNJYNz2uoERoFDqjwjSDdCXhQUypev9tqGEF /Qsq/n7r+Vef62jFTKUoaO1w1rwueB60tJ9h5SaBP+C9pycxJKVi10qMbBkxdtYt d4FmPAJgWQ== -----END CERTIFICATE-----Generated at Mon Apr 13 12:28:41 2026 by rpki-client