$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft File: 0A46107CA3AC888E94D84BCA2952BB23CA716933.mft (raw, json) Hash identifier: exf/SkZmkix7TcKV8X5xfTBBTLWUNphtA/f06HKQ2KQ= Subject key identifier: C6:06:75:18:0C:8B:95:63:06:2D:38:D9:9E:09:5A:E1:B0:71:AA:EB Authority key identifier: 0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 Certificate issuer: /CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Certificate serial: 3A1D3151CEBDAE01981E50B71B13037412E3A41C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft Manifest number: 013B Signing time: Wed 14 Oct 2026 08:28:51 +0000 Manifest this update: Wed 14 Oct 2026 08:23:51 +0000 Manifest next update: Sat 17 Oct 2026 15:42:51 +0000 Files and hashes: 1: 323430363a643134303a3a2f33322d3438203d3e20313331343834.roa (hash: wf8jpicWFamaHqIJZ6H9jcZ7cuCMGJQ7VOd7B3RXT9U=) 2: 323430363a643134303a383030303a3a2f33342d3438203d3e20313331343834.roa (hash: sQQIzWo0IvL/3jgG/tni7qytQXBkoZCTScUs3d/Uek0=) 3: 3130332e3135392e3132322e302f32332d3234203d3e20313331343834.roa (hash: iUeqJBmQDAxt+pLGYhWrJK3Odd/B3nT7dclLKwf5UO0=) 4: 323430363a643134303a383030303a3a2f33342d3438203d3e203439353434.roa (hash: PAf824Q9bOcvX8QACkiCfMY2g1dz/7XRXFxJEVpkmfE=) 5: 3130332e3135392e3132322e302f32332d3234203d3e203439353434.roa (hash: rubDoThyXxAtKd7cHar1Xe+H3PklUmIYuQDvQvtMaCY=) 6: 0A46107CA3AC888E94D84BCA2952BB23CA716933.crl (hash: 3cGzhj109fSUAw6oRVMYup3ngiS8Iiz76J+5P5iQpXw=) 7: 323430363a643134303a3a2f33322d3438203d3e203439353434.roa (hash: g7LIdaEG3sFtKdbTj2hBz13e6bXgQUd18mWYt6svPTs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:1d:31:51:ce:bd:ae:01:98:1e:50:b7:1b:13:03:74:12:e3:a4:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A46107CA3AC888E94D84BCA2952BB23CA716933 Validity Not Before: Oct 14 08:23:51 2026 GMT Not After : Oct 17 15:42:51 2026 GMT Subject: CN=C60675180C8B9563062D38D99E095AE1B071AAEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:67:d9:a8:f5:e2:c6:9f:03:0d:43:79:21:57: 47:36:eb:cd:b9:61:a9:5d:97:58:29:fb:0b:2f:88: 42:42:6a:03:3b:4c:1b:0c:75:a3:65:29:06:34:ad: e0:a4:cf:2d:08:20:29:e1:2b:29:96:5e:37:92:ed: d1:40:0a:3a:9c:c1:94:8d:7d:36:25:fb:f0:1d:b9: 2e:63:86:d4:eb:16:b0:9f:65:25:26:ac:65:1f:45: cc:15:68:5f:59:62:26:80:78:44:ca:07:e0:02:e5: ae:12:6f:6f:91:cc:2f:5c:bf:be:10:cb:f3:43:86: 92:f7:20:a0:30:1b:14:2e:c3:75:f4:00:fe:c9:63: 85:d1:98:87:cf:b0:9a:a7:45:6e:1f:1d:57:17:a8: eb:59:48:f5:b6:06:04:9f:48:7e:ca:fc:a6:47:45: 35:47:a8:a8:ab:04:3d:2f:59:78:e7:e7:ca:4a:f7: 30:a9:47:e7:37:47:11:f3:b2:37:b9:36:06:82:b3: 78:ef:14:b0:cc:f0:47:63:92:17:6b:78:aa:6a:cb: c0:6e:1a:f0:58:9c:1f:84:31:68:89:b4:02:ff:af: 3a:a8:3c:c4:14:22:68:85:a0:ad:12:e6:f0:cc:da: c0:12:ca:11:4f:d7:04:3e:f8:1d:6d:a9:81:19:d3: 24:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:06:75:18:0C:8B:95:63:06:2D:38:D9:9E:09:5A:E1:B0:71:AA:EB X509v3 Authority Key Identifier: keyid:0A:46:10:7C:A3:AC:88:8E:94:D8:4B:CA:29:52:BB:23:CA:71:69:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A46107CA3AC888E94D84BCA2952BB23CA716933.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345626114/0/0A46107CA3AC888E94D84BCA2952BB23CA716933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:64:38:d6:02:13:3d:91:17:b3:fe:a2:e1:da:a0:7b:78:1a: 33:c9:c8:50:13:17:38:11:7c:ce:b9:b0:88:64:2c:3d:0b:15: 93:8d:cb:ca:df:c5:21:89:7c:41:2f:42:f1:88:b6:31:89:94: 72:4a:92:a9:ab:d8:45:89:cb:bb:58:ff:ef:0b:cc:bc:ba:f8: 33:c8:68:8b:4c:d8:75:b7:a9:47:67:e2:e6:ff:4e:4a:61:80: d3:5f:9a:36:67:2a:b5:c9:cb:a5:52:75:56:56:07:d8:c3:f4: 48:da:09:66:bb:85:1c:fe:f0:1b:8c:2c:d9:22:02:c0:9e:0d: 7f:76:c1:ed:86:32:4e:ce:4b:97:56:b1:e3:58:3b:da:5f:5d: 74:4b:84:29:f5:81:fc:98:1d:f4:38:ff:03:b0:b3:0a:77:6c: f3:f3:40:ac:4d:3b:68:a6:4a:40:1b:df:91:0e:a2:48:65:37: 9c:f3:67:28:67:b5:51:af:5a:1a:83:14:b5:22:3b:7c:51:ee: 21:b8:60:56:62:d7:e8:3e:b6:76:3a:77:50:c0:b0:b2:3a:17: ad:22:8f:2d:b0:43:15:18:0f:5d:9c:db:cf:29:24:a4:da:46: c6:3e:62:ad:cd:a1:c1:25:43:84:aa:48:b5:86:82:b0:0d:8a: 92:3e:ba:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOh0xUc69rgGYHlC3GxMDdBLjpBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjND QTcxNjkzMzAeFw0yNjEwMTQwODIzNTFaFw0yNjEwMTcxNTQyNTFaMDMxMTAvBgNV BAMTKEM2MDY3NTE4MEM4Qjk1NjMwNjJEMzhEOTlFMDk1QUUxQjA3MUFBRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqZ9mo9eLGnwMNQ3khV0c26825 Yaldl1gp+wsviEJCagM7TBsMdaNlKQY0reCkzy0IICnhKymWXjeS7dFACjqcwZSN fTYl+/AduS5jhtTrFrCfZSUmrGUfRcwVaF9ZYiaAeETKB+AC5a4Sb2+RzC9cv74Q y/NDhpL3IKAwGxQuw3X0AP7JY4XRmIfPsJqnRW4fHVcXqOtZSPW2BgSfSH7K/KZH RTVHqKirBD0vWXjn58pK9zCpR+c3RxHzsje5NgaCs3jvFLDM8EdjkhdreKpqy8Bu GvBYnB+EMWiJtAL/rzqoPMQUImiFoK0S5vDM2sASyhFP1wQ++B1tqYEZ0ySFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxgZ1GAyLlWMGLTjZngla4bBxquswHwYDVR0j BBgwFoAUCkYQfKOsiI6U2EvKKVK7I8pxaTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTYyNjExNC8wLzBBNDYxMDdDQTNBQzg4OEU5NEQ4NEJDQTI5NTJC QjIzQ0E3MTY5MzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEE0NjEwN0NBM0FDODg4RTk0RDg0QkNBMjk1MkJCMjNDQTcxNjkzMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2MjYxMTQvMC8wQTQ2MTA3Q0EzQUM4 ODhFOTREODRCQ0EyOTUyQkIyM0NBNzE2OTMzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWQ41gITPZEX s/6i4dqge3gaM8nIUBMXOBF8zrmwiGQsPQsVk43Lyt/FIYl8QS9C8Yi2MYmUckqS qavYRYnLu1j/7wvMvLr4M8hoi0zYdbepR2fi5v9OSmGA01+aNmcqtcnLpVJ1VlYH 2MP0SNoJZruFHP7wG4ws2SICwJ4Nf3bB7YYyTs5Ll1ax41g72l9ddEuEKfWB/Jgd 9Dj/A7CzCnds8/NArE07aKZKQBvfkQ6iSGU3nPNnKGe1Ua9aGoMUtSI7fFHuIbhg VmLX6D62djp3UMCwsjoXrSKPLbBDFRgPXZzbzykkpNpGxj5irc2hwSVDhKpItYaC sA2Kkj66Kg== -----END CERTIFICATE-----Generated at Wed Oct 14 20:30:35 2026 by rpki-client