
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
File: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft (raw, json)
Hash identifier: Zdw+utUFHCFZhN84arX3lc9h9sNb9+EmStkL0HjVivM=
Subject key identifier: E1:C7:CE:EB:71:3A:BF:65:3E:B1:2C:F3:7C:EE:0F:3B:26:73:11:CD
Authority key identifier: 0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63
Certificate issuer: /CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63
Certificate serial: 1587230D6F3F188195B482DACE3FFD297552962C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
Manifest number: 77
Signing time: Fri 17 Apr 2026 16:14:43 +0000
Manifest this update: Fri 17 Apr 2026 16:09:43 +0000
Manifest next update: Sat 18 Apr 2026 19:40:43 +0000
Files and hashes: 1: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl (hash: 6ra8sDzsAgNeyjcCQhUoEK/9y2Pb7k/pPL2FtS93iHc=)
2: 323430313a333830303a3a2f33322d3438203d3e203234343234.roa (hash: 92kDeGUBf68EI8CdYM+85AShVPJsE8p6evpx0zxAuAg=)
3: 3230332e3230382e33322e302f31392d3234203d3e203234343234.roa (hash: N2nkDTssJapb5MQQw+tYmzqkzQ0KoXd8OohRafzcbkM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:87:23:0d:6f:3f:18:81:95:b4:82:da:ce:3f:fd:29:75:52:96:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63
Validity
Not Before: Apr 17 16:09:43 2026 GMT
Not After : Apr 18 19:40:43 2026 GMT
Subject: CN=E1C7CEEB713ABF653EB12CF37CEE0F3B267311CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:25:55:3d:13:86:27:43:1b:26:e0:9d:e2:
44:6b:d8:69:8a:b5:c6:89:45:6a:a4:ac:11:cd:6c:
6a:70:d5:be:8d:5f:2c:d7:11:e2:78:56:2c:b7:f8:
a3:20:86:64:18:9a:d2:62:21:6d:de:1d:30:28:fb:
5a:3f:83:22:a1:cc:2c:fc:3b:62:f1:77:01:89:5a:
85:5e:66:c6:0f:d1:40:4d:46:71:25:b8:73:b3:b5:
30:3e:71:e7:f2:8d:2b:1c:ab:3c:42:aa:bb:a2:d8:
b5:de:1e:57:9c:4f:bb:26:82:8e:53:71:dd:78:6e:
1e:23:ad:36:d2:99:03:dd:e0:3c:47:63:93:a4:3c:
47:06:d2:7e:17:16:fc:e0:c7:77:0d:84:60:49:ab:
a4:d2:f0:30:9c:4f:6d:a2:b0:e0:f0:4d:fd:c4:ed:
7f:34:a0:fa:29:8e:68:3f:53:3d:da:0f:fe:57:89:
a1:c5:2a:21:1a:1d:78:cb:09:af:03:ec:dc:c5:7c:
51:09:08:d2:2f:e7:91:08:95:de:c8:69:1e:dc:ea:
8a:40:c3:cc:83:e2:5d:90:9e:34:fe:27:28:7c:ee:
10:2f:93:1a:1b:e6:fe:21:c1:53:26:f3:8c:f5:20:
a0:90:ea:25:41:47:3d:0a:0c:d4:56:e9:8e:18:0a:
9c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C7:CE:EB:71:3A:BF:65:3E:B1:2C:F3:7C:EE:0F:3B:26:73:11:CD
X509v3 Authority Key Identifier:
keyid:0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:72:35:0a:f3:8d:68:fa:ad:fd:98:16:53:21:d5:5d:19:1f:
3f:a5:9e:f0:78:15:f6:cf:17:a7:22:c4:55:03:00:89:e4:62:
e3:f1:23:45:f0:f7:b7:8d:e6:3a:51:6f:b0:e1:12:4e:5c:0d:
fa:63:a9:38:fb:e7:f2:30:a8:85:61:5a:83:35:8d:da:8a:b1:
58:10:6f:23:6a:d5:c7:21:d2:ef:fb:4f:3e:e2:3c:a3:d2:96:
ca:d0:6d:39:c5:32:ff:4a:00:6e:ef:39:a7:b4:ac:8c:01:bd:
d9:aa:0e:bd:28:0d:17:ca:b2:e2:14:27:78:2e:72:c3:d1:e3:
d1:a2:48:4f:f6:66:3e:ec:71:24:9d:37:f1:41:3e:7c:3e:d3:
56:f9:63:61:83:06:81:af:88:d8:f8:c6:51:7a:be:73:87:fc:
24:4b:59:5d:96:60:94:da:a8:d8:20:53:57:ac:a8:6b:67:d9:
57:4d:45:c7:79:e7:88:1f:a2:93:9d:d0:47:9a:51:e3:33:2b:
ab:a3:56:2b:e2:f5:97:c1:6f:04:fe:bf:8b:1e:e7:31:24:cb:
38:6f:bf:2d:22:c0:5d:51:a6:cb:19:62:55:42:aa:be:6c:e2:
1b:56:07:40:6d:20:d8:22:0f:13:dd:93:cc:28:ed:b2:9f:a1:
8f:36:45:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:56:02 2026 by rpki-client