$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft File: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft (raw, json) Hash identifier: UK+N3uPcGZgZ+efg1sEPnZA3lmMOLmnk/BuwXHzrNqI= Subject key identifier: 10:0F:BE:B0:EA:92:6E:9C:6C:35:02:3D:AD:86:EE:D1:4A:18:41:F9 Authority key identifier: 0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 Certificate issuer: /CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Certificate serial: 5A85D430948416CD7C225F12B2DB3361F793E65B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft Manifest number: 0100 Signing time: Wed 29 Jul 2026 17:34:51 +0000 Manifest this update: Wed 29 Jul 2026 17:29:51 +0000 Manifest next update: Thu 30 Jul 2026 20:30:51 +0000 Files and hashes: 1: 3230332e3230382e33322e302f31392d3234203d3e203234343234.roa (hash: N2nkDTssJapb5MQQw+tYmzqkzQ0KoXd8OohRafzcbkM=) 2: 323430313a333830303a3a2f33322d3438203d3e203234343234.roa (hash: 92kDeGUBf68EI8CdYM+85AShVPJsE8p6evpx0zxAuAg=) 3: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl (hash: agVCVZr5Rk3+Y62qyfu5t8QpS049vU3FzUmpW1Iyjo0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 20:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:85:d4:30:94:84:16:cd:7c:22:5f:12:b2:db:33:61:f7:93:e6:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Validity Not Before: Jul 29 17:29:51 2026 GMT Not After : Jul 30 20:30:51 2026 GMT Subject: CN=100FBEB0EA926E9C6C35023DAD86EED14A1841F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:b6:0f:bd:fd:90:4b:9c:80:95:8f:c4:74: 8f:ed:89:a9:ac:2f:0e:9e:75:7f:dc:93:52:66:b5: eb:68:74:f3:5d:d6:7a:9d:88:c4:dc:be:00:27:f6: 2f:4a:91:9b:c4:ca:5c:10:04:96:ea:cb:82:3b:e4: 9b:6b:d8:95:69:03:ac:27:28:88:89:3e:75:7e:08: c0:7e:55:40:d4:85:a6:1f:76:5d:01:e7:51:b0:bc: 4c:e5:dc:e6:4e:4b:64:09:ef:8f:3f:2e:6d:73:69: be:a9:aa:c6:ca:8c:38:19:b4:00:57:ae:9b:b3:a0: 37:9d:89:0f:d0:df:eb:e3:f6:36:14:55:08:40:4e: 87:e1:98:de:9e:c8:f8:77:6a:10:6a:00:3b:c4:6d: af:ea:4f:ab:51:0a:3b:e7:87:ba:18:bb:c5:f7:2e: 0c:09:66:28:d3:2f:7d:d3:4d:e1:4e:de:13:d3:21: 43:e1:52:3e:54:d1:2c:9c:6e:85:76:64:da:15:22: 43:cd:d4:8e:b5:2c:60:4e:d7:fe:84:38:a8:c3:40: c1:7d:76:4b:5c:81:ff:b9:9d:6a:84:76:8c:39:3f: 3b:40:2d:8e:77:6a:55:2e:ed:59:1d:4a:0b:33:95: d3:06:49:7e:af:a6:5e:10:55:96:2e:fa:01:c1:a3: c8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0F:BE:B0:EA:92:6E:9C:6C:35:02:3D:AD:86:EE:D1:4A:18:41:F9 X509v3 Authority Key Identifier: keyid:0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:86:c7:bb:9d:55:85:76:da:da:5f:14:7d:c4:f0:39:b9:02: 46:96:40:ca:e7:cd:2e:97:a3:a0:d3:6b:01:8d:b4:61:2e:bc: 15:98:f9:0d:cc:aa:56:cf:0e:9d:e8:79:50:96:35:21:ae:67: 98:c9:67:77:c0:c3:96:a0:02:d7:7b:b7:c0:92:e4:cd:b6:94: ef:d6:40:e4:60:d5:27:29:63:8d:3a:4b:19:d8:b1:d0:50:60: aa:fb:cd:eb:ab:25:be:24:99:4d:a9:70:73:cc:e0:76:2d:7d: 5b:2f:92:91:2b:e0:28:a9:71:66:22:66:5e:13:49:4f:d5:ae: d8:a6:b9:4d:c5:54:c4:8c:fe:2e:39:95:57:88:01:9e:cd:f0: eb:37:4e:db:16:4f:4d:ae:09:94:46:59:ef:c2:ba:c8:fb:00: d2:2f:2d:86:6e:96:21:db:83:6a:b0:11:84:df:b4:29:93:5e: 5c:01:81:18:ca:54:e3:1d:e0:da:77:96:be:58:75:a6:51:d8: 9b:76:4b:af:0a:67:05:c5:be:d1:80:46:5c:09:e2:14:f0:5f: 3b:ca:fe:8e:81:49:63:c5:9c:96:c9:4d:c4:14:79:39:45:45: cd:dc:4c:a0:3e:1f:bf:cc:9e:df:78:85:f7:64:19:c6:3d:75: 7e:ec:8b:cc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWoXUMJSEFs18Il8SstszYfeT5lswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNG RUU3OEM2MzAeFw0yNjA3MjkxNzI5NTFaFw0yNjA3MzAyMDMwNTFaMDMxMTAvBgNV BAMTKDEwMEZCRUIwRUE5MjZFOUM2QzM1MDIzREFEODZFRUQxNEExODQxRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0P7YPvf2QS5yAlY/EdI/tiams Lw6edX/ck1JmtetodPNd1nqdiMTcvgAn9i9KkZvEylwQBJbqy4I75Jtr2JVpA6wn KIiJPnV+CMB+VUDUhaYfdl0B51GwvEzl3OZOS2QJ748/Lm1zab6pqsbKjDgZtABX rpuzoDediQ/Q3+vj9jYUVQhATofhmN6eyPh3ahBqADvEba/qT6tRCjvnh7oYu8X3 LgwJZijTL33TTeFO3hPTIUPhUj5U0SycboV2ZNoVIkPN1I61LGBO1/6EOKjDQMF9 dktcgf+5nWqEdow5PztALY53alUu7VkdSgszldMGSX6vpl4QVZYu+gHBo8iJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEA++sOqSbpxsNQI9rYbu0UoYQfkwHwYDVR0j BBgwFoAUDbg7i0oB6iNlDYXaS7XbQ/7njGMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQwNjMzNy8wLzBEQjgzQjhCNEEwMUVBMjM2NTBEODVEQTRCQjVE QjQzRkVFNzhDNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNGRUU3OEM2My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0MDYzMzcvMC8wREI4M0I4QjRBMDFF QTIzNjUwRDg1REE0QkI1REI0M0ZFRTc4QzYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoIbHu51VhXba 2l8UfcTwObkCRpZAyufNLpejoNNrAY20YS68FZj5DcyqVs8Oneh5UJY1Ia5nmMln d8DDlqAC13u3wJLkzbaU79ZA5GDVJyljjTpLGdix0FBgqvvN66slviSZTalwc8zg di19Wy+SkSvgKKlxZiJmXhNJT9Wu2Ka5TcVUxIz+LjmVV4gBns3w6zdO2xZPTa4J lEZZ78K6yPsA0i8thm6WIduDarARhN+0KZNeXAGBGMpU4x3g2neWvlh1plHYm3ZL rwpnBcW+0YBGXAniFPBfO8r+joFJY8WclslNxBR5OUVFzdxMoD4fv8ye33iF92QZ xj11fuyLzA== -----END CERTIFICATE-----Generated at Wed Jul 29 23:00:51 2026 by rpki-client