$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft File: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft (raw, json) Hash identifier: mWhPCIBn2Ezsw/rKoEg4WyXkP6N2X3SCyNbBMAa+tig= Subject key identifier: 4A:86:CC:ED:54:47:84:5F:D1:D6:B5:F0:BA:A6:07:8E:DE:22:E3:8B Authority key identifier: 0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 Certificate issuer: /CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Certificate serial: 06306D375B7DCF9D6FB26AAD9C49282CCF2827E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft Manifest number: 013D Signing time: Mon 12 Oct 2026 11:21:55 +0000 Manifest this update: Mon 12 Oct 2026 11:16:55 +0000 Manifest next update: Thu 15 Oct 2026 12:10:55 +0000 Files and hashes: 1: 3230332e3230382e33322e302f31392d3234203d3e203234343234.roa (hash: N2nkDTssJapb5MQQw+tYmzqkzQ0KoXd8OohRafzcbkM=) 2: 323430313a333830303a3a2f33322d3438203d3e203234343234.roa (hash: 92kDeGUBf68EI8CdYM+85AShVPJsE8p6evpx0zxAuAg=) 3: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl (hash: mcSYJ2gLiyWDzf+1S2FRLKIU7W/6ZLsVkEB+1vATQs4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:30:6d:37:5b:7d:cf:9d:6f:b2:6a:ad:9c:49:28:2c:cf:28:27:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Validity Not Before: Oct 12 11:16:55 2026 GMT Not After : Oct 15 12:10:55 2026 GMT Subject: CN=4A86CCED5447845FD1D6B5F0BAA6078EDE22E38B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b1:6f:53:32:64:af:f1:3d:67:66:85:5f:f1: 64:86:a8:18:69:2f:f2:43:ae:57:56:1d:9d:f8:13: 87:d5:58:00:b9:1d:7f:9d:e8:6d:f5:09:43:d1:6e: 14:16:22:56:17:0d:44:5f:fd:95:38:4a:c8:11:1a: d9:e8:cd:1d:63:00:e7:9b:64:52:3a:09:8a:73:3d: 35:63:77:76:5c:f3:84:cc:40:13:5a:d5:16:04:84: ed:d3:05:42:40:30:fc:92:e1:8d:c6:6d:ea:f3:13: 21:09:48:6f:48:e6:16:27:91:a9:ad:e3:e4:20:2a: 2b:6b:9b:35:0a:fb:0a:49:9d:a8:b4:fb:89:a5:27: 0d:47:b6:04:79:be:6c:1d:be:98:58:f4:cb:26:65: 0e:fd:1c:91:67:03:a4:fa:5f:ab:06:58:15:c0:9c: 4d:6b:e6:c0:c0:7a:ec:d5:1c:e8:1b:b4:64:d6:e8: e2:96:bb:dd:9b:7e:a4:d0:e8:60:bb:b1:4a:fb:ad: 5a:99:8c:30:9b:a2:52:a3:8f:e8:00:fb:ec:06:70: 16:2f:1b:e7:69:ef:0d:c2:a0:65:66:a4:05:7b:8d: dd:0d:c3:ef:84:44:fc:94:13:87:3f:fa:e5:43:ad: db:11:29:7f:da:c1:c9:29:44:a5:08:5c:36:bd:84: d9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:86:CC:ED:54:47:84:5F:D1:D6:B5:F0:BA:A6:07:8E:DE:22:E3:8B X509v3 Authority Key Identifier: keyid:0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:66:2e:7a:59:90:de:d3:24:cd:d3:9c:b1:1a:d8:b8:2b:23: a1:8d:27:02:e8:5d:43:fa:4b:2f:8e:c2:70:db:ee:fc:92:3a: 02:6b:a5:e8:66:1e:ec:c1:50:9b:c8:39:df:e9:06:9f:a4:82: b5:86:5b:4c:cc:1e:74:52:05:e5:2b:f4:b3:4e:3e:53:83:70: 8f:d3:0b:0a:e6:09:de:ed:67:59:46:9f:17:46:2a:85:e8:a9: 07:07:5a:57:0b:9d:34:2b:86:2d:6c:d3:88:53:42:a7:e6:ce: bb:1e:c2:44:c5:c9:53:09:09:2e:e3:b5:16:88:b0:f3:47:0b: 8d:d8:08:72:97:f1:84:aa:b9:45:73:2c:01:e7:7e:ee:fd:68: ec:4a:dc:d1:88:20:92:14:9c:f1:96:17:55:93:1d:d4:2c:0a: 9d:56:12:ad:37:47:23:cc:89:64:a9:70:b7:42:3b:fc:b9:22: c4:f9:48:d7:9d:59:44:eb:50:49:a9:30:08:82:5b:ac:a0:6a: 8e:07:1f:0f:01:53:62:12:27:3a:1b:8c:3f:78:53:36:9c:1e: 26:e3:02:07:01:56:4e:92:1f:ae:e9:11:8a:c6:be:9a:cc:21: 3a:59:c7:74:68:e1:5c:b2:2d:1c:5c:42:8a:c6:b9:36:b0:78: 18:b4:9d:09 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBjBtN1t9z51vsmqtnEkoLM8oJ+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNG RUU3OEM2MzAeFw0yNjEwMTIxMTE2NTVaFw0yNjEwMTUxMjEwNTVaMDMxMTAvBgNV BAMTKDRBODZDQ0VENTQ0Nzg0NUZEMUQ2QjVGMEJBQTYwNzhFREUyMkUzOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2sW9TMmSv8T1nZoVf8WSGqBhp L/JDrldWHZ34E4fVWAC5HX+d6G31CUPRbhQWIlYXDURf/ZU4SsgRGtnozR1jAOeb ZFI6CYpzPTVjd3Zc84TMQBNa1RYEhO3TBUJAMPyS4Y3GberzEyEJSG9I5hYnkamt 4+QgKitrmzUK+wpJnai0+4mlJw1HtgR5vmwdvphY9MsmZQ79HJFnA6T6X6sGWBXA nE1r5sDAeuzVHOgbtGTW6OKWu92bfqTQ6GC7sUr7rVqZjDCbolKjj+gA++wGcBYv G+dp7w3CoGVmpAV7jd0Nw++ERPyUE4c/+uVDrdsRKX/awckpRKUIXDa9hNmfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSobM7VRHhF/R1rXwuqYHjt4i44swHwYDVR0j BBgwFoAUDbg7i0oB6iNlDYXaS7XbQ/7njGMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQwNjMzNy8wLzBEQjgzQjhCNEEwMUVBMjM2NTBEODVEQTRCQjVE QjQzRkVFNzhDNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNGRUU3OEM2My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0MDYzMzcvMC8wREI4M0I4QjRBMDFF QTIzNjUwRDg1REE0QkI1REI0M0ZFRTc4QzYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJmYuelmQ3tMk zdOcsRrYuCsjoY0nAuhdQ/pLL47CcNvu/JI6Amul6GYe7MFQm8g53+kGn6SCtYZb TMwedFIF5Sv0s04+U4Nwj9MLCuYJ3u1nWUafF0YqheipBwdaVwudNCuGLWzTiFNC p+bOux7CRMXJUwkJLuO1Foiw80cLjdgIcpfxhKq5RXMsAed+7v1o7Erc0YggkhSc 8ZYXVZMd1CwKnVYSrTdHI8yJZKlwt0I7/LkixPlI151ZROtQSakwCIJbrKBqjgcf DwFTYhInOhuMP3hTNpweJuMCBwFWTpIfrukRisa+mswhOlnHdGjhXLItHFxCisa5 NrB4GLSdCQ== -----END CERTIFICATE-----Generated at Tue Oct 13 02:27:41 2026 by rpki-client