$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft File: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft (raw, json) Hash identifier: PChN4+W1f//FOlkyi9fXL3vu/Te9bE5qvlQtX+iLYvo= Subject key identifier: 10:18:A3:5E:4C:D3:4E:14:E5:7F:E9:AC:5A:EA:B9:79:71:09:AC:0C Authority key identifier: 0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 Certificate issuer: /CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Certificate serial: 478933B78C7FEF461854D55BAF007F707610994F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 06:48:16 +0000 Manifest this update: Mon 02 Mar 2026 06:43:16 +0000 Manifest next update: Tue 03 Mar 2026 08:08:16 +0000 Files and hashes: 1: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl (hash: hym2PdnhJLp5V9N+nqdkVNV+goQr9WcxYi48xiv3YVo=) 2: 3230332e3230382e33322e302f31392d3234203d3e203234343234.roa (hash: N2nkDTssJapb5MQQw+tYmzqkzQ0KoXd8OohRafzcbkM=) 3: 323430313a333830303a3a2f33322d3438203d3e203234343234.roa (hash: 92kDeGUBf68EI8CdYM+85AShVPJsE8p6evpx0zxAuAg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:89:33:b7:8c:7f:ef:46:18:54:d5:5b:af:00:7f:70:76:10:99:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Validity Not Before: Mar 2 06:43:16 2026 GMT Not After : Mar 3 08:08:16 2026 GMT Subject: CN=1018A35E4CD34E14E57FE9AC5AEAB9797109AC0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a0:e4:f0:dc:e9:8a:38:e2:98:48:a4:c1:eb: 2c:ba:fb:30:bf:49:e7:55:17:1f:60:bc:88:ab:87: 09:25:b7:0f:8d:14:e6:0f:53:d1:be:9e:1f:5c:3a: cb:56:a8:b6:b7:d9:bb:a5:52:a2:44:c7:28:6d:7f: 93:c0:02:2e:3b:9d:5a:3e:b0:3c:c2:cc:4b:40:ac: 9d:de:d1:6c:ed:3d:83:6a:7d:c1:97:d8:5a:25:18: 0f:cf:8f:24:96:a2:d0:04:70:43:1b:6a:89:40:0a: e2:ea:7f:9c:0f:37:db:a6:cb:4c:e5:e0:a4:81:fa: 7c:e1:ee:57:e3:67:36:9e:9c:19:a4:44:28:19:5c: 89:4a:68:4c:34:23:f3:e3:a6:9e:f3:58:ed:26:9f: 6b:75:a7:ab:26:ec:d4:f6:a6:1d:64:0e:97:4d:ec: 7d:34:78:a4:54:73:06:e2:b2:fa:ce:0f:3a:83:92: 8e:fa:31:32:38:ca:31:e4:92:5f:84:e6:67:9f:2a: ec:4d:42:85:fa:c5:1a:66:af:97:89:b0:95:d4:41: 72:3f:e5:de:0a:a7:de:c4:cb:95:5f:f5:d5:b5:7b: 31:ad:97:f9:7f:6f:ce:b6:db:d5:de:72:a9:b4:bd: 42:8e:f5:f9:42:92:e9:1e:68:76:d5:58:ad:93:ea: 42:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:18:A3:5E:4C:D3:4E:14:E5:7F:E9:AC:5A:EA:B9:79:71:09:AC:0C X509v3 Authority Key Identifier: keyid:0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c4:90:50:96:5f:a9:fd:05:59:95:5d:c6:1d:db:d1:aa:e4: ec:61:3c:2a:d0:a3:6b:5b:ee:3f:f4:97:af:fc:e6:bd:8c:be: 05:03:0e:fb:7f:98:bd:f6:10:ce:d6:45:22:6e:cb:2a:68:d6: 50:ff:79:91:43:37:84:6a:8a:d1:50:68:8b:e9:1c:9f:27:50: 0f:b1:7b:67:36:6a:8b:03:0d:4a:25:cc:63:d2:d0:a6:1e:2b: 4a:14:0d:c3:24:ec:2b:a2:f9:4d:78:ac:9e:74:2e:3f:4a:20: 95:e1:46:bb:1e:81:92:68:a2:71:f8:4e:b5:3e:6f:bf:3a:77: 7e:d0:47:bd:45:ad:b3:b5:5c:84:9e:c9:6e:e8:62:2b:7a:1d: be:b2:bd:11:9c:fa:f5:a4:bb:34:12:28:51:1e:24:10:48:c9: 33:f1:00:4b:e0:9b:c5:51:f0:74:50:7f:21:5c:69:bd:d9:ef: fa:88:d0:9f:93:45:5f:6e:ca:70:54:2f:ad:33:99:7a:ca:39: ae:48:09:5f:31:67:a0:9e:9b:91:e3:b0:b3:d0:ed:46:93:8d: fc:91:8d:0c:48:bb:28:95:95:c7:9d:f2:a9:74:f5:5a:f0:91: 6d:91:df:10:dd:5d:0b:be:e9:1b:cd:d4:fb:5a:bd:09:b8:8f: 75:74:9a:0c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUR4kzt4x/70YYVNVbrwB/cHYQmU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNG RUU3OEM2MzAeFw0yNjAzMDIwNjQzMTZaFw0yNjAzMDMwODA4MTZaMDMxMTAvBgNV BAMTKDEwMThBMzVFNENEMzRFMTRFNTdGRTlBQzVBRUFCOTc5NzEwOUFDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyoOTw3OmKOOKYSKTB6yy6+zC/ SedVFx9gvIirhwkltw+NFOYPU9G+nh9cOstWqLa32bulUqJExyhtf5PAAi47nVo+ sDzCzEtArJ3e0WztPYNqfcGX2FolGA/PjySWotAEcEMbaolACuLqf5wPN9umy0zl 4KSB+nzh7lfjZzaenBmkRCgZXIlKaEw0I/Pjpp7zWO0mn2t1p6sm7NT2ph1kDpdN 7H00eKRUcwbisvrODzqDko76MTI4yjHkkl+E5mefKuxNQoX6xRpmr5eJsJXUQXI/ 5d4Kp97Ey5Vf9dW1ezGtl/l/b86229Xecqm0vUKO9flCkukeaHbVWK2T6kINAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEBijXkzTThTlf+msWuq5eXEJrAwwHwYDVR0j BBgwFoAUDbg7i0oB6iNlDYXaS7XbQ/7njGMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQwNjMzNy8wLzBEQjgzQjhCNEEwMUVBMjM2NTBEODVEQTRCQjVE QjQzRkVFNzhDNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNGRUU3OEM2My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0MDYzMzcvMC8wREI4M0I4QjRBMDFF QTIzNjUwRDg1REE0QkI1REI0M0ZFRTc4QzYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsSQUJZfqf0F WZVdxh3b0ark7GE8KtCja1vuP/SXr/zmvYy+BQMO+3+YvfYQztZFIm7LKmjWUP95 kUM3hGqK0VBoi+kcnydQD7F7ZzZqiwMNSiXMY9LQph4rShQNwyTsK6L5TXisnnQu P0ogleFGux6BkmiicfhOtT5vvzp3ftBHvUWts7VchJ7JbuhiK3odvrK9EZz69aS7 NBIoUR4kEEjJM/EAS+CbxVHwdFB/IVxpvdnv+ojQn5NFX27KcFQvrTOZeso5rkgJ XzFnoJ6bkeOws9DtRpON/JGNDEi7KJWVx53yqXT1WvCRbZHfEN1dC77pG83U+1q9 CbiPdXSaDA== -----END CERTIFICATE-----Generated at Mon Mar 2 18:03:24 2026 by rpki-client