
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft
File: 0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft (raw, json)
Hash identifier: /40iPcpGvFSDO3kzkkvo/4B+YVhFD6Pdnb1TZ5r+AAg=
Subject key identifier: 86:69:D2:DC:E9:4A:FE:68:10:4A:0C:1D:D4:B5:CA:8A:91:91:E7:F6
Authority key identifier: 0D:AB:49:AD:13:77:D4:66:D1:D5:1E:FE:CA:F3:B2:2A:D7:D4:CF:CC
Certificate issuer: /CN=0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC
Certificate serial: 0C7BD3936D3C8A470C55F289D61574F5EBC744DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft
Manifest number: 0E
Signing time: Sat 13 Jun 2026 21:12:14 +0000
Manifest this update: Sat 13 Jun 2026 21:07:14 +0000
Manifest next update: Sun 14 Jun 2026 21:50:14 +0000
Files and hashes: 1: 3130332e31322e39382e302f32342d3234203d3e20313436383032.roa (hash: uHCaaw9s8g63NiSSnL9QPEn47SUgnpGsYsdUuRJOHSk=)
2: 0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl (hash: JoLLUbnw9uZGIhua4aXuuxaJYgZDseLkbY2e8wKP/Xo=)
3: 3130332e31322e39392e302f32342d3234203d3e20313436383032.roa (hash: tbUTFYMvu1gUlC2oFmjSZqAYOrU9u+JdPDJBttAzV/o=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl
rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:7b:d3:93:6d:3c:8a:47:0c:55:f2:89:d6:15:74:f5:eb:c7:44:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC
Validity
Not Before: Jun 13 21:07:14 2026 GMT
Not After : Jun 14 21:50:14 2026 GMT
Subject: CN=8669D2DCE94AFE68104A0C1DD4B5CA8A9191E7F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:fb:b8:4a:dd:dc:f3:f9:2d:9b:2c:7a:d5:
eb:8d:69:ff:c8:7f:cb:1c:25:3f:c5:24:a1:69:df:
37:9a:e3:03:0d:ef:29:32:5b:10:af:fd:80:b2:06:
61:60:1b:4e:13:89:ce:52:df:6e:7e:8e:61:54:cb:
2f:d3:51:10:b2:62:d9:24:9d:75:4c:1c:42:20:ec:
46:36:f2:f5:c6:3d:9f:8e:20:de:d3:88:65:4b:d3:
a0:4a:fb:d1:97:a7:3b:35:1f:88:f2:ea:fb:ab:25:
e6:d2:70:49:9f:60:38:2c:f6:3f:4e:5d:7d:94:9a:
66:13:81:d5:f2:78:87:f4:48:77:3d:46:ca:1e:d0:
82:d1:d3:c8:04:1a:b2:e4:9c:12:62:fb:52:6c:70:
0d:e1:ad:d4:b9:1d:cd:5a:2a:35:51:23:2c:12:7f:
2d:f9:e4:0d:88:4c:83:4d:a6:1d:07:ea:2c:b8:51:
78:48:35:1e:bb:f6:94:5a:a4:7a:f2:18:46:03:91:
1b:1f:f7:52:78:33:3b:66:31:47:36:3f:4b:e7:25:
22:27:b7:07:b0:4c:f7:ea:b0:73:ce:03:90:c4:a7:
33:fd:1c:4e:1c:02:c8:0d:30:19:8c:09:76:24:da:
8b:00:14:3c:16:d2:5d:6d:a2:bd:95:2e:ad:1d:dc:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:69:D2:DC:E9:4A:FE:68:10:4A:0C:1D:D4:B5:CA:8A:91:91:E7:F6
X509v3 Authority Key Identifier:
keyid:0D:AB:49:AD:13:77:D4:66:D1:D5:1E:FE:CA:F3:B2:2A:D7:D4:CF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:42:01:ff:82:d4:78:36:77:67:93:b6:d9:54:0c:76:0a:81:
19:66:b4:7f:d0:08:7d:67:ed:8d:6a:f3:28:72:f7:5a:53:7a:
00:68:04:15:c9:10:b5:1e:3d:2d:2c:50:76:d6:a0:2a:60:a5:
58:2b:13:72:27:64:b3:74:58:d2:22:c1:e4:b6:f7:e2:94:f6:
30:bd:70:a4:d4:1c:09:f8:66:f6:f4:8c:d9:a4:dd:2f:0f:8c:
0f:a3:28:bf:ff:1e:a2:11:6c:5b:79:7f:47:73:99:65:6d:51:
79:9f:df:86:76:95:73:3a:14:2a:0d:97:14:87:53:1a:9a:0f:
ba:93:62:6f:c6:28:24:28:f9:e7:c9:39:f1:93:1e:aa:94:e3:
c5:1e:b2:3e:28:c7:ee:8c:ea:95:e8:e3:a9:f7:be:77:81:18:
96:74:cd:64:54:87:80:8b:9e:a5:2b:d6:f6:93:d4:71:8d:58:
6d:ba:91:1d:dc:38:4f:cf:58:96:4c:48:6c:82:08:77:73:5c:
2c:89:32:b0:6a:af:e2:d0:84:62:0c:63:0e:7c:8c:2d:82:17:
4c:d9:01:ac:06:86:2c:4f:af:a9:6e:96:29:e3:c7:ec:a4:94:
96:86:06:11:c0:e6:79:ee:53:6e:26:9b:8e:31:17:5c:e5:02:
1c:f1:cc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:10 2026 by rpki-client