$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft File: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft (raw, json) Hash identifier: 4hKkOc/tLNftIG753yY5M0t2I8xJzBxHrVMoexN0rsI= Subject key identifier: 81:04:FF:1A:07:87:7A:CF:A0:5E:C7:1E:F0:8A:F4:37:F6:A2:96:70 Authority key identifier: 0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 Certificate issuer: /CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Certificate serial: 0116EB5AE5A819CE8EE00398FC13712736D9E823 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft Manifest number: 0137 Signing time: Mon 28 Sep 2026 23:46:46 +0000 Manifest this update: Mon 28 Sep 2026 23:41:46 +0000 Manifest next update: Fri 02 Oct 2026 05:47:46 +0000 Files and hashes: 1: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl (hash: kOoOvP0dnKeoR92Pl49e5x+UGrtrOgkhuWmNE1pMXvo=) 2: 323430313a333830303a3a2f33322d3438203d3e203234343234.roa (hash: 92kDeGUBf68EI8CdYM+85AShVPJsE8p6evpx0zxAuAg=) 3: 3230332e3230382e33322e302f31392d3234203d3e203234343234.roa (hash: N2nkDTssJapb5MQQw+tYmzqkzQ0KoXd8OohRafzcbkM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:16:eb:5a:e5:a8:19:ce:8e:e0:03:98:fc:13:71:27:36:d9:e8:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Validity Not Before: Sep 28 23:41:46 2026 GMT Not After : Oct 2 05:47:46 2026 GMT Subject: CN=8104FF1A07877ACFA05EC71EF08AF437F6A29670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5e:01:38:b7:ff:99:2a:06:be:a1:35:92:8e: 0e:d5:9d:94:e1:86:cc:68:30:3e:c5:76:00:f1:86: 5d:c2:64:49:ea:e2:25:eb:32:da:d4:33:45:48:a7: 01:bb:62:57:b8:56:a9:7a:b8:45:69:4b:b7:b2:07: fb:47:d8:04:56:fe:08:c7:49:f0:61:19:e8:f2:31: 1f:cd:21:6d:20:2a:f6:c4:2e:23:50:75:47:7d:6c: 38:73:1d:87:21:f1:cb:c1:ea:eb:27:dc:b7:35:a8: 04:84:ec:e4:55:13:97:74:ba:55:d2:bf:77:f6:0c: 5b:35:1a:88:9f:c8:0d:d0:f4:28:01:ac:40:52:1a: 6b:93:e8:cd:9a:ba:70:26:b7:85:96:08:08:ea:3d: 85:6f:e3:a5:31:d8:19:f8:75:ba:41:f7:bc:fe:5c: 79:b9:be:78:f5:4a:fd:6f:fa:4d:08:99:5d:54:f8: ce:e9:eb:1b:53:20:88:eb:23:a5:c3:b9:74:8e:73: 58:7e:5f:7c:eb:65:cd:f2:48:6c:4b:16:0b:41:27: a2:fb:ec:b8:ea:ba:0b:de:32:10:a8:83:1d:75:ff: 3f:0c:b3:b6:4a:b8:be:83:4f:0b:b4:dc:94:ea:6e: c3:90:31:cd:be:d9:65:0a:e4:9d:8f:f4:ff:c4:5e: 25:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:04:FF:1A:07:87:7A:CF:A0:5E:C7:1E:F0:8A:F4:37:F6:A2:96:70 X509v3 Authority Key Identifier: keyid:0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d8:6c:ed:b5:86:8f:5a:38:fb:f9:ff:66:0b:32:b2:12:a2: 26:47:2d:86:c6:37:77:59:24:05:ca:26:97:44:ac:b9:22:ce: e4:75:29:3d:67:d5:ce:2a:4e:8d:97:31:8c:3f:1b:7d:5b:2d: 03:c2:7d:55:7b:63:2e:4e:09:58:12:87:a7:7f:c7:e9:4a:17: 37:ba:ac:fd:6b:75:be:4a:dd:41:ae:7a:e6:84:d2:d5:02:ef: c3:22:6e:d1:46:df:bd:92:56:83:ff:fb:3c:a4:a2:06:e9:29: a3:6a:8d:0f:9f:4b:e9:2f:41:eb:69:1a:8b:62:e2:01:41:cb: 1a:76:92:5d:54:d6:eb:96:4d:0b:ee:6e:b0:1e:b5:a2:aa:98: 89:8b:76:2a:2e:ac:19:39:ce:c5:43:04:44:3f:79:f2:a0:53: 15:e8:99:49:68:67:61:06:0c:1d:9f:ca:26:de:81:06:16:2e: 09:34:48:1b:fd:a6:82:46:4e:e7:fc:ca:2f:e5:fb:33:c6:88: 5e:d5:a8:84:b5:ab:be:37:9f:51:d3:e3:67:bc:6e:d6:48:b0: 21:03:f8:39:4c:f7:dc:c9:a1:7b:a6:90:d2:6e:97:ed:a7:e7: 69:ad:f6:dc:ed:bf:d5:55:dd:90:00:66:8e:53:68:25:b7:8d: e6:e3:7d:1d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUARbrWuWoGc6O4AOY/BNxJzbZ6CMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNG RUU3OEM2MzAeFw0yNjA5MjgyMzQxNDZaFw0yNjEwMDIwNTQ3NDZaMDMxMTAvBgNV BAMTKDgxMDRGRjFBMDc4NzdBQ0ZBMDVFQzcxRUYwOEFGNDM3RjZBMjk2NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlXgE4t/+ZKga+oTWSjg7VnZTh hsxoMD7FdgDxhl3CZEnq4iXrMtrUM0VIpwG7Yle4Vql6uEVpS7eyB/tH2ARW/gjH SfBhGejyMR/NIW0gKvbELiNQdUd9bDhzHYch8cvB6usn3Lc1qASE7ORVE5d0ulXS v3f2DFs1GoifyA3Q9CgBrEBSGmuT6M2aunAmt4WWCAjqPYVv46Ux2Bn4dbpB97z+ XHm5vnj1Sv1v+k0ImV1U+M7p6xtTIIjrI6XDuXSOc1h+X3zrZc3ySGxLFgtBJ6L7 7LjqugveMhCogx11/z8Ms7ZKuL6DTwu03JTqbsOQMc2+2WUK5J2P9P/EXiWrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgQT/GgeHes+gXsce8Ir0N/ailnAwHwYDVR0j BBgwFoAUDbg7i0oB6iNlDYXaS7XbQ/7njGMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQwNjMzNy8wLzBEQjgzQjhCNEEwMUVBMjM2NTBEODVEQTRCQjVE QjQzRkVFNzhDNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNGRUU3OEM2My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0MDYzMzcvMC8wREI4M0I4QjRBMDFF QTIzNjUwRDg1REE0QkI1REI0M0ZFRTc4QzYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9hs7bWGj1o4 +/n/ZgsyshKiJkcthsY3d1kkBcoml0SsuSLO5HUpPWfVzipOjZcxjD8bfVstA8J9 VXtjLk4JWBKHp3/H6UoXN7qs/Wt1vkrdQa565oTS1QLvwyJu0UbfvZJWg//7PKSi Bukpo2qND59L6S9B62kai2LiAUHLGnaSXVTW65ZNC+5usB61oqqYiYt2Ki6sGTnO xUMERD958qBTFeiZSWhnYQYMHZ/KJt6BBhYuCTRIG/2mgkZO5/zKL+X7M8aIXtWo hLWrvjefUdPjZ7xu1kiwIQP4OUz33Mmhe6aQ0m6X7afnaa323O2/1VXdkABmjlNo JbeN5uN9HQ== -----END CERTIFICATE-----Generated at Tue Sep 29 13:17:17 2026 by rpki-client