$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft File: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft (raw, json) Hash identifier: 9buyV85fkgmPzwdwojx/yE3Qd+gSi2kSz0Qc6Z50gtc= Subject key identifier: 8D:66:9B:F6:18:D1:34:7C:20:6F:68:83:C4:AD:BC:DA:64:17:11:AE Authority key identifier: 0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 Certificate issuer: /CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Certificate serial: 6BE8BC42747B1D82690678AF691DFE94E2C0FA36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 12:33:28 +0000 Manifest this update: Thu 26 Mar 2026 12:28:28 +0000 Manifest next update: Fri 27 Mar 2026 15:35:28 +0000 Files and hashes: 1: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl (hash: 2AonL4nMbXxDaAAXTsiQ3AlJHK290nHuXVph+A4F2ZM=) 2: 3230332e3230382e33322e302f31392d3234203d3e203234343234.roa (hash: N2nkDTssJapb5MQQw+tYmzqkzQ0KoXd8OohRafzcbkM=) 3: 323430313a333830303a3a2f33322d3438203d3e203234343234.roa (hash: 92kDeGUBf68EI8CdYM+85AShVPJsE8p6evpx0zxAuAg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e8:bc:42:74:7b:1d:82:69:06:78:af:69:1d:fe:94:e2:c0:fa:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Validity Not Before: Mar 26 12:28:28 2026 GMT Not After : Mar 27 15:35:28 2026 GMT Subject: CN=8D669BF618D1347C206F6883C4ADBCDA641711AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c7:64:de:d8:04:f8:5d:35:99:d0:ad:b6:46: 0d:b8:2b:04:0a:5e:ff:c6:71:97:09:24:d6:7b:ea: f7:4d:c6:00:64:7e:20:cd:20:26:fd:b2:fc:46:78: 75:13:5c:98:31:13:ef:b8:ed:4b:71:4d:e3:20:9f: 37:71:c8:0d:71:45:63:7c:23:18:1c:cd:fb:03:18: ae:d0:bd:26:6c:a9:f6:00:d3:ae:4d:25:13:a5:19: 21:6d:9c:c8:d7:35:7d:40:c8:10:f1:c7:49:36:45: dc:41:60:cc:eb:73:f1:98:bf:94:ee:69:97:a5:19: b2:48:12:a9:bf:cc:1b:aa:14:80:53:f7:7a:cf:a0: 41:9d:df:ae:be:7e:36:49:3d:87:a0:be:f7:51:3d: 37:d2:62:b8:7b:f9:12:5e:8b:ae:35:6b:82:95:cc: a0:79:b4:fc:e9:49:3e:df:18:95:35:46:b0:76:a2: 05:8d:fb:ea:c9:14:58:9d:a6:fa:0b:3a:79:a5:21: 6e:67:82:90:ae:0f:3c:d8:fc:91:ad:7b:07:c3:ac: 88:23:70:86:98:11:84:06:51:0a:a0:ae:b8:c9:5b: 45:ef:f6:a7:2d:64:ce:4e:d6:64:12:08:cf:35:49: 7f:9c:fa:32:5a:fc:33:42:86:11:47:2a:aa:45:4e: 03:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:66:9B:F6:18:D1:34:7C:20:6F:68:83:C4:AD:BC:DA:64:17:11:AE X509v3 Authority Key Identifier: keyid:0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:51:a0:ec:e6:e7:e3:91:84:64:ea:c2:1d:cd:82:8d:e1:ae: 5d:2c:3d:3b:c5:4b:3b:3d:e6:89:78:bb:22:18:78:f7:8a:d7: 1d:c5:e2:b3:af:7d:4a:69:12:e1:a0:d3:87:84:9a:fa:21:a1: c3:0e:13:3d:8b:0c:a0:55:e0:69:f5:1c:d3:ba:2a:c5:32:d6: 1c:8a:36:fa:3b:f0:cc:24:3a:04:d3:58:03:d4:97:a2:13:48: f4:6e:fc:af:11:aa:21:40:9f:f7:0b:37:21:96:65:5b:9a:10: f4:db:d1:5e:cc:5c:e5:e6:8e:1e:7d:81:92:bb:19:92:58:01: bb:7c:f0:b3:15:a4:12:46:0f:95:ec:e5:d4:9e:b9:35:21:25: 1b:f5:c4:19:1f:44:1f:c0:51:2b:23:ae:6b:5b:5b:7c:22:e7: 66:a2:d3:fd:b4:3f:19:06:72:3e:5f:f5:f8:d5:b7:7f:2a:79: a1:53:0e:62:5d:9f:e8:c5:77:92:29:55:14:f0:88:8f:ae:33: 69:a6:63:b3:b3:bd:90:6e:be:56:54:8c:0e:30:68:d8:8c:b1: e9:3e:12:fd:29:e6:bc:62:ba:4b:94:0c:22:f8:4d:b6:a0:97: 3c:c0:da:59:c9:03:e1:ea:15:59:33:dd:b0:22:20:e2:01:b1: 60:a7:91:ec -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUa+i8QnR7HYJpBnivaR3+lOLA+jYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNG RUU3OEM2MzAeFw0yNjAzMjYxMjI4MjhaFw0yNjAzMjcxNTM1MjhaMDMxMTAvBgNV BAMTKDhENjY5QkY2MThEMTM0N0MyMDZGNjg4M0M0QURCQ0RBNjQxNzExQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEx2Te2AT4XTWZ0K22Rg24KwQK Xv/GcZcJJNZ76vdNxgBkfiDNICb9svxGeHUTXJgxE++47UtxTeMgnzdxyA1xRWN8 IxgczfsDGK7QvSZsqfYA065NJROlGSFtnMjXNX1AyBDxx0k2RdxBYMzrc/GYv5Tu aZelGbJIEqm/zBuqFIBT93rPoEGd366+fjZJPYegvvdRPTfSYrh7+RJei641a4KV zKB5tPzpST7fGJU1RrB2ogWN++rJFFidpvoLOnmlIW5ngpCuDzzY/JGtewfDrIgj cIaYEYQGUQqgrrjJW0Xv9qctZM5O1mQSCM81SX+c+jJa/DNChhFHKqpFTgMDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjWab9hjRNHwgb2iDxK282mQXEa4wHwYDVR0j BBgwFoAUDbg7i0oB6iNlDYXaS7XbQ/7njGMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQwNjMzNy8wLzBEQjgzQjhCNEEwMUVBMjM2NTBEODVEQTRCQjVE QjQzRkVFNzhDNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNGRUU3OEM2My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0MDYzMzcvMC8wREI4M0I4QjRBMDFF QTIzNjUwRDg1REE0QkI1REI0M0ZFRTc4QzYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFGg7Obn45GE ZOrCHc2CjeGuXSw9O8VLOz3miXi7Ihh494rXHcXis699SmkS4aDTh4Sa+iGhww4T PYsMoFXgafUc07oqxTLWHIo2+jvwzCQ6BNNYA9SXohNI9G78rxGqIUCf9ws3IZZl W5oQ9NvRXsxc5eaOHn2BkrsZklgBu3zwsxWkEkYPlezl1J65NSElG/XEGR9EH8BR KyOua1tbfCLnZqLT/bQ/GQZyPl/1+NW3fyp5oVMOYl2f6MV3kilVFPCIj64zaaZj s7O9kG6+VlSMDjBo2Iyx6T4S/SnmvGK6S5QMIvhNtqCXPMDaWckD4eoVWTPdsCIg 4gGxYKeR7A== -----END CERTIFICATE-----Generated at Thu Mar 26 19:14:57 2026 by rpki-client