$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft File: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft (raw, json) Hash identifier: fKnPlCruebqYdBRsHHG5CHeqGxMm6ejVEjJraHq+aw0= Subject key identifier: B4:38:A1:4F:1B:36:44:AA:70:F3:F2:92:15:C3:75:19:4D:7B:6E:4E Authority key identifier: 0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 Certificate issuer: /CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Certificate serial: 53A437626A4680854B6BF6E0C7E20742BB0B4B56 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft Manifest number: F9 Signing time: Fri 24 Jul 2026 09:25:54 +0000 Manifest this update: Fri 24 Jul 2026 09:20:54 +0000 Manifest next update: Sat 25 Jul 2026 12:08:54 +0000 Files and hashes: 1: 3230332e3230382e33322e302f31392d3234203d3e203234343234.roa (hash: N2nkDTssJapb5MQQw+tYmzqkzQ0KoXd8OohRafzcbkM=) 2: 323430313a333830303a3a2f33322d3438203d3e203234343234.roa (hash: 92kDeGUBf68EI8CdYM+85AShVPJsE8p6evpx0zxAuAg=) 3: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl (hash: 07WsOzwOeRL175ModLTLRfvMtmtTpBRzezEHdGzq/no=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a4:37:62:6a:46:80:85:4b:6b:f6:e0:c7:e2:07:42:bb:0b:4b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Validity Not Before: Jul 24 09:20:54 2026 GMT Not After : Jul 25 12:08:54 2026 GMT Subject: CN=B438A14F1B3644AA70F3F29215C375194D7B6E4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:0a:da:0a:52:a3:d9:74:bc:ec:78:24:6b: a7:2a:95:3b:11:e3:7a:95:d9:77:14:3e:bd:f2:6a: c3:d5:c3:ae:98:b6:c4:78:56:d0:5b:87:57:11:e0: fb:54:c3:be:13:f7:ec:95:95:28:69:10:f4:5d:97: 7b:ba:79:26:c0:e9:83:77:02:96:f1:22:b9:06:88: 11:9c:87:03:b7:da:10:48:93:74:0c:52:8a:71:f9: 99:af:18:34:ba:9d:de:81:f6:03:d3:c8:40:27:4f: 35:16:aa:f9:25:a4:39:cf:b3:aa:8d:c3:5d:6c:ae: d3:ad:59:40:53:63:8d:02:18:9c:85:8f:6e:b5:3d: 31:48:04:c0:0e:e0:77:db:4c:ee:c6:03:fb:19:31: 7b:d9:d4:93:76:84:f7:98:e4:34:c8:d2:ce:d7:3c: 77:d5:e3:24:39:51:46:1b:22:3d:67:46:a3:bc:c6: ba:96:6c:a8:cd:ab:4d:e5:76:1f:07:a4:88:13:49: ec:a6:b4:71:1e:0d:63:eb:54:e5:8c:94:60:55:6a: a7:69:1a:bc:11:58:f4:62:71:9c:d1:8f:12:2f:db: 9d:39:87:dd:8b:6e:09:b4:ee:df:d8:8e:f4:a6:b6: f9:f1:67:2d:f6:fd:a9:88:88:d3:ae:5b:7c:27:8d: 24:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:38:A1:4F:1B:36:44:AA:70:F3:F2:92:15:C3:75:19:4D:7B:6E:4E X509v3 Authority Key Identifier: keyid:0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d7:fe:b9:20:58:8e:1e:0e:f0:7b:a1:fa:ee:3c:cc:b2:41: 58:ba:5e:ea:84:54:5c:c0:fb:48:22:67:c0:fd:ae:5a:89:5b: 02:9c:08:d5:53:27:91:81:5f:7b:16:eb:89:0b:a4:84:c6:c7: e3:59:2e:7d:93:0a:dd:ff:ff:9f:dd:35:5b:ce:87:23:a0:5d: f9:92:51:90:84:8d:f8:11:aa:d5:32:9c:ce:98:ed:62:a9:c5: 28:33:26:5e:54:32:aa:a5:b2:1a:b7:d5:58:87:78:47:31:b0: e6:0e:25:59:c0:63:9a:8e:8d:3a:a1:ab:82:93:d8:96:79:b8: 23:7d:9c:47:0c:06:98:16:d5:8d:7b:c6:8a:7b:41:4a:6d:0b: 1b:b3:81:4f:8f:1a:b7:b1:86:f1:1f:de:b1:ff:76:7b:59:02: 85:02:08:d2:15:18:30:16:e8:d5:9f:20:84:71:b6:9e:e9:74: c8:a2:55:3e:2e:69:50:7d:cd:b6:1a:a1:51:01:48:d8:7b:f5: 9d:c1:a5:5a:98:74:0a:5b:c1:9c:38:e1:c5:a1:00:5d:33:b2: 10:f3:c3:96:ae:bc:bc:74:a7:a5:43:1b:1d:b2:4c:4f:d6:e6: b5:03:e5:75:1f:77:84:e6:b1:1e:04:98:ba:e2:63:19:78:28: 1b:d8:a4:54 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUU6Q3YmpGgIVLa/bgx+IHQrsLS1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNG RUU3OEM2MzAeFw0yNjA3MjQwOTIwNTRaFw0yNjA3MjUxMjA4NTRaMDMxMTAvBgNV BAMTKEI0MzhBMTRGMUIzNjQ0QUE3MEYzRjI5MjE1QzM3NTE5NEQ3QjZFNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bAraClKj2XS87Hgka6cqlTsR 43qV2XcUPr3yasPVw66YtsR4VtBbh1cR4PtUw74T9+yVlShpEPRdl3u6eSbA6YN3 ApbxIrkGiBGchwO32hBIk3QMUopx+ZmvGDS6nd6B9gPTyEAnTzUWqvklpDnPs6qN w11srtOtWUBTY40CGJyFj261PTFIBMAO4HfbTO7GA/sZMXvZ1JN2hPeY5DTI0s7X PHfV4yQ5UUYbIj1nRqO8xrqWbKjNq03ldh8HpIgTSeymtHEeDWPrVOWMlGBVaqdp GrwRWPRicZzRjxIv2505h92Lbgm07t/YjvSmtvnxZy32/amIiNOuW3wnjSQhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtDihTxs2RKpw8/KSFcN1GU17bk4wHwYDVR0j BBgwFoAUDbg7i0oB6iNlDYXaS7XbQ/7njGMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQwNjMzNy8wLzBEQjgzQjhCNEEwMUVBMjM2NTBEODVEQTRCQjVE QjQzRkVFNzhDNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNGRUU3OEM2My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0MDYzMzcvMC8wREI4M0I4QjRBMDFF QTIzNjUwRDg1REE0QkI1REI0M0ZFRTc4QzYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNf+uSBYjh4O 8Huh+u48zLJBWLpe6oRUXMD7SCJnwP2uWolbApwI1VMnkYFfexbriQukhMbH41ku fZMK3f//n901W86HI6Bd+ZJRkISN+BGq1TKczpjtYqnFKDMmXlQyqqWyGrfVWId4 RzGw5g4lWcBjmo6NOqGrgpPYlnm4I32cRwwGmBbVjXvGintBSm0LG7OBT48at7GG 8R/esf92e1kChQII0hUYMBbo1Z8ghHG2nul0yKJVPi5pUH3NthqhUQFI2Hv1ncGl Wph0ClvBnDjhxaEAXTOyEPPDlq68vHSnpUMbHbJMT9bmtQPldR93hOaxHgSYuuJj GXgoG9ikVA== -----END CERTIFICATE-----Generated at Fri Jul 24 12:40:13 2026 by rpki-client