
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
File: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft (raw, json)
Hash identifier: LSzxhnnnkk75azLfcFr6ElpCHpYOoaKXLHfJdXEn4uA=
Subject key identifier: CC:D6:18:F1:2B:71:50:C9:CC:51:BC:51:E8:A6:A9:F2:93:78:92:76
Authority key identifier: 0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63
Certificate issuer: /CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63
Certificate serial: 70390BA03E93C5CEFA93A66330453C2BE3162B7C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
Manifest number: 99
Signing time: Wed 13 May 2026 04:05:55 +0000
Manifest this update: Wed 13 May 2026 04:00:55 +0000
Manifest next update: Thu 14 May 2026 04:16:55 +0000
Files and hashes: 1: 323430313a333830303a3a2f33322d3438203d3e203234343234.roa (hash: 92kDeGUBf68EI8CdYM+85AShVPJsE8p6evpx0zxAuAg=)
2: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl (hash: 5Yka3Elv/SIZQpWLNqwJ/Q7XzMgiSpLQdMvuTehKAqw=)
3: 3230332e3230382e33322e302f31392d3234203d3e203234343234.roa (hash: N2nkDTssJapb5MQQw+tYmzqkzQ0KoXd8OohRafzcbkM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:39:0b:a0:3e:93:c5:ce:fa:93:a6:63:30:45:3c:2b:e3:16:2b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63
Validity
Not Before: May 13 04:00:55 2026 GMT
Not After : May 14 04:16:55 2026 GMT
Subject: CN=CCD618F12B7150C9CC51BC51E8A6A9F293789276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:b3:a6:7f:fe:be:a3:20:76:6b:ad:63:eb:
3e:64:94:8a:c1:8f:a2:13:fe:6b:d6:58:e0:d2:1b:
9d:fa:49:47:76:fe:69:ce:04:97:3d:01:1d:88:ad:
58:70:77:69:16:0c:6f:b8:34:6e:ad:89:75:1b:9b:
c9:d9:3c:77:0e:f5:81:a8:d3:a0:81:dc:e8:f7:69:
5a:5f:44:a7:a1:57:60:df:3f:ce:61:f8:ff:8f:81:
33:d1:3a:de:34:65:8b:f1:02:0f:1d:8c:6d:ba:9d:
86:80:dc:61:62:e0:97:d4:18:c0:41:9e:45:8d:b4:
2f:86:a8:f3:8b:a2:f6:5f:24:ea:12:a6:75:8f:fb:
74:74:a4:8d:ed:54:15:d9:ed:7e:94:8b:5d:aa:bb:
b8:a5:c2:88:1a:25:e2:5a:5b:80:30:23:d0:ac:0a:
d9:8a:7c:ba:83:1a:fb:22:cf:f3:96:e6:51:36:40:
f0:f5:d4:be:88:9a:8b:f1:c5:d7:00:59:47:e9:cb:
3c:4b:18:90:37:e1:af:7e:0c:a6:13:be:7d:2e:76:
0d:2c:bf:b1:0f:f4:dc:d3:72:f5:39:0f:32:91:1d:
d3:6a:d0:a7:a6:db:f6:74:4a:c9:3a:8a:12:45:97:
6b:3d:f9:dc:90:43:a5:d5:3f:04:22:9d:fc:a8:08:
d2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D6:18:F1:2B:71:50:C9:CC:51:BC:51:E8:A6:A9:F2:93:78:92:76
X509v3 Authority Key Identifier:
keyid:0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5c:b8:f0:29:fc:71:7b:31:b0:d9:90:29:16:50:df:7a:6a:
76:34:44:c3:09:39:68:99:f7:29:f2:f1:11:ae:06:a0:87:df:
1b:05:d7:b2:10:aa:5a:1d:b5:63:44:6b:2e:01:8a:fa:3a:a9:
42:18:11:61:a6:d6:aa:e4:93:7e:48:0f:67:dc:f5:72:fe:ee:
eb:7f:89:55:fa:65:b6:62:0b:4b:d6:ce:45:0b:db:36:af:56:
8d:9d:4e:31:d8:64:d8:3a:62:db:16:3e:3a:5a:77:44:80:b3:
98:c5:02:e1:33:40:cc:7e:1c:9a:be:8b:a9:e7:40:6e:7d:d1:
5c:3e:b7:93:30:98:64:26:08:1b:7b:49:51:ac:58:7d:0e:f4:
6f:8b:81:80:e8:2f:d8:1d:1d:7d:85:01:41:c6:06:4c:53:4b:
ac:49:c9:d2:33:d3:2b:55:71:12:6c:9a:46:03:67:4b:46:1b:
e3:2f:90:11:a3:8e:91:1b:43:c8:53:39:d1:7b:9d:bb:93:58:
2d:14:a2:d5:d0:dd:ca:b6:47:fa:34:f4:c3:23:a0:1d:81:5f:
7d:e6:90:d5:b7:41:4c:83:77:be:57:f0:8c:7f:0f:20:48:71:
80:c7:86:0c:ec:ce:fb:6a:07:b6:cb:22:61:69:21:31:44:ff:
a3:d3:77:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:24 2026 by rpki-client