
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
File: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft (raw, json)
Hash identifier: 9I5d/6HK9XZA3JwWA2j3NyC1y+jP0ZGFQR+5sksPOKw=
Subject key identifier: BF:73:B9:68:12:3C:56:C1:E3:E3:21:48:3B:1A:6E:99:01:DA:10:ED
Authority key identifier: 0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63
Certificate issuer: /CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63
Certificate serial: 18413951068DA4BD0FAF31CDA801C6679C0370EB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
Manifest number: 2F
Signing time: Sun 22 Feb 2026 14:12:30 +0000
Manifest this update: Sun 22 Feb 2026 14:07:30 +0000
Manifest next update: Mon 23 Feb 2026 17:32:30 +0000
Files and hashes: 1: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl (hash: /irtBfnI5MYOGsijeIecbNT0CsVGVDNWZGfzgFsaONw=)
2: 323430313a333830303a3a2f33322d3438203d3e203234343234.roa (hash: 92kDeGUBf68EI8CdYM+85AShVPJsE8p6evpx0zxAuAg=)
3: 3230332e3230382e33322e302f31392d3234203d3e203234343234.roa (hash: N2nkDTssJapb5MQQw+tYmzqkzQ0KoXd8OohRafzcbkM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:41:39:51:06:8d:a4:bd:0f:af:31:cd:a8:01:c6:67:9c:03:70:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63
Validity
Not Before: Feb 22 14:07:30 2026 GMT
Not After : Feb 23 17:32:30 2026 GMT
Subject: CN=BF73B968123C56C1E3E321483B1A6E9901DA10ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:96:f5:ff:d7:83:4e:06:c7:d7:d7:13:28:eb:
9e:87:f5:c5:95:da:b2:66:6b:6c:60:e5:9a:21:95:
6b:f6:01:a6:55:aa:49:e0:59:ea:62:da:9f:a7:61:
2c:3f:b1:1f:8f:3d:e7:6a:4f:4b:fe:ec:ee:bd:b0:
6e:10:dc:f4:0c:b3:4a:01:2d:d5:bc:70:f0:b4:56:
8c:6c:a4:a5:33:8b:0c:ed:a6:bb:9d:af:43:66:4f:
dc:a2:aa:ec:d7:55:57:e1:a8:8c:fe:2a:3f:52:81:
7f:16:f8:a2:81:18:81:f0:03:3b:77:db:c3:fe:7a:
13:5a:d8:33:17:60:f7:5b:c1:10:0a:0e:fe:b1:4d:
fb:82:05:5f:68:c8:1f:be:cb:ed:8a:6c:c2:9f:d5:
61:fc:8b:69:d4:7a:ed:30:8c:40:ee:c6:0e:b0:60:
b1:bb:31:34:dc:39:e2:51:61:0c:fa:55:b9:8c:32:
d2:39:52:46:b1:c2:29:28:4f:15:a6:57:57:ce:d8:
3e:83:59:88:8f:8b:8d:6b:04:5c:7e:e1:12:ac:f6:
79:06:fd:19:14:b5:f9:85:0a:fa:a3:05:73:62:5a:
1f:21:71:dc:df:36:4b:81:ac:d0:ed:0f:82:93:02:
c2:7c:a9:76:e7:af:04:f5:72:c3:78:62:d8:90:b8:
15:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:73:B9:68:12:3C:56:C1:E3:E3:21:48:3B:1A:6E:99:01:DA:10:ED
X509v3 Authority Key Identifier:
keyid:0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c9:b1:98:d4:59:d0:32:45:ae:df:ba:94:d7:80:74:7d:60:
70:93:56:d5:40:32:e2:b9:e1:5a:fc:95:2c:ff:91:fa:52:27:
5f:58:fc:93:19:e1:13:a4:d3:45:87:b4:41:a9:6d:65:48:08:
bf:64:f5:aa:dd:68:52:da:f5:9f:f3:50:87:37:09:fe:ec:b2:
7d:f4:1c:99:a1:9c:18:b7:90:2b:2a:f1:14:7b:65:a9:54:07:
b6:11:fa:f9:af:5f:c2:a8:0f:f1:03:71:1d:7b:00:8c:cd:60:
81:c2:bf:03:26:af:f6:2c:a0:74:a9:78:bb:f7:84:40:be:21:
23:fd:a1:11:a2:5b:a4:f1:04:36:ad:b6:28:29:7e:a7:d6:66:
0f:d2:9f:73:fd:53:99:ef:c1:f0:b5:d2:93:8b:63:d6:b2:10:
81:67:58:50:e8:c2:b5:c8:6c:6f:9e:f2:e1:1c:00:30:fa:f5:
f3:d0:fe:e6:93:6c:5b:71:3b:d9:34:f1:fa:3a:53:cb:e7:6d:
a0:53:a1:e2:67:4a:70:12:71:6f:70:41:64:8d:7b:a1:c2:8d:
b0:5b:39:b8:ba:55:08:88:f8:e8:28:ef:18:bd:dd:af:db:1d:
ad:28:91:18:2c:0c:53:35:1c:cd:bd:1b:92:a7:59:21:fb:60:
22:84:14:72
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUGEE5UQaNpL0PrzHNqAHGZ5wDcOswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNG
RUU3OEM2MzAeFw0yNjAyMjIxNDA3MzBaFw0yNjAyMjMxNzMyMzBaMDMxMTAvBgNV
BAMTKEJGNzNCOTY4MTIzQzU2QzFFM0UzMjE0ODNCMUE2RTk5MDFEQTEwRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCclvX/14NOBsfX1xMo656H9cWV
2rJma2xg5ZohlWv2AaZVqkngWepi2p+nYSw/sR+PPedqT0v+7O69sG4Q3PQMs0oB
LdW8cPC0VoxspKUziwztprudr0NmT9yiquzXVVfhqIz+Kj9SgX8W+KKBGIHwAzt3
28P+ehNa2DMXYPdbwRAKDv6xTfuCBV9oyB++y+2KbMKf1WH8i2nUeu0wjEDuxg6w
YLG7MTTcOeJRYQz6VbmMMtI5UkaxwikoTxWmV1fO2D6DWYiPi41rBFx+4RKs9nkG
/RkUtfmFCvqjBXNiWh8hcdzfNkuBrNDtD4KTAsJ8qXbnrwT1csN4YtiQuBXdAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUv3O5aBI8VsHj4yFIOxpumQHaEO0wHwYDVR0j
BBgwFoAUDbg7i0oB6iNlDYXaS7XbQ/7njGMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzQwNjMzNy8wLzBEQjgzQjhCNEEwMUVBMjM2NTBEODVEQTRCQjVE
QjQzRkVFNzhDNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNGRUU3OEM2My5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0MDYzMzcvMC8wREI4M0I4QjRBMDFF
QTIzNjUwRDg1REE0QkI1REI0M0ZFRTc4QzYzLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcmxmNRZ0DJF
rt+6lNeAdH1gcJNW1UAy4rnhWvyVLP+R+lInX1j8kxnhE6TTRYe0QaltZUgIv2T1
qt1oUtr1n/NQhzcJ/uyyffQcmaGcGLeQKyrxFHtlqVQHthH6+a9fwqgP8QNxHXsA
jM1ggcK/Ayav9iygdKl4u/eEQL4hI/2hEaJbpPEENq22KCl+p9ZmD9Kfc/1Tme/B
8LXSk4tj1rIQgWdYUOjCtchsb57y4RwAMPr189D+5pNsW3E72TTx+jpTy+dtoFOh
4mdKcBJxb3BBZI17ocKNsFs5uLpVCIj46CjvGL3dr9sdrSiRGCwMUzUczb0bkqdZ
IftgIoQUcg==
-----END CERTIFICATE-----
Generated at Mon Feb 23 02:13:28 2026 by rpki-client