$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft File: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft (raw, json) Hash identifier: l8qTVOYC9s7HNXEylofHzDV8snFFjTGA30bYfhYb6k8= Subject key identifier: 90:8E:50:BD:A7:04:3F:65:E8:FD:96:5F:EC:E4:D3:26:84:5B:C1:49 Authority key identifier: 0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 Certificate issuer: /CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Certificate serial: 12B7411BEC95DACB49E1A6320E6AC7891938B658 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft Manifest number: AF Signing time: Fri 29 May 2026 16:53:03 +0000 Manifest this update: Fri 29 May 2026 16:48:03 +0000 Manifest next update: Sat 30 May 2026 20:17:03 +0000 Files and hashes: 1: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl (hash: 6L/XvueIFklnHuu3S2GTKlyDa4psdw82cfkY1Cbucnw=) 2: 3230332e3230382e33322e302f31392d3234203d3e203234343234.roa (hash: N2nkDTssJapb5MQQw+tYmzqkzQ0KoXd8OohRafzcbkM=) 3: 323430313a333830303a3a2f33322d3438203d3e203234343234.roa (hash: 92kDeGUBf68EI8CdYM+85AShVPJsE8p6evpx0zxAuAg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b7:41:1b:ec:95:da:cb:49:e1:a6:32:0e:6a:c7:89:19:38:b6:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Validity Not Before: May 29 16:48:03 2026 GMT Not After : May 30 20:17:03 2026 GMT Subject: CN=908E50BDA7043F65E8FD965FECE4D326845BC149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bd:eb:9d:f0:61:72:2c:ee:8f:93:77:09:84: d2:27:fb:27:32:b3:d5:6d:89:67:58:ff:ef:22:55: 7c:01:4c:e0:77:23:43:5b:40:56:40:f5:23:6e:d4: 2f:3c:ce:52:47:0f:ab:e3:29:2f:a2:6b:b2:af:4e: d6:c4:ad:dc:88:98:ea:b0:4b:33:e3:c6:6f:34:b7: f4:5d:af:f5:3e:bc:25:a7:70:39:2c:cf:a3:fe:14: 9e:8d:00:60:08:5c:69:b6:e5:e6:26:ad:8e:74:63: 71:01:48:e9:3c:da:d9:29:1b:f5:96:b1:3c:78:60: 28:46:08:11:39:47:6c:3c:c7:23:35:41:ad:19:f7: 16:ab:fb:0e:4e:bd:16:f6:ba:51:5f:a5:58:0e:96: 85:4b:87:e2:8d:6e:b6:89:17:47:0d:58:dc:46:8a: 9c:25:a7:61:fa:19:26:f4:dc:ea:c8:7b:1f:84:4c: f7:1f:d6:12:09:12:e4:cd:c4:e6:a0:96:01:65:9b: ea:98:58:40:2f:69:bb:03:fd:f0:87:24:ed:75:1b: 77:3e:a3:af:aa:d7:c0:da:4c:18:b0:53:d1:c2:56: 8f:f1:76:ea:4d:6a:5f:4e:69:d0:8d:a3:e5:8e:1b: 49:c0:f7:3f:e3:94:ab:4e:a0:35:88:31:b2:1c:9d: 70:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8E:50:BD:A7:04:3F:65:E8:FD:96:5F:EC:E4:D3:26:84:5B:C1:49 X509v3 Authority Key Identifier: keyid:0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:92:e8:e4:5a:fc:0f:32:fd:a8:f7:8a:f5:05:44:e4:6f:24: 15:40:ae:44:d6:72:6d:b6:83:c4:2a:fc:df:9f:5d:80:e8:f8: af:19:b0:b6:14:73:fb:d5:44:02:1e:5e:b3:9d:06:46:a3:e5: 6f:8e:79:0e:1c:e1:85:b0:b0:6a:02:09:24:93:77:4a:3e:68: da:2c:54:0c:59:da:80:6d:05:b1:44:a7:b7:f9:f5:a4:6d:7c: 64:8e:b7:b9:92:2f:ec:98:3c:ed:56:73:00:78:83:4a:cf:ef: 0d:b2:12:db:d8:1a:ac:93:f2:44:93:bf:82:a6:f7:b2:52:e6: 7b:6c:f2:bf:56:36:c4:ab:a6:d1:25:15:12:25:59:a4:90:e8: fd:63:75:d2:1d:15:da:9d:0e:9e:bd:d3:ae:49:f2:8a:f5:ee: b0:64:71:c5:32:08:33:6f:de:47:e6:30:1d:4f:f6:84:6b:78: de:12:d8:ce:37:92:63:bc:1e:dc:5a:54:68:44:d9:68:5c:c3: 1a:60:f5:23:7e:c5:d8:a1:58:4e:ac:e3:fa:ee:b5:f2:b2:f3: 51:ef:41:7f:bc:c9:eb:e4:c7:97:5b:f8:99:a8:51:67:63:c5: 91:72:85:d6:75:66:05:6d:16:29:0a:35:d6:60:85:65:fd:3b: a1:47:15:d5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUErdBG+yV2stJ4aYyDmrHiRk4tlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNG RUU3OEM2MzAeFw0yNjA1MjkxNjQ4MDNaFw0yNjA1MzAyMDE3MDNaMDMxMTAvBgNV BAMTKDkwOEU1MEJEQTcwNDNGNjVFOEZEOTY1RkVDRTREMzI2ODQ1QkMxNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZveud8GFyLO6Pk3cJhNIn+ycy s9VtiWdY/+8iVXwBTOB3I0NbQFZA9SNu1C88zlJHD6vjKS+ia7KvTtbErdyImOqw SzPjxm80t/Rdr/U+vCWncDksz6P+FJ6NAGAIXGm25eYmrY50Y3EBSOk82tkpG/WW sTx4YChGCBE5R2w8xyM1Qa0Z9xar+w5OvRb2ulFfpVgOloVLh+KNbraJF0cNWNxG ipwlp2H6GSb03OrIex+ETPcf1hIJEuTNxOaglgFlm+qYWEAvabsD/fCHJO11G3c+ o6+q18DaTBiwU9HCVo/xdupNal9OadCNo+WOG0nA9z/jlKtOoDWIMbIcnXCFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkI5QvacEP2Xo/ZZf7OTTJoRbwUkwHwYDVR0j BBgwFoAUDbg7i0oB6iNlDYXaS7XbQ/7njGMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQwNjMzNy8wLzBEQjgzQjhCNEEwMUVBMjM2NTBEODVEQTRCQjVE QjQzRkVFNzhDNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNGRUU3OEM2My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0MDYzMzcvMC8wREI4M0I4QjRBMDFF QTIzNjUwRDg1REE0QkI1REI0M0ZFRTc4QzYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpLo5Fr8DzL9 qPeK9QVE5G8kFUCuRNZybbaDxCr8359dgOj4rxmwthRz+9VEAh5es50GRqPlb455 DhzhhbCwagIJJJN3Sj5o2ixUDFnagG0FsUSnt/n1pG18ZI63uZIv7Jg87VZzAHiD Ss/vDbIS29garJPyRJO/gqb3slLme2zyv1Y2xKum0SUVEiVZpJDo/WN10h0V2p0O nr3TrknyivXusGRxxTIIM2/eR+YwHU/2hGt43hLYzjeSY7we3FpUaETZaFzDGmD1 I37F2KFYTqzj+u618rLzUe9Bf7zJ6+THl1v4mahRZ2PFkXKF1nVmBW0WKQo11mCF Zf07oUcV1Q== -----END CERTIFICATE-----Generated at Fri May 29 22:05:09 2026 by rpki-client