
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
File: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft (raw, json)
Hash identifier: mof2BDPBeuv2AXGsHaUdObOk7KmlIS2Rtyb9az3pAnY=
Subject key identifier: C7:6F:3C:B9:4F:1A:0E:FB:BB:6D:1B:12:91:0B:FE:56:89:39:C3:99
Authority key identifier: 0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63
Certificate issuer: /CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63
Certificate serial: 15E366558283FBEC31110776478257C8545A397F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
Manifest number: EB
Signing time: Tue 14 Jul 2026 02:45:15 +0000
Manifest this update: Tue 14 Jul 2026 02:40:15 +0000
Manifest next update: Wed 15 Jul 2026 03:14:15 +0000
Files and hashes: 1: 3230332e3230382e33322e302f31392d3234203d3e203234343234.roa (hash: N2nkDTssJapb5MQQw+tYmzqkzQ0KoXd8OohRafzcbkM=)
2: 323430313a333830303a3a2f33322d3438203d3e203234343234.roa (hash: 92kDeGUBf68EI8CdYM+85AShVPJsE8p6evpx0zxAuAg=)
3: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl (hash: L3YumqanXw94vsq/4DLG5aZEsqs4mReHgBq+BNUhmpo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 03:14:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e3:66:55:82:83:fb:ec:31:11:07:76:47:82:57:c8:54:5a:39:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63
Validity
Not Before: Jul 14 02:40:15 2026 GMT
Not After : Jul 15 03:14:15 2026 GMT
Subject: CN=C76F3CB94F1A0EFBBB6D1B12910BFE568939C399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8d:70:14:43:8e:e0:d5:f5:4b:6b:53:d0:5e:
d0:41:5b:d3:f4:49:f1:01:c2:5b:0f:03:17:ad:f1:
60:26:4e:fe:36:ea:66:ad:ca:3e:63:2c:86:aa:03:
03:d1:3f:94:2d:13:ed:68:d4:b1:bf:fd:80:cb:14:
36:b4:19:15:70:69:b2:d2:02:96:e8:4b:12:8d:65:
3d:f4:bb:2d:81:99:f5:f4:0b:b8:b4:60:d3:e3:62:
f4:61:5d:78:d9:30:df:39:b6:b0:c6:e4:99:e2:2b:
f3:cf:ec:52:41:43:64:46:ce:96:33:86:c5:c0:c2:
fe:e8:69:31:4b:cb:47:38:d7:e9:e8:79:2c:e3:90:
d2:b8:04:9f:22:ff:06:a7:b6:36:9e:34:56:0d:3d:
0f:7a:da:5c:e7:71:3b:5b:93:65:a1:b6:e7:21:e4:
9e:1a:20:b3:ea:fc:f5:54:92:74:43:be:89:f1:96:
17:d4:21:af:77:24:f1:82:80:be:60:fd:e1:75:3e:
2d:74:f4:fb:22:0d:db:74:45:25:30:4c:8f:2e:77:
b1:e6:89:e7:7f:0a:40:fb:3b:e4:38:88:9a:3e:c2:
24:56:2f:95:de:80:49:fe:b2:55:0c:86:b1:a8:d1:
94:db:a8:4d:ac:be:85:29:34:45:82:9a:14:2d:9a:
5a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6F:3C:B9:4F:1A:0E:FB:BB:6D:1B:12:91:0B:FE:56:89:39:C3:99
X509v3 Authority Key Identifier:
keyid:0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4c:5a:df:71:01:a8:0c:4f:d4:70:f3:72:73:06:ea:dc:78:
92:7b:dc:18:08:ed:55:b3:d3:6d:f6:22:5d:e9:3a:bf:6d:ef:
c5:29:67:d1:35:36:21:0c:df:9e:e3:ea:45:08:ae:db:10:62:
07:3d:25:99:37:ae:0e:d7:0a:d9:92:ff:1f:1e:e4:7c:e4:01:
e3:28:9c:23:e6:29:94:d3:50:2f:1e:cb:d6:3b:57:7a:17:f7:
4b:b3:9a:66:8f:c3:2b:db:56:23:62:e2:44:4d:ea:af:f8:31:
da:a6:07:bd:27:7a:5b:2d:ca:60:0f:2f:c8:d4:62:f0:47:df:
88:fc:4b:55:29:0c:3d:8a:7d:58:fb:c5:d1:36:cc:a0:81:87:
41:2f:a3:a8:ea:99:9e:b4:77:ed:65:c1:55:8c:ab:3b:2b:e8:
b5:17:30:3a:bf:84:8f:75:bb:a8:b3:c7:f9:43:b1:d4:bd:07:
b2:b7:af:9e:a7:db:0c:25:6b:2b:1d:03:04:96:f6:8d:f7:36:
6f:dd:76:bc:43:56:9e:f8:9d:64:c0:1c:8e:14:d0:17:86:ea:
87:99:f3:e8:90:60:31:e2:e1:8a:4f:18:5e:f8:f7:a0:d3:91:
d3:1f:c6:a0:da:8c:19:33:fd:80:d6:e2:77:f6:05:40:2d:64:
96:52:79:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:12:37 2026 by rpki-client