$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft File: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft (raw, json) Hash identifier: /pXConjIDgQYssfdhpz2jkcw4srA9h8aU2BTiNuXyYQ= Subject key identifier: C9:5D:1A:86:3A:E2:9F:66:B8:78:A7:A0:DA:DE:FE:10:4C:D8:E9:9D Authority key identifier: 0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 Certificate issuer: /CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Certificate serial: 15BC6F0B73927A1ECAF921F6CF7F5AF0513051A2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft Manifest number: 71 Signing time: Mon 13 Apr 2026 07:14:17 +0000 Manifest this update: Mon 13 Apr 2026 07:09:17 +0000 Manifest next update: Tue 14 Apr 2026 08:30:17 +0000 Files and hashes: 1: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl (hash: laXb7w2z4bH4VYEj9L9/E5Zl7bSfIGCAjbQ1LPTTxFA=) 2: 3230332e3230382e33322e302f31392d3234203d3e203234343234.roa (hash: N2nkDTssJapb5MQQw+tYmzqkzQ0KoXd8OohRafzcbkM=) 3: 323430313a333830303a3a2f33322d3438203d3e203234343234.roa (hash: 92kDeGUBf68EI8CdYM+85AShVPJsE8p6evpx0zxAuAg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:bc:6f:0b:73:92:7a:1e:ca:f9:21:f6:cf:7f:5a:f0:51:30:51:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Validity Not Before: Apr 13 07:09:17 2026 GMT Not After : Apr 14 08:30:17 2026 GMT Subject: CN=C95D1A863AE29F66B878A7A0DADEFE104CD8E99D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:80:bc:f6:71:29:eb:44:8d:02:af:81:6a:eb: ad:de:b2:c6:28:0a:c6:72:8a:57:63:50:81:f2:fd: 08:f0:84:7d:dd:30:af:37:44:e2:d7:1d:34:1f:7d: 83:cd:11:c7:72:d5:f0:49:47:d3:70:03:f2:c3:bc: 1c:1b:6e:1b:ca:f4:8c:a5:1e:2f:e7:e6:21:07:52: 30:c9:e5:30:65:8c:18:26:0e:0f:40:d4:65:2f:12: c4:42:cf:a1:c0:00:a7:82:82:67:29:fd:85:78:ed: 27:df:cc:e0:d2:e9:ab:ac:5d:70:52:91:3e:14:53: ee:4f:d3:88:b4:05:b7:d6:b9:39:bf:61:d7:7c:d9: bf:50:82:40:e2:70:06:0b:3b:39:63:f2:02:1e:71: a3:9c:5e:0f:cb:e2:18:58:03:34:60:a3:ac:a9:4a: dc:64:aa:49:13:41:01:8c:e0:91:77:26:92:76:6f: 55:1a:b6:cd:19:a0:fe:d6:7c:93:e3:01:56:37:d1: 77:1a:65:8c:3c:27:9c:aa:ad:f9:13:f7:7c:06:df: 90:61:e1:b3:fb:60:7d:d5:6c:ec:fb:ef:c9:9e:1b: 09:0d:e5:1a:47:78:e9:c4:ab:cc:24:97:07:ec:b3: af:30:d8:71:3d:27:66:c3:9b:c8:cc:d2:5e:90:0d: a4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5D:1A:86:3A:E2:9F:66:B8:78:A7:A0:DA:DE:FE:10:4C:D8:E9:9D X509v3 Authority Key Identifier: keyid:0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:84:28:b2:c2:9e:f5:e1:97:89:3c:4f:fd:07:42:0d:9b:77: 91:25:64:19:dc:75:c7:28:d8:5b:1b:9b:2d:b9:3b:3e:43:3f: ff:16:f9:dc:87:cd:4f:75:61:af:d0:a8:8f:75:f1:22:a3:5f: b7:a1:87:ba:a8:98:d6:fa:15:34:54:83:8c:fc:7b:db:08:95: c5:19:09:a7:b7:ae:b0:40:e3:07:20:11:09:4a:41:f4:31:de: e6:79:e3:3f:e4:88:d6:09:34:10:38:5d:3d:91:38:d6:64:f1: 10:84:55:07:4e:d7:d8:ba:48:3b:ee:90:e8:13:88:69:3e:95: 45:5e:00:29:99:0f:1e:7f:b7:50:2d:e8:e6:b8:42:6b:ee:ff: ba:62:dd:c8:01:28:1a:a2:4f:7e:63:7a:f6:10:63:ad:2b:76: eb:c6:e3:ad:da:80:8c:93:18:66:fa:62:26:0d:26:8a:15:53: 49:57:23:e0:38:71:34:f5:3d:d4:75:4f:98:c3:cd:74:ea:7e: 13:30:cf:ea:f0:90:b3:2d:81:65:87:3a:81:2c:48:a4:59:37: 57:73:af:df:a8:71:fa:03:ff:18:15:a6:2e:bd:26:80:8d:0d: c9:b0:b5:e9:d1:5b:5c:e1:47:6c:46:2d:64:6a:18:9c:e1:ad: 5b:ce:ff:3c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFbxvC3OSeh7K+SH2z39a8FEwUaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNG RUU3OEM2MzAeFw0yNjA0MTMwNzA5MTdaFw0yNjA0MTQwODMwMTdaMDMxMTAvBgNV BAMTKEM5NUQxQTg2M0FFMjlGNjZCODc4QTdBMERBREVGRTEwNENEOEU5OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjgLz2cSnrRI0Cr4Fq663essYo CsZyildjUIHy/QjwhH3dMK83ROLXHTQffYPNEcdy1fBJR9NwA/LDvBwbbhvK9Iyl Hi/n5iEHUjDJ5TBljBgmDg9A1GUvEsRCz6HAAKeCgmcp/YV47SffzODS6ausXXBS kT4UU+5P04i0BbfWuTm/Ydd82b9QgkDicAYLOzlj8gIecaOcXg/L4hhYAzRgo6yp StxkqkkTQQGM4JF3JpJ2b1Uats0ZoP7WfJPjAVY30XcaZYw8J5yqrfkT93wG35Bh 4bP7YH3VbOz778meGwkN5RpHeOnEq8wklwfss68w2HE9J2bDm8jM0l6QDaRnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyV0ahjrin2a4eKeg2t7+EEzY6Z0wHwYDVR0j BBgwFoAUDbg7i0oB6iNlDYXaS7XbQ/7njGMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQwNjMzNy8wLzBEQjgzQjhCNEEwMUVBMjM2NTBEODVEQTRCQjVE QjQzRkVFNzhDNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNGRUU3OEM2My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0MDYzMzcvMC8wREI4M0I4QjRBMDFF QTIzNjUwRDg1REE0QkI1REI0M0ZFRTc4QzYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYQossKe9eGX iTxP/QdCDZt3kSVkGdx1xyjYWxubLbk7PkM//xb53IfNT3Vhr9Coj3XxIqNft6GH uqiY1voVNFSDjPx72wiVxRkJp7eusEDjByARCUpB9DHe5nnjP+SI1gk0EDhdPZE4 1mTxEIRVB07X2LpIO+6Q6BOIaT6VRV4AKZkPHn+3UC3o5rhCa+7/umLdyAEoGqJP fmN69hBjrSt268bjrdqAjJMYZvpiJg0mihVTSVcj4DhxNPU91HVPmMPNdOp+EzDP 6vCQsy2BZYc6gSxIpFk3V3Ov36hx+gP/GBWmLr0mgI0NybC16dFbXOFHbEYtZGoY nOGtW87/PA== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:42 2026 by rpki-client