$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft File: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft (raw, json) Hash identifier: 42+Q0AKZ/ZAR0dYxhXiP1Njny/uyITUc/UPTJzLn7/A= Subject key identifier: CD:18:2D:7F:92:08:A6:8F:7D:8C:54:AF:61:51:1D:B2:B5:7B:31:12 Authority key identifier: 0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 Certificate issuer: /CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Certificate serial: 0E1A857B7FC9CCA92285EC9B00E40593B7932979 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft Manifest number: 0129 Signing time: Fri 28 Aug 2026 07:13:30 +0000 Manifest this update: Fri 28 Aug 2026 07:08:30 +0000 Manifest next update: Mon 31 Aug 2026 11:50:30 +0000 Files and hashes: 1: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl (hash: TyIdyg1q1XA5R73lGy11aE9ox10lmzLKOhDF3wLucYI=) 2: 3230332e3230382e33322e302f31392d3234203d3e203234343234.roa (hash: N2nkDTssJapb5MQQw+tYmzqkzQ0KoXd8OohRafzcbkM=) 3: 323430313a333830303a3a2f33322d3438203d3e203234343234.roa (hash: 92kDeGUBf68EI8CdYM+85AShVPJsE8p6evpx0zxAuAg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1a:85:7b:7f:c9:cc:a9:22:85:ec:9b:00:e4:05:93:b7:93:29:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63 Validity Not Before: Aug 28 07:08:30 2026 GMT Not After : Aug 31 11:50:30 2026 GMT Subject: CN=CD182D7F9208A68F7D8C54AF61511DB2B57B3112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1d:06:e4:90:a6:db:1d:d9:8b:93:ae:c5:a8: 20:63:e2:13:5d:6e:9a:a2:f1:4e:8b:f6:da:ba:7c: d0:59:bc:f9:65:05:fa:12:5f:b0:cf:59:b1:ca:3f: 79:29:f5:fd:95:16:29:4e:14:e2:a1:9a:b3:66:fd: 2b:c5:90:dc:6a:c8:b8:09:7d:2d:d3:c9:fb:ae:78: 5c:29:c8:35:ef:b3:ec:c1:52:a1:e0:a4:03:ce:48: 0d:7e:d1:e6:6f:de:29:69:f1:6a:88:46:3f:26:de: b4:d5:bc:b6:0d:44:67:96:b0:44:0d:16:ee:17:1c: cc:92:40:90:25:ee:3f:df:56:7c:52:75:a3:13:eb: 8d:fb:5f:f5:65:b5:ce:62:3b:10:c4:5f:17:58:1b: 99:d4:ba:9f:b3:de:82:11:fb:9c:44:5c:16:8d:51: 07:96:bc:1e:f4:71:53:7f:11:5d:b6:74:a5:23:8d: 0f:96:3a:d2:68:1e:7a:3e:d5:a6:36:e0:ae:2a:01: 2e:99:5b:fd:e0:3c:41:0e:89:db:f4:e4:3f:b3:64: 0e:a7:fc:bd:f6:01:af:44:f8:58:b9:9f:9d:dd:83: 59:4e:a9:dd:72:b8:ae:e0:fd:56:48:84:a2:fd:5e: a9:b8:b3:31:02:0a:66:49:27:07:64:77:ca:d2:b9: cf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:18:2D:7F:92:08:A6:8F:7D:8C:54:AF:61:51:1D:B2:B5:7B:31:12 X509v3 Authority Key Identifier: keyid:0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:24:38:e5:33:36:84:01:7b:20:f2:c2:8b:40:11:98:2b:f8: 00:0b:95:16:5e:fe:cc:9f:ee:03:35:ec:05:8d:aa:1a:f6:42: 00:ae:0f:c6:82:b5:a2:68:ff:0b:c5:90:27:e1:eb:3a:45:8e: d5:23:fd:c4:92:99:ef:67:fd:27:bd:18:7f:a2:1c:44:13:39: ba:34:47:fa:53:6c:a2:2d:34:fe:75:57:5e:63:a9:19:f4:c3: fa:d1:85:45:7a:12:d3:e5:5e:97:86:7a:19:e0:47:2b:3e:85: 67:e4:2e:aa:f0:33:7b:d3:8d:c6:53:e7:15:32:9d:53:14:4b: 17:cd:b9:eb:26:c2:5c:cc:e9:11:d3:09:55:91:ff:10:e1:b5: 37:98:e8:bb:76:88:cd:25:5b:71:23:3d:6e:c2:40:0e:5f:bc: c0:4d:2f:7d:20:a7:32:a2:71:f7:e8:28:c5:a8:64:a7:92:c1: 1d:f3:d1:46:4b:cc:4b:54:71:22:b4:93:b6:7e:34:64:62:47: a4:37:83:9f:dd:d1:7b:f3:0c:55:fb:d4:11:5b:2c:c8:a5:92: 5a:c3:ca:5e:17:c6:7e:0a:50:62:dc:f6:b1:6e:9b:bd:4a:23: 50:b8:9a:5a:57:9a:23:07:4e:36:33:ce:79:ec:f1:e2:88:6a: c4:60:15:64 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDhqFe3/JzKkiheybAOQFk7eTKXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNG RUU3OEM2MzAeFw0yNjA4MjgwNzA4MzBaFw0yNjA4MzExMTUwMzBaMDMxMTAvBgNV BAMTKENEMTgyRDdGOTIwOEE2OEY3RDhDNTRBRjYxNTExREIyQjU3QjMxMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChHQbkkKbbHdmLk67FqCBj4hNd bpqi8U6L9tq6fNBZvPllBfoSX7DPWbHKP3kp9f2VFilOFOKhmrNm/SvFkNxqyLgJ fS3TyfuueFwpyDXvs+zBUqHgpAPOSA1+0eZv3ilp8WqIRj8m3rTVvLYNRGeWsEQN Fu4XHMySQJAl7j/fVnxSdaMT6437X/Vltc5iOxDEXxdYG5nUup+z3oIR+5xEXBaN UQeWvB70cVN/EV22dKUjjQ+WOtJoHno+1aY24K4qAS6ZW/3gPEEOidv05D+zZA6n /L32Aa9E+Fi5n53dg1lOqd1yuK7g/VZIhKL9Xqm4szECCmZJJwdkd8rSuc+DAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzRgtf5IIpo99jFSvYVEdsrV7MRIwHwYDVR0j BBgwFoAUDbg7i0oB6iNlDYXaS7XbQ/7njGMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQwNjMzNy8wLzBEQjgzQjhCNEEwMUVBMjM2NTBEODVEQTRCQjVE QjQzRkVFNzhDNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNGRUU3OEM2My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0MDYzMzcvMC8wREI4M0I4QjRBMDFF QTIzNjUwRDg1REE0QkI1REI0M0ZFRTc4QzYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyQ45TM2hAF7 IPLCi0ARmCv4AAuVFl7+zJ/uAzXsBY2qGvZCAK4PxoK1omj/C8WQJ+HrOkWO1SP9 xJKZ72f9J70Yf6IcRBM5ujRH+lNsoi00/nVXXmOpGfTD+tGFRXoS0+Vel4Z6GeBH Kz6FZ+QuqvAze9ONxlPnFTKdUxRLF8256ybCXMzpEdMJVZH/EOG1N5jou3aIzSVb cSM9bsJADl+8wE0vfSCnMqJx9+goxahkp5LBHfPRRkvMS1RxIrSTtn40ZGJHpDeD n93Re/MMVfvUEVssyKWSWsPKXhfGfgpQYtz2sW6bvUojULiaWleaIwdONjPOeezx 4ohqxGAVZA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:28 2026 by rpki-client