
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
File: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft (raw, json)
Hash identifier: wveIRxNzJ/2orVhULaeYlnORhyx8Np3mNmcYVVhvCL8=
Subject key identifier: 93:BD:CE:FC:A7:4A:2F:61:AE:D6:13:C9:56:2A:93:20:4A:C2:AD:23
Authority key identifier: 0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63
Certificate issuer: /CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63
Certificate serial: 4DED2BBD1F5402C11FF8854C0F4226AF33106E6E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
Manifest number: 013E
Signing time: Wed 14 Oct 2026 12:14:07 +0000
Manifest this update: Wed 14 Oct 2026 12:09:07 +0000
Manifest next update: Sat 17 Oct 2026 14:28:07 +0000
Files and hashes: 1: 323430313a333830303a3a2f33322d3438203d3e203234343234.roa (hash: 92kDeGUBf68EI8CdYM+85AShVPJsE8p6evpx0zxAuAg=)
2: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl (hash: TM5MW+NqdznU/cr/NubPY5KVq7tHorIfqg8hw/aXQP8=)
3: 3230332e3230382e33322e302f31392d3234203d3e203234343234.roa (hash: N2nkDTssJapb5MQQw+tYmzqkzQ0KoXd8OohRafzcbkM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 12:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:ed:2b:bd:1f:54:02:c1:1f:f8:85:4c:0f:42:26:af:33:10:6e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63
Validity
Not Before: Oct 14 12:09:07 2026 GMT
Not After : Oct 17 14:28:07 2026 GMT
Subject: CN=93BDCEFCA74A2F61AED613C9562A93204AC2AD23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:db:49:cd:3c:63:79:78:c6:76:41:3b:42:ed:
9a:c6:f6:39:a3:b7:c4:ed:7a:a7:ae:ee:76:fc:a6:
7b:a5:1f:5e:9e:b9:ba:18:b5:be:ea:7d:93:c9:21:
09:d4:0f:41:d1:b3:5f:d5:0b:13:a7:13:e9:fc:05:
87:83:b4:47:e3:2c:b4:3b:9b:46:24:79:42:f2:ea:
6d:8a:3a:9a:6d:60:45:1b:eb:43:8e:c8:c5:57:d2:
6f:9f:05:3b:79:a8:48:84:98:3b:8c:7f:ed:bd:23:
d0:22:32:2a:07:aa:f2:2c:87:62:0a:04:80:59:c1:
8d:83:12:87:f8:d2:15:c4:7e:7c:6f:83:55:bd:17:
39:86:29:32:0b:62:a0:af:94:8b:1b:4d:0d:22:03:
46:f6:d1:1d:97:a2:e3:59:42:53:0a:a1:7d:b7:30:
a7:5e:01:e1:bc:81:56:63:5c:14:69:c0:46:2e:31:
4a:f8:9e:d8:5e:28:2c:dd:33:8f:49:36:ed:98:3f:
2e:e7:69:f0:5c:b7:f8:e2:95:cd:9f:16:ab:cb:38:
02:97:83:f7:c2:2b:6b:28:62:9a:60:4c:77:58:da:
30:60:93:fe:af:ac:38:31:56:73:33:1c:2f:36:bc:
b0:cd:2a:29:21:49:79:70:d6:7e:3a:60:8e:d8:72:
91:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BD:CE:FC:A7:4A:2F:61:AE:D6:13:C9:56:2A:93:20:4A:C2:AD:23
X509v3 Authority Key Identifier:
keyid:0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:98:82:f4:da:36:58:5e:5d:47:01:fa:3b:53:a6:0c:52:64:
4a:62:b9:1f:d9:b9:4e:6e:65:7b:34:14:d5:a1:4b:e6:4e:bc:
57:25:de:a8:32:fe:76:82:c9:bf:eb:75:4f:3d:37:7b:95:fd:
ae:38:04:72:41:f5:90:8f:0f:10:fc:1c:d1:e4:d4:23:64:d7:
c7:29:43:cf:b6:8e:01:e8:27:da:0d:2e:f9:56:ad:95:3b:4d:
fb:5f:bc:4f:de:f2:3b:2b:45:fd:18:61:c0:81:e8:e4:2b:93:
74:e5:c2:2c:da:d5:b4:76:76:60:9a:be:af:42:85:70:26:12:
12:82:c9:15:f2:76:c5:18:48:86:8c:b3:34:c2:50:74:cc:d1:
6f:39:0d:73:ef:f5:2e:88:10:f7:6c:f7:a9:a8:3e:d0:67:b4:
b3:4a:ee:01:e5:f3:32:20:02:a4:08:08:f0:a1:a5:cc:c3:bc:
a0:47:73:2c:d6:1c:e2:fb:46:b7:d7:83:19:e2:ba:f2:3f:11:
ce:96:e3:6d:b5:e5:ab:f4:ca:f3:10:06:e3:d1:e5:7a:e5:e4:
19:f3:a4:f8:3f:7f:0a:c7:c6:64:ff:bb:df:e4:c4:1e:bc:2f:
50:6c:e8:ec:8a:bc:79:33:e5:af:fe:b6:00:5c:d3:d1:13:8c:
44:59:4e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:08:33 2026 by rpki-client