Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
File:                     DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft (raw, json)
Hash identifier:          72/tzT5FaNNcUYpR10F4n8iFlB0s0cks41Cb2UMCfRc=
Subject key identifier:   08:AF:FD:A6:6F:78:3A:17:47:F7:68:44:0A:06:49:5B:67:6D:0B:CD
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       4F7B39F34EA53B47E44CEFB95F2951619DDCE735
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
Manifest number:          9B
Signing time:             Wed 13 May 2026 02:50:54 +0000
Manifest this update:     Wed 13 May 2026 02:45:54 +0000
Manifest next update:     Thu 14 May 2026 06:03:54 +0000
Files and hashes:         1: 34332e3232372e38302e302f32302d3332203d3e20313531323633.roa (hash: 4jkS5M6HasSXGCQpsin8FoCCpuMNdc0/Fz8bW9dxTkU=)
                          2: 34332e3232362e37322e302f32322d3332203d3e20313531323633.roa (hash: jQPMggXT1FjPZtyPkeJOQLab+84xGE4z7mH9SKKEpPQ=)
                          3: 3130332e32302e3132382e302f32322d3332203d3e20313531323633.roa (hash: Tvh8h6nNlEm1u5qQIZfifEHO2U1ep0EaYaYXiBzZYfU=)
                          4: 3130332e34352e3132382e302f31392d3332203d3e20313531313835.roa (hash: tsyd3XyL1sR8yC/sToiyZd0LYsCW7lvtrAxpV1AnXjs=)
                          5: 34332e3232362e37322e302f32322d3332203d3e20313531313835.roa (hash: kSS/336cZAWVPyiDW/MySY62mT7Cy5L/TBiFinsaMuc=)
                          6: 34332e3232362e34392e302f32342d3332203d3e20313531323633.roa (hash: +xN1z1VKskwQnt3EY6pQ5MDi2C4xXIAV51Ye2BNp65Q=)
                          7: 3130332e34352e3132392e302f32342d3332203d3e20313531323631.roa (hash: 4/E/Cr6fd+Bya35a7VJosjEM1GXpdZ8Au2FmVXG1GKE=)
                          8: 3130332e32302e3132382e302f32322d3332203d3e20313531313835.roa (hash: baXUEgh/ARKa7pBDo/kp78WqV0sg9al8zwp4ARJmRAU=)
                          9: 3130332e34352e3134342e302f32342d3332203d3e20313531323631.roa (hash: VxAxNMHX5Wi1Wl24TRQwE/ULcpU6PyY1n+Kd4R5TgSw=)
                          10: 3130332e36352e3232342e302f32332d3332203d3e20313531323633.roa (hash: GrQ+Ba8S3O5ygy9Xi9rdwA4MA9YwGIweDkO0xMhfoV8=)
                          11: 3130332e34352e3134342e302f32342d3332203d3e20313531323332.roa (hash: U7WC51cffZGxBC4k6klgd3/qLfTHYS8QUnM3VBcF/rQ=)
                          12: 34332e3232372e36382e302f32342d3332203d3e20313531323633.roa (hash: FcMniRZoBjx4hKuRcjGhaqSnxM9LFyeGUzsfF0RW/v0=)
                          13: 3130332e3235352e36382e302f32322d3332203d3e20313531323633.roa (hash: E8XwVM09wV4mmM7F08pkiRB8CC0AKgFeu5HqHXnGNC8=)
                          14: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl (hash: WfN+TTgptiMd/riI39sjFVY75JvMb3kf31etrnvIHjM=)
                          15: 3130332e34352e3132392e302f32342d3332203d3e20313531323332.roa (hash: zYLUzIja0ccdR/cLWnmR8OJAjEAuvbYPjSe/uOYg9Tg=)
                          16: 323430313a356332303a3a2f33322d313238203d3e20313531323633.roa (hash: 4xod6o1vq3z+k4NYUD1FRFrB+HGmJpeH0a6J+uCnWrQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7b:39:f3:4e:a5:3b:47:e4:4c:ef:b9:5f:29:51:61:9d:dc:e7:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: May 13 02:45:54 2026 GMT
            Not After : May 14 06:03:54 2026 GMT
        Subject: CN=08AFFDA66F783A1747F768440A06495B676D0BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d8:57:3a:ee:93:dc:8a:c6:5e:99:84:ff:b7:
                    bc:dd:0f:af:e5:b2:7a:27:14:e1:a7:64:ec:64:71:
                    54:07:1a:98:62:f5:47:3d:30:7d:3a:5f:bc:e0:da:
                    56:7f:fd:a5:9c:87:a5:46:d1:ce:e0:f1:bf:0c:0d:
                    ab:2b:3e:43:21:d7:78:c2:77:8e:7e:f5:3f:77:c8:
                    47:da:62:1a:ba:8b:c6:36:da:7e:8a:36:bc:ec:b6:
                    23:24:dc:53:77:d9:1c:e6:0b:a7:a2:bd:05:b1:41:
                    1f:83:9b:a2:8e:a3:39:84:97:f5:11:98:ca:23:b1:
                    0c:0f:0c:81:15:c6:35:80:27:68:05:4a:fb:3d:ac:
                    5b:ee:0e:6c:17:a0:42:31:40:15:d5:ae:66:26:52:
                    fe:f2:8a:28:51:2c:a1:b0:da:a2:0d:03:68:7c:3e:
                    79:6a:09:8e:56:99:34:ae:a3:a3:87:61:45:62:bb:
                    0c:69:51:b9:97:cc:af:19:43:dd:60:7b:14:b0:45:
                    b7:50:6f:21:b2:fa:57:b6:b0:86:1e:83:a9:15:8d:
                    6d:9b:49:58:5a:bf:03:c3:f2:ab:bb:a9:b8:78:58:
                    6e:1d:be:d7:17:cb:2e:fc:21:8b:a7:c6:d6:64:58:
                    ca:09:72:c1:d9:a3:a1:a2:2d:7b:9c:15:f2:a8:0a:
                    3e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AF:FD:A6:6F:78:3A:17:47:F7:68:44:0A:06:49:5B:67:6D:0B:CD
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:07:ff:6e:e2:e6:ab:0e:a6:77:c0:9e:8a:8f:9c:2b:26:67:
         c0:27:09:86:9b:58:18:7c:5f:84:ba:c0:ea:7b:8b:27:72:66:
         81:e6:4d:70:83:ee:25:28:e3:e5:64:25:6c:94:68:27:f8:2f:
         00:bf:fe:05:23:94:80:c5:98:c9:a9:66:09:33:f2:3c:cd:cf:
         06:19:d0:57:f6:c2:0b:7e:36:ae:9c:ba:0e:ba:53:73:17:68:
         a1:24:8e:38:d3:fb:3a:eb:e7:2e:1c:b8:0b:ef:4d:95:0a:2e:
         b3:9f:85:8d:c2:44:19:ea:f5:79:58:a6:dc:6a:b9:1d:eb:f0:
         d8:4d:4e:cd:85:11:d6:64:38:83:ae:cf:2e:1f:8e:19:49:f6:
         8d:8e:83:fb:80:8f:4c:60:2d:d5:fb:89:b5:3e:85:09:26:16:
         8e:2b:1d:17:0c:80:dc:fd:3b:38:b4:ac:f7:43:30:e2:2e:df:
         42:b6:bd:f8:0e:c3:6f:5a:bc:8d:04:4c:b5:85:b7:f2:77:5d:
         af:db:59:60:4c:38:56:0c:dc:a0:3f:23:95:68:9f:ff:bb:84:
         55:10:ac:6c:dd:aa:c9:6a:ad:44:4a:22:46:c9:8d:db:55:1e:
         8b:fc:21:68:49:76:1c:16:5e:53:68:ee:de:4a:dc:5d:f1:16:
         f1:5a:8b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:42:37 2026 by rpki-client