Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
File:                     DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft (raw, json)
Hash identifier:          J+/890KTtDuAxTFj7rkpzAbk9XMTe6JZw/OirOvZqbI=
Subject key identifier:   26:8A:83:C7:08:1B:6B:0D:BE:03:79:C9:A6:F2:78:90:03:56:4F:D1
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       6668854E343C8D876AD6D2B5A48ACACE95C9154B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
Manifest number:          014D
Signing time:             Sun 27 Sep 2026 12:44:55 +0000
Manifest this update:     Sun 27 Sep 2026 12:39:55 +0000
Manifest next update:     Wed 30 Sep 2026 21:41:55 +0000
Files and hashes:         1: 3130332e32302e3132382e302f32342d3234203d3e20313531323633.roa (hash: USDo1+htgWeAWVdmiLtZJKFxIunLuwdSFDwe8/guZn4=)
                          2: 3130332e34352e3134302e302f32342d3234203d3e20313531323633.roa (hash: fjDzv9qZpF3TJWoZVQjqn8OLC/aJPD37r4kSIcjLwvo=)
                          3: 3130332e34352e3133392e302f32342d3234203d3e20313531323633.roa (hash: tkZ0olJ44jerS77qUNh/RtZBx6BEFTD4IppgpCZrVgU=)
                          4: 34332e3232372e36382e302f32342d3234203d3e20313531313835.roa (hash: oUG06qYlcP6HelHain3gpetHHCQC7+Gu44AkhpUHC0k=)
                          5: 3130332e3235352e36392e302f32342d3234203d3e20313531323633.roa (hash: taR2PO9xYF/2YfQ1M3QrhkhMJOByxm8xtfd0+hZHWQ4=)
                          6: 3130332e34352e3133352e302f32342d3234203d3e20313531323633.roa (hash: 7TOVvQGtiRRN6gaq0unOb2RuIqJZlcWuilthQJPnJ6s=)
                          7: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl (hash: ZXpezDa7v/UsRtjmyyPJ79S+bMK62pQ0go31WV45fkM=)
                          8: 34332e3232372e36382e302f32342d3234203d3e20313531323633.roa (hash: bOczHLtiTfhwSWbZfzmsyeiygnK1reN93op3nqVHinM=)
                          9: 34332e3232362e37322e302f32342d3234203d3e20313531323633.roa (hash: oxTcpybFedaN+9fhIGtaIyDlSt555izuC9Tw7g4zY8w=)
                          10: 3130332e34352e3133372e302f32342d3234203d3e20313531323633.roa (hash: /nAgRExr87UnptaMnXyaub52EVhpTGGPUthJrZfXB8E=)
                          11: 3130332e3235352e36382e302f32342d3234203d3e20313531323633.roa (hash: kcIRXgf91pkWImY3pwTHQ8GC6HyQp3uGNJdbtYT8LVs=)
                          12: 3130332e36352e3232342e302f32342d3234203d3e20313531323633.roa (hash: I3p3J8zTRklFLPdRZ+Q9zQwUOdP7emT/RsjsVluAfQc=)
                          13: 3130332e34352e3134312e302f32342d3234203d3e20313531323633.roa (hash: VLYofrbSPniO0qPNEJB87CbLmJC5xRZYZf97BFvmres=)
                          14: 3130332e34352e3133332e302f32342d3234203d3e20313531323633.roa (hash: 132KQY0hIZGzZXT+Y1rqiKxW6vJKn4uICuU2IbmuOaA=)
                          15: 3130332e34352e3133312e302f32342d3234203d3e20313531323633.roa (hash: c4+QizUwQ9LtfeNAuXm49/cIor41PzvBxYOWPZ9iLDU=)
                          16: 34332e3232362e34392e302f32342d3234203d3e20313531323633.roa (hash: d6U06tziP1DXRLjXOYcZAo6KHFOwD3UVu3cLHimaZBI=)
                          17: 3130332e32302e3133302e302f32342d3234203d3e20313531323633.roa (hash: 5OjMMPRoZS4OOJzkVvf+b5OF43XzXzc8f29yu9q7eDY=)
                          18: 3130332e36352e3232352e302f32342d3234203d3e20313531323633.roa (hash: 04DMYvCyM5FOMvEVp5saBOpFCW8VIu8YneGg62PNVVo=)
                          19: 3130332e34352e3132382e302f31392d3139203d3e20313531313835.roa (hash: X33fm0XluohYCJXj8jxmsLTScEPvBSwfdlSzKHPZU2c=)
                          20: 3130332e34352e3133302e302f32342d3234203d3e20313531323633.roa (hash: YxBgZLLk6/7uSKhrpJTWAUnz6bdVYdSgz1srU9WCmoY=)
                          21: 3130332e32302e3132382e302f32322d3232203d3e20313531313835.roa (hash: UOfDrjHlStBdhAq1mOfKs7VL2pw3p+dJcfAgv0vuQQk=)
                          22: 3130332e32302e3132392e302f32342d3234203d3e20313531323633.roa (hash: Q5Xw39c+z0AYdFvOytdnv/5LKdw3DwcDWrvcK09ENW0=)
                          23: 34332e3232362e37342e302f32342d3234203d3e20313531323633.roa (hash: WtGf8luMWVwVCI0JqGilwQMOg1wGl5B8Qlx/WrfN83M=)
                          24: 3130332e34352e3134332e302f32342d3234203d3e20313531323633.roa (hash: hDDTb53HztLIH4r4Wn0H7aEqKyEipiofrQjGPbDb55c=)
                          25: 3130332e3235352e37312e302f32342d3234203d3e20313531323633.roa (hash: UqttEmoA1unL7s9nMNBmisuqhHlP+3LOeNNI03OtFmg=)
                          26: 3130332e34352e3134322e302f32342d3234203d3e20313531323633.roa (hash: ysdt6WCjPu86CKzZ4otbFmgUxo/AX8IdUB0ZJZmkbAs=)
                          27: 34332e3232362e37332e302f32342d3234203d3e20313531323633.roa (hash: ultQo/tcXYAJcwMYiGhTdBYowU2VUdrcVlfYZG7sFc4=)
                          28: 34332e3232362e37352e302f32342d3234203d3e20313531323633.roa (hash: 3kXayL1m+GJrl59qVBFm7MP2mNCavT+lZNSYbXquSq8=)
                          29: 3130332e34352e3133342e302f32342d3234203d3e20313531323633.roa (hash: DQTwY0qfdZ8phN/XPNDg9X0RnR/1sxeaTZvjwhB5bhw=)
                          30: 3130332e34352e3132392e302f32342d3234203d3e20313531323633.roa (hash: ub8G/vIQ6sjWWQA0HypxoESQRNKjR52rh9WTwJO8tf8=)
                          31: 3130332e34352e3133322e302f32342d3234203d3e20313531323633.roa (hash: TLtvholRbFMVX7PQaQfpBBj2HiEUdloBNRkONI50XTU=)
                          32: 3130332e36352e3232342e302f32332d3233203d3e20313531313835.roa (hash: RTYtTFe9AHsjJZDXut5sHNrTxjvC4H588yOBuEGqVas=)
                          33: 34332e3232362e34392e302f32342d3234203d3e20313531313835.roa (hash: DrN6EvaxSyfOrx64lSKyy5bToghM4IJIUgJhjn3Qf+E=)
                          34: 34332e3232372e38302e302f32302d3230203d3e20313531313835.roa (hash: DmxMTYwpUQjW4JGb5c1p1bbMCkIRG4pHaFPmDE3Yu3M=)
                          35: 3130332e32302e3133312e302f32342d3234203d3e20313531323633.roa (hash: MP5WdchBZczFdD99X0JoChDNpIiLPWpHqxtELxECGmc=)
                          36: 3130332e34352e3133362e302f32342d3234203d3e20313531323633.roa (hash: muRYDgXAl3QDM2yrYGeIGMErJ6nr9786prUQqAkfbeQ=)
                          37: 3130332e34352e3132382e302f32342d3234203d3e20313531323633.roa (hash: p/qliSMIaGfeJnj2HvSHkLewIifj1a1eahS9MFrpoIc=)
                          38: 3130332e34352e3134342e302f32342d3234203d3e20313531323332.roa (hash: nyRsUIZAMGliMA9SM6UnzJp0udBw1RrqO4H4TZw1qRw=)
                          39: 3130332e34352e3132392e302f32342d3234203d3e20313531323332.roa (hash: OBrkWdRjgKEO3E4GhTiDJvxctDc2qqs8jrnUx+FlbGQ=)
                          40: 3130332e3235352e37302e302f32342d3234203d3e20313531323633.roa (hash: a99k+lBbCozD/s7hN4/uMLkMLJAT1LwAXPLm/HtxG/s=)
                          41: 3130332e34352e3134342e302f32342d3234203d3e20313531323633.roa (hash: nj1XuBZcIhwUhDaapH2EIsU4FY7yiIz6hDhKXmgxuhU=)
                          42: 323430313a356332303a31303a3a2f34382d3438203d3e20313531313835.roa (hash: R/QVyQyKR3yYI09RNSrUigu/nryj32Qez0+4TGC1Cnk=)
                          43: 3130332e3235352e36382e302f32322d3232203d3e20313531313835.roa (hash: TMEPYsd47neKuCtSJmf511xaadCgk6FFqhoHutDfBlw=)
                          44: 34332e3232362e37322e302f32322d3232203d3e20313531313835.roa (hash: CN+kmzq8ncw0WqWFmCCp+BpI1QiWQtdXyUkbEouSGSI=)
                          45: 3130332e34352e3133382e302f32342d3234203d3e20313531323633.roa (hash: WaH2JzOr/ocBZdIuOPXcXhP0ygdYxklYnvJTi8T7tQk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 21:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:68:85:4e:34:3c:8d:87:6a:d6:d2:b5:a4:8a:ca:ce:95:c9:15:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: Sep 27 12:39:55 2026 GMT
            Not After : Sep 30 21:41:55 2026 GMT
        Subject: CN=268A83C7081B6B0DBE0379C9A6F2789003564FD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2e:49:04:98:9b:e4:30:98:6c:7d:ee:70:30:
                    ae:14:a8:a3:a1:3a:17:59:a2:30:fd:a9:38:35:14:
                    d7:21:53:65:8e:71:99:0f:37:cc:65:4a:c2:73:65:
                    d5:53:7f:aa:cf:fc:24:b7:82:f4:80:fa:98:33:39:
                    d0:b4:6e:75:04:9b:b9:bd:57:c8:08:ca:9a:1c:b5:
                    66:50:cd:d2:15:74:d9:ab:62:b6:dc:14:97:76:f5:
                    e1:08:8e:12:ca:ea:96:28:a8:2d:38:f8:55:b5:61:
                    96:f0:da:70:b1:6e:22:ad:4a:76:82:26:50:c5:e7:
                    89:e6:f1:6f:c8:95:93:50:79:8d:7e:78:84:29:3f:
                    96:9a:9b:6e:8a:17:3d:08:70:b6:b6:50:97:43:c6:
                    53:ff:20:d5:51:27:7e:27:dd:e3:f1:38:03:fb:56:
                    f5:21:3d:33:5c:bb:6c:d2:39:34:26:fc:4d:6f:da:
                    fd:a1:79:e9:fd:0f:4e:ad:ba:b4:6a:a4:86:9c:2d:
                    f5:c9:e1:d0:bf:58:8e:10:bb:47:04:85:17:c0:75:
                    37:d9:ca:18:5a:f0:d3:9a:1b:b6:c1:03:87:fc:a6:
                    0e:fe:5c:0d:59:e5:e2:d6:4c:33:07:90:39:db:ed:
                    7e:83:ad:e5:0e:3a:7b:d4:86:6c:67:57:7e:46:a3:
                    15:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8A:83:C7:08:1B:6B:0D:BE:03:79:C9:A6:F2:78:90:03:56:4F:D1
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:16:c7:81:39:26:b0:b8:74:e9:f6:23:df:55:da:00:b2:a7:
         b9:24:7a:cb:73:6c:6b:f9:ef:f4:70:41:16:6d:bd:62:ae:14:
         a6:a5:6d:1c:56:1d:a1:66:eb:d5:54:76:3d:86:af:62:1f:ae:
         59:ec:40:f3:e9:cb:61:95:cd:c9:3f:96:b6:cf:17:1b:3c:b3:
         71:33:86:ea:c4:aa:01:71:16:a9:2a:ee:de:b6:87:f4:de:84:
         39:48:c6:49:77:b9:08:cd:1f:fb:48:92:25:59:ef:2e:e0:97:
         0d:18:69:b6:81:85:f2:eb:e9:71:0c:29:cc:b9:c0:0a:18:0b:
         de:06:58:e2:0c:3f:65:c7:e5:15:d4:79:f5:29:d0:c7:6a:c3:
         07:f4:61:d6:de:f6:1c:1d:e6:79:3b:69:69:35:fb:7f:7b:b8:
         44:2c:fd:85:d9:bb:75:81:04:b3:d9:13:6e:13:6a:e6:1f:af:
         30:d7:14:2b:75:f8:e3:a8:be:bb:38:3a:a9:d6:d5:ce:14:25:
         01:ee:58:46:5e:fb:83:be:43:b7:52:50:dc:7e:3e:cf:a7:99:
         9b:29:09:d9:8b:ad:9c:3b:b0:78:f7:b3:85:00:98:e1:f0:7c:
         b4:7e:7c:83:6e:e0:91:34:e6:58:12:cc:d5:45:4e:88:f7:6b:
         b1:c6:d5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:27:16 2026 by rpki-client