
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
File: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft (raw, json)
Hash identifier: 72/tzT5FaNNcUYpR10F4n8iFlB0s0cks41Cb2UMCfRc=
Subject key identifier: 08:AF:FD:A6:6F:78:3A:17:47:F7:68:44:0A:06:49:5B:67:6D:0B:CD
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 4F7B39F34EA53B47E44CEFB95F2951619DDCE735
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
Manifest number: 9B
Signing time: Wed 13 May 2026 02:50:54 +0000
Manifest this update: Wed 13 May 2026 02:45:54 +0000
Manifest next update: Thu 14 May 2026 06:03:54 +0000
Files and hashes: 1: 34332e3232372e38302e302f32302d3332203d3e20313531323633.roa (hash: 4jkS5M6HasSXGCQpsin8FoCCpuMNdc0/Fz8bW9dxTkU=)
2: 34332e3232362e37322e302f32322d3332203d3e20313531323633.roa (hash: jQPMggXT1FjPZtyPkeJOQLab+84xGE4z7mH9SKKEpPQ=)
3: 3130332e32302e3132382e302f32322d3332203d3e20313531323633.roa (hash: Tvh8h6nNlEm1u5qQIZfifEHO2U1ep0EaYaYXiBzZYfU=)
4: 3130332e34352e3132382e302f31392d3332203d3e20313531313835.roa (hash: tsyd3XyL1sR8yC/sToiyZd0LYsCW7lvtrAxpV1AnXjs=)
5: 34332e3232362e37322e302f32322d3332203d3e20313531313835.roa (hash: kSS/336cZAWVPyiDW/MySY62mT7Cy5L/TBiFinsaMuc=)
6: 34332e3232362e34392e302f32342d3332203d3e20313531323633.roa (hash: +xN1z1VKskwQnt3EY6pQ5MDi2C4xXIAV51Ye2BNp65Q=)
7: 3130332e34352e3132392e302f32342d3332203d3e20313531323631.roa (hash: 4/E/Cr6fd+Bya35a7VJosjEM1GXpdZ8Au2FmVXG1GKE=)
8: 3130332e32302e3132382e302f32322d3332203d3e20313531313835.roa (hash: baXUEgh/ARKa7pBDo/kp78WqV0sg9al8zwp4ARJmRAU=)
9: 3130332e34352e3134342e302f32342d3332203d3e20313531323631.roa (hash: VxAxNMHX5Wi1Wl24TRQwE/ULcpU6PyY1n+Kd4R5TgSw=)
10: 3130332e36352e3232342e302f32332d3332203d3e20313531323633.roa (hash: GrQ+Ba8S3O5ygy9Xi9rdwA4MA9YwGIweDkO0xMhfoV8=)
11: 3130332e34352e3134342e302f32342d3332203d3e20313531323332.roa (hash: U7WC51cffZGxBC4k6klgd3/qLfTHYS8QUnM3VBcF/rQ=)
12: 34332e3232372e36382e302f32342d3332203d3e20313531323633.roa (hash: FcMniRZoBjx4hKuRcjGhaqSnxM9LFyeGUzsfF0RW/v0=)
13: 3130332e3235352e36382e302f32322d3332203d3e20313531323633.roa (hash: E8XwVM09wV4mmM7F08pkiRB8CC0AKgFeu5HqHXnGNC8=)
14: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl (hash: WfN+TTgptiMd/riI39sjFVY75JvMb3kf31etrnvIHjM=)
15: 3130332e34352e3132392e302f32342d3332203d3e20313531323332.roa (hash: zYLUzIja0ccdR/cLWnmR8OJAjEAuvbYPjSe/uOYg9Tg=)
16: 323430313a356332303a3a2f33322d313238203d3e20313531323633.roa (hash: 4xod6o1vq3z+k4NYUD1FRFrB+HGmJpeH0a6J+uCnWrQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:7b:39:f3:4e:a5:3b:47:e4:4c:ef:b9:5f:29:51:61:9d:dc:e7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: May 13 02:45:54 2026 GMT
Not After : May 14 06:03:54 2026 GMT
Subject: CN=08AFFDA66F783A1747F768440A06495B676D0BCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:57:3a:ee:93:dc:8a:c6:5e:99:84:ff:b7:
bc:dd:0f:af:e5:b2:7a:27:14:e1:a7:64:ec:64:71:
54:07:1a:98:62:f5:47:3d:30:7d:3a:5f:bc:e0:da:
56:7f:fd:a5:9c:87:a5:46:d1:ce:e0:f1:bf:0c:0d:
ab:2b:3e:43:21:d7:78:c2:77:8e:7e:f5:3f:77:c8:
47:da:62:1a:ba:8b:c6:36:da:7e:8a:36:bc:ec:b6:
23:24:dc:53:77:d9:1c:e6:0b:a7:a2:bd:05:b1:41:
1f:83:9b:a2:8e:a3:39:84:97:f5:11:98:ca:23:b1:
0c:0f:0c:81:15:c6:35:80:27:68:05:4a:fb:3d:ac:
5b:ee:0e:6c:17:a0:42:31:40:15:d5:ae:66:26:52:
fe:f2:8a:28:51:2c:a1:b0:da:a2:0d:03:68:7c:3e:
79:6a:09:8e:56:99:34:ae:a3:a3:87:61:45:62:bb:
0c:69:51:b9:97:cc:af:19:43:dd:60:7b:14:b0:45:
b7:50:6f:21:b2:fa:57:b6:b0:86:1e:83:a9:15:8d:
6d:9b:49:58:5a:bf:03:c3:f2:ab:bb:a9:b8:78:58:
6e:1d:be:d7:17:cb:2e:fc:21:8b:a7:c6:d6:64:58:
ca:09:72:c1:d9:a3:a1:a2:2d:7b:9c:15:f2:a8:0a:
3e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AF:FD:A6:6F:78:3A:17:47:F7:68:44:0A:06:49:5B:67:6D:0B:CD
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:07:ff:6e:e2:e6:ab:0e:a6:77:c0:9e:8a:8f:9c:2b:26:67:
c0:27:09:86:9b:58:18:7c:5f:84:ba:c0:ea:7b:8b:27:72:66:
81:e6:4d:70:83:ee:25:28:e3:e5:64:25:6c:94:68:27:f8:2f:
00:bf:fe:05:23:94:80:c5:98:c9:a9:66:09:33:f2:3c:cd:cf:
06:19:d0:57:f6:c2:0b:7e:36:ae:9c:ba:0e:ba:53:73:17:68:
a1:24:8e:38:d3:fb:3a:eb:e7:2e:1c:b8:0b:ef:4d:95:0a:2e:
b3:9f:85:8d:c2:44:19:ea:f5:79:58:a6:dc:6a:b9:1d:eb:f0:
d8:4d:4e:cd:85:11:d6:64:38:83:ae:cf:2e:1f:8e:19:49:f6:
8d:8e:83:fb:80:8f:4c:60:2d:d5:fb:89:b5:3e:85:09:26:16:
8e:2b:1d:17:0c:80:dc:fd:3b:38:b4:ac:f7:43:30:e2:2e:df:
42:b6:bd:f8:0e:c3:6f:5a:bc:8d:04:4c:b5:85:b7:f2:77:5d:
af:db:59:60:4c:38:56:0c:dc:a0:3f:23:95:68:9f:ff:bb:84:
55:10:ac:6c:dd:aa:c9:6a:ad:44:4a:22:46:c9:8d:db:55:1e:
8b:fc:21:68:49:76:1c:16:5e:53:68:ee:de:4a:dc:5d:f1:16:
f1:5a:8b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:42:37 2026 by rpki-client