$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft File: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft (raw, json) Hash identifier: Zy6AEKU72Bru7/l7SRQqQZC7DQXrCMhZzndzXRV005s= Subject key identifier: 2F:5E:8B:6E:27:9A:8E:2B:72:F9:BF:54:3E:0D:AC:A3:3F:DC:FB:6E Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 548025DD527D4081B8161C0281DA9EC4338A190D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 21:58:28 +0000 Manifest this update: Thu 26 Mar 2026 21:53:28 +0000 Manifest next update: Sat 28 Mar 2026 00:23:28 +0000 Files and hashes: 1: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl (hash: 6sXLIhaeW3aVb5FaXAeml9g3XHfwp/ZseHBUqNMACE4=) 2: 3130332e34352e3132392e302f32342d3332203d3e20313531323332.roa (hash: zYLUzIja0ccdR/cLWnmR8OJAjEAuvbYPjSe/uOYg9Tg=) 3: 3130332e34352e3132392e302f32342d3332203d3e20313531323631.roa (hash: 4/E/Cr6fd+Bya35a7VJosjEM1GXpdZ8Au2FmVXG1GKE=) 4: 3130332e34352e3134342e302f32342d3332203d3e20313531323332.roa (hash: U7WC51cffZGxBC4k6klgd3/qLfTHYS8QUnM3VBcF/rQ=) 5: 3130332e34352e3134342e302f32342d3332203d3e20313531323631.roa (hash: VxAxNMHX5Wi1Wl24TRQwE/ULcpU6PyY1n+Kd4R5TgSw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:80:25:dd:52:7d:40:81:b8:16:1c:02:81:da:9e:c4:33:8a:19:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Mar 26 21:53:28 2026 GMT Not After : Mar 28 00:23:28 2026 GMT Subject: CN=2F5E8B6E279A8E2B72F9BF543E0DACA33FDCFB6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:61:67:88:24:21:cd:28:5b:b8:40:fe:f9:2e: 91:f1:b2:c9:ee:4a:51:19:46:f5:fb:22:71:58:50: e5:e3:71:49:0c:79:fb:53:67:5f:5a:ba:77:83:15: 08:4d:f3:db:96:bd:79:a2:8a:7f:67:26:12:96:b4: 2a:b1:c4:b6:60:6f:a8:77:42:97:89:fe:3d:48:a7: d7:10:63:fc:25:f2:24:11:6b:78:fc:01:59:5a:2a: 0b:e9:6a:02:c2:d2:90:c2:4d:76:1d:bf:9b:88:f7: 8b:ef:a8:07:5d:bb:6a:45:c0:be:47:7a:a0:8a:d2: 74:52:45:bc:64:e2:ed:a4:e8:c6:4a:74:fd:3f:3e: fe:b6:e3:bc:74:74:37:c1:3e:95:b9:a9:00:51:46: fc:09:aa:ad:da:e6:c1:a2:80:db:6c:b0:0f:0f:9e: 2a:89:75:94:ec:4f:53:5a:21:2a:6e:78:e3:32:ed: ea:b6:d7:56:6d:12:8d:a5:d6:36:0f:64:60:d3:a2: c6:21:58:01:f0:21:9e:1a:e1:0e:40:1d:90:83:76: c6:1c:6d:e9:e3:e9:e6:1b:f4:4b:e2:95:c9:5b:b4: 3c:73:d3:b2:20:40:46:a3:00:57:a7:66:af:b2:79: 24:ee:e6:4d:8d:71:89:05:d4:07:7c:6f:de:bc:e3: a7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5E:8B:6E:27:9A:8E:2B:72:F9:BF:54:3E:0D:AC:A3:3F:DC:FB:6E X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d0:49:f9:35:62:95:ee:0e:38:34:2f:05:b5:6f:a3:d4:46: 0a:99:5a:3b:df:1b:51:1e:bc:94:0b:56:2e:18:ae:39:f6:b0: 37:a8:80:25:a2:85:14:87:d9:3d:50:80:b3:4a:6a:94:29:30: 82:c6:af:60:e0:d8:73:26:ec:12:b5:f9:79:55:e9:b7:06:8d: d0:d3:09:d2:4c:9c:ba:6c:5d:5d:a2:6c:78:79:3f:10:95:75: 4f:68:36:db:61:62:c5:fa:61:6a:d0:35:24:e5:fb:cd:c7:c3: bb:bb:60:7e:e2:63:47:f0:e6:75:17:be:bb:5c:1c:c4:f9:4e: a8:6b:69:54:c5:2b:45:50:f3:86:87:26:c8:2b:51:2d:5c:9c: 31:6a:df:87:30:dd:88:52:a6:64:db:7a:61:d3:6f:7d:5b:91: 46:0b:62:ef:2e:30:a8:07:6d:bf:92:a9:e6:7d:1b:3b:9b:3a: d7:ec:7a:41:f1:49:cc:4c:47:02:d4:8f:22:0e:5a:ca:5b:ac: d0:93:d0:38:8e:b0:9d:ac:e2:c8:ea:7c:55:f1:a8:5a:54:55: 2c:f1:80:40:2d:0d:27:0b:dc:a8:5a:4e:ad:b4:8e:ae:8b:2b: 89:87:e7:5d:a7:20:f5:a1:d2:ce:87:2c:e9:1f:0a:01:84:92: 7a:09:03:43 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVIAl3VJ9QIG4FhwCgdqexDOKGQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjAzMjYyMTUzMjhaFw0yNjAzMjgwMDIzMjhaMDMxMTAvBgNV BAMTKDJGNUU4QjZFMjc5QThFMkI3MkY5QkY1NDNFMERBQ0EzM0ZEQ0ZCNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClYWeIJCHNKFu4QP75LpHxssnu SlEZRvX7InFYUOXjcUkMeftTZ19auneDFQhN89uWvXmiin9nJhKWtCqxxLZgb6h3 QpeJ/j1Ip9cQY/wl8iQRa3j8AVlaKgvpagLC0pDCTXYdv5uI94vvqAddu2pFwL5H eqCK0nRSRbxk4u2k6MZKdP0/Pv6247x0dDfBPpW5qQBRRvwJqq3a5sGigNtssA8P niqJdZTsT1NaISpueOMy7eq211ZtEo2l1jYPZGDTosYhWAHwIZ4a4Q5AHZCDdsYc benj6eYb9EvilclbtDxz07IgQEajAFenZq+yeSTu5k2NcYkF1Ad8b96846fXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUL16Lbieajity+b9UPg2soz/c+24wHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC9EREJBNjE2Rjk2RDlD MkNEN0Y3Q0FCNjkyRjlFRkU3NjY2NjgwMTM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtBJ+TVile4O ODQvBbVvo9RGCplaO98bUR68lAtWLhiuOfawN6iAJaKFFIfZPVCAs0pqlCkwgsav YODYcybsErX5eVXptwaN0NMJ0kycumxdXaJseHk/EJV1T2g222FixfphatA1JOX7 zcfDu7tgfuJjR/DmdRe+u1wcxPlOqGtpVMUrRVDzhocmyCtRLVycMWrfhzDdiFKm ZNt6YdNvfVuRRgti7y4wqAdtv5Kp5n0bO5s61+x6QfFJzExHAtSPIg5aylus0JPQ OI6wnaziyOp8VfGoWlRVLPGAQC0NJwvcqFpOrbSOrosriYfnXacg9aHSzocs6R8K AYSSegkDQw== -----END CERTIFICATE-----Generated at Fri Mar 27 05:00:00 2026 by rpki-client