
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
File: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft (raw, json)
Hash identifier: zkTAuKf3UPCyX8BT4eKz3Ztbpfa19WKB4+jxem/ZMv8=
Subject key identifier: E7:4F:EB:85:0B:BE:A7:9E:02:FC:8A:C6:3E:07:17:31:1C:44:76:8D
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 71060DF7B2B1C12DE377D304E5F116E5F0551AF4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
Manifest number: 0153
Signing time: Sat 10 Oct 2026 22:55:04 +0000
Manifest this update: Sat 10 Oct 2026 22:50:04 +0000
Manifest next update: Wed 14 Oct 2026 06:26:04 +0000
Files and hashes: 1: 3130332e34352e3133362e302f32342d3234203d3e20313531323633.roa (hash: muRYDgXAl3QDM2yrYGeIGMErJ6nr9786prUQqAkfbeQ=)
2: 3130332e34352e3133372e302f32342d3234203d3e20313531323633.roa (hash: /nAgRExr87UnptaMnXyaub52EVhpTGGPUthJrZfXB8E=)
3: 3130332e34352e3134332e302f32342d3234203d3e20313531323633.roa (hash: hDDTb53HztLIH4r4Wn0H7aEqKyEipiofrQjGPbDb55c=)
4: 34332e3232362e37332e302f32342d3234203d3e20313531323633.roa (hash: ultQo/tcXYAJcwMYiGhTdBYowU2VUdrcVlfYZG7sFc4=)
5: 3130332e34352e3134312e302f32342d3234203d3e20313531323633.roa (hash: VLYofrbSPniO0qPNEJB87CbLmJC5xRZYZf97BFvmres=)
6: 3130332e34352e3133382e302f32342d3234203d3e20313531323633.roa (hash: WaH2JzOr/ocBZdIuOPXcXhP0ygdYxklYnvJTi8T7tQk=)
7: 3130332e32302e3132392e302f32342d3234203d3e20313531323633.roa (hash: Q5Xw39c+z0AYdFvOytdnv/5LKdw3DwcDWrvcK09ENW0=)
8: 3130332e34352e3133302e302f32342d3234203d3e20313531323633.roa (hash: YxBgZLLk6/7uSKhrpJTWAUnz6bdVYdSgz1srU9WCmoY=)
9: 34332e3232362e34392e302f32342d3234203d3e20313531313835.roa (hash: DrN6EvaxSyfOrx64lSKyy5bToghM4IJIUgJhjn3Qf+E=)
10: 3130332e34352e3133342e302f32342d3234203d3e20313531323633.roa (hash: DQTwY0qfdZ8phN/XPNDg9X0RnR/1sxeaTZvjwhB5bhw=)
11: 3130332e3235352e36392e302f32342d3234203d3e20313531323633.roa (hash: taR2PO9xYF/2YfQ1M3QrhkhMJOByxm8xtfd0+hZHWQ4=)
12: 3130332e32302e3133312e302f32342d3234203d3e20313531323633.roa (hash: MP5WdchBZczFdD99X0JoChDNpIiLPWpHqxtELxECGmc=)
13: 3130332e34352e3132392e302f32342d3234203d3e20313531323633.roa (hash: ub8G/vIQ6sjWWQA0HypxoESQRNKjR52rh9WTwJO8tf8=)
14: 3130332e34352e3134342e302f32342d3234203d3e20313531323332.roa (hash: nyRsUIZAMGliMA9SM6UnzJp0udBw1RrqO4H4TZw1qRw=)
15: 3130332e32302e3132382e302f32322d3232203d3e20313531313835.roa (hash: UOfDrjHlStBdhAq1mOfKs7VL2pw3p+dJcfAgv0vuQQk=)
16: 34332e3232362e37322e302f32342d3234203d3e20313531323633.roa (hash: oxTcpybFedaN+9fhIGtaIyDlSt555izuC9Tw7g4zY8w=)
17: 34332e3232372e38302e302f32302d3230203d3e20313531313835.roa (hash: DmxMTYwpUQjW4JGb5c1p1bbMCkIRG4pHaFPmDE3Yu3M=)
18: 3130332e3235352e36382e302f32342d3234203d3e20313531323633.roa (hash: kcIRXgf91pkWImY3pwTHQ8GC6HyQp3uGNJdbtYT8LVs=)
19: 3130332e34352e3132382e302f32342d3234203d3e20313531323633.roa (hash: p/qliSMIaGfeJnj2HvSHkLewIifj1a1eahS9MFrpoIc=)
20: 3130332e34352e3133332e302f32342d3234203d3e20313531323633.roa (hash: 132KQY0hIZGzZXT+Y1rqiKxW6vJKn4uICuU2IbmuOaA=)
21: 34332e3232372e36382e302f32342d3234203d3e20313531323633.roa (hash: bOczHLtiTfhwSWbZfzmsyeiygnK1reN93op3nqVHinM=)
22: 3130332e34352e3133392e302f32342d3234203d3e20313531323633.roa (hash: tkZ0olJ44jerS77qUNh/RtZBx6BEFTD4IppgpCZrVgU=)
23: 323430313a356332303a31303a3a2f34382d3438203d3e20313531313835.roa (hash: R/QVyQyKR3yYI09RNSrUigu/nryj32Qez0+4TGC1Cnk=)
24: 34332e3232362e34392e302f32342d3234203d3e20313531323633.roa (hash: d6U06tziP1DXRLjXOYcZAo6KHFOwD3UVu3cLHimaZBI=)
25: 3130332e34352e3133352e302f32342d3234203d3e20313531323633.roa (hash: 7TOVvQGtiRRN6gaq0unOb2RuIqJZlcWuilthQJPnJ6s=)
26: 34332e3232362e37322e302f32322d3232203d3e20313531313835.roa (hash: CN+kmzq8ncw0WqWFmCCp+BpI1QiWQtdXyUkbEouSGSI=)
27: 3130332e3235352e36382e302f32322d3232203d3e20313531313835.roa (hash: TMEPYsd47neKuCtSJmf511xaadCgk6FFqhoHutDfBlw=)
28: 3130332e34352e3134342e302f32342d3234203d3e20313531323633.roa (hash: nj1XuBZcIhwUhDaapH2EIsU4FY7yiIz6hDhKXmgxuhU=)
29: 3130332e32302e3133302e302f32342d3234203d3e20313531323633.roa (hash: 5OjMMPRoZS4OOJzkVvf+b5OF43XzXzc8f29yu9q7eDY=)
30: 3130332e36352e3232342e302f32332d3233203d3e20313531313835.roa (hash: RTYtTFe9AHsjJZDXut5sHNrTxjvC4H588yOBuEGqVas=)
31: 3130332e36352e3232342e302f32342d3234203d3e20313531323633.roa (hash: I3p3J8zTRklFLPdRZ+Q9zQwUOdP7emT/RsjsVluAfQc=)
32: 3130332e34352e3134322e302f32342d3234203d3e20313531323633.roa (hash: ysdt6WCjPu86CKzZ4otbFmgUxo/AX8IdUB0ZJZmkbAs=)
33: 34332e3232362e37342e302f32342d3234203d3e20313531323633.roa (hash: WtGf8luMWVwVCI0JqGilwQMOg1wGl5B8Qlx/WrfN83M=)
34: 3130332e34352e3134302e302f32342d3234203d3e20313531323633.roa (hash: fjDzv9qZpF3TJWoZVQjqn8OLC/aJPD37r4kSIcjLwvo=)
35: 34332e3232362e37352e302f32342d3234203d3e20313531323633.roa (hash: 3kXayL1m+GJrl59qVBFm7MP2mNCavT+lZNSYbXquSq8=)
36: 3130332e32302e3132382e302f32342d3234203d3e20313531323633.roa (hash: USDo1+htgWeAWVdmiLtZJKFxIunLuwdSFDwe8/guZn4=)
37: 3130332e36352e3232352e302f32342d3234203d3e20313531323633.roa (hash: 04DMYvCyM5FOMvEVp5saBOpFCW8VIu8YneGg62PNVVo=)
38: 3130332e34352e3132382e302f31392d3139203d3e20313531313835.roa (hash: X33fm0XluohYCJXj8jxmsLTScEPvBSwfdlSzKHPZU2c=)
39: 34332e3232372e36382e302f32342d3234203d3e20313531313835.roa (hash: oUG06qYlcP6HelHain3gpetHHCQC7+Gu44AkhpUHC0k=)
40: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl (hash: xSi4Qg7/Pw8kNknoBioefzexmY49lT6Z5MzXFGih4cs=)
41: 3130332e34352e3133312e302f32342d3234203d3e20313531323633.roa (hash: c4+QizUwQ9LtfeNAuXm49/cIor41PzvBxYOWPZ9iLDU=)
42: 3130332e3235352e37312e302f32342d3234203d3e20313531323633.roa (hash: UqttEmoA1unL7s9nMNBmisuqhHlP+3LOeNNI03OtFmg=)
43: 3130332e3235352e37302e302f32342d3234203d3e20313531323633.roa (hash: a99k+lBbCozD/s7hN4/uMLkMLJAT1LwAXPLm/HtxG/s=)
44: 3130332e34352e3133322e302f32342d3234203d3e20313531323633.roa (hash: TLtvholRbFMVX7PQaQfpBBj2HiEUdloBNRkONI50XTU=)
45: 3130332e34352e3132392e302f32342d3234203d3e20313531323332.roa (hash: OBrkWdRjgKEO3E4GhTiDJvxctDc2qqs8jrnUx+FlbGQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 09:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:06:0d:f7:b2:b1:c1:2d:e3:77:d3:04:e5:f1:16:e5:f0:55:1a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: Oct 10 22:50:04 2026 GMT
Not After : Oct 14 06:26:04 2026 GMT
Subject: CN=E74FEB850BBEA79E02FC8AC63E0717311C44768D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e4:ea:2d:dc:c1:59:90:da:3a:63:ef:71:7a:
74:e6:c9:4c:b6:0e:8c:c5:5c:2c:39:f2:83:98:18:
36:b1:56:67:b9:9b:4d:fc:ac:1c:0a:0b:e0:89:01:
9c:d7:2d:fb:92:fb:ac:7d:69:a0:bf:92:b7:f6:5e:
dd:5f:da:45:36:09:fa:c0:77:fd:d7:ab:e6:5c:72:
83:d1:9b:37:52:b9:d6:c3:be:84:56:93:4a:69:1a:
15:c6:aa:ac:2b:90:bb:55:fc:29:5b:ec:07:bc:de:
94:7f:75:8e:76:ab:9e:73:c3:04:d2:64:59:1b:64:
1b:07:02:b5:e9:78:89:15:60:76:14:54:9a:69:13:
7e:08:f8:2c:5e:c3:56:5f:43:a4:fc:d9:4b:2a:7a:
7b:c1:7b:27:c5:a0:c3:19:df:c5:3d:30:b1:57:8f:
f4:2f:ce:a0:fb:6e:a8:53:4c:49:26:79:22:0c:fa:
66:e2:ca:f3:e4:f7:bc:85:f1:b2:90:9d:37:3c:6b:
b5:e1:7f:cb:18:8e:c3:70:ba:33:06:13:20:42:83:
00:75:b5:8c:6e:45:41:bc:d2:d4:72:4c:d5:81:48:
83:65:94:05:95:55:32:43:4e:a8:4c:b7:db:d5:28:
62:da:86:5d:bf:93:c5:e7:a4:11:80:d1:bf:ef:df:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4F:EB:85:0B:BE:A7:9E:02:FC:8A:C6:3E:07:17:31:1C:44:76:8D
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:c5:da:40:12:09:de:53:15:7a:59:65:eb:dd:fd:f3:4d:7a:
af:22:6c:5e:5e:63:8c:b3:33:8e:8e:87:86:6b:2a:58:2f:90:
f4:95:ec:1c:30:20:d8:ed:ac:f4:f8:e3:89:8c:be:db:5a:8a:
f2:79:03:dd:26:6e:91:46:0e:ca:1a:35:30:23:01:71:0c:d2:
b6:b4:4d:db:89:71:e6:cd:36:ff:53:29:45:96:82:c5:4a:62:
e7:c0:ac:50:7f:84:85:29:44:34:50:c4:b5:33:5d:f3:59:aa:
f0:4c:be:d3:84:cf:c6:cb:c0:35:f0:38:40:f7:aa:a0:67:bc:
f7:72:54:0f:c3:40:75:ed:21:ed:d9:71:83:b4:00:1d:82:48:
d9:ed:75:23:7a:34:0f:7b:d6:df:db:67:11:86:19:b1:f9:59:
13:4f:bb:5d:3c:93:e4:de:63:c4:9d:61:71:96:b9:a3:7e:ab:
b1:25:23:a4:5b:51:6c:45:85:35:83:0c:73:60:77:f8:19:46:
8e:30:0b:f0:b9:c6:44:f9:f7:b4:8f:79:02:f3:c7:4f:48:34:
3c:3e:22:2e:36:2f:ec:f3:45:fd:a9:e4:ae:0b:21:0c:94:d7:
32:c8:a1:99:b4:41:63:4a:a3:75:ff:a0:b2:3c:eb:eb:bf:0e:
2c:2c:9d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:50:41 2026 by rpki-client