$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft File: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft (raw, json) Hash identifier: Zr9rhMXduEtO/DijZmm5jOAdVHt/10jZ7ZlwUipKB7g= Subject key identifier: C9:35:FC:EB:AF:98:E7:36:02:3B:33:EB:B6:6E:1B:25:65:43:F7:18 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 5F9060D8F12D58D05C84339CF65EF25FC08A31A1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft Manifest number: 37 Signing time: Sun 01 Mar 2026 11:53:16 +0000 Manifest this update: Sun 01 Mar 2026 11:48:16 +0000 Manifest next update: Mon 02 Mar 2026 12:17:16 +0000 Files and hashes: 1: 3130332e34352e3132392e302f32342d3332203d3e20313531323631.roa (hash: 4/E/Cr6fd+Bya35a7VJosjEM1GXpdZ8Au2FmVXG1GKE=) 2: 3130332e34352e3134342e302f32342d3332203d3e20313531323332.roa (hash: U7WC51cffZGxBC4k6klgd3/qLfTHYS8QUnM3VBcF/rQ=) 3: 3130332e34352e3134342e302f32342d3332203d3e20313531323631.roa (hash: VxAxNMHX5Wi1Wl24TRQwE/ULcpU6PyY1n+Kd4R5TgSw=) 4: 3130332e34352e3132392e302f32342d3332203d3e20313531323332.roa (hash: zYLUzIja0ccdR/cLWnmR8OJAjEAuvbYPjSe/uOYg9Tg=) 5: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl (hash: Sf5Qw6hCKbl+NAKSL+AYZ1NTS0JOtbiFIhjfNx5SkF0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 09:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:90:60:d8:f1:2d:58:d0:5c:84:33:9c:f6:5e:f2:5f:c0:8a:31:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Mar 1 11:48:16 2026 GMT Not After : Mar 2 12:17:16 2026 GMT Subject: CN=C935FCEBAF98E736023B33EBB66E1B256543F718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:70:ea:20:f1:f2:41:b6:52:ed:91:35:fb:a6: d9:78:a1:e2:44:dd:69:38:2d:a7:c9:cb:b0:14:3a: af:39:e3:cf:6f:1a:0b:01:02:ef:98:e9:bf:e8:4d: 0c:f2:90:b4:30:1a:09:7e:6b:03:4e:f9:fa:d2:82: 9c:ec:b7:93:c3:cd:80:d8:e8:e8:f1:a2:d1:16:1f: fa:93:a4:7f:09:65:84:63:9c:64:ca:a7:d5:f0:91: d5:50:5a:79:c0:03:b6:8a:50:e6:b9:60:46:c2:95: 32:fd:84:5e:83:eb:f2:d0:ee:31:ce:51:6c:cc:cc: 34:48:f8:17:1d:5a:ce:56:5b:5a:a4:7f:67:d4:b7: c5:ee:91:f0:ec:21:12:b2:d4:a5:30:e1:d9:98:40: 8e:50:56:ae:d3:d1:72:6e:7e:d8:f1:4a:3f:ca:dd: 18:25:f2:b3:e3:f9:b7:2b:70:68:98:b2:b3:b9:f4: 3f:00:c4:e4:74:dd:96:60:6a:d6:58:62:42:f3:32: 79:26:21:d2:b4:02:cb:f0:7a:b2:9f:f1:ad:c4:f8: 6a:3f:ac:b6:78:f0:e8:58:dc:e6:ef:69:9c:a2:0b: bc:37:cb:33:0e:30:55:51:45:63:3e:bb:4e:8c:68: 62:39:54:9e:8b:77:58:0d:2a:90:80:59:f9:fd:47: f6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:35:FC:EB:AF:98:E7:36:02:3B:33:EB:B6:6E:1B:25:65:43:F7:18 X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:96:eb:66:82:d2:cb:cd:04:cb:d1:58:d3:98:af:66:96:df: c2:df:0e:b5:88:e4:bb:f1:b2:04:c6:bd:8d:aa:f6:fb:b9:ad: ad:75:9e:9a:03:3d:95:5c:1d:ce:2b:5e:39:48:cd:1a:ca:a8: 9b:8c:cd:50:92:0f:78:b4:b1:ff:d4:94:37:43:3b:28:1d:5d: a7:78:9a:23:0e:cc:f1:27:5c:96:41:a6:7a:df:34:bd:dd:b3: 32:36:92:97:0b:f7:91:83:aa:3e:93:40:76:fc:aa:33:61:e1: 1e:2b:51:6c:97:3e:3f:e2:79:7f:29:41:2c:10:e4:85:ae:e0: 9c:4e:b1:ef:73:f8:a4:00:06:e4:f3:42:fa:7d:e7:53:50:83: 45:ff:46:ed:c6:65:dd:b9:dd:1f:84:cf:d9:57:4b:d1:fb:5c: 3e:28:84:22:8e:38:4a:90:ff:99:82:20:f4:77:56:59:43:51: 54:28:52:17:c5:90:8d:56:0a:0c:27:1c:6a:f5:f4:4b:8f:fb: 11:4a:a7:b8:fe:02:12:67:04:38:71:d3:c5:f2:a4:c3:cd:f4: 85:a0:d2:1f:60:36:8e:9a:5f:61:eb:de:be:3e:05:92:a8:75: 98:ce:e7:18:a9:27:1f:80:f5:b3:ba:72:b4:25:32:be:26:0b: 66:7f:b7:97 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX5Bg2PEtWNBchDOc9l7yX8CKMaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjAzMDExMTQ4MTZaFw0yNjAzMDIxMjE3MTZaMDMxMTAvBgNV BAMTKEM5MzVGQ0VCQUY5OEU3MzYwMjNCMzNFQkI2NkUxQjI1NjU0M0Y3MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUcOog8fJBtlLtkTX7ptl4oeJE 3Wk4LafJy7AUOq85489vGgsBAu+Y6b/oTQzykLQwGgl+awNO+frSgpzst5PDzYDY 6OjxotEWH/qTpH8JZYRjnGTKp9XwkdVQWnnAA7aKUOa5YEbClTL9hF6D6/LQ7jHO UWzMzDRI+BcdWs5WW1qkf2fUt8XukfDsIRKy1KUw4dmYQI5QVq7T0XJuftjxSj/K 3Rgl8rPj+bcrcGiYsrO59D8AxOR03ZZgatZYYkLzMnkmIdK0AsvwerKf8a3E+Go/ rLZ48OhY3ObvaZyiC7w3yzMOMFVRRWM+u06MaGI5VJ6Ld1gNKpCAWfn9R/a/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyTX866+Y5zYCOzPrtm4bJWVD9xgwHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC9EREJBNjE2Rjk2RDlD MkNEN0Y3Q0FCNjkyRjlFRkU3NjY2NjgwMTM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZbrZoLSy80E y9FY05ivZpbfwt8OtYjku/GyBMa9jar2+7mtrXWemgM9lVwdziteOUjNGsqom4zN UJIPeLSx/9SUN0M7KB1dp3iaIw7M8SdclkGmet80vd2zMjaSlwv3kYOqPpNAdvyq M2HhHitRbJc+P+J5fylBLBDkha7gnE6x73P4pAAG5PNC+n3nU1CDRf9G7cZl3bnd H4TP2VdL0ftcPiiEIo44SpD/mYIg9HdWWUNRVChSF8WQjVYKDCccavX0S4/7EUqn uP4CEmcEOHHTxfKkw830haDSH2A2jppfYevevj4Fkqh1mM7nGKknH4D1s7pytCUy viYLZn+3lw== -----END CERTIFICATE-----Generated at Mon Mar 2 02:42:17 2026 by rpki-client