$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft File: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft (raw, json) Hash identifier: Q2CICGg/6irOLb0wdbG+QflnRT/+lfMyZjGla3uj+X0= Subject key identifier: C1:46:F2:A8:21:7B:CA:D8:44:0F:77:38:C8:40:8C:4D:9E:FB:4F:75 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 119E0976716CE7973F932FA75985BDD452DD15F1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft Manifest number: 0117 Signing time: Wed 29 Jul 2026 09:29:00 +0000 Manifest this update: Wed 29 Jul 2026 09:24:00 +0000 Manifest next update: Thu 30 Jul 2026 10:29:00 +0000 Files and hashes: 1: 34332e3232372e36382e302f32342d3234203d3e20313531313835.roa (hash: oUG06qYlcP6HelHain3gpetHHCQC7+Gu44AkhpUHC0k=) 2: 34332e3232372e36382e302f32342d3234203d3e20313531323633.roa (hash: bOczHLtiTfhwSWbZfzmsyeiygnK1reN93op3nqVHinM=) 3: 34332e3232362e37322e302f32342d3234203d3e20313531323633.roa (hash: oxTcpybFedaN+9fhIGtaIyDlSt555izuC9Tw7g4zY8w=) 4: 34332e3232372e38302e302f32302d3230203d3e20313531313835.roa (hash: DmxMTYwpUQjW4JGb5c1p1bbMCkIRG4pHaFPmDE3Yu3M=) 5: 3130332e36352e3232342e302f32332d3233203d3e20313531313835.roa (hash: RTYtTFe9AHsjJZDXut5sHNrTxjvC4H588yOBuEGqVas=) 6: 3130332e36352e3232352e302f32342d3234203d3e20313531323633.roa (hash: 04DMYvCyM5FOMvEVp5saBOpFCW8VIu8YneGg62PNVVo=) 7: 3130332e34352e3132382e302f31392d3139203d3e20313531313835.roa (hash: X33fm0XluohYCJXj8jxmsLTScEPvBSwfdlSzKHPZU2c=) 8: 323430313a356332303a31303a3a2f34382d3438203d3e20313531313835.roa (hash: R/QVyQyKR3yYI09RNSrUigu/nryj32Qez0+4TGC1Cnk=) 9: 3130332e3235352e36392e302f32342d3234203d3e20313531323633.roa (hash: taR2PO9xYF/2YfQ1M3QrhkhMJOByxm8xtfd0+hZHWQ4=) 10: 3130332e3235352e36382e302f32342d3234203d3e20313531323633.roa (hash: kcIRXgf91pkWImY3pwTHQ8GC6HyQp3uGNJdbtYT8LVs=) 11: 3130332e34352e3134332e302f32342d3234203d3e20313531323633.roa (hash: hDDTb53HztLIH4r4Wn0H7aEqKyEipiofrQjGPbDb55c=) 12: 34332e3232362e37332e302f32342d3234203d3e20313531323633.roa (hash: ultQo/tcXYAJcwMYiGhTdBYowU2VUdrcVlfYZG7sFc4=) 13: 3130332e34352e3134302e302f32342d3234203d3e20313531323633.roa (hash: fjDzv9qZpF3TJWoZVQjqn8OLC/aJPD37r4kSIcjLwvo=) 14: 3130332e32302e3133302e302f32342d3234203d3e20313531323633.roa (hash: 5OjMMPRoZS4OOJzkVvf+b5OF43XzXzc8f29yu9q7eDY=) 15: 34332e3232362e37322e302f32322d3232203d3e20313531313835.roa (hash: CN+kmzq8ncw0WqWFmCCp+BpI1QiWQtdXyUkbEouSGSI=) 16: 3130332e34352e3133312e302f32342d3234203d3e20313531323633.roa (hash: c4+QizUwQ9LtfeNAuXm49/cIor41PzvBxYOWPZ9iLDU=) 17: 3130332e32302e3133312e302f32342d3234203d3e20313531323633.roa (hash: MP5WdchBZczFdD99X0JoChDNpIiLPWpHqxtELxECGmc=) 18: 3130332e34352e3133332e302f32342d3234203d3e20313531323633.roa (hash: 132KQY0hIZGzZXT+Y1rqiKxW6vJKn4uICuU2IbmuOaA=) 19: 3130332e3235352e36382e302f32322d3232203d3e20313531313835.roa (hash: TMEPYsd47neKuCtSJmf511xaadCgk6FFqhoHutDfBlw=) 20: 3130332e32302e3132382e302f32322d3232203d3e20313531313835.roa (hash: UOfDrjHlStBdhAq1mOfKs7VL2pw3p+dJcfAgv0vuQQk=) 21: 3130332e3235352e37302e302f32342d3234203d3e20313531323633.roa (hash: a99k+lBbCozD/s7hN4/uMLkMLJAT1LwAXPLm/HtxG/s=) 22: 3130332e32302e3132392e302f32342d3234203d3e20313531323633.roa (hash: Q5Xw39c+z0AYdFvOytdnv/5LKdw3DwcDWrvcK09ENW0=) 23: 34332e3232362e34392e302f32342d3234203d3e20313531313835.roa (hash: DrN6EvaxSyfOrx64lSKyy5bToghM4IJIUgJhjn3Qf+E=) 24: 3130332e34352e3134312e302f32342d3234203d3e20313531323633.roa (hash: VLYofrbSPniO0qPNEJB87CbLmJC5xRZYZf97BFvmres=) 25: 3130332e34352e3133342e302f32342d3234203d3e20313531323633.roa (hash: DQTwY0qfdZ8phN/XPNDg9X0RnR/1sxeaTZvjwhB5bhw=) 26: 3130332e36352e3232342e302f32342d3234203d3e20313531323633.roa (hash: I3p3J8zTRklFLPdRZ+Q9zQwUOdP7emT/RsjsVluAfQc=) 27: 34332e3232362e37352e302f32342d3234203d3e20313531323633.roa (hash: 3kXayL1m+GJrl59qVBFm7MP2mNCavT+lZNSYbXquSq8=) 28: 3130332e34352e3134342e302f32342d3234203d3e20313531323332.roa (hash: nyRsUIZAMGliMA9SM6UnzJp0udBw1RrqO4H4TZw1qRw=) 29: 3130332e34352e3133372e302f32342d3234203d3e20313531323633.roa (hash: /nAgRExr87UnptaMnXyaub52EVhpTGGPUthJrZfXB8E=) 30: 3130332e34352e3133322e302f32342d3234203d3e20313531323633.roa (hash: TLtvholRbFMVX7PQaQfpBBj2HiEUdloBNRkONI50XTU=) 31: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl (hash: ORSeNDwZuFB1nduoYfypmz4BumMV4n8Dn6AlVvXIVmM=) 32: 3130332e3235352e37312e302f32342d3234203d3e20313531323633.roa (hash: UqttEmoA1unL7s9nMNBmisuqhHlP+3LOeNNI03OtFmg=) 33: 34332e3232362e34392e302f32342d3234203d3e20313531323633.roa (hash: d6U06tziP1DXRLjXOYcZAo6KHFOwD3UVu3cLHimaZBI=) 34: 3130332e32302e3132382e302f32342d3234203d3e20313531323633.roa (hash: USDo1+htgWeAWVdmiLtZJKFxIunLuwdSFDwe8/guZn4=) 35: 3130332e34352e3134322e302f32342d3234203d3e20313531323633.roa (hash: ysdt6WCjPu86CKzZ4otbFmgUxo/AX8IdUB0ZJZmkbAs=) 36: 3130332e34352e3133362e302f32342d3234203d3e20313531323633.roa (hash: muRYDgXAl3QDM2yrYGeIGMErJ6nr9786prUQqAkfbeQ=) 37: 3130332e34352e3133392e302f32342d3234203d3e20313531323633.roa (hash: tkZ0olJ44jerS77qUNh/RtZBx6BEFTD4IppgpCZrVgU=) 38: 3130332e34352e3133302e302f32342d3234203d3e20313531323633.roa (hash: YxBgZLLk6/7uSKhrpJTWAUnz6bdVYdSgz1srU9WCmoY=) 39: 3130332e34352e3132382e302f32342d3234203d3e20313531323633.roa (hash: p/qliSMIaGfeJnj2HvSHkLewIifj1a1eahS9MFrpoIc=) 40: 3130332e34352e3133382e302f32342d3234203d3e20313531323633.roa (hash: WaH2JzOr/ocBZdIuOPXcXhP0ygdYxklYnvJTi8T7tQk=) 41: 34332e3232362e37342e302f32342d3234203d3e20313531323633.roa (hash: WtGf8luMWVwVCI0JqGilwQMOg1wGl5B8Qlx/WrfN83M=) 42: 3130332e34352e3133352e302f32342d3234203d3e20313531323633.roa (hash: 7TOVvQGtiRRN6gaq0unOb2RuIqJZlcWuilthQJPnJ6s=) 43: 3130332e34352e3132392e302f32342d3234203d3e20313531323332.roa (hash: OBrkWdRjgKEO3E4GhTiDJvxctDc2qqs8jrnUx+FlbGQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:9e:09:76:71:6c:e7:97:3f:93:2f:a7:59:85:bd:d4:52:dd:15:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Jul 29 09:24:00 2026 GMT Not After : Jul 30 10:29:00 2026 GMT Subject: CN=C146F2A8217BCAD8440F7738C8408C4D9EFB4F75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:08:cc:ee:cf:34:fb:55:dd:cb:9a:2e:42:e9: 30:fd:fe:59:b9:11:26:d9:84:83:bb:6c:b6:94:0b: fd:1d:2b:0e:cc:a7:4d:4d:81:fc:3f:83:8c:db:e4: 92:e5:01:16:8d:01:45:ed:e4:33:fc:5f:30:5f:18: 9c:f1:66:fe:16:a5:97:98:c3:29:19:be:da:6a:cb: 95:6d:e2:0c:20:43:e1:b2:a3:ef:ff:ab:56:32:96: 78:fa:f6:b1:b8:fa:f2:15:94:9d:e0:84:69:b8:5e: ba:9d:40:b6:c7:eb:90:b6:45:88:a8:24:53:fd:7f: f1:6b:de:af:d0:35:bf:60:6d:c1:8d:50:0e:67:b3: 6d:b4:9d:83:3b:7c:07:a6:47:d8:fe:e2:f7:04:f2: a1:95:0d:1c:37:d1:d4:91:85:c5:c2:7b:e7:f3:19: ca:b2:b0:61:63:25:c8:73:17:46:f4:69:06:a3:97: 74:66:50:41:8e:bf:c6:22:1a:69:d1:0c:57:93:e1: 0f:23:30:b4:d2:a8:a4:a5:c0:a1:a0:91:27:a3:39: f8:73:9e:1a:46:14:b0:3f:cb:e2:d0:ee:09:9d:1d: 62:26:24:6a:58:0b:c4:d3:02:47:f1:68:7f:e5:ca: fb:22:c4:15:d1:d1:71:b3:b2:8e:3b:c8:7a:0a:3d: c7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:46:F2:A8:21:7B:CA:D8:44:0F:77:38:C8:40:8C:4D:9E:FB:4F:75 X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:6e:a6:b9:15:54:25:dd:9f:3a:3b:f2:d5:6b:ae:9f:d7:86: 28:eb:f5:5c:4c:07:d7:c4:28:7c:4b:1d:ee:f6:09:48:96:d4: 46:4e:79:b1:f6:4b:21:26:e7:a9:e0:97:f2:9a:fc:f6:f0:b0: ef:b9:07:c2:83:84:4b:a7:aa:59:fb:f1:27:8f:62:c5:cd:40: cc:32:ac:d2:4e:e8:fc:97:50:c2:df:5a:ce:9b:55:db:4c:b2: 5f:0b:54:49:ab:5f:21:a9:7d:54:db:59:3a:6e:05:a1:b2:dc: 29:3d:3b:a2:8f:ea:f8:f4:22:0e:b1:9a:6c:17:17:12:b2:df: a9:47:f6:94:f2:12:4e:49:89:82:af:08:28:db:ad:28:f3:8f: e2:00:be:da:11:5e:1b:f3:13:ab:05:26:1f:d8:1a:42:7b:32: 6a:41:ef:a7:e3:16:48:37:12:91:f7:69:87:7f:68:4d:cd:14: 3d:d3:b6:de:17:1a:b2:d7:98:35:d5:0d:30:d6:f0:03:45:9f: 50:38:28:a2:d2:d8:0c:8b:00:cc:54:3c:b3:de:f9:8e:c3:89: cc:82:57:c2:45:1d:7c:07:43:ff:93:c2:07:70:8b:82:0e:11: a2:31:6a:d7:9a:45:f4:02:af:02:61:17:40:82:29:f3:b2:de: e2:a6:a1:68 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEZ4JdnFs55c/ky+nWYW91FLdFfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA3MjkwOTI0MDBaFw0yNjA3MzAxMDI5MDBaMDMxMTAvBgNV BAMTKEMxNDZGMkE4MjE3QkNBRDg0NDBGNzczOEM4NDA4QzREOUVGQjRGNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2CMzuzzT7Vd3Lmi5C6TD9/lm5 ESbZhIO7bLaUC/0dKw7Mp01Ngfw/g4zb5JLlARaNAUXt5DP8XzBfGJzxZv4WpZeY wykZvtpqy5Vt4gwgQ+Gyo+//q1Yylnj69rG4+vIVlJ3ghGm4XrqdQLbH65C2RYio JFP9f/Fr3q/QNb9gbcGNUA5ns220nYM7fAemR9j+4vcE8qGVDRw30dSRhcXCe+fz GcqysGFjJchzF0b0aQajl3RmUEGOv8YiGmnRDFeT4Q8jMLTSqKSlwKGgkSejOfhz nhpGFLA/y+LQ7gmdHWImJGpYC8TTAkfxaH/lyvsixBXR0XGzso47yHoKPcevAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwUbyqCF7ythED3c4yECMTZ77T3UwHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC9EREJBNjE2Rjk2RDlD MkNEN0Y3Q0FCNjkyRjlFRkU3NjY2NjgwMTM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiW6muRVUJd2f Ojvy1Wuun9eGKOv1XEwH18QofEsd7vYJSJbURk55sfZLISbnqeCX8pr89vCw77kH woOES6eqWfvxJ49ixc1AzDKs0k7o/JdQwt9azptV20yyXwtUSatfIal9VNtZOm4F obLcKT07oo/q+PQiDrGabBcXErLfqUf2lPISTkmJgq8IKNutKPOP4gC+2hFeG/MT qwUmH9gaQnsyakHvp+MWSDcSkfdph39oTc0UPdO23hcasteYNdUNMNbwA0WfUDgo otLYDIsAzFQ8s975jsOJzIJXwkUdfAdD/5PCB3CLgg4RojFq15pF9AKvAmEXQIIp 87Le4qahaA== -----END CERTIFICATE-----Generated at Wed Jul 29 21:07:32 2026 by rpki-client