Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
File:                     DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft (raw, json)
Hash identifier:          ecF90/wmbOjw/vtg7yyDr6Eulby/fRJtBMxsJOkH3XM=
Subject key identifier:   BC:0A:01:58:76:44:9E:4D:31:33:EB:E4:F2:8E:F0:3D:EA:44:7A:98
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       548D20620BAD36C6F08BB8DD43E4003EAE0D324E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
Manifest number:          78
Signing time:             Fri 17 Apr 2026 07:14:41 +0000
Manifest this update:     Fri 17 Apr 2026 07:09:41 +0000
Manifest next update:     Sat 18 Apr 2026 07:59:41 +0000
Files and hashes:         1: 3130332e36352e3232342e302f32332d3332203d3e20313531323633.roa (hash: GrQ+Ba8S3O5ygy9Xi9rdwA4MA9YwGIweDkO0xMhfoV8=)
                          2: 34332e3232362e34392e302f32342d3332203d3e20313531323633.roa (hash: +xN1z1VKskwQnt3EY6pQ5MDi2C4xXIAV51Ye2BNp65Q=)
                          3: 34332e3232372e36382e302f32342d3332203d3e20313531323633.roa (hash: FcMniRZoBjx4hKuRcjGhaqSnxM9LFyeGUzsfF0RW/v0=)
                          4: 34332e3232372e38302e302f32302d3332203d3e20313531323633.roa (hash: 4jkS5M6HasSXGCQpsin8FoCCpuMNdc0/Fz8bW9dxTkU=)
                          5: 3130332e3235352e36382e302f32322d3332203d3e20313531323633.roa (hash: E8XwVM09wV4mmM7F08pkiRB8CC0AKgFeu5HqHXnGNC8=)
                          6: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl (hash: /b8zdWrhO/9j5gmNBc1BDe5z0J87QqsVCBQnyWjHDwU=)
                          7: 3130332e34352e3134342e302f32342d3332203d3e20313531323631.roa (hash: VxAxNMHX5Wi1Wl24TRQwE/ULcpU6PyY1n+Kd4R5TgSw=)
                          8: 3130332e34352e3134342e302f32342d3332203d3e20313531323332.roa (hash: U7WC51cffZGxBC4k6klgd3/qLfTHYS8QUnM3VBcF/rQ=)
                          9: 3130332e34352e3132392e302f32342d3332203d3e20313531323332.roa (hash: zYLUzIja0ccdR/cLWnmR8OJAjEAuvbYPjSe/uOYg9Tg=)
                          10: 323430313a356332303a3a2f33322d313238203d3e20313531323633.roa (hash: 4xod6o1vq3z+k4NYUD1FRFrB+HGmJpeH0a6J+uCnWrQ=)
                          11: 3130332e34352e3132392e302f32342d3332203d3e20313531323631.roa (hash: 4/E/Cr6fd+Bya35a7VJosjEM1GXpdZ8Au2FmVXG1GKE=)
                          12: 3130332e32302e3132382e302f32322d3332203d3e20313531323633.roa (hash: Tvh8h6nNlEm1u5qQIZfifEHO2U1ep0EaYaYXiBzZYfU=)
                          13: 34332e3232362e37322e302f32322d3332203d3e20313531323633.roa (hash: jQPMggXT1FjPZtyPkeJOQLab+84xGE4z7mH9SKKEpPQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8d:20:62:0b:ad:36:c6:f0:8b:b8:dd:43:e4:00:3e:ae:0d:32:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: Apr 17 07:09:41 2026 GMT
            Not After : Apr 18 07:59:41 2026 GMT
        Subject: CN=BC0A015876449E4D3133EBE4F28EF03DEA447A98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:66:3a:46:ca:08:f0:49:51:b7:8e:dc:f9:c9:
                    56:f6:cf:9d:12:5e:ee:ad:03:49:fc:de:ef:5a:23:
                    81:fc:95:13:33:67:48:e1:eb:07:f6:44:82:2d:39:
                    2e:e5:4e:43:e2:81:54:56:41:47:6f:78:ac:d5:4d:
                    03:cb:f8:a0:8a:d6:04:7b:91:de:9e:a9:76:6c:87:
                    15:98:61:63:68:62:96:b5:49:d9:ef:f6:57:d0:13:
                    48:d4:00:fa:6d:af:a0:cd:a5:c7:4b:c2:11:a4:36:
                    3e:6d:17:fd:a3:7b:bc:0e:d6:ff:cd:07:55:77:e7:
                    31:3d:15:2c:98:c1:db:b2:14:2c:5d:25:01:0a:a3:
                    bd:5c:46:eb:1f:7f:40:04:6e:96:be:03:34:49:0e:
                    4a:d2:ff:d7:58:2e:57:72:7b:ac:bd:45:b7:b9:75:
                    70:fb:83:e6:c2:8f:93:d5:85:eb:fd:c5:b2:2b:47:
                    d8:a9:f4:ac:70:f5:d4:22:13:99:a9:a4:11:52:f6:
                    29:d5:fa:1b:d9:e4:5e:e6:6a:23:4c:eb:5f:25:93:
                    c4:25:29:da:9f:ad:fa:3c:8c:42:ef:01:00:64:6c:
                    7d:84:81:9b:e1:14:ac:da:08:38:69:89:8d:f3:5b:
                    28:90:ee:4f:9f:00:59:0f:0f:08:ef:52:5e:0f:90:
                    16:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0A:01:58:76:44:9E:4D:31:33:EB:E4:F2:8E:F0:3D:EA:44:7A:98
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:be:fd:32:45:10:13:4a:e6:7a:1f:02:b5:84:96:5d:23:3e:
         65:02:b9:90:b6:72:30:86:bc:87:38:05:86:1d:37:61:44:79:
         04:1e:c5:cf:8f:52:d3:ea:20:b9:6c:77:b2:ea:7e:7e:b7:24:
         dd:e6:85:9c:31:a1:49:04:eb:85:a1:1e:9d:2b:48:f6:17:d6:
         5b:c3:8d:a6:7e:12:c7:b7:f9:e3:fe:c5:9e:2a:f5:16:1d:b9:
         04:39:c0:7e:67:91:6f:2b:82:a6:75:17:06:75:bc:f9:e5:0e:
         24:ea:d3:f9:ca:a7:cd:05:b5:34:a9:68:78:20:8e:d1:3d:9c:
         75:3e:fa:c5:1b:3d:61:15:68:6e:42:10:70:80:4f:8a:17:1a:
         8c:ae:cb:2d:58:45:24:b2:88:fc:46:b4:ca:dd:2e:70:66:51:
         4f:6e:df:1f:4c:41:de:5e:0a:45:88:0a:0f:17:6b:df:3c:5c:
         6f:8a:be:d1:f1:d8:09:91:2c:cc:32:c1:bb:c0:40:66:2e:11:
         1b:f8:63:50:56:61:49:6c:d4:9e:e2:73:fd:f8:c7:e2:fa:cc:
         dc:57:28:61:1c:c8:2d:8e:58:42:27:dc:17:0d:3e:98:fa:67:
         07:ac:91:3c:c4:d5:38:be:81:c4:b4:5f:a5:77:ea:f2:11:f7:
         54:c9:bf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:10:49 2026 by rpki-client