Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
File:                     DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft (raw, json)
Hash identifier:          y3dRA0i6ER9nSeiCue/K/cTP1rtcd3J57K5i3wLZGCY=
Subject key identifier:   1F:06:68:99:BE:08:AB:DD:42:77:39:36:42:C4:F1:E6:BE:1F:23:C8
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       5A83DF77AB3B9276C6F1442815DA5F990ECC6BFE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
Manifest number:          C6
Signing time:             Sat 13 Jun 2026 21:02:13 +0000
Manifest this update:     Sat 13 Jun 2026 20:57:13 +0000
Manifest next update:     Mon 15 Jun 2026 00:40:13 +0000
Files and hashes:         1: 34332e3232362e37322e302f32322d3332203d3e20313531323633.roa (hash: jQPMggXT1FjPZtyPkeJOQLab+84xGE4z7mH9SKKEpPQ=)
                          2: 323430313a356332303a3a2f33322d313238203d3e20313531323633.roa (hash: 4xod6o1vq3z+k4NYUD1FRFrB+HGmJpeH0a6J+uCnWrQ=)
                          3: 3130332e34352e3132392e302f32342d3332203d3e20313531323631.roa (hash: 4/E/Cr6fd+Bya35a7VJosjEM1GXpdZ8Au2FmVXG1GKE=)
                          4: 3130332e34352e3134342e302f32342d3332203d3e20313531323332.roa (hash: U7WC51cffZGxBC4k6klgd3/qLfTHYS8QUnM3VBcF/rQ=)
                          5: 34332e3232372e38302e302f32302d3332203d3e20313531323633.roa (hash: 4jkS5M6HasSXGCQpsin8FoCCpuMNdc0/Fz8bW9dxTkU=)
                          6: 3130332e3235352e36382e302f32322d3332203d3e20313531323633.roa (hash: E8XwVM09wV4mmM7F08pkiRB8CC0AKgFeu5HqHXnGNC8=)
                          7: 3130332e34352e3132382e302f31392d3332203d3e20313531313835.roa (hash: tsyd3XyL1sR8yC/sToiyZd0LYsCW7lvtrAxpV1AnXjs=)
                          8: 34332e3232372e36382e302f32342d3332203d3e20313531323633.roa (hash: FcMniRZoBjx4hKuRcjGhaqSnxM9LFyeGUzsfF0RW/v0=)
                          9: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl (hash: CdOr8TcSZmXsKt8Dt8Hiolz+2UoMYcmAW1ij4wOdekY=)
                          10: 3130332e32302e3132382e302f32322d3332203d3e20313531323633.roa (hash: Tvh8h6nNlEm1u5qQIZfifEHO2U1ep0EaYaYXiBzZYfU=)
                          11: 3130332e36352e3232342e302f32332d3332203d3e20313531323633.roa (hash: GrQ+Ba8S3O5ygy9Xi9rdwA4MA9YwGIweDkO0xMhfoV8=)
                          12: 3130332e32302e3132382e302f32322d3332203d3e20313531313835.roa (hash: baXUEgh/ARKa7pBDo/kp78WqV0sg9al8zwp4ARJmRAU=)
                          13: 34332e3232362e37322e302f32322d3332203d3e20313531313835.roa (hash: kSS/336cZAWVPyiDW/MySY62mT7Cy5L/TBiFinsaMuc=)
                          14: 3130332e34352e3134342e302f32342d3332203d3e20313531323631.roa (hash: VxAxNMHX5Wi1Wl24TRQwE/ULcpU6PyY1n+Kd4R5TgSw=)
                          15: 3130332e34352e3132392e302f32342d3332203d3e20313531323332.roa (hash: zYLUzIja0ccdR/cLWnmR8OJAjEAuvbYPjSe/uOYg9Tg=)
                          16: 34332e3232362e34392e302f32342d3332203d3e20313531323633.roa (hash: +xN1z1VKskwQnt3EY6pQ5MDi2C4xXIAV51Ye2BNp65Q=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:83:df:77:ab:3b:92:76:c6:f1:44:28:15:da:5f:99:0e:cc:6b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: Jun 13 20:57:13 2026 GMT
            Not After : Jun 15 00:40:13 2026 GMT
        Subject: CN=1F066899BE08ABDD4277393642C4F1E6BE1F23C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e4:fd:bd:4f:4d:81:e1:af:47:6e:d4:78:21:
                    41:fd:39:30:d1:0f:b6:3f:f9:28:95:62:f1:af:1f:
                    65:01:21:e8:a6:99:67:32:d2:f6:0b:89:2d:c2:7f:
                    34:25:40:35:14:46:02:71:16:ab:4d:6b:f0:74:af:
                    25:4c:29:4e:30:55:15:85:ac:39:61:6f:c3:1c:e3:
                    da:fd:d2:ca:58:dd:92:6d:1f:ec:da:c1:a0:fc:db:
                    e6:59:5e:4b:62:4a:14:2d:25:ec:f4:ed:d5:30:c8:
                    4f:67:86:bd:a8:39:19:b2:77:4b:82:2f:d4:ec:b7:
                    8a:35:c8:33:d8:e4:b6:a6:45:ce:90:dc:8a:51:f3:
                    38:63:91:98:6c:5a:57:33:bb:01:df:73:92:28:2b:
                    e5:e4:95:8d:a2:17:ba:68:ba:18:31:56:4f:8c:d0:
                    0c:9e:f8:eb:f2:77:44:9a:6b:7c:ef:cc:8f:6e:04:
                    ff:a1:bb:b3:d1:76:8c:c7:3f:fb:ab:5a:59:44:e1:
                    5d:fc:30:fe:1c:5c:01:18:bd:33:63:a9:7b:fc:2c:
                    56:d5:5c:f4:d8:26:a8:43:21:d0:f5:3f:d5:73:84:
                    74:ea:7f:ff:89:4b:7c:19:98:96:67:69:45:80:b2:
                    fa:ad:11:9e:24:ad:bf:ee:22:ea:24:70:5c:9d:d1:
                    60:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:06:68:99:BE:08:AB:DD:42:77:39:36:42:C4:F1:E6:BE:1F:23:C8
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:0e:7a:32:9b:b2:58:16:6b:ab:e3:dc:e9:4e:5a:61:7c:a2:
         e9:05:15:1b:87:d4:df:39:d3:eb:3d:54:c2:5a:43:8c:7c:b3:
         01:64:69:4e:96:91:3d:42:81:72:b0:6d:f4:14:0b:32:2a:3e:
         ee:4b:56:88:b7:db:63:fb:1e:09:ab:30:c4:f3:66:a8:1c:ec:
         c4:21:db:11:6f:9a:b3:ca:45:1c:d1:cb:92:89:f5:ee:a7:d3:
         78:56:58:6d:52:bf:33:91:cb:e4:bb:3c:c4:65:82:69:b1:4e:
         10:db:f5:ee:bd:ca:f0:a3:b7:fe:67:82:c6:5a:e3:cb:7b:bf:
         0a:00:db:b6:64:f4:5d:04:12:8c:43:1f:41:00:c7:e8:38:ad:
         57:06:79:50:a7:56:7f:fb:7c:9c:f5:d9:77:5b:24:67:67:04:
         3c:d3:40:46:97:ef:0d:e4:15:55:72:1b:4c:60:fb:70:20:4a:
         46:ba:62:26:d4:2b:5e:76:39:dc:77:6d:4e:4e:24:d6:f2:02:
         c1:76:d9:ce:4b:9a:18:34:1e:6f:f9:5b:c5:63:9f:0e:65:f9:
         66:da:5a:5a:b5:64:df:92:ad:32:44:55:e9:14:09:96:a5:fe:
         76:33:80:15:7e:4f:89:bc:d0:e1:3c:47:68:a8:2e:69:fe:0e:
         82:6e:56:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:35:34 2026 by rpki-client