$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft File: DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft (raw, json) Hash identifier: uwLjRynqiKfZF2p42GD4l3pkNBeGlfDQg0lA7NXe/Tc= Subject key identifier: 82:79:4F:D6:21:7A:F2:0A:AC:BE:7F:D0:65:4E:FE:08:44:D4:08:D9 Authority key identifier: DD:C6:C3:19:94:BA:29:24:4D:2D:EE:1F:87:20:8F:41:6E:EF:7E:53 Certificate issuer: /CN=DDC6C31994BA29244D2DEE1F87208F416EEF7E53 Certificate serial: 28C34B1505285143A54BBB2CAF7F6BB5753CC79F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft Manifest number: 77 Signing time: Thu 16 Apr 2026 22:44:36 +0000 Manifest this update: Thu 16 Apr 2026 22:39:36 +0000 Manifest next update: Sat 18 Apr 2026 01:35:36 +0000 Files and hashes: 1: 3130332e3138362e3133372e302f32342d3234203d3e20313531343932.roa (hash: DgyUnrmbmAhUuHu4zrMRxBY+W4oz79eX6DQFbqVUlGw=) 2: DDC6C31994BA29244D2DEE1F87208F416EEF7E53.crl (hash: oPYygcznMBarRXgTXCIuekR+WyJOGWnfoeCbXOJG4Rs=) 3: 3130332e3138362e3133362e302f32342d3234203d3e20313531343932.roa (hash: InwrIECCt/d1uf5gUh70LzEcOK0KjnpOZ5M8ME7z0jE=) 4: 3130332e3138362e3133362e302f32332d3234203d3e203533353837.roa (hash: jUwWrvVyEMA+tDZ0w3uZEuSnj9gLwWG2Zx6MtgVCZw8=) 5: 3130332e3138362e3133362e302f32332d3233203d3e20313531343932.roa (hash: 5FeuQwhBzGw4onhkAawCUJ2pR3lDpw8rU7GY3g8+/Po=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 01:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c3:4b:15:05:28:51:43:a5:4b:bb:2c:af:7f:6b:b5:75:3c:c7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC6C31994BA29244D2DEE1F87208F416EEF7E53 Validity Not Before: Apr 16 22:39:36 2026 GMT Not After : Apr 18 01:35:36 2026 GMT Subject: CN=82794FD6217AF20AACBE7FD0654EFE0844D408D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:76:91:82:46:36:e9:d8:94:64:62:f0:43:0d: d1:ab:b4:a5:9f:a0:f4:df:4c:59:e8:15:27:87:a4: fb:af:c3:ff:d6:96:30:3a:6c:63:ac:b3:99:52:30: eb:ed:37:2f:2c:06:1b:15:27:93:8f:fd:bb:67:d3: d3:b3:6d:88:b7:34:c2:f6:26:e1:7c:3c:f7:e0:d4: 5c:34:ac:f9:52:9d:48:6e:9d:b2:a7:b7:00:c9:62: 39:2c:88:f2:5c:94:10:a4:08:86:d4:d7:1f:ae:e6: 97:2c:96:57:14:f0:05:99:97:d2:f8:fe:0d:ec:b3: fb:cb:8e:44:53:46:b4:93:21:ab:6b:c5:13:db:aa: 0b:c7:95:a6:35:f5:3f:3f:b8:58:96:1c:c5:11:fc: 5b:f3:53:e9:5a:f9:34:77:ea:c8:30:c0:45:c0:bc: 91:46:7d:d9:98:ba:ec:fe:a2:a7:69:60:14:23:76: f8:63:d7:d4:0d:ef:bb:85:9f:46:0a:fd:06:8c:cb: 01:73:2c:3d:53:89:cd:4f:51:74:72:f7:3a:c5:95: c4:ab:24:aa:89:4e:59:bf:b5:7c:84:1e:16:90:aa: 2c:80:f1:56:cf:7f:3b:43:0d:c0:e3:93:2e:95:cf: 1e:44:ca:cc:e0:b8:0d:2e:b2:d9:28:0c:3f:20:d0: 93:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:79:4F:D6:21:7A:F2:0A:AC:BE:7F:D0:65:4E:FE:08:44:D4:08:D9 X509v3 Authority Key Identifier: keyid:DD:C6:C3:19:94:BA:29:24:4D:2D:EE:1F:87:20:8F:41:6E:EF:7E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:09:df:3e:ad:d9:cf:88:d2:7f:6a:6a:34:3c:41:c3:51:7e: cd:e1:10:dd:b8:d7:8e:db:a2:db:22:5d:9b:37:0a:61:36:1d: 94:af:6d:e0:4d:49:a1:39:06:47:37:50:6b:a7:ed:21:70:6f: a6:e9:57:84:da:af:73:88:41:9e:3e:e5:c8:db:84:11:3d:94: 80:6d:e6:ee:bb:00:76:09:15:e5:67:36:3e:a5:6c:4e:35:0a: c2:8e:c9:85:de:a9:35:0f:13:f2:e7:d1:5b:32:97:1a:ed:52: 80:2c:d2:e3:f3:32:98:4a:df:05:5c:11:5c:79:a2:57:10:8d: 7b:87:34:d3:65:26:44:b2:20:5d:dc:e2:84:e1:26:cd:73:ef: fc:59:f3:6a:b1:47:f4:2e:15:be:09:5e:43:e5:21:57:6a:c2: 19:3a:24:4c:14:3b:49:12:05:a7:37:67:6d:00:de:ed:00:66: 94:35:26:9a:ee:c4:dd:18:47:ed:0e:a0:ae:e0:90:95:ed:a1: f9:52:4b:ab:0d:67:6f:c3:36:5e:33:95:10:ae:11:aa:cc:fd: ec:ae:e5:ff:50:19:94:ca:ad:69:9f:bb:e1:bd:4c:64:51:53: 46:2b:cf:c7:17:00:cb:74:f6:b5:27:9c:a5:e1:a5:c7:1d:26: e0:17:53:ab -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKMNLFQUoUUOlS7ssr39rtXU8x58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDNkMzMTk5NEJBMjkyNDREMkRFRTFGODcyMDhGNDE2 RUVGN0U1MzAeFw0yNjA0MTYyMjM5MzZaFw0yNjA0MTgwMTM1MzZaMDMxMTAvBgNV BAMTKDgyNzk0RkQ2MjE3QUYyMEFBQ0JFN0ZEMDY1NEVGRTA4NDRENDA4RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRdpGCRjbp2JRkYvBDDdGrtKWf oPTfTFnoFSeHpPuvw//WljA6bGOss5lSMOvtNy8sBhsVJ5OP/btn09OzbYi3NML2 JuF8PPfg1Fw0rPlSnUhunbKntwDJYjksiPJclBCkCIbU1x+u5pcsllcU8AWZl9L4 /g3ss/vLjkRTRrSTIatrxRPbqgvHlaY19T8/uFiWHMUR/FvzU+la+TR36sgwwEXA vJFGfdmYuuz+oqdpYBQjdvhj19QN77uFn0YK/QaMywFzLD1Tic1PUXRy9zrFlcSr JKqJTlm/tXyEHhaQqiyA8VbPfztDDcDjky6Vzx5EyszguA0ustkoDD8g0JM7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgnlP1iF68gqsvn/QZU7+CETUCNkwHwYDVR0j BBgwFoAU3cbDGZS6KSRNLe4fhyCPQW7vflMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTcxMDg1MC8wL0REQzZDMzE5OTRCQTI5MjQ0RDJERUUxRjg3MjA4 RjQxNkVFRjdFNTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERDNkMzMTk5NEJBMjkyNDREMkRFRTFGODcyMDhGNDE2RUVGN0U1My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE3MTA4NTAvMC9EREM2QzMxOTk0QkEy OTI0NEQyREVFMUY4NzIwOEY0MTZFRUY3RTUzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQnfPq3Zz4jS f2pqNDxBw1F+zeEQ3bjXjtui2yJdmzcKYTYdlK9t4E1JoTkGRzdQa6ftIXBvpulX hNqvc4hBnj7lyNuEET2UgG3m7rsAdgkV5Wc2PqVsTjUKwo7Jhd6pNQ8T8ufRWzKX Gu1SgCzS4/MymErfBVwRXHmiVxCNe4c002UmRLIgXdzihOEmzXPv/FnzarFH9C4V vgleQ+UhV2rCGTokTBQ7SRIFpzdnbQDe7QBmlDUmmu7E3RhH7Q6gruCQle2h+VJL qw1nb8M2XjOVEK4Rqsz97K7l/1AZlMqtaZ+74b1MZFFTRivPxxcAy3T2tSecpeGl xx0m4BdTqw== -----END CERTIFICATE-----Generated at Fri Apr 17 03:16:45 2026 by rpki-client