
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft
File: DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft (raw, json)
Hash identifier: 92b6O4b2UhwgqvMYCn0nCyBUb3IGSa4bBNUCj0inVaE=
Subject key identifier: 3D:DF:E5:AE:BA:B4:64:DD:15:81:E4:16:7B:10:8C:18:76:72:9E:1B
Authority key identifier: DD:C6:C3:19:94:BA:29:24:4D:2D:EE:1F:87:20:8F:41:6E:EF:7E:53
Certificate issuer: /CN=DDC6C31994BA29244D2DEE1F87208F416EEF7E53
Certificate serial: 31C85AB6008A124653EB96F28C072AAD9EA34F8A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft
Manifest number: C4
Signing time: Sat 13 Jun 2026 15:31:53 +0000
Manifest this update: Sat 13 Jun 2026 15:26:53 +0000
Manifest next update: Sun 14 Jun 2026 17:26:53 +0000
Files and hashes: 1: 3130332e3138362e3133372e302f32342d3234203d3e20313531343932.roa (hash: DgyUnrmbmAhUuHu4zrMRxBY+W4oz79eX6DQFbqVUlGw=)
2: 3130332e3138362e3133362e302f32332d3233203d3e20313531343932.roa (hash: 5FeuQwhBzGw4onhkAawCUJ2pR3lDpw8rU7GY3g8+/Po=)
3: DDC6C31994BA29244D2DEE1F87208F416EEF7E53.crl (hash: bNrQa8Aw+vXyA03XsfXiimZSJQeDTJwMizriqKPSIsQ=)
4: 3130332e3138362e3133362e302f32332d3234203d3e203533353837.roa (hash: jUwWrvVyEMA+tDZ0w3uZEuSnj9gLwWG2Zx6MtgVCZw8=)
5: 3130332e3138362e3133362e302f32342d3234203d3e20313531343932.roa (hash: InwrIECCt/d1uf5gUh70LzEcOK0KjnpOZ5M8ME7z0jE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:c8:5a:b6:00:8a:12:46:53:eb:96:f2:8c:07:2a:ad:9e:a3:4f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDC6C31994BA29244D2DEE1F87208F416EEF7E53
Validity
Not Before: Jun 13 15:26:53 2026 GMT
Not After : Jun 14 17:26:53 2026 GMT
Subject: CN=3DDFE5AEBAB464DD1581E4167B108C1876729E1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:9c:7d:5d:ec:66:d3:43:eb:e7:11:48:80:
c1:11:63:ed:33:d5:b6:5b:a8:6e:e9:3f:a0:02:6e:
de:09:40:48:3f:b1:c8:a6:3e:47:24:3f:7d:63:dc:
e2:07:c9:23:8c:f4:84:f4:aa:3b:d2:9d:20:2f:c9:
0e:c8:22:d1:ac:97:5f:13:a9:72:cf:c0:a9:9f:12:
c5:7a:0b:cd:93:b5:27:b0:7e:a1:b0:f8:9b:ee:ca:
db:e4:f4:5e:63:59:a6:83:c0:b7:ca:bd:3f:f5:13:
12:fa:40:88:4c:5f:31:13:8b:59:65:b4:28:f0:62:
ca:46:1f:25:25:cc:c5:ce:58:dd:80:3a:90:c6:09:
06:d2:32:b6:48:48:92:b8:0e:ec:aa:4a:a8:0f:a5:
a2:c7:03:4a:70:c8:32:fa:45:b6:75:15:49:d5:b3:
bb:7b:f2:ce:8c:52:10:3d:f9:a2:dd:28:f0:f3:98:
eb:aa:57:f8:0f:67:bc:27:06:af:b8:93:97:c4:1d:
94:54:ed:10:51:05:1a:90:e4:72:25:af:7a:21:15:
f4:d0:13:06:06:91:1d:20:9d:b3:b9:d8:86:25:08:
63:14:82:82:c5:df:8d:35:5b:16:20:ca:b7:b7:99:
91:20:ef:30:79:16:09:e1:fd:53:df:2a:c0:f1:f1:
03:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DF:E5:AE:BA:B4:64:DD:15:81:E4:16:7B:10:8C:18:76:72:9E:1B
X509v3 Authority Key Identifier:
keyid:DD:C6:C3:19:94:BA:29:24:4D:2D:EE:1F:87:20:8F:41:6E:EF:7E:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:84:c1:62:27:9d:7c:19:06:5b:3b:62:11:27:ff:14:eb:e1:
6d:54:74:a3:f5:21:37:58:e6:c3:c6:19:75:9c:68:27:ac:1f:
81:b4:5c:35:ff:21:fa:b7:59:15:8e:e5:b4:3f:7e:a4:e6:78:
bc:f6:0b:52:7c:29:9b:67:a8:af:e6:07:0b:a9:83:dd:59:e6:
68:c0:a5:fb:2d:34:0e:65:60:86:53:ce:84:a0:b1:be:0b:25:
9c:9c:64:6f:fb:d4:dd:08:c7:3e:f9:f3:0c:70:19:dd:ef:b8:
33:94:75:b1:e5:e6:a3:5e:1d:be:d0:1b:9d:95:43:d4:a9:87:
e8:7c:4c:6c:03:c4:fe:cd:51:76:4f:b7:31:ef:15:26:06:16:
a0:88:43:31:c4:23:1e:2e:e1:8d:aa:58:23:8f:18:f6:4d:43:
b6:f2:a5:9f:0b:16:2b:b8:46:77:00:37:18:80:77:a6:f0:50:
32:c5:3b:ae:17:94:2a:8f:20:ab:12:47:ea:6d:0d:39:c3:09:
2a:d4:6c:c7:8b:1e:1d:c1:82:48:84:31:d4:85:91:81:9d:d4:
e7:c5:c8:c6:80:7e:79:1b:ec:a4:6d:09:d2:68:f3:d1:bc:7d:
ae:40:53:fd:eb:a9:81:a3:f5:47:aa:e2:2f:47:fa:0f:17:e2:
80:32:50:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:18 2026 by rpki-client