
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft
File: DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft (raw, json)
Hash identifier: 6Z9ThnfppDCOceQpN318vbPe2JyxEhwiNyYI31z+WOc=
Subject key identifier: 46:60:79:E6:CA:AF:AD:F4:19:93:A0:E2:B9:2B:A9:04:0B:11:44:39
Authority key identifier: DD:C6:C3:19:94:BA:29:24:4D:2D:EE:1F:87:20:8F:41:6E:EF:7E:53
Certificate issuer: /CN=DDC6C31994BA29244D2DEE1F87208F416EEF7E53
Certificate serial: 49ED80BE1A767F2E7B4B9201C7C97BD993639AB3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft
Manifest number: 2B
Signing time: Thu 19 Feb 2026 14:32:25 +0000
Manifest this update: Thu 19 Feb 2026 14:27:25 +0000
Manifest next update: Fri 20 Feb 2026 14:36:25 +0000
Files and hashes: 1: 3130332e3138362e3133362e302f32342d3234203d3e20313531343932.roa (hash: InwrIECCt/d1uf5gUh70LzEcOK0KjnpOZ5M8ME7z0jE=)
2: 3130332e3138362e3133362e302f32332d3234203d3e203533353837.roa (hash: jUwWrvVyEMA+tDZ0w3uZEuSnj9gLwWG2Zx6MtgVCZw8=)
3: 3130332e3138362e3133362e302f32332d3233203d3e20313531343932.roa (hash: 5FeuQwhBzGw4onhkAawCUJ2pR3lDpw8rU7GY3g8+/Po=)
4: 3130332e3138362e3133372e302f32342d3234203d3e20313531343932.roa (hash: DgyUnrmbmAhUuHu4zrMRxBY+W4oz79eX6DQFbqVUlGw=)
5: DDC6C31994BA29244D2DEE1F87208F416EEF7E53.crl (hash: qXI01pSC9j6mbuzELKtlhKgqStZJA0UaC0qQZfb+aWI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Feb 2026 10:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ed:80:be:1a:76:7f:2e:7b:4b:92:01:c7:c9:7b:d9:93:63:9a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDC6C31994BA29244D2DEE1F87208F416EEF7E53
Validity
Not Before: Feb 19 14:27:25 2026 GMT
Not After : Feb 20 14:36:25 2026 GMT
Subject: CN=466079E6CAAFADF41993A0E2B92BA9040B114439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:d5:14:8a:9a:5f:d1:b1:b3:22:14:d7:22:
9f:ce:90:ee:b0:5b:a5:6e:a5:db:34:61:df:df:03:
c1:82:47:11:44:2d:b7:a8:2b:4c:e9:a6:fe:7c:e6:
08:4a:65:2a:7f:07:aa:3e:84:44:58:76:1c:59:37:
f9:3c:18:4c:82:c3:99:dd:83:c2:9d:85:93:d5:85:
65:d3:b2:5e:3f:ad:39:0c:a2:d7:67:eb:43:b1:6a:
f1:f2:bc:f1:d0:08:4b:35:60:a4:44:8e:d6:7d:53:
59:8a:98:15:2f:5a:a5:52:a5:38:a4:3f:92:c7:cb:
db:38:48:a0:a4:34:49:2b:ae:4a:7a:e4:8b:fb:a5:
a0:35:70:65:f9:22:71:50:23:ba:19:58:80:c8:13:
32:31:2b:42:05:91:fd:89:c2:fa:6a:57:aa:cd:c1:
1f:d1:ce:f8:e5:64:25:64:a8:3f:e4:fd:bf:08:1a:
83:5b:e7:71:2e:48:b3:68:ec:c8:3d:11:bd:54:40:
36:6e:bb:df:88:06:57:1b:5f:5c:a6:da:9c:8e:8c:
09:f5:79:fd:26:4c:6e:d3:55:ad:b8:33:d5:82:0a:
c4:4c:f6:f6:62:d6:87:66:12:e8:c9:2c:2e:d7:d8:
da:d7:88:d1:dd:53:68:f2:3b:87:2f:14:0f:d1:50:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:60:79:E6:CA:AF:AD:F4:19:93:A0:E2:B9:2B:A9:04:0B:11:44:39
X509v3 Authority Key Identifier:
keyid:DD:C6:C3:19:94:BA:29:24:4D:2D:EE:1F:87:20:8F:41:6E:EF:7E:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061710850/0/DDC6C31994BA29244D2DEE1F87208F416EEF7E53.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:97:97:93:18:13:39:18:dc:4d:84:56:e9:2b:81:0f:16:cc:
ba:4e:ca:aa:27:9e:1e:72:a4:72:ba:70:aa:0c:f3:40:fb:8f:
24:63:de:67:0d:0b:1e:5d:ce:43:99:e6:79:16:5a:1b:47:b7:
74:65:be:5f:18:f7:52:e5:c9:f2:66:ee:b0:1a:af:5b:74:2e:
b4:2f:1d:b2:be:97:b9:66:a1:df:87:ee:fe:a8:d1:30:ea:39:
7a:ca:df:15:07:32:90:3d:c4:55:04:66:a6:e7:2f:90:ff:56:
14:33:fe:1e:cd:40:a7:79:ce:e0:1c:25:fb:da:f8:ca:33:0c:
52:69:98:45:95:ad:3a:64:67:2c:02:b1:4a:b0:e0:5b:9d:7a:
89:a0:74:83:b8:56:f4:6d:37:8b:84:82:d4:e3:a2:51:e2:74:
14:1e:f1:05:87:c1:a3:29:f4:2f:f4:e2:30:f0:56:8d:08:72:
a7:55:d0:2e:0c:d4:1c:b9:b0:31:6c:6e:23:05:f7:ac:6f:fb:
4f:d0:1a:59:55:e3:1e:6e:e4:79:b9:6b:59:db:33:77:f6:4e:
22:6a:f6:10:30:60:4b:6b:38:ac:dc:91:4d:11:8e:7b:ab:20:
ff:59:d3:d7:8b:2e:a1:e2:cc:12:9e:7d:66:05:d3:c1:6a:6e:
70:a2:59:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:06:32 2026 by rpki-client