$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft File: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft (raw, json) Hash identifier: KKZzhXlzv3Eb7EDC7tcinCW2Dh4vHIMEz3GMMo3er5E= Subject key identifier: 75:57:9F:69:61:3D:95:59:0E:69:36:51:1C:63:6F:29:52:7D:64:17 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 5EBBF2CD66DF535EBB8C98E5CBC07231729D2923 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft Manifest number: 2E Signing time: Sun 22 Feb 2026 23:12:30 +0000 Manifest this update: Sun 22 Feb 2026 23:07:30 +0000 Manifest next update: Tue 24 Feb 2026 00:59:30 +0000 Files and hashes: 1: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl (hash: uaZItwQTacnbjDeSuWvpjcysfTw7a/Of1KM1ApejZiE=) 2: 3130332e34352e3134342e302f32342d3332203d3e20313531323631.roa (hash: VxAxNMHX5Wi1Wl24TRQwE/ULcpU6PyY1n+Kd4R5TgSw=) 3: 3130332e34352e3132392e302f32342d3332203d3e20313531323332.roa (hash: zYLUzIja0ccdR/cLWnmR8OJAjEAuvbYPjSe/uOYg9Tg=) 4: 3130332e34352e3134342e302f32342d3332203d3e20313531323332.roa (hash: U7WC51cffZGxBC4k6klgd3/qLfTHYS8QUnM3VBcF/rQ=) 5: 3130332e34352e3132392e302f32342d3332203d3e20313531323631.roa (hash: 4/E/Cr6fd+Bya35a7VJosjEM1GXpdZ8Au2FmVXG1GKE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:bb:f2:cd:66:df:53:5e:bb:8c:98:e5:cb:c0:72:31:72:9d:29:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Feb 22 23:07:30 2026 GMT Not After : Feb 24 00:59:30 2026 GMT Subject: CN=75579F69613D95590E6936511C636F29527D6417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:13:92:6e:1c:8f:fc:1a:ff:b6:84:eb:47: 15:89:bb:a0:84:42:e5:32:b1:76:4d:1f:80:24:18: a6:1c:69:cb:19:64:46:d5:00:8e:fd:0f:b9:b1:0c: dd:49:fa:3a:0b:3b:92:2b:19:c6:a4:bd:32:7b:bb: 12:c1:ce:26:36:e7:b0:f2:c7:ef:33:d3:bb:d0:2d: 0b:8e:fe:23:63:e9:ce:b7:0f:f6:d2:99:cc:58:49: d5:26:9c:46:9a:7f:04:86:f2:49:0c:74:c0:45:4f: 2c:2c:11:7d:f0:ed:94:4f:3e:d6:fe:41:3c:fe:2c: ed:c7:33:e9:24:dc:a1:4f:ce:a0:ac:4a:ad:f2:43: 69:36:b1:0e:4d:e9:07:19:77:b8:35:bc:45:c9:99: ee:6b:9c:8e:69:ec:05:c7:1f:3c:af:b8:3a:ea:f0: 72:b5:04:ae:cc:c9:cc:aa:3c:5e:bd:cc:b0:1d:c3: 07:92:9b:39:89:d0:5b:ca:d2:aa:7d:6e:a6:ba:bd: 59:e9:38:4b:71:5e:18:a8:bf:a6:f7:90:22:34:a5: 35:08:2d:0e:ad:9c:1b:19:8a:ec:d2:c5:1d:68:73: fe:d0:8e:d7:f0:37:e7:91:96:00:74:ab:4f:fd:e7: 87:97:97:31:12:f6:82:f1:0b:7a:9b:fe:88:4f:71: 4e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:57:9F:69:61:3D:95:59:0E:69:36:51:1C:63:6F:29:52:7D:64:17 X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:92:a2:33:87:a8:ae:e5:a7:38:af:a9:bf:ac:c6:9d:03:e3: 38:2e:e9:1d:d8:7e:33:82:38:15:29:1f:45:fb:1f:99:6c:d8: 89:6d:2f:ca:86:1b:20:f2:3d:2b:42:07:c6:29:82:d2:cc:4c: fd:68:0f:eb:fe:7c:c3:4d:50:a8:cd:76:41:56:6e:e5:60:ab: 91:70:e9:bf:f0:41:db:46:e4:f2:71:53:e4:cd:6c:3a:1f:b9: b8:21:b4:e8:86:a9:ef:4f:58:6b:95:a1:d6:14:5c:2c:08:1e: 92:e1:01:4c:30:eb:fc:77:b9:4b:31:bb:e3:d8:3a:38:41:35: f9:20:29:89:b0:cf:ab:2c:5b:ab:30:1c:50:30:4f:f7:ba:4d: 4e:94:09:13:60:a8:07:02:2d:f8:24:c2:83:d8:ad:95:7a:a8: 3e:f7:69:a1:00:25:ad:0e:e9:cc:f2:71:c6:47:89:4f:98:c0: 0a:52:f0:f3:47:30:df:fe:dc:a3:e9:5e:22:5c:6e:50:82:c2: ad:5a:4e:82:30:6d:41:ae:ab:d8:13:00:f3:08:bc:40:38:c3: dc:ba:5a:82:4c:b4:69:cc:ea:29:23:5e:5e:51:b7:2f:26:9d: 95:dd:ec:a0:df:48:03:7c:69:b1:0f:51:05:c8:7f:38:86:f7: 66:a1:ee:46 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXrvyzWbfU167jJjly8ByMXKdKSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjAyMjIyMzA3MzBaFw0yNjAyMjQwMDU5MzBaMDMxMTAvBgNV BAMTKDc1NTc5RjY5NjEzRDk1NTkwRTY5MzY1MTFDNjM2RjI5NTI3RDY0MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD4hOSbhyP/Br/toTrRxWJu6CE QuUysXZNH4AkGKYcacsZZEbVAI79D7mxDN1J+joLO5IrGcakvTJ7uxLBziY257Dy x+8z07vQLQuO/iNj6c63D/bSmcxYSdUmnEaafwSG8kkMdMBFTywsEX3w7ZRPPtb+ QTz+LO3HM+kk3KFPzqCsSq3yQ2k2sQ5N6QcZd7g1vEXJme5rnI5p7AXHHzyvuDrq 8HK1BK7MycyqPF69zLAdwweSmzmJ0FvK0qp9bqa6vVnpOEtxXhiov6b3kCI0pTUI LQ6tnBsZiuzSxR1oc/7QjtfwN+eRlgB0q0/954eXlzES9oLxC3qb/ohPcU6LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdVefaWE9lVkOaTZRHGNvKVJ9ZBcwHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC9EREJBNjE2Rjk2RDlD MkNEN0Y3Q0FCNjkyRjlFRkU3NjY2NjgwMTM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5pKiM4eoruWn OK+pv6zGnQPjOC7pHdh+M4I4FSkfRfsfmWzYiW0vyoYbIPI9K0IHximC0sxM/WgP 6/58w01QqM12QVZu5WCrkXDpv/BB20bk8nFT5M1sOh+5uCG06Iap709Ya5Wh1hRc LAgekuEBTDDr/He5SzG749g6OEE1+SApibDPqyxbqzAcUDBP97pNTpQJE2CoBwIt +CTCg9itlXqoPvdpoQAlrQ7pzPJxxkeJT5jAClLw80cw3/7co+leIlxuUILCrVpO gjBtQa6r2BMA8wi8QDjD3Lpagky0aczqKSNeXlG3Lyadld3soN9IA3xpsQ9RBch/ OIb3ZqHuRg== -----END CERTIFICATE-----Generated at Mon Feb 23 02:04:14 2026 by rpki-client