
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
File: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft (raw, json)
Hash identifier: W9XGPC7erWA3hFr9TH60e1jrzStX1F1l+68tV0c3of8=
Subject key identifier: AD:3A:12:49:85:32:8F:C9:05:49:64:55:60:AC:E0:62:DD:7B:3B:2E
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 72FA7AD6C962471A440D0F836A5DF48EFC98859C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
Manifest number: 73
Signing time: Mon 13 Apr 2026 08:39:17 +0000
Manifest this update: Mon 13 Apr 2026 08:34:17 +0000
Manifest next update: Tue 14 Apr 2026 11:49:17 +0000
Files and hashes: 1: 34332e3232372e36382e302f32342d3332203d3e20313531323633.roa (hash: FcMniRZoBjx4hKuRcjGhaqSnxM9LFyeGUzsfF0RW/v0=)
2: 323430313a356332303a3a2f33322d313238203d3e20313531323633.roa (hash: 4xod6o1vq3z+k4NYUD1FRFrB+HGmJpeH0a6J+uCnWrQ=)
3: 3130332e3235352e36382e302f32322d3332203d3e20313531323633.roa (hash: E8XwVM09wV4mmM7F08pkiRB8CC0AKgFeu5HqHXnGNC8=)
4: 3130332e34352e3134342e302f32342d3332203d3e20313531323631.roa (hash: VxAxNMHX5Wi1Wl24TRQwE/ULcpU6PyY1n+Kd4R5TgSw=)
5: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl (hash: XzdyBaZk7869RNK6ih9z/75E514+bysMmB/z878M4hU=)
6: 3130332e34352e3132392e302f32342d3332203d3e20313531323332.roa (hash: zYLUzIja0ccdR/cLWnmR8OJAjEAuvbYPjSe/uOYg9Tg=)
7: 3130332e34352e3134342e302f32342d3332203d3e20313531323332.roa (hash: U7WC51cffZGxBC4k6klgd3/qLfTHYS8QUnM3VBcF/rQ=)
8: 3130332e34352e3132392e302f32342d3332203d3e20313531323631.roa (hash: 4/E/Cr6fd+Bya35a7VJosjEM1GXpdZ8Au2FmVXG1GKE=)
9: 34332e3232362e37322e302f32322d3332203d3e20313531323633.roa (hash: jQPMggXT1FjPZtyPkeJOQLab+84xGE4z7mH9SKKEpPQ=)
10: 34332e3232372e38302e302f32302d3332203d3e20313531323633.roa (hash: 4jkS5M6HasSXGCQpsin8FoCCpuMNdc0/Fz8bW9dxTkU=)
11: 34332e3232362e34392e302f32342d3332203d3e20313531323633.roa (hash: +xN1z1VKskwQnt3EY6pQ5MDi2C4xXIAV51Ye2BNp65Q=)
12: 3130332e32302e3132382e302f32322d3332203d3e20313531323633.roa (hash: Tvh8h6nNlEm1u5qQIZfifEHO2U1ep0EaYaYXiBzZYfU=)
13: 3130332e36352e3232342e302f32332d3332203d3e20313531323633.roa (hash: GrQ+Ba8S3O5ygy9Xi9rdwA4MA9YwGIweDkO0xMhfoV8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 11:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:fa:7a:d6:c9:62:47:1a:44:0d:0f:83:6a:5d:f4:8e:fc:98:85:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: Apr 13 08:34:17 2026 GMT
Not After : Apr 14 11:49:17 2026 GMT
Subject: CN=AD3A124985328FC90549645560ACE062DD7B3B2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:c7:c0:29:aa:52:8e:e8:ee:0d:d2:4e:1c:
98:d8:f7:c8:84:2e:cf:28:97:de:05:14:4e:e7:08:
f2:88:8b:74:19:97:05:cd:21:47:6c:e4:42:11:c7:
7f:06:07:7d:94:ee:42:d2:41:4a:7d:ab:d5:fb:19:
58:4a:64:9b:0c:09:aa:02:f9:d7:4b:8f:dc:df:f6:
da:77:96:0e:c4:23:6e:90:54:e7:b6:73:ac:be:51:
19:91:9f:59:c0:6f:f8:5d:8c:3f:f0:2f:74:93:21:
fb:be:32:1a:7d:94:11:5a:22:6c:7b:23:2a:c6:3c:
4d:e8:36:83:b0:17:70:04:38:f3:74:ac:89:36:1a:
6c:46:50:36:24:7d:51:63:57:93:7c:1a:c2:cd:87:
58:d8:2c:43:0b:3c:b5:1a:5d:5f:02:65:71:35:8a:
7d:92:8a:e6:05:6d:a7:61:45:4c:eb:be:c0:7a:90:
ae:00:a5:db:1b:96:22:42:d6:d8:36:2a:5e:06:ff:
62:32:bd:ba:b8:d7:72:0b:a9:80:c2:e6:3c:82:1e:
02:ba:1e:45:45:92:6b:68:73:6f:0a:3f:df:c2:e7:
e0:14:e4:9a:af:88:d7:48:ef:05:41:37:d3:e2:1b:
ca:d7:f9:48:89:a8:fd:06:ae:b5:ec:22:d3:b6:0a:
c3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3A:12:49:85:32:8F:C9:05:49:64:55:60:AC:E0:62:DD:7B:3B:2E
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bf:3d:82:0f:73:a6:02:7e:90:4e:64:0a:18:6b:a8:cd:a4:
ba:6d:f1:0c:5d:d3:da:f6:bc:9e:99:5f:f9:c3:19:1c:3e:54:
00:1e:ac:0f:00:4e:96:90:fb:ad:43:07:d5:a9:0c:1f:88:35:
c5:8c:ab:58:5d:a9:8c:66:5a:49:c3:d6:63:f2:23:d5:93:a7:
6b:f3:40:9c:27:dd:76:01:d7:e1:62:e3:c7:1f:3f:25:2b:17:
d0:f5:35:02:05:5d:fa:28:5d:53:04:e3:25:05:11:ca:71:bb:
0d:23:34:68:8e:35:6e:3f:74:e5:3f:2c:64:e5:e4:27:ec:b2:
25:57:53:c6:42:31:0c:0f:58:7e:14:7e:45:8f:3f:2a:66:96:
90:05:d0:ce:2d:bc:0e:38:60:44:1b:cc:a5:24:96:52:53:c0:
e4:fc:da:70:44:7b:21:5d:a4:8a:01:0f:c5:9b:09:4f:c4:df:
aa:8a:2e:42:f7:1e:da:af:72:f7:4a:e5:5f:6b:75:8b:cc:ce:
fa:85:fc:7d:15:65:be:1f:5d:8e:b5:47:ad:00:4d:d4:0a:10:
f4:3e:24:f4:e2:3b:3a:b4:63:de:62:70:14:df:bb:cf:98:26:
2d:7a:5b:a2:f3:46:78:b8:4b:bc:d3:5f:6c:95:65:33:55:c3:
47:66:c1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:03:23 2026 by rpki-client