Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
File:                     DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft (raw, json)
Hash identifier:          Aif4Ti9UeLN3aJ3lXRsgdsV0GBsT90Vl+bfC6rg1qiQ=
Subject key identifier:   5F:87:B0:E1:B7:8D:BC:8E:F3:97:44:C1:F6:29:06:11:4A:01:7E:09
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       13673F4CD4A7D1C26F74C1E8469CBBE36B9756
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
Manifest number:          0154
Signing time:             Tue 13 Oct 2026 06:27:48 +0000
Manifest this update:     Tue 13 Oct 2026 06:22:48 +0000
Manifest next update:     Fri 16 Oct 2026 08:44:48 +0000
Files and hashes:         1: 34332e3232372e36382e302f32342d3234203d3e20313531313835.roa (hash: oUG06qYlcP6HelHain3gpetHHCQC7+Gu44AkhpUHC0k=)
                          2: 3130332e3235352e37312e302f32342d3234203d3e20313531323633.roa (hash: UqttEmoA1unL7s9nMNBmisuqhHlP+3LOeNNI03OtFmg=)
                          3: 3130332e34352e3133312e302f32342d3234203d3e20313531323633.roa (hash: c4+QizUwQ9LtfeNAuXm49/cIor41PzvBxYOWPZ9iLDU=)
                          4: 3130332e3235352e37302e302f32342d3234203d3e20313531323633.roa (hash: a99k+lBbCozD/s7hN4/uMLkMLJAT1LwAXPLm/HtxG/s=)
                          5: 3130332e34352e3133362e302f32342d3234203d3e20313531323633.roa (hash: muRYDgXAl3QDM2yrYGeIGMErJ6nr9786prUQqAkfbeQ=)
                          6: 3130332e3235352e36392e302f32342d3234203d3e20313531323633.roa (hash: taR2PO9xYF/2YfQ1M3QrhkhMJOByxm8xtfd0+hZHWQ4=)
                          7: 3130332e32302e3132392e302f32342d3234203d3e20313531323633.roa (hash: Q5Xw39c+z0AYdFvOytdnv/5LKdw3DwcDWrvcK09ENW0=)
                          8: 3130332e32302e3132382e302f32322d3232203d3e20313531313835.roa (hash: UOfDrjHlStBdhAq1mOfKs7VL2pw3p+dJcfAgv0vuQQk=)
                          9: 3130332e34352e3133302e302f32342d3234203d3e20313531323633.roa (hash: YxBgZLLk6/7uSKhrpJTWAUnz6bdVYdSgz1srU9WCmoY=)
                          10: 3130332e34352e3133382e302f32342d3234203d3e20313531323633.roa (hash: WaH2JzOr/ocBZdIuOPXcXhP0ygdYxklYnvJTi8T7tQk=)
                          11: 34332e3232362e37322e302f32322d3232203d3e20313531313835.roa (hash: CN+kmzq8ncw0WqWFmCCp+BpI1QiWQtdXyUkbEouSGSI=)
                          12: 3130332e34352e3134302e302f32342d3234203d3e20313531323633.roa (hash: fjDzv9qZpF3TJWoZVQjqn8OLC/aJPD37r4kSIcjLwvo=)
                          13: 323430313a356332303a31303a3a2f34382d3438203d3e20313531313835.roa (hash: R/QVyQyKR3yYI09RNSrUigu/nryj32Qez0+4TGC1Cnk=)
                          14: 34332e3232362e34392e302f32342d3234203d3e20313531313835.roa (hash: DrN6EvaxSyfOrx64lSKyy5bToghM4IJIUgJhjn3Qf+E=)
                          15: 3130332e34352e3134312e302f32342d3234203d3e20313531323633.roa (hash: VLYofrbSPniO0qPNEJB87CbLmJC5xRZYZf97BFvmres=)
                          16: 3130332e36352e3232352e302f32342d3234203d3e20313531323633.roa (hash: 04DMYvCyM5FOMvEVp5saBOpFCW8VIu8YneGg62PNVVo=)
                          17: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl (hash: 4MAYh0tImzVISQY6dk/oL1lvgp9wVyOnWC48a57Nkk4=)
                          18: 3130332e34352e3133332e302f32342d3234203d3e20313531323633.roa (hash: 132KQY0hIZGzZXT+Y1rqiKxW6vJKn4uICuU2IbmuOaA=)
                          19: 34332e3232362e37342e302f32342d3234203d3e20313531323633.roa (hash: WtGf8luMWVwVCI0JqGilwQMOg1wGl5B8Qlx/WrfN83M=)
                          20: 3130332e32302e3132382e302f32342d3234203d3e20313531323633.roa (hash: USDo1+htgWeAWVdmiLtZJKFxIunLuwdSFDwe8/guZn4=)
                          21: 3130332e34352e3132382e302f32342d3234203d3e20313531323633.roa (hash: p/qliSMIaGfeJnj2HvSHkLewIifj1a1eahS9MFrpoIc=)
                          22: 3130332e34352e3132392e302f32342d3234203d3e20313531323332.roa (hash: OBrkWdRjgKEO3E4GhTiDJvxctDc2qqs8jrnUx+FlbGQ=)
                          23: 3130332e34352e3133342e302f32342d3234203d3e20313531323633.roa (hash: DQTwY0qfdZ8phN/XPNDg9X0RnR/1sxeaTZvjwhB5bhw=)
                          24: 34332e3232362e37322e302f32342d3234203d3e20313531323633.roa (hash: oxTcpybFedaN+9fhIGtaIyDlSt555izuC9Tw7g4zY8w=)
                          25: 3130332e32302e3133312e302f32342d3234203d3e20313531323633.roa (hash: MP5WdchBZczFdD99X0JoChDNpIiLPWpHqxtELxECGmc=)
                          26: 3130332e34352e3134322e302f32342d3234203d3e20313531323633.roa (hash: ysdt6WCjPu86CKzZ4otbFmgUxo/AX8IdUB0ZJZmkbAs=)
                          27: 3130332e34352e3134342e302f32342d3234203d3e20313531323332.roa (hash: nyRsUIZAMGliMA9SM6UnzJp0udBw1RrqO4H4TZw1qRw=)
                          28: 34332e3232372e38302e302f32302d3230203d3e20313531313835.roa (hash: DmxMTYwpUQjW4JGb5c1p1bbMCkIRG4pHaFPmDE3Yu3M=)
                          29: 3130332e3235352e36382e302f32342d3234203d3e20313531323633.roa (hash: kcIRXgf91pkWImY3pwTHQ8GC6HyQp3uGNJdbtYT8LVs=)
                          30: 3130332e36352e3232342e302f32342d3234203d3e20313531323633.roa (hash: I3p3J8zTRklFLPdRZ+Q9zQwUOdP7emT/RsjsVluAfQc=)
                          31: 3130332e36352e3232342e302f32332d3233203d3e20313531313835.roa (hash: RTYtTFe9AHsjJZDXut5sHNrTxjvC4H588yOBuEGqVas=)
                          32: 3130332e34352e3133372e302f32342d3234203d3e20313531323633.roa (hash: /nAgRExr87UnptaMnXyaub52EVhpTGGPUthJrZfXB8E=)
                          33: 3130332e3235352e36382e302f32322d3232203d3e20313531313835.roa (hash: TMEPYsd47neKuCtSJmf511xaadCgk6FFqhoHutDfBlw=)
                          34: 3130332e34352e3132382e302f31392d3139203d3e20313531313835.roa (hash: X33fm0XluohYCJXj8jxmsLTScEPvBSwfdlSzKHPZU2c=)
                          35: 3130332e34352e3133392e302f32342d3234203d3e20313531323633.roa (hash: tkZ0olJ44jerS77qUNh/RtZBx6BEFTD4IppgpCZrVgU=)
                          36: 34332e3232362e37332e302f32342d3234203d3e20313531323633.roa (hash: ultQo/tcXYAJcwMYiGhTdBYowU2VUdrcVlfYZG7sFc4=)
                          37: 3130332e32302e3133302e302f32342d3234203d3e20313531323633.roa (hash: 5OjMMPRoZS4OOJzkVvf+b5OF43XzXzc8f29yu9q7eDY=)
                          38: 34332e3232372e36382e302f32342d3234203d3e20313531323633.roa (hash: bOczHLtiTfhwSWbZfzmsyeiygnK1reN93op3nqVHinM=)
                          39: 3130332e34352e3133352e302f32342d3234203d3e20313531323633.roa (hash: 7TOVvQGtiRRN6gaq0unOb2RuIqJZlcWuilthQJPnJ6s=)
                          40: 3130332e34352e3134332e302f32342d3234203d3e20313531323633.roa (hash: hDDTb53HztLIH4r4Wn0H7aEqKyEipiofrQjGPbDb55c=)
                          41: 34332e3232362e37352e302f32342d3234203d3e20313531323633.roa (hash: 3kXayL1m+GJrl59qVBFm7MP2mNCavT+lZNSYbXquSq8=)
                          42: 3130332e34352e3132392e302f32342d3234203d3e20313531323633.roa (hash: ub8G/vIQ6sjWWQA0HypxoESQRNKjR52rh9WTwJO8tf8=)
                          43: 3130332e34352e3133322e302f32342d3234203d3e20313531323633.roa (hash: TLtvholRbFMVX7PQaQfpBBj2HiEUdloBNRkONI50XTU=)
                          44: 34332e3232362e34392e302f32342d3234203d3e20313531323633.roa (hash: d6U06tziP1DXRLjXOYcZAo6KHFOwD3UVu3cLHimaZBI=)
                          45: 3130332e34352e3134342e302f32342d3234203d3e20313531323633.roa (hash: nj1XuBZcIhwUhDaapH2EIsU4FY7yiIz6hDhKXmgxuhU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 01:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:67:3f:4c:d4:a7:d1:c2:6f:74:c1:e8:46:9c:bb:e3:6b:97:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: Oct 13 06:22:48 2026 GMT
            Not After : Oct 16 08:44:48 2026 GMT
        Subject: CN=5F87B0E1B78DBC8EF39744C1F62906114A017E09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:cc:b3:1f:4a:3e:da:9b:ea:6f:43:5f:17:
                    8a:e8:36:31:fe:90:ab:ff:c6:72:09:4c:46:56:fd:
                    a4:55:c5:a3:76:7b:46:3c:d0:3f:37:d2:24:2f:85:
                    a4:6b:f5:81:1b:1b:09:88:77:22:21:d2:ec:bb:e9:
                    03:7e:1c:77:5e:05:e2:25:de:5d:2d:a3:b1:6a:a4:
                    b3:e0:02:83:2d:b8:f7:d4:e9:cc:70:a1:a5:38:db:
                    e4:dd:0e:5b:f1:b8:d2:37:c9:f7:54:c1:df:56:5a:
                    16:2a:c6:1d:ae:ba:90:cd:55:cf:a7:96:e6:7f:9e:
                    e1:e1:88:b4:75:bf:2f:46:d8:03:59:c4:2d:7f:88:
                    40:13:82:d9:42:ef:df:ca:6a:e7:14:71:98:41:d2:
                    ab:d9:09:53:78:b9:78:6b:ee:18:78:78:c4:27:95:
                    29:e0:82:9a:ef:2d:78:23:84:4e:16:b5:a2:32:2a:
                    3c:01:82:04:a5:37:ec:f5:6e:9f:65:84:52:0b:ae:
                    30:d8:9c:b5:9f:ab:a9:5b:03:5c:cf:35:a0:da:91:
                    2d:f8:77:fb:db:d5:79:00:39:e2:8d:8e:ad:1d:05:
                    2e:43:04:23:64:38:1b:6d:55:b9:60:5a:8a:ee:be:
                    34:2c:82:c8:89:7f:44:79:70:cb:db:84:fe:aa:04:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:87:B0:E1:B7:8D:BC:8E:F3:97:44:C1:F6:29:06:11:4A:01:7E:09
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c4:62:d0:96:f4:11:1b:fe:84:3a:2f:e7:8b:fa:62:e4:a4:
         03:c3:aa:f8:7d:80:5d:2f:fc:55:89:ac:50:22:35:22:b6:88:
         e6:ff:40:36:af:3d:bf:e4:78:c7:2c:1d:f8:ab:8b:f4:18:84:
         cd:f5:1a:f6:ee:69:92:62:bd:29:50:e9:b9:d3:a0:3e:c6:b0:
         bb:20:76:82:43:71:a9:b8:b5:fb:2b:a2:5d:64:ca:4d:7b:1c:
         25:4b:70:3a:f8:90:07:13:65:f6:6d:8b:1b:ff:0b:7f:75:01:
         da:e5:03:28:b7:b4:0c:14:1a:bd:d9:e4:28:10:0e:b6:fb:37:
         ca:7a:bd:a2:36:c3:69:37:1b:b2:91:27:87:8a:9b:64:1d:45:
         7f:cc:1e:71:53:ef:bc:73:0f:17:d8:f0:3b:c4:d3:b0:bf:e3:
         15:66:47:4e:c4:dd:a2:bc:3b:5b:18:93:49:02:18:d8:e6:04:
         6a:bf:93:df:7e:be:23:1d:d1:9a:e8:ab:e2:83:5f:51:22:3b:
         da:44:66:95:fe:4a:ca:ca:7f:93:22:64:3a:0b:c7:8d:bc:36:
         6a:18:7f:66:5c:64:5a:50:c6:79:7e:63:97:bf:75:9e:42:1f:
         f6:41:eb:fc:81:79:8c:5f:44:bb:bb:84:49:3d:da:a5:8e:ec:
         fb:77:f7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:47:39 2026 by rpki-client