Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
File:                     DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft (raw, json)
Hash identifier:          OfcwUQDeN2JThtorHNZVCwhfsFlQaKBY1zlOeiE5R1A=
Subject key identifier:   D0:81:B3:5B:7F:EA:C8:E9:7A:EE:ED:1D:56:A8:42:D7:74:E9:66:56
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       0CA6E94077C4CF68C5B9860819CEA619596C6634
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
Manifest number:          0103
Signing time:             Tue 14 Jul 2026 07:55:45 +0000
Manifest this update:     Tue 14 Jul 2026 07:50:45 +0000
Manifest next update:     Wed 15 Jul 2026 09:01:45 +0000
Files and hashes:         1: 3130332e36352e3232342e302f32332d3233203d3e20313531313835.roa (hash: RTYtTFe9AHsjJZDXut5sHNrTxjvC4H588yOBuEGqVas=)
                          2: 3130332e34352e3133332e302f32342d3234203d3e20313531323633.roa (hash: 132KQY0hIZGzZXT+Y1rqiKxW6vJKn4uICuU2IbmuOaA=)
                          3: 34332e3232362e37322e302f32342d3234203d3e20313531323633.roa (hash: oxTcpybFedaN+9fhIGtaIyDlSt555izuC9Tw7g4zY8w=)
                          4: 3130332e34352e3134332e302f32342d3234203d3e20313531323633.roa (hash: hDDTb53HztLIH4r4Wn0H7aEqKyEipiofrQjGPbDb55c=)
                          5: 3130332e34352e3132382e302f32342d3234203d3e20313531323633.roa (hash: p/qliSMIaGfeJnj2HvSHkLewIifj1a1eahS9MFrpoIc=)
                          6: 3130332e3235352e37302e302f32342d3234203d3e20313531323633.roa (hash: a99k+lBbCozD/s7hN4/uMLkMLJAT1LwAXPLm/HtxG/s=)
                          7: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl (hash: 0yj5aF4hMp4JMdpgfnsuc7zeTJ/PFifZWCf+kydleVI=)
                          8: 34332e3232362e37352e302f32342d3234203d3e20313531323633.roa (hash: 3kXayL1m+GJrl59qVBFm7MP2mNCavT+lZNSYbXquSq8=)
                          9: 3130332e36352e3232342e302f32342d3234203d3e20313531323633.roa (hash: I3p3J8zTRklFLPdRZ+Q9zQwUOdP7emT/RsjsVluAfQc=)
                          10: 3130332e34352e3133322e302f32342d3234203d3e20313531323633.roa (hash: TLtvholRbFMVX7PQaQfpBBj2HiEUdloBNRkONI50XTU=)
                          11: 3130332e3235352e36392e302f32342d3234203d3e20313531323633.roa (hash: taR2PO9xYF/2YfQ1M3QrhkhMJOByxm8xtfd0+hZHWQ4=)
                          12: 3130332e34352e3133392e302f32342d3234203d3e20313531323633.roa (hash: tkZ0olJ44jerS77qUNh/RtZBx6BEFTD4IppgpCZrVgU=)
                          13: 34332e3232362e34392e302f32342d3234203d3e20313531313835.roa (hash: DrN6EvaxSyfOrx64lSKyy5bToghM4IJIUgJhjn3Qf+E=)
                          14: 3130332e34352e3132392e302f32342d3234203d3e20313531323332.roa (hash: OBrkWdRjgKEO3E4GhTiDJvxctDc2qqs8jrnUx+FlbGQ=)
                          15: 3130332e36352e3232352e302f32342d3234203d3e20313531323633.roa (hash: 04DMYvCyM5FOMvEVp5saBOpFCW8VIu8YneGg62PNVVo=)
                          16: 3130332e32302e3132382e302f32342d3234203d3e20313531323633.roa (hash: USDo1+htgWeAWVdmiLtZJKFxIunLuwdSFDwe8/guZn4=)
                          17: 3130332e34352e3134302e302f32342d3234203d3e20313531323633.roa (hash: fjDzv9qZpF3TJWoZVQjqn8OLC/aJPD37r4kSIcjLwvo=)
                          18: 3130332e32302e3132382e302f32322d3232203d3e20313531313835.roa (hash: UOfDrjHlStBdhAq1mOfKs7VL2pw3p+dJcfAgv0vuQQk=)
                          19: 34332e3232362e37332e302f32342d3234203d3e20313531323633.roa (hash: ultQo/tcXYAJcwMYiGhTdBYowU2VUdrcVlfYZG7sFc4=)
                          20: 3130332e3235352e36382e302f32322d3232203d3e20313531313835.roa (hash: TMEPYsd47neKuCtSJmf511xaadCgk6FFqhoHutDfBlw=)
                          21: 3130332e3235352e36382e302f32342d3234203d3e20313531323633.roa (hash: kcIRXgf91pkWImY3pwTHQ8GC6HyQp3uGNJdbtYT8LVs=)
                          22: 3130332e34352e3133302e302f32342d3234203d3e20313531323633.roa (hash: YxBgZLLk6/7uSKhrpJTWAUnz6bdVYdSgz1srU9WCmoY=)
                          23: 34332e3232372e36382e302f32342d3234203d3e20313531323633.roa (hash: bOczHLtiTfhwSWbZfzmsyeiygnK1reN93op3nqVHinM=)
                          24: 34332e3232362e37342e302f32342d3234203d3e20313531323633.roa (hash: WtGf8luMWVwVCI0JqGilwQMOg1wGl5B8Qlx/WrfN83M=)
                          25: 34332e3232372e38302e302f32302d3230203d3e20313531313835.roa (hash: DmxMTYwpUQjW4JGb5c1p1bbMCkIRG4pHaFPmDE3Yu3M=)
                          26: 3130332e34352e3133352e302f32342d3234203d3e20313531323633.roa (hash: 7TOVvQGtiRRN6gaq0unOb2RuIqJZlcWuilthQJPnJ6s=)
                          27: 3130332e34352e3133342e302f32342d3234203d3e20313531323633.roa (hash: DQTwY0qfdZ8phN/XPNDg9X0RnR/1sxeaTZvjwhB5bhw=)
                          28: 3130332e34352e3133362e302f32342d3234203d3e20313531323633.roa (hash: muRYDgXAl3QDM2yrYGeIGMErJ6nr9786prUQqAkfbeQ=)
                          29: 3130332e34352e3133312e302f32342d3234203d3e20313531323633.roa (hash: c4+QizUwQ9LtfeNAuXm49/cIor41PzvBxYOWPZ9iLDU=)
                          30: 34332e3232362e37322e302f32322d3232203d3e20313531313835.roa (hash: CN+kmzq8ncw0WqWFmCCp+BpI1QiWQtdXyUkbEouSGSI=)
                          31: 3130332e32302e3133302e302f32342d3234203d3e20313531323633.roa (hash: 5OjMMPRoZS4OOJzkVvf+b5OF43XzXzc8f29yu9q7eDY=)
                          32: 3130332e34352e3133382e302f32342d3234203d3e20313531323633.roa (hash: WaH2JzOr/ocBZdIuOPXcXhP0ygdYxklYnvJTi8T7tQk=)
                          33: 3130332e34352e3134342e302f32342d3234203d3e20313531323332.roa (hash: nyRsUIZAMGliMA9SM6UnzJp0udBw1RrqO4H4TZw1qRw=)
                          34: 323430313a356332303a31303a3a2f34382d3438203d3e20313531313835.roa (hash: R/QVyQyKR3yYI09RNSrUigu/nryj32Qez0+4TGC1Cnk=)
                          35: 3130332e3235352e37312e302f32342d3234203d3e20313531323633.roa (hash: UqttEmoA1unL7s9nMNBmisuqhHlP+3LOeNNI03OtFmg=)
                          36: 3130332e34352e3132382e302f31392d3139203d3e20313531313835.roa (hash: X33fm0XluohYCJXj8jxmsLTScEPvBSwfdlSzKHPZU2c=)
                          37: 3130332e32302e3132392e302f32342d3234203d3e20313531323633.roa (hash: Q5Xw39c+z0AYdFvOytdnv/5LKdw3DwcDWrvcK09ENW0=)
                          38: 3130332e32302e3133312e302f32342d3234203d3e20313531323633.roa (hash: MP5WdchBZczFdD99X0JoChDNpIiLPWpHqxtELxECGmc=)
                          39: 3130332e34352e3134322e302f32342d3234203d3e20313531323633.roa (hash: ysdt6WCjPu86CKzZ4otbFmgUxo/AX8IdUB0ZJZmkbAs=)
                          40: 34332e3232372e36382e302f32342d3234203d3e20313531313835.roa (hash: oUG06qYlcP6HelHain3gpetHHCQC7+Gu44AkhpUHC0k=)
                          41: 3130332e34352e3133372e302f32342d3234203d3e20313531323633.roa (hash: /nAgRExr87UnptaMnXyaub52EVhpTGGPUthJrZfXB8E=)
                          42: 3130332e34352e3134312e302f32342d3234203d3e20313531323633.roa (hash: VLYofrbSPniO0qPNEJB87CbLmJC5xRZYZf97BFvmres=)
                          43: 34332e3232362e34392e302f32342d3234203d3e20313531323633.roa (hash: d6U06tziP1DXRLjXOYcZAo6KHFOwD3UVu3cLHimaZBI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 09:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a6:e9:40:77:c4:cf:68:c5:b9:86:08:19:ce:a6:19:59:6c:66:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: Jul 14 07:50:45 2026 GMT
            Not After : Jul 15 09:01:45 2026 GMT
        Subject: CN=D081B35B7FEAC8E97AEEED1D56A842D774E96656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e9:f8:29:68:9f:b7:e2:3f:f4:53:ed:60:78:
                    19:2e:95:4f:2f:cf:7d:c3:10:e4:b4:0c:25:4d:d8:
                    98:95:08:d0:7f:0f:4e:73:54:b5:3a:f6:6b:10:89:
                    19:4e:79:7d:c4:51:c6:bd:f3:84:26:04:b7:ac:1c:
                    91:b7:cf:e9:2c:36:ae:40:a5:c3:cd:20:7a:71:28:
                    7d:d6:88:64:af:0f:90:88:0a:f2:c2:f3:b8:d8:84:
                    c0:56:14:11:fc:78:1d:e6:5b:8d:cc:12:54:7a:66:
                    95:f0:07:1f:65:11:42:96:b4:6c:e1:79:47:ec:66:
                    12:d9:9e:c2:53:c0:fb:df:de:d0:b9:ac:46:c4:b9:
                    a4:9a:10:c4:98:62:c9:4a:8d:a9:66:2b:01:e5:c1:
                    0b:bf:27:87:b4:24:d9:64:b4:50:fd:e1:01:07:47:
                    fa:8d:ad:3b:03:28:18:bd:a5:04:0a:3c:68:61:be:
                    7e:bb:00:8f:18:58:5c:25:6c:f2:f0:ed:37:61:12:
                    99:b0:af:0d:cc:e8:db:3c:e1:e0:eb:03:20:4c:56:
                    b9:c8:39:e0:f9:b8:23:70:4d:aa:8c:ca:8e:81:be:
                    4a:7e:a8:5e:26:f7:ef:cf:56:c3:1f:da:ee:f1:65:
                    fc:e4:34:fe:62:b0:be:ab:85:8f:f7:de:cc:5b:b9:
                    fd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:81:B3:5B:7F:EA:C8:E9:7A:EE:ED:1D:56:A8:42:D7:74:E9:66:56
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:9a:9e:00:0d:8e:f3:96:0c:fb:e9:04:ae:23:a8:14:eb:06:
         26:23:1f:4e:ef:5b:9c:ad:03:2a:8d:93:64:9c:06:94:2b:47:
         c9:63:fd:ee:5a:fc:d4:cd:08:c2:84:73:7a:b2:54:b3:41:2a:
         61:6d:0c:ad:8e:78:57:cf:56:91:d1:c0:38:5f:40:b0:35:83:
         08:f3:59:aa:3b:60:3d:68:41:97:90:b8:71:75:10:c6:2b:33:
         c1:61:80:f2:6a:ab:56:27:06:10:cb:d7:83:01:41:3a:df:a4:
         7a:cd:a5:b0:26:34:2c:8e:b9:08:d4:5c:0e:8f:82:ee:e6:32:
         bc:61:cb:93:0a:93:b6:1e:ca:e6:83:36:6a:cb:e7:68:32:1f:
         1c:b5:e2:af:49:b5:88:21:49:80:9e:45:4a:0b:9b:16:aa:46:
         7e:9e:fe:41:28:1e:7d:28:db:60:26:5c:79:13:3a:bf:39:db:
         db:58:65:36:e9:dd:ce:93:22:d8:b2:a6:ec:53:79:ae:02:ef:
         59:6f:6c:e8:b8:1f:a5:18:69:16:fd:68:29:d2:82:ba:ad:2f:
         6c:8e:6a:c1:a5:9c:33:b3:ae:ad:d6:64:90:c5:83:8e:27:f4:
         4e:86:d3:5d:d1:2c:dd:68:7c:f4:6c:cc:e2:66:20:18:97:32:
         cb:89:6c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 19:55:55 2026 by rpki-client