Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
File:                     DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft (raw, json)
Hash identifier:          85329YUfgvHYRB8TrBPtDbeL8wDfvBFSFSpcy8YSNW8=
Subject key identifier:   03:F7:DE:96:57:8E:DA:FE:6D:A9:A1:6E:87:93:54:1A:57:82:C4:C5
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       514491AEAD0FD597D3FBFA7B854FA36B53D4E91B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
Manifest number:          B1
Signing time:             Fri 29 May 2026 10:02:46 +0000
Manifest this update:     Fri 29 May 2026 09:57:46 +0000
Manifest next update:     Sat 30 May 2026 13:20:46 +0000
Files and hashes:         1: 34332e3232372e38302e302f32302d3332203d3e20313531323633.roa (hash: 4jkS5M6HasSXGCQpsin8FoCCpuMNdc0/Fz8bW9dxTkU=)
                          2: 34332e3232372e36382e302f32342d3332203d3e20313531323633.roa (hash: FcMniRZoBjx4hKuRcjGhaqSnxM9LFyeGUzsfF0RW/v0=)
                          3: 34332e3232362e37322e302f32322d3332203d3e20313531323633.roa (hash: jQPMggXT1FjPZtyPkeJOQLab+84xGE4z7mH9SKKEpPQ=)
                          4: 3130332e34352e3134342e302f32342d3332203d3e20313531323631.roa (hash: VxAxNMHX5Wi1Wl24TRQwE/ULcpU6PyY1n+Kd4R5TgSw=)
                          5: 3130332e34352e3132382e302f31392d3332203d3e20313531313835.roa (hash: tsyd3XyL1sR8yC/sToiyZd0LYsCW7lvtrAxpV1AnXjs=)
                          6: 3130332e34352e3134342e302f32342d3332203d3e20313531323332.roa (hash: U7WC51cffZGxBC4k6klgd3/qLfTHYS8QUnM3VBcF/rQ=)
                          7: 323430313a356332303a3a2f33322d313238203d3e20313531323633.roa (hash: 4xod6o1vq3z+k4NYUD1FRFrB+HGmJpeH0a6J+uCnWrQ=)
                          8: 34332e3232362e34392e302f32342d3332203d3e20313531323633.roa (hash: +xN1z1VKskwQnt3EY6pQ5MDi2C4xXIAV51Ye2BNp65Q=)
                          9: 3130332e36352e3232342e302f32332d3332203d3e20313531323633.roa (hash: GrQ+Ba8S3O5ygy9Xi9rdwA4MA9YwGIweDkO0xMhfoV8=)
                          10: 3130332e34352e3132392e302f32342d3332203d3e20313531323631.roa (hash: 4/E/Cr6fd+Bya35a7VJosjEM1GXpdZ8Au2FmVXG1GKE=)
                          11: 3130332e34352e3132392e302f32342d3332203d3e20313531323332.roa (hash: zYLUzIja0ccdR/cLWnmR8OJAjEAuvbYPjSe/uOYg9Tg=)
                          12: 34332e3232362e37322e302f32322d3332203d3e20313531313835.roa (hash: kSS/336cZAWVPyiDW/MySY62mT7Cy5L/TBiFinsaMuc=)
                          13: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl (hash: QNMIvXXdyzbuj3fHV3DuIBWNvdUiWRYqxZpxDp9DqCU=)
                          14: 3130332e3235352e36382e302f32322d3332203d3e20313531323633.roa (hash: E8XwVM09wV4mmM7F08pkiRB8CC0AKgFeu5HqHXnGNC8=)
                          15: 3130332e32302e3132382e302f32322d3332203d3e20313531313835.roa (hash: baXUEgh/ARKa7pBDo/kp78WqV0sg9al8zwp4ARJmRAU=)
                          16: 3130332e32302e3132382e302f32322d3332203d3e20313531323633.roa (hash: Tvh8h6nNlEm1u5qQIZfifEHO2U1ep0EaYaYXiBzZYfU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:44:91:ae:ad:0f:d5:97:d3:fb:fa:7b:85:4f:a3:6b:53:d4:e9:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: May 29 09:57:46 2026 GMT
            Not After : May 30 13:20:46 2026 GMT
        Subject: CN=03F7DE96578EDAFE6DA9A16E8793541A5782C4C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:87:96:af:1f:b8:2d:0a:d1:19:77:ad:96:
                    43:ac:69:f5:83:d9:cf:93:bd:d4:d0:06:54:59:80:
                    05:d3:9f:a3:b2:c0:0c:d8:0e:d1:be:30:70:5d:8e:
                    0e:d1:d8:20:bf:b6:08:7d:c4:9c:5c:b2:85:58:2b:
                    50:57:d9:22:c5:a5:53:a7:e0:50:98:14:18:63:74:
                    19:6c:73:c4:b6:92:d7:25:69:f7:68:d0:7f:57:11:
                    09:b5:09:c9:86:b0:af:8d:c9:6c:27:ec:c4:d3:5d:
                    9b:2e:f5:d7:52:32:64:79:fb:14:58:75:bc:89:13:
                    1c:3f:21:ed:fc:b8:9b:f8:0f:b7:14:0a:4a:13:c6:
                    80:3e:02:92:74:71:1c:3b:d5:de:98:26:a4:76:3b:
                    f4:ca:a7:12:e6:f0:f3:b6:30:8b:67:99:c4:93:c2:
                    1e:1f:b8:0f:f6:ff:a0:f8:57:3f:8f:30:b9:63:15:
                    e3:a6:a9:f5:0c:d9:41:2b:b5:13:a6:4e:00:2b:ee:
                    8e:66:bc:44:32:8a:5a:77:2a:b8:e5:6c:34:d9:b8:
                    2f:c6:cc:62:11:ec:29:4d:af:1b:75:3f:8e:da:99:
                    5e:f9:5e:90:13:d1:c6:f4:99:d9:ef:81:ac:b2:7f:
                    80:18:7b:93:7a:fa:39:a8:c8:55:90:22:4b:80:1c:
                    ba:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F7:DE:96:57:8E:DA:FE:6D:A9:A1:6E:87:93:54:1A:57:82:C4:C5
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:8f:d6:be:24:f3:cc:1e:dd:94:c3:08:d7:14:c6:a4:77:d8:
         ff:f7:74:be:a2:a2:7d:c0:09:ec:81:9d:ba:96:a6:7f:f0:87:
         96:85:b1:52:cd:66:00:bc:83:5d:65:20:fb:53:ab:ce:e1:d7:
         d2:33:e0:93:01:8a:71:7a:df:02:5b:78:37:54:bb:23:38:91:
         45:a7:fc:46:a6:9d:8c:71:5b:d7:e6:86:0c:8f:3b:d6:52:a1:
         cb:b4:b8:05:34:e2:e6:8a:95:18:dd:fa:bd:d8:9f:14:7f:2f:
         11:fc:25:e4:e8:0b:7c:c3:c5:ef:8f:98:42:aa:74:d7:95:67:
         5f:7b:92:fd:cf:f2:f6:fb:04:93:2d:4c:eb:b8:39:2a:3a:24:
         b2:83:e1:dc:88:b1:e2:05:3f:5a:51:74:24:49:0f:de:08:a0:
         28:00:23:76:f3:47:f6:06:74:8b:90:eb:f5:b0:f5:13:40:fb:
         10:39:d7:74:02:52:db:01:ff:28:4b:9b:9f:77:46:f8:83:43:
         56:98:72:c9:00:dd:83:69:45:e6:e3:b1:60:8b:2e:a0:07:c5:
         89:9c:1d:87:66:4f:68:82:2d:ff:6f:86:24:eb:9c:8d:1c:d3:
         46:0d:10:15:af:89:ef:46:ac:8c:04:5e:e7:05:10:c4:c5:bd:
         44:28:34:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:04:27 2026 by rpki-client