
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
File: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft (raw, json)
Hash identifier: OfcwUQDeN2JThtorHNZVCwhfsFlQaKBY1zlOeiE5R1A=
Subject key identifier: D0:81:B3:5B:7F:EA:C8:E9:7A:EE:ED:1D:56:A8:42:D7:74:E9:66:56
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 0CA6E94077C4CF68C5B9860819CEA619596C6634
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
Manifest number: 0103
Signing time: Tue 14 Jul 2026 07:55:45 +0000
Manifest this update: Tue 14 Jul 2026 07:50:45 +0000
Manifest next update: Wed 15 Jul 2026 09:01:45 +0000
Files and hashes: 1: 3130332e36352e3232342e302f32332d3233203d3e20313531313835.roa (hash: RTYtTFe9AHsjJZDXut5sHNrTxjvC4H588yOBuEGqVas=)
2: 3130332e34352e3133332e302f32342d3234203d3e20313531323633.roa (hash: 132KQY0hIZGzZXT+Y1rqiKxW6vJKn4uICuU2IbmuOaA=)
3: 34332e3232362e37322e302f32342d3234203d3e20313531323633.roa (hash: oxTcpybFedaN+9fhIGtaIyDlSt555izuC9Tw7g4zY8w=)
4: 3130332e34352e3134332e302f32342d3234203d3e20313531323633.roa (hash: hDDTb53HztLIH4r4Wn0H7aEqKyEipiofrQjGPbDb55c=)
5: 3130332e34352e3132382e302f32342d3234203d3e20313531323633.roa (hash: p/qliSMIaGfeJnj2HvSHkLewIifj1a1eahS9MFrpoIc=)
6: 3130332e3235352e37302e302f32342d3234203d3e20313531323633.roa (hash: a99k+lBbCozD/s7hN4/uMLkMLJAT1LwAXPLm/HtxG/s=)
7: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl (hash: 0yj5aF4hMp4JMdpgfnsuc7zeTJ/PFifZWCf+kydleVI=)
8: 34332e3232362e37352e302f32342d3234203d3e20313531323633.roa (hash: 3kXayL1m+GJrl59qVBFm7MP2mNCavT+lZNSYbXquSq8=)
9: 3130332e36352e3232342e302f32342d3234203d3e20313531323633.roa (hash: I3p3J8zTRklFLPdRZ+Q9zQwUOdP7emT/RsjsVluAfQc=)
10: 3130332e34352e3133322e302f32342d3234203d3e20313531323633.roa (hash: TLtvholRbFMVX7PQaQfpBBj2HiEUdloBNRkONI50XTU=)
11: 3130332e3235352e36392e302f32342d3234203d3e20313531323633.roa (hash: taR2PO9xYF/2YfQ1M3QrhkhMJOByxm8xtfd0+hZHWQ4=)
12: 3130332e34352e3133392e302f32342d3234203d3e20313531323633.roa (hash: tkZ0olJ44jerS77qUNh/RtZBx6BEFTD4IppgpCZrVgU=)
13: 34332e3232362e34392e302f32342d3234203d3e20313531313835.roa (hash: DrN6EvaxSyfOrx64lSKyy5bToghM4IJIUgJhjn3Qf+E=)
14: 3130332e34352e3132392e302f32342d3234203d3e20313531323332.roa (hash: OBrkWdRjgKEO3E4GhTiDJvxctDc2qqs8jrnUx+FlbGQ=)
15: 3130332e36352e3232352e302f32342d3234203d3e20313531323633.roa (hash: 04DMYvCyM5FOMvEVp5saBOpFCW8VIu8YneGg62PNVVo=)
16: 3130332e32302e3132382e302f32342d3234203d3e20313531323633.roa (hash: USDo1+htgWeAWVdmiLtZJKFxIunLuwdSFDwe8/guZn4=)
17: 3130332e34352e3134302e302f32342d3234203d3e20313531323633.roa (hash: fjDzv9qZpF3TJWoZVQjqn8OLC/aJPD37r4kSIcjLwvo=)
18: 3130332e32302e3132382e302f32322d3232203d3e20313531313835.roa (hash: UOfDrjHlStBdhAq1mOfKs7VL2pw3p+dJcfAgv0vuQQk=)
19: 34332e3232362e37332e302f32342d3234203d3e20313531323633.roa (hash: ultQo/tcXYAJcwMYiGhTdBYowU2VUdrcVlfYZG7sFc4=)
20: 3130332e3235352e36382e302f32322d3232203d3e20313531313835.roa (hash: TMEPYsd47neKuCtSJmf511xaadCgk6FFqhoHutDfBlw=)
21: 3130332e3235352e36382e302f32342d3234203d3e20313531323633.roa (hash: kcIRXgf91pkWImY3pwTHQ8GC6HyQp3uGNJdbtYT8LVs=)
22: 3130332e34352e3133302e302f32342d3234203d3e20313531323633.roa (hash: YxBgZLLk6/7uSKhrpJTWAUnz6bdVYdSgz1srU9WCmoY=)
23: 34332e3232372e36382e302f32342d3234203d3e20313531323633.roa (hash: bOczHLtiTfhwSWbZfzmsyeiygnK1reN93op3nqVHinM=)
24: 34332e3232362e37342e302f32342d3234203d3e20313531323633.roa (hash: WtGf8luMWVwVCI0JqGilwQMOg1wGl5B8Qlx/WrfN83M=)
25: 34332e3232372e38302e302f32302d3230203d3e20313531313835.roa (hash: DmxMTYwpUQjW4JGb5c1p1bbMCkIRG4pHaFPmDE3Yu3M=)
26: 3130332e34352e3133352e302f32342d3234203d3e20313531323633.roa (hash: 7TOVvQGtiRRN6gaq0unOb2RuIqJZlcWuilthQJPnJ6s=)
27: 3130332e34352e3133342e302f32342d3234203d3e20313531323633.roa (hash: DQTwY0qfdZ8phN/XPNDg9X0RnR/1sxeaTZvjwhB5bhw=)
28: 3130332e34352e3133362e302f32342d3234203d3e20313531323633.roa (hash: muRYDgXAl3QDM2yrYGeIGMErJ6nr9786prUQqAkfbeQ=)
29: 3130332e34352e3133312e302f32342d3234203d3e20313531323633.roa (hash: c4+QizUwQ9LtfeNAuXm49/cIor41PzvBxYOWPZ9iLDU=)
30: 34332e3232362e37322e302f32322d3232203d3e20313531313835.roa (hash: CN+kmzq8ncw0WqWFmCCp+BpI1QiWQtdXyUkbEouSGSI=)
31: 3130332e32302e3133302e302f32342d3234203d3e20313531323633.roa (hash: 5OjMMPRoZS4OOJzkVvf+b5OF43XzXzc8f29yu9q7eDY=)
32: 3130332e34352e3133382e302f32342d3234203d3e20313531323633.roa (hash: WaH2JzOr/ocBZdIuOPXcXhP0ygdYxklYnvJTi8T7tQk=)
33: 3130332e34352e3134342e302f32342d3234203d3e20313531323332.roa (hash: nyRsUIZAMGliMA9SM6UnzJp0udBw1RrqO4H4TZw1qRw=)
34: 323430313a356332303a31303a3a2f34382d3438203d3e20313531313835.roa (hash: R/QVyQyKR3yYI09RNSrUigu/nryj32Qez0+4TGC1Cnk=)
35: 3130332e3235352e37312e302f32342d3234203d3e20313531323633.roa (hash: UqttEmoA1unL7s9nMNBmisuqhHlP+3LOeNNI03OtFmg=)
36: 3130332e34352e3132382e302f31392d3139203d3e20313531313835.roa (hash: X33fm0XluohYCJXj8jxmsLTScEPvBSwfdlSzKHPZU2c=)
37: 3130332e32302e3132392e302f32342d3234203d3e20313531323633.roa (hash: Q5Xw39c+z0AYdFvOytdnv/5LKdw3DwcDWrvcK09ENW0=)
38: 3130332e32302e3133312e302f32342d3234203d3e20313531323633.roa (hash: MP5WdchBZczFdD99X0JoChDNpIiLPWpHqxtELxECGmc=)
39: 3130332e34352e3134322e302f32342d3234203d3e20313531323633.roa (hash: ysdt6WCjPu86CKzZ4otbFmgUxo/AX8IdUB0ZJZmkbAs=)
40: 34332e3232372e36382e302f32342d3234203d3e20313531313835.roa (hash: oUG06qYlcP6HelHain3gpetHHCQC7+Gu44AkhpUHC0k=)
41: 3130332e34352e3133372e302f32342d3234203d3e20313531323633.roa (hash: /nAgRExr87UnptaMnXyaub52EVhpTGGPUthJrZfXB8E=)
42: 3130332e34352e3134312e302f32342d3234203d3e20313531323633.roa (hash: VLYofrbSPniO0qPNEJB87CbLmJC5xRZYZf97BFvmres=)
43: 34332e3232362e34392e302f32342d3234203d3e20313531323633.roa (hash: d6U06tziP1DXRLjXOYcZAo6KHFOwD3UVu3cLHimaZBI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:a6:e9:40:77:c4:cf:68:c5:b9:86:08:19:ce:a6:19:59:6c:66:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: Jul 14 07:50:45 2026 GMT
Not After : Jul 15 09:01:45 2026 GMT
Subject: CN=D081B35B7FEAC8E97AEEED1D56A842D774E96656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e9:f8:29:68:9f:b7:e2:3f:f4:53:ed:60:78:
19:2e:95:4f:2f:cf:7d:c3:10:e4:b4:0c:25:4d:d8:
98:95:08:d0:7f:0f:4e:73:54:b5:3a:f6:6b:10:89:
19:4e:79:7d:c4:51:c6:bd:f3:84:26:04:b7:ac:1c:
91:b7:cf:e9:2c:36:ae:40:a5:c3:cd:20:7a:71:28:
7d:d6:88:64:af:0f:90:88:0a:f2:c2:f3:b8:d8:84:
c0:56:14:11:fc:78:1d:e6:5b:8d:cc:12:54:7a:66:
95:f0:07:1f:65:11:42:96:b4:6c:e1:79:47:ec:66:
12:d9:9e:c2:53:c0:fb:df:de:d0:b9:ac:46:c4:b9:
a4:9a:10:c4:98:62:c9:4a:8d:a9:66:2b:01:e5:c1:
0b:bf:27:87:b4:24:d9:64:b4:50:fd:e1:01:07:47:
fa:8d:ad:3b:03:28:18:bd:a5:04:0a:3c:68:61:be:
7e:bb:00:8f:18:58:5c:25:6c:f2:f0:ed:37:61:12:
99:b0:af:0d:cc:e8:db:3c:e1:e0:eb:03:20:4c:56:
b9:c8:39:e0:f9:b8:23:70:4d:aa:8c:ca:8e:81:be:
4a:7e:a8:5e:26:f7:ef:cf:56:c3:1f:da:ee:f1:65:
fc:e4:34:fe:62:b0:be:ab:85:8f:f7:de:cc:5b:b9:
fd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:81:B3:5B:7F:EA:C8:E9:7A:EE:ED:1D:56:A8:42:D7:74:E9:66:56
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9a:9e:00:0d:8e:f3:96:0c:fb:e9:04:ae:23:a8:14:eb:06:
26:23:1f:4e:ef:5b:9c:ad:03:2a:8d:93:64:9c:06:94:2b:47:
c9:63:fd:ee:5a:fc:d4:cd:08:c2:84:73:7a:b2:54:b3:41:2a:
61:6d:0c:ad:8e:78:57:cf:56:91:d1:c0:38:5f:40:b0:35:83:
08:f3:59:aa:3b:60:3d:68:41:97:90:b8:71:75:10:c6:2b:33:
c1:61:80:f2:6a:ab:56:27:06:10:cb:d7:83:01:41:3a:df:a4:
7a:cd:a5:b0:26:34:2c:8e:b9:08:d4:5c:0e:8f:82:ee:e6:32:
bc:61:cb:93:0a:93:b6:1e:ca:e6:83:36:6a:cb:e7:68:32:1f:
1c:b5:e2:af:49:b5:88:21:49:80:9e:45:4a:0b:9b:16:aa:46:
7e:9e:fe:41:28:1e:7d:28:db:60:26:5c:79:13:3a:bf:39:db:
db:58:65:36:e9:dd:ce:93:22:d8:b2:a6:ec:53:79:ae:02:ef:
59:6f:6c:e8:b8:1f:a5:18:69:16:fd:68:29:d2:82:ba:ad:2f:
6c:8e:6a:c1:a5:9c:33:b3:ae:ad:d6:64:90:c5:83:8e:27:f4:
4e:86:d3:5d:d1:2c:dd:68:7c:f4:6c:cc:e2:66:20:18:97:32:
cb:89:6c:61
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUDKbpQHfEz2jFuYYIGc6mGVlsZjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2
NjY4MDEzODAeFw0yNjA3MTQwNzUwNDVaFw0yNjA3MTUwOTAxNDVaMDMxMTAvBgNV
BAMTKEQwODFCMzVCN0ZFQUM4RTk3QUVFRUQxRDU2QTg0MkQ3NzRFOTY2NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb6fgpaJ+34j/0U+1geBkulU8v
z33DEOS0DCVN2JiVCNB/D05zVLU69msQiRlOeX3EUca984QmBLesHJG3z+ksNq5A
pcPNIHpxKH3WiGSvD5CICvLC87jYhMBWFBH8eB3mW43MElR6ZpXwBx9lEUKWtGzh
eUfsZhLZnsJTwPvf3tC5rEbEuaSaEMSYYslKjalmKwHlwQu/J4e0JNlktFD94QEH
R/qNrTsDKBi9pQQKPGhhvn67AI8YWFwlbPLw7TdhEpmwrw3M6Ns84eDrAyBMVrnI
OeD5uCNwTaqMyo6Bvkp+qF4m9+/PVsMf2u7xZfzkNP5isL6rhY/33sxbuf3bAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU0IGzW3/qyOl67u0dVqhC13TpZlYwHwYDVR0j
BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG
RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC9EREJBNjE2Rjk2RDlD
MkNEN0Y3Q0FCNjkyRjlFRkU3NjY2NjgwMTM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5qeAA2O85YM
++kEriOoFOsGJiMfTu9bnK0DKo2TZJwGlCtHyWP97lr81M0IwoRzerJUs0EqYW0M
rY54V89WkdHAOF9AsDWDCPNZqjtgPWhBl5C4cXUQxiszwWGA8mqrVicGEMvXgwFB
Ot+kes2lsCY0LI65CNRcDo+C7uYyvGHLkwqTth7K5oM2asvnaDIfHLXir0m1iCFJ
gJ5FSgubFqpGfp7+QSgefSjbYCZceRM6vznb21hlNundzpMi2LKm7FN5rgLvWW9s
6LgfpRhpFv1oKdKCuq0vbI5qwaWcM7OurdZkkMWDjif0TobTXdEs3Wh89GzM4mYg
GJcyy4lsYQ==
-----END CERTIFICATE-----
Generated at Tue Jul 14 19:55:55 2026 by rpki-client