Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
File:                     9B87DFEBDCCDA813116988D4421B088404578168.mft (raw, json)
Hash identifier:          tQp63nQvMBYQ12OVpcY15Sy68C6rFvdHQU7HUHxxg5c=
Subject key identifier:   A4:F6:23:4E:92:0B:AA:64:CC:BD:1F:E1:5B:1B:E8:20:78:B2:25:45
Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68
Certificate issuer:       /CN=9B87DFEBDCCDA813116988D4421B088404578168
Certificate serial:       3525214B0515A7D8687043B28B2F88056845C438
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
Manifest number:          0135
Signing time:             Fri 28 Aug 2026 07:48:35 +0000
Manifest this update:     Fri 28 Aug 2026 07:43:35 +0000
Manifest next update:     Mon 31 Aug 2026 16:57:35 +0000
Files and hashes:         1: 3232302e3233312e3139322e302f31382d3138203d3e20313334373734.roa (hash: Ptt4YLVWObBN2EDWF/pPVMNSng6g0RgCtq5fiDa8lWk=)
                          2: 3230332e38362e31362e302f32302d3230203d3e20313334373734.roa (hash: uMLAeYE9Fso11yhVojhjYyJDAb3WPWH1BlJh/X2DOwQ=)
                          3: 3230332e38362e302e302f32302d3230203d3e20313334373734.roa (hash: TAnrcV/q6VsB8YFBFhEbXjskfcTX0Mha1GN6QBn3c6Q=)
                          4: 34352e3131362e39362e302f32322d3232203d3e20313439363238.roa (hash: aWgeDjinqxghP2O9gm5Jstjm/o8V7VlFXar3hlRu/AE=)
                          5: 323430303a643230303a3a2f33322d3332203d3e2030.roa (hash: iNUdmu9Gf0xgCxDEJhv4BLHbiymyu26z4nlJEpV0mo4=)
                          6: 9B87DFEBDCCDA813116988D4421B088404578168.crl (hash: bH9C0rkgDF//4w5rxIvXj8jj9OkWlcHXMO4XOtdL9WI=)
                          7: 3232302e3233312e3132382e302f31382d3138203d3e20313334373734.roa (hash: Cph0YLpkDG2fLuVzSekkhP+HJ5DeU37Z2LF9M608YDg=)
                          8: 3130332e35362e3134302e302f32322d3232203d3e20313439363238.roa (hash: kQ4vmHhIhIdM+j0qKtexqNeRC3lB/ivTAG2HWe979bg=)
                          9: 3231312e3135342e3132382e302f32302d3230203d3e20313334373734.roa (hash: 7sBR0PD3eTNaJp5A6+iXnX/3YOszhjTGDbjYWbhqZ2o=)
                          10: 3231312e3135342e3134342e302f32302d3230203d3e20313334373734.roa (hash: alpjFmWgEiBbogthwEkCRvKizOOuc9cKPE88pENyGHA=)
                          11: 3130332e32332e3136342e302f32322d3232203d3e20313439363238.roa (hash: Q5lN8y2xoBURESf9IcASxDDCPLCsNrEs2HlfjfnnNOU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 15:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:25:21:4b:05:15:a7:d8:68:70:43:b2:8b:2f:88:05:68:45:c4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168
        Validity
            Not Before: Aug 28 07:43:35 2026 GMT
            Not After : Aug 31 16:57:35 2026 GMT
        Subject: CN=A4F6234E920BAA64CCBD1FE15B1BE82078B22545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e3:09:3f:16:31:b5:1d:ef:be:7c:47:cd:08:
                    08:ad:39:8d:01:8e:ef:e6:9d:84:82:63:06:fe:0c:
                    bd:1c:cd:f0:a1:5b:94:d5:10:09:8b:8c:74:73:db:
                    9e:e8:a9:a3:15:1b:1e:8c:3a:4f:ce:31:30:6e:5c:
                    48:5c:09:e2:ac:fa:ec:59:7a:39:72:aa:c8:08:93:
                    49:35:71:a1:4c:c7:5f:63:29:e0:b4:6d:8c:c0:02:
                    e8:3b:71:8a:e6:c4:90:f1:39:1c:ff:31:63:e7:b1:
                    bb:96:9f:fb:4f:a1:ed:3f:90:cd:f3:f0:39:79:09:
                    9c:0b:fe:27:ad:6f:e6:35:ad:10:07:a1:b1:5e:ca:
                    39:2f:23:98:58:2f:9a:47:72:b3:31:78:a6:cc:a4:
                    bd:4c:95:04:4d:35:7b:5d:e4:91:f3:dd:d1:74:b3:
                    14:dc:ca:96:e5:12:a6:58:e3:3e:b1:ae:cd:a5:50:
                    8a:4f:b9:f2:7f:5e:f1:c5:44:95:b4:3d:c8:b9:5a:
                    e8:54:19:af:4d:96:9c:83:47:60:93:f4:92:12:11:
                    61:fd:0c:b0:3a:97:76:7f:db:ae:16:cb:0e:88:f0:
                    38:01:af:17:3f:28:5a:e5:75:e2:4e:0a:ae:c6:d7:
                    cd:d5:eb:a5:75:b7:50:a4:10:d9:15:0c:94:7e:1a:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F6:23:4E:92:0B:AA:64:CC:BD:1F:E1:5B:1B:E8:20:78:B2:25:45
            X509v3 Authority Key Identifier:
                keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:7d:5e:6a:a5:45:93:75:d8:98:17:15:69:d6:52:21:5b:9a:
         e1:33:f7:fc:c6:b0:3b:c2:ef:fa:24:e8:0c:5d:bc:7d:b4:ce:
         db:6f:e8:47:dc:bd:59:cf:6c:ec:4a:25:e4:b4:e1:d1:6a:9d:
         e6:d2:0d:48:3a:87:1d:b8:20:3d:78:fe:10:fa:22:69:ad:a3:
         c4:e6:78:65:bb:35:dc:2c:29:92:df:23:0a:19:2a:bf:1e:8e:
         d0:50:92:8f:87:f5:33:86:b8:59:9b:b6:57:e9:b8:b1:2f:60:
         d5:64:98:00:d7:6b:22:1b:50:23:62:89:4f:a5:7c:51:5e:f5:
         9b:1a:59:e1:34:11:7a:45:b5:10:5f:f4:3a:3c:b7:ec:23:65:
         ef:a4:be:43:70:b0:cf:b7:90:d1:2f:3e:82:1a:e1:00:b5:26:
         c9:7a:23:ac:c6:1a:27:50:29:86:ed:9d:69:06:46:6c:de:b5:
         12:71:41:e6:e9:2c:10:73:e1:4a:e3:8e:12:b1:e8:44:72:d0:
         27:35:0e:ca:8b:4c:df:20:13:b9:b5:b6:10:91:b0:c9:24:e3:
         74:45:0c:9f:f3:9a:99:9b:32:0c:78:db:42:67:ac:67:a1:fa:
         3d:e9:64:42:9e:5b:8b:64:11:4b:59:a3:58:e9:36:51:4a:64:
         4c:98:ce:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:20:05 2026 by rpki-client