Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
File:                     4B9663C98FB267EE767D89354546CFB5F1950080.mft (raw, json)
Hash identifier:          iRlZW7USc1RS2yZ156/XSwO0FJ4acBTu9wvecafyVp0=
Subject key identifier:   58:9A:3C:B3:E5:D3:61:62:7D:03:B8:BB:D3:54:FD:C5:92:B5:87:07
Authority key identifier: 4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80
Certificate issuer:       /CN=4B9663C98FB267EE767D89354546CFB5F1950080
Certificate serial:       73A085D4CDEE4B4CBAC4FFEDAD9B24962A1A05F7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
Manifest number:          0129
Signing time:             Fri 28 Aug 2026 06:48:23 +0000
Manifest this update:     Fri 28 Aug 2026 06:43:23 +0000
Manifest next update:     Mon 31 Aug 2026 10:00:23 +0000
Files and hashes:         1: 3130332e32352e3135362e302f32342d3234203d3e203539303637.roa (hash: Fhm18jMP0LneDzpdDN9bxE/6o0W++vH4PjTwSu3QXws=)
                          2: 3130332e3235352e3134302e302f32322d3232203d3e203539303637.roa (hash: 9ENwWTaIR1kgTR2cM8Bxzg75QWe4g5f6pdCy3pGfOoM=)
                          3: 3130332e3235352e3134302e302f32332d3233203d3e203539303637.roa (hash: 0pufc7/8qoYUfAmwuaik++UnUtWz2+V3vbRti8a+0CY=)
                          4: 3130332e33362e39362e302f32322d3232203d3e203539303637.roa (hash: FkelfI67m7ipj6mV1iMgqPetZxVxz1HRPE6PR4K52Mg=)
                          5: 3130332e3230322e3131362e302f32342d3234203d3e203233373234.roa (hash: kTJjPihi+5ShHwcjCG95Ksd/IeqfaBWsCJz1Z+qGwi8=)
                          6: 3130332e3230322e3131372e302f32342d3234203d3e203539303637.roa (hash: rqOuDw3iVs42GNBw5+/dSDoIytGIIze8vnGtEjqD+9o=)
                          7: 3130332e3230322e3131382e302f32342d3234203d3e203539303637.roa (hash: 3X9OfTTXPjNj0ajTWzHmULX4/iI+wZXM/hgoYn8WWPo=)
                          8: 3130332e3230322e3131392e302f32342d3234203d3e203539303637.roa (hash: xwK0frG/nA9EnjQLmnlPT3TbP/TwR9YEKyj6/CwykjE=)
                          9: 3230322e38392e3233322e302f32312d3231203d3e203539303637.roa (hash: LxmwgqIyXKQ1LvD6HPrtkI+bgscVtAKEfia1kE5S16I=)
                          10: 3130332e3230322e3131362e302f32342d3234203d3e203539303637.roa (hash: VImbyzhe3gUUh86v0HsN0hITp9TmfCxhigtsSIgpKVQ=)
                          11: 3131312e3232312e32382e302f32342d3234203d3e203539303637.roa (hash: 5GBQ05kupa1eov4R4hg4QmiyoDcMGMwGDLJFGgFNDY4=)
                          12: 4B9663C98FB267EE767D89354546CFB5F1950080.crl (hash: H1oixma1bioU9J3oKaHm9YwkqZp7sZ0ejdg2IG1NW/M=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 10:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a0:85:d4:cd:ee:4b:4c:ba:c4:ff:ed:ad:9b:24:96:2a:1a:05:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9663C98FB267EE767D89354546CFB5F1950080
        Validity
            Not Before: Aug 28 06:43:23 2026 GMT
            Not After : Aug 31 10:00:23 2026 GMT
        Subject: CN=589A3CB3E5D361627D03B8BBD354FDC592B58707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:89:fa:8e:e3:0e:14:9e:8e:4a:ca:bb:3e:51:
                    c5:bf:ae:0b:13:5b:4e:9d:ea:2e:30:13:6f:e9:9a:
                    d0:b0:e0:41:80:a5:10:0c:bb:da:e0:7a:89:1b:07:
                    9f:f7:3a:d0:09:f8:4c:ea:f8:58:0c:d1:62:51:2c:
                    b1:61:f8:dc:b9:58:ad:a9:65:c4:0d:81:1f:7c:42:
                    fc:c2:aa:79:7e:ae:64:74:49:a6:99:60:61:46:96:
                    bf:2a:99:51:0b:93:14:68:23:29:c8:e7:15:bd:3e:
                    55:9a:da:30:d1:ce:2b:5b:e8:40:59:8d:62:5f:4b:
                    df:79:8e:ee:44:45:af:0e:69:1f:e1:d1:c5:60:f6:
                    5e:de:5e:57:25:59:a1:7d:fc:24:83:15:1d:f0:c8:
                    fa:3c:70:e6:a0:da:1d:96:f2:8a:fb:34:02:6f:a9:
                    9b:cd:34:68:bc:a8:17:ec:3d:f8:56:94:4b:5e:a8:
                    66:28:25:dc:f0:0c:39:a3:76:92:20:c2:56:40:24:
                    7d:95:6d:70:be:e1:ad:dd:7c:ab:95:01:40:51:bc:
                    5a:a9:ba:11:4c:c1:04:47:c1:14:f9:5d:ab:6f:7c:
                    9e:5f:d3:9b:1c:d7:51:4f:21:da:55:41:f4:97:74:
                    2e:ed:91:27:1d:01:1b:b3:15:ab:02:10:c5:3f:3d:
                    03:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9A:3C:B3:E5:D3:61:62:7D:03:B8:BB:D3:54:FD:C5:92:B5:87:07
            X509v3 Authority Key Identifier:
                keyid:4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:40:e9:ee:23:9d:13:9c:61:a3:06:de:c9:49:78:83:66:bc:
         bf:75:aa:14:e9:6b:21:9e:a0:aa:dc:6a:42:d4:54:b0:c6:9f:
         38:4d:0a:18:d3:3f:e1:a2:fe:fc:27:d3:f0:91:08:a3:df:d1:
         92:f4:91:e5:45:79:0c:46:3f:6d:23:b5:b3:05:9d:39:51:16:
         ba:57:b3:38:f4:e9:da:2a:96:d7:c8:36:d0:cc:29:5d:2e:74:
         06:ac:e1:5b:cb:5b:43:9c:21:bf:e8:ab:ed:12:84:b2:7e:ea:
         63:9f:2e:57:84:27:29:af:92:ed:c0:d1:fc:39:e0:11:1d:4e:
         41:a9:f8:9e:be:4c:72:e7:82:0d:ee:0e:d2:ed:70:a8:fc:a4:
         27:9a:71:a6:06:07:16:ac:98:a5:aa:92:bf:a8:b5:59:62:79:
         c1:88:48:29:03:60:ba:f2:14:ef:8b:cf:59:b7:20:96:e0:2d:
         ec:c8:9a:5d:60:c2:22:23:86:a3:70:e4:2f:f7:18:5b:28:cc:
         be:6f:3a:5e:35:7d:8d:7e:38:b7:e3:8f:d6:89:d8:9f:30:56:
         d9:05:58:0c:5c:eb:79:67:5f:8a:78:bb:0e:ea:9f:0a:33:f5:
         ef:a1:ca:31:b4:5a:1d:bc:c1:8b:a3:70:43:a9:17:d2:d2:52:
         3f:47:b3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:03:11 2026 by rpki-client