Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
File:                     098D421CB46F292F13CE71DF3D685D5E82893289.mft (raw, json)
Hash identifier:          WmuIGjAot1g8lAhLNDmvpecLfm+k9oLiAXtD5X4D1i8=
Subject key identifier:   CC:C3:CE:95:11:7B:5D:C1:C7:2B:30:04:0F:9D:75:8E:B7:57:26:97
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Certificate issuer:       /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial:       05EA789A9679BF9CCE326E78A97A5F22ADDF5DB0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
Manifest number:          0132
Signing time:             Fri 28 Aug 2026 06:47:35 +0000
Manifest this update:     Fri 28 Aug 2026 06:42:35 +0000
Manifest next update:     Mon 31 Aug 2026 16:53:35 +0000
Files and hashes:         1: 323430333a346338303a3a2f34382d3438203d3e203233373234.roa (hash: sjXPx2W8FA2lwA4lPp9dbO6vjQOZbUVExJ17HnTJgb0=)
                          2: 098D421CB46F292F13CE71DF3D685D5E82893289.crl (hash: r/Y4QfsrA+PPhzwWOkRxa9VGr0D3HkVJFpdwbREEJas=)
                          3: 3132322e31312e34302e302f32312d3231203d3e2034383038.roa (hash: XDT9ktasaOET17rRRzYq/yK1DlnIymI/BRvWecxJGWQ=)
                          4: 3131382e3139342e34382e302f32312d3231203d3e203536303438.roa (hash: jJHfhdH55SAnLJjrfpHzF3IQbWlzuqxr70ysIHv2Qx4=)
                          5: 3132322e31312e33322e302f32312d3231203d3e203536303438.roa (hash: 6YIv4SPnbt5J5t2pGyzsqmetgf6QOv/ADQllyX0zV+Q=)
                          6: 3132322e31312e34382e302f32312d3231203d3e2034383038.roa (hash: 0c/j1Gp0iCOrUSwBYehtFLY4kagoam0ofJWT9krdbRw=)
                          7: 3132322e31312e35362e302f32312d3231203d3e2034383038.roa (hash: UIrLFpYiMVKyR3ZM/CIcfXzkOEOcfkPa2kE4Gw/lutg=)
                          8: 3132322e31312e35362e302f32312d3231203d3e203536303438.roa (hash: OlqVUzQBn8tcFE4niny8RcvphQVQAF2g7rjIrsr8Fhc=)
                          9: 323430333a346338303a3a2f34382d3438203d3e203536303438.roa (hash: 7/ltQtz2n5DqjAYwYbdRZYTje+izuD33MFyhCzobykM=)
                          10: 3131382e3139342e34382e302f32312d3231203d3e203233373234.roa (hash: 5aYFYC3sz9pdXlA4MZsC3Gzn3v3fHAYEvc5Hr3Osouw=)
                          11: 323430333a346338303a3a2f34382d3438203d3e2034383038.roa (hash: IvoN5KOxvoNe59IDfb24FFL6qpg8UBoTE/nVJ45csPk=)
                          12: 3131382e3139342e33322e302f32312d3231203d3e203536303438.roa (hash: 66bgFsuwP5YR6jczc1wT5regWMhuco+8bvtJ9aQPcFU=)
                          13: 3131382e3139342e34302e302f32312d3231203d3e2034383038.roa (hash: uTqtT2+Z+32pQg4cwaqs2sAF3NdBZFcby8wCkB8VGjE=)
                          14: 3132322e31312e34382e302f32312d3231203d3e203536303438.roa (hash: OeABueeL5bVOfgm0ioMscNw6JnIbVThJEuNaqIcxCnc=)
                          15: 3132322e31312e34302e302f32312d3231203d3e203536303438.roa (hash: v4pzzGzUWs9sXfkWnaRsBIwheBnCfSO28nUsWmEeSrY=)
                          16: 3131382e3139342e35362e302f32312d3231203d3e203536303438.roa (hash: 3h+1mGvW/F1q6aPyrG2uRJfP0NCyMy+g8d9cHabmE9I=)
                          17: 3131382e3139342e34302e302f32312d3231203d3e203233373234.roa (hash: wj7o0kMSNOyiUst8OjYtPK1TlZz/PgITlU4P+dX7JtE=)
                          18: 3131382e3139342e34382e302f32312d3231203d3e2034383038.roa (hash: Wlv1ILc08DXaAYSI+HkiftdI5PHLcW7mnRqo6voD11w=)
                          19: 3132322e31312e33322e302f32312d3231203d3e203233373234.roa (hash: h0Xaj72XHmJeYZGrLxwTo88nHBDFLZq98uJjTObVwD4=)
                          20: 3132322e31312e34302e302f32312d3231203d3e203233373234.roa (hash: ai772q1EoRxuBDbBexQPnZXL/jCbU0YH2VB2woJTRp8=)
                          21: 3132322e31312e35362e302f32312d3231203d3e203233373234.roa (hash: n4C7l2A4rvlhW4atbSQqHzhdugqhLlv/LQhObAnFTSY=)
                          22: 3131382e3139342e35362e302f32312d3231203d3e2034383038.roa (hash: kPLgk6dYiF/WX5Rq65tlfXz+gdLaxsqZIwF0A7Ufkqo=)
                          23: 3131382e3139342e35362e302f32312d3231203d3e203233373234.roa (hash: ltZtkAqvZJofnyKNAI5X/W6jfZZwufYjJun0Ygp1JBc=)
                          24: 3132322e31312e33322e302f32312d3231203d3e2034383038.roa (hash: wKnPfEKTLOcoPxcoU4igzvQtVEKsTlIE9YwzFVgOuGs=)
                          25: 3132322e31312e34382e302f32312d3231203d3e203233373234.roa (hash: keY2EFny2N50oH6sPmEcnlgutDB4fpw2kzVuddOqR00=)
                          26: 3131382e3139342e33322e302f32312d3231203d3e2034383038.roa (hash: w2gS6YzrPmxBS3U09oI9HMSpNUd5vKBmQTETDvb5uLE=)
                          27: 3131382e3139342e34302e302f32312d3231203d3e203536303438.roa (hash: n4IPcR0vuUnwdrml1UZMOWsHcrDZi76Za6KE8Vlcgjo=)
                          28: 3131382e3139342e33322e302f32312d3231203d3e203233373234.roa (hash: nSWPu8aN6WamKVW4d0E8KInxi+UijHCRr0xuUppfJVc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 15:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ea:78:9a:96:79:bf:9c:ce:32:6e:78:a9:7a:5f:22:ad:df:5d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
        Validity
            Not Before: Aug 28 06:42:35 2026 GMT
            Not After : Aug 31 16:53:35 2026 GMT
        Subject: CN=CCC3CE95117B5DC1C72B30040F9D758EB7572697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7b:0a:1a:b9:cc:d8:d1:ea:2c:ff:df:4c:b5:
                    29:e9:83:97:e6:1c:7f:c8:98:74:a9:af:02:08:93:
                    92:67:ec:23:7c:0e:9a:9b:60:16:f2:1c:66:c6:db:
                    14:09:37:fc:75:9f:f4:67:77:cd:59:78:00:3e:99:
                    37:19:92:46:38:d9:7c:75:f0:7f:61:0f:1f:3e:af:
                    0f:00:e2:f5:42:9b:06:9f:6a:3e:c7:cd:d2:53:5f:
                    23:35:a4:d6:f4:ed:8f:43:4d:cb:3b:08:17:7c:2a:
                    3a:ee:0f:d1:7c:82:f0:5f:13:32:c8:c8:e1:9e:8d:
                    4c:88:fa:ce:bc:e1:6f:9b:ac:8b:95:9d:52:4a:03:
                    5f:26:19:a2:9a:5a:2e:28:04:89:f5:41:eb:ea:5b:
                    81:41:23:e4:19:b6:75:1c:46:93:e7:49:9b:8e:e5:
                    40:12:38:26:ba:11:7e:70:96:60:09:9a:cf:7b:ba:
                    a3:10:c9:d4:89:48:97:ba:bc:2e:85:31:b4:64:b9:
                    74:15:2a:8c:46:04:de:8f:27:3f:4b:15:b8:7c:ad:
                    1f:df:70:f5:b8:11:ed:6a:f3:02:12:df:2e:75:b0:
                    6a:28:f2:04:ff:fc:98:3a:2f:10:4c:fe:27:5e:27:
                    9b:5a:a0:02:3b:07:71:b2:2f:38:65:84:f9:26:a9:
                    32:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C3:CE:95:11:7B:5D:C1:C7:2B:30:04:0F:9D:75:8E:B7:57:26:97
            X509v3 Authority Key Identifier:
                keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:7e:1a:fb:00:d9:ce:65:99:f3:d4:e5:74:7d:fe:0f:d7:03:
         4a:e2:9c:75:12:35:08:7b:a1:f3:21:94:3d:7e:a6:4a:7d:f6:
         c5:c8:33:bf:ee:de:58:c2:63:5e:50:0d:23:b6:6f:e3:53:c4:
         2e:98:b5:ef:d8:b2:4b:3c:d7:ba:91:50:93:68:07:38:7f:55:
         10:02:cd:c3:9c:e7:4e:01:ae:4c:11:35:b8:b1:93:3a:e0:3d:
         82:10:ee:f7:ba:95:b3:49:27:a4:37:d4:11:c8:22:25:53:6f:
         22:8b:a4:38:5e:0b:47:e2:0f:75:13:ab:65:68:20:60:81:16:
         63:86:6a:aa:55:de:68:0e:a2:ba:81:43:51:49:4b:d5:25:83:
         13:81:4c:42:4f:50:fb:8d:9b:e4:74:c7:f9:8b:5f:63:e7:1d:
         14:08:50:5a:15:d7:18:d5:13:1c:da:60:5f:1d:34:d4:99:4b:
         2d:95:23:cf:d4:de:81:b4:5b:97:ac:7e:38:18:cb:84:65:50:
         51:40:fb:5b:29:2c:50:36:dc:32:04:ed:f1:7c:37:ff:38:7e:
         ee:ac:2b:22:15:e8:86:83:1a:e9:e2:40:11:69:49:ec:f4:c6:
         80:e5:b2:17:cb:45:5b:6b:d0:8a:7a:d2:48:a9:ec:59:2a:4c:
         46:e9:1f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:32:46 2026 by rpki-client