Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
File:                     9684E4B95F47A986892F9930EF9D9E453227439F.mft (raw, json)
Hash identifier:          gejtpUp+bqFhY7NfgbHeydS6+ePNZ6vjmJ2Q9x4RXOo=
Subject key identifier:   47:44:9C:E8:ED:75:51:A3:09:36:46:B7:B9:C0:F7:81:DA:B1:17:53
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Certificate issuer:       /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial:       0D1C28E3816F4359FFFEBFD9F178C81A143D92ED
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
Manifest number:          0132
Signing time:             Fri 28 Aug 2026 06:48:08 +0000
Manifest this update:     Fri 28 Aug 2026 06:43:08 +0000
Manifest next update:     Mon 31 Aug 2026 12:21:08 +0000
Files and hashes:         1: 3130332e33392e3230302e302f32322d3234203d3e20313331353734.roa (hash: 5xMWNkW1klQcDp4QWHmfoXOnt2+cbg8IcOUQAYdb1Io=)
                          2: 3130332e34312e332e302f32342d3234203d3e20313331353734.roa (hash: WH7tyIEmjprytM6YWjBB9xp1Npd/pU0lhZCNIY+OwQk=)
                          3: 34332e3234392e3136392e302f32342d3234203d3e20313531333032.roa (hash: D6hWvznx4k3AsLSzPZQiMru4ALXwRjJERJ9OjTSouQE=)
                          4: 34332e3235302e33322e302f32322d3232203d3e20313334373630.roa (hash: AQjaQMZN9JXVfWKQ/jLFTa4k1E9drRu7j1URRVSdUXo=)
                          5: 34332e3234392e3137302e302f32332d3234203d3e20313531333032.roa (hash: TViUEFSUDt+dBd98dAM8WDyGrFeARupa+y25tQ3Xkpo=)
                          6: 3130332e34312e322e302f32342d3234203d3e20313334373630.roa (hash: GHs4Ice+IXgOdXzh11tNCtQfPSNUyk6aC0/QcmPGzko=)
                          7: 34332e3234392e3137302e302f32342d3234203d3e20313331353734.roa (hash: 0u75Dz9NUfxGKoMPcV5RDsGtZmNW5DPaSlMYJBChnT8=)
                          8: 3130332e34312e302e302f32322d3232203d3e20313331353734.roa (hash: 9/QDE3gE/sRHkLVbxl56Vq/WuOTZKU48oTSiZX8DXK8=)
                          9: 3130332e34312e302e302f32332d3233203d3e20313334373630.roa (hash: Y6ym5hhQgZvyhUCRDxWiIFvfMhKYw0X+/4gByoyJMXg=)
                          10: 3130332e34312e322e302f32342d3234203d3e20313331353734.roa (hash: MBRSyxBnowaE6dGwCKBTr8xjqRGqjbmJM8nSVaaIYEE=)
                          11: 34332e3234392e3136382e302f32332d3234203d3e20313531333032.roa (hash: 56mIz73y8Fag4vyUb19heMLIyjzwutiwremvkxG5UvY=)
                          12: 3130332e34312e302e302f32342d3234203d3e20313331353734.roa (hash: TofZGKZXkXwQ1NVeXRbCcMAjpMcwrwDtI6F24dZ7WT0=)
                          13: 3231312e3130312e3230382e302f32302d3230203d3e2030.roa (hash: dzhJetwhygZWORFnMAANn17o0nAIbSRkwyKQXtWL2bM=)
                          14: 3130332e34312e3136342e302f32322d3232203d3e20313334373630.roa (hash: JGGbu1AchEm6gwsQvta+dJIpocamBYNAN8qvKm/lZk0=)
                          15: 3130332e3134332e31382e302f32332d3233203d3e20313334373630.roa (hash: pzsCYGXeY52FfqmwZq5tlLMJLmom8MQOUPOwEibOqe0=)
                          16: 3130332e34312e322e302f32332d3233203d3e20313334373630.roa (hash: SCN97S2wwNnV/ZgxJpPHs3iMMe/lJtzr3ZRPjKn4Z8M=)
                          17: 3130332e34312e312e302f32342d3234203d3e20313331353734.roa (hash: XLQFYLz+tc1UxhxL0QSQ9SLNiBHi7J4Tj9p/+uW97eg=)
                          18: 34332e3234392e3136382e302f32332d3234203d3e20313331353734.roa (hash: dIVnTnlidXm0fTkWWM5Bl7Vt6fCzb/q4QIPIzd/VdcQ=)
                          19: 3130332e3134332e31362e302f32332d3233203d3e20313334373630.roa (hash: 1g6t3exMx24cwEMgY2KveH3dixYd24sg7I/SmcDE884=)
                          20: 3130332e34312e332e302f32342d3234203d3e20313334373630.roa (hash: /j0LswSNXCsNpXgcRLD/3LdCZx3vSt9vIECErqtDi7w=)
                          21: 9684E4B95F47A986892F9930EF9D9E453227439F.crl (hash: aIzMLJhfPw99LjRSanCBIuai3m0GrE+/F6qAzmLPS3I=)
                          22: 34332e3234392e3137312e302f32342d3234203d3e20313331353734.roa (hash: uS/v5pS/8LsE1KboKlgwPa0r9AUO/FNI2ZRy4jqzFQo=)
                          23: 323430303a393632303a3a2f33322d3536203d3e20313331353734.roa (hash: UIdybOLdanzkw714KalMD+c6lUnXmyZyESW3lLcQRJk=)
                          24: 34332e3232372e382e302f32322d3232203d3e2030.roa (hash: rFWuKZANl9HR+2+j6XziWRcJMug5PNmcsitIIwWuKlA=)
                          25: 34332e3234392e3136382e302f32342d3234203d3e20313531333032.roa (hash: bFSMaDup9Ycm3OuQxmjkPRgJBcR+tRlpQ+vDKCyHYkA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 12:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1c:28:e3:81:6f:43:59:ff:fe:bf:d9:f1:78:c8:1a:14:3d:92:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
        Validity
            Not Before: Aug 28 06:43:08 2026 GMT
            Not After : Aug 31 12:21:08 2026 GMT
        Subject: CN=47449CE8ED7551A3093646B7B9C0F781DAB11753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:48:af:27:fb:5c:53:91:ab:20:d5:02:1e:69:
                    6d:04:df:18:14:14:f9:a7:55:ef:62:8b:83:19:97:
                    df:bd:d4:70:03:20:4d:60:31:94:8e:d6:d4:88:2e:
                    e5:df:be:5b:e0:82:68:95:4b:43:84:49:2d:2d:8e:
                    96:32:1f:80:29:2c:46:c3:a6:c0:6f:68:05:ff:c3:
                    63:ce:e0:e2:9b:df:5e:d2:05:cf:b6:24:30:d0:46:
                    46:7b:9f:0d:5d:99:02:de:ae:52:e4:78:16:01:14:
                    79:a0:8d:f2:20:3c:98:68:93:e5:ea:00:67:e2:2e:
                    6a:eb:da:a0:f7:e4:9c:a3:b7:1c:54:00:df:c9:4e:
                    e9:a6:4c:b0:b9:cc:35:dd:41:30:39:0f:a8:ce:15:
                    63:a0:3c:e2:dd:ba:f9:3e:95:f4:e0:fb:2f:99:18:
                    a4:db:c2:cb:20:fb:e1:ea:36:5f:6e:6a:8f:28:d4:
                    82:4e:ba:cc:68:c1:a1:c1:54:ad:fa:df:d9:2f:a0:
                    a2:0d:1a:2d:95:24:93:8d:2d:61:90:7e:e7:e5:3d:
                    7f:3c:ab:89:e0:67:bf:c2:9c:a1:9b:d5:b9:7e:bf:
                    20:32:a5:86:88:80:f4:64:9a:dc:4f:c5:11:2d:07:
                    94:dc:58:bd:34:5d:3d:17:6c:89:b1:41:46:7c:5d:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:44:9C:E8:ED:75:51:A3:09:36:46:B7:B9:C0:F7:81:DA:B1:17:53
            X509v3 Authority Key Identifier:
                keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e8:8b:33:b7:fd:63:96:ee:ed:d8:7a:8c:1b:9f:26:ce:9b:
         db:32:e2:85:12:55:db:9e:f5:f1:7b:ae:7a:6c:f3:73:c3:5d:
         6f:96:87:09:a6:bd:13:88:ee:32:e5:25:73:f8:40:d8:4a:95:
         81:a8:f1:d8:ac:26:09:57:b9:3d:ed:80:1b:4e:b3:07:69:8f:
         0e:be:0e:d2:55:cd:86:f8:44:89:66:9d:35:e3:ce:d8:21:f2:
         4a:f8:60:3a:e7:e4:63:72:77:95:e2:fc:80:c7:be:11:4e:b6:
         00:19:e0:42:56:bf:4f:00:e6:1d:b4:3b:99:0e:da:71:f5:20:
         15:07:72:79:a5:2d:d6:20:b0:66:35:79:67:85:83:5e:92:51:
         5d:00:15:c8:6d:0f:38:79:11:ca:dd:57:a0:26:0d:ec:c0:5d:
         e1:92:3e:6a:7f:1c:1b:ba:4f:34:05:b2:47:13:93:f5:60:c9:
         0a:c4:2b:91:8f:19:ec:bc:04:24:b5:16:57:6d:97:6f:8c:48:
         d7:f4:eb:4d:b7:25:b7:4b:84:7b:2d:04:11:72:ef:c3:66:ef:
         0e:d3:bb:a7:6e:0d:01:cd:ea:ea:21:e3:01:73:e4:41:93:8a:
         ba:ef:35:d5:cf:e1:54:e3:09:0d:96:de:aa:54:84:04:7c:d8:
         e0:20:82:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:19:33 2026 by rpki-client