Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
File:                     9E09269F04335C992685B10E8709F2C95DC5E8DE.mft (raw, json)
Hash identifier:          ASJl6Oedcq7s5riH1e7yj7HdDZUWzftRUKKIaWbWHik=
Subject key identifier:   59:9B:3D:C2:26:34:E1:3D:5B:C1:E1:F6:8A:D5:14:A8:2A:C3:82:FC
Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
Certificate issuer:       /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Certificate serial:       7FD45DD2DA14D0060D1AF57D1A4430E4516CD416
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
Manifest number:          4D
Signing time:             Fri 13 Mar 2026 01:03:39 +0000
Manifest this update:     Fri 13 Mar 2026 00:58:39 +0000
Manifest next update:     Sat 14 Mar 2026 03:36:39 +0000
Files and hashes:         1: AS55990.roa (hash: 9wGj7BjgLP9F7+mMYuTn2O80+dlOilz9/m+hUYGA3yI=)
                          2: AS136907.roa (hash: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68=)
                          3: 9E09269F04335C992685B10E8709F2C95DC5E8DE.crl (hash: PbXR1lBUHVuSBrvwGX/AvvIwc/j7iyaaMFDO2fV4eFA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 03:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d4:5d:d2:da:14:d0:06:0d:1a:f5:7d:1a:44:30:e4:51:6c:d4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
        Validity
            Not Before: Mar 13 00:58:39 2026 GMT
            Not After : Mar 14 03:36:39 2026 GMT
        Subject: CN=599B3DC22634E13D5BC1E1F68AD514A82AC382FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:04:ce:b0:74:7e:3e:ba:e5:98:4e:10:19:94:
                    0e:77:2c:6f:3a:e8:7a:ea:91:fa:34:7c:bb:1d:7e:
                    ef:33:5b:03:8e:1d:cd:24:f6:ac:7b:43:c0:71:f9:
                    70:53:3a:f1:89:a3:7e:d4:fc:e4:68:cf:60:ad:e4:
                    5d:6d:00:d2:52:db:c8:46:68:0c:39:61:2c:5d:5c:
                    f8:fa:8a:55:3d:be:0f:f9:ae:c7:dc:92:02:66:83:
                    79:a1:73:2c:8a:17:eb:6d:1e:3c:42:3d:9a:3c:32:
                    a1:c1:47:e3:59:93:1e:06:a8:54:67:5e:0e:29:ab:
                    ca:96:3a:e2:5f:12:92:8d:e7:3a:3b:4a:bb:bf:ff:
                    c8:e7:e7:3b:7f:ba:c3:fb:bb:4d:71:8e:be:4f:38:
                    c7:e6:ed:f8:ab:2e:03:33:7d:9c:5c:f6:ed:af:47:
                    43:da:32:5a:a9:30:87:0f:9a:12:48:b4:be:e4:62:
                    64:88:54:54:f3:04:3c:0a:63:db:6f:ba:70:1b:4d:
                    68:8d:e5:a1:ec:1e:ee:f3:3c:5e:f5:eb:ff:56:dc:
                    07:bd:87:c5:87:f9:bd:97:c5:a4:b1:74:41:0e:89:
                    e6:bd:18:30:f6:e3:f3:a8:0d:2d:12:ee:4f:15:2e:
                    dd:06:7f:d6:7a:9d:c7:45:30:24:f7:02:ab:dc:1f:
                    39:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9B:3D:C2:26:34:E1:3D:5B:C1:E1:F6:8A:D5:14:A8:2A:C3:82:FC
            X509v3 Authority Key Identifier:
                keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ab:77:14:8e:e3:67:14:d3:46:81:01:4e:7b:21:93:8c:f6:
         57:d9:77:d3:ce:3e:da:cf:3e:01:4f:96:00:5c:cb:96:17:1b:
         46:5a:27:0e:c0:91:5c:fc:74:66:8d:51:bd:67:2d:de:04:89:
         dc:29:26:5f:cb:86:3b:d2:38:25:91:6e:3f:9b:6d:c4:e6:db:
         18:e1:c1:49:42:77:d8:a4:65:72:d7:d1:20:28:be:b9:4f:a5:
         cd:b8:7d:7f:56:95:23:12:c2:f6:ce:41:b4:72:c9:61:ba:98:
         aa:29:00:2c:18:89:3d:b5:8b:25:4e:47:01:e6:96:7a:7f:e4:
         b3:d6:57:09:86:1a:97:77:28:e2:78:82:85:9c:0d:92:a5:00:
         c4:a1:7c:88:b4:9d:de:62:31:23:7a:13:51:7b:e4:a8:c5:c5:
         8a:f1:c6:6c:57:48:e1:ea:09:c1:26:62:ab:ad:61:1d:0c:fe:
         eb:25:60:13:79:bf:34:75:26:ff:05:19:9e:2b:91:1c:7a:a5:
         f8:db:99:0c:11:38:6a:b8:93:f4:bb:45:77:aa:fd:bd:42:d5:
         c7:d1:ee:f0:e5:35:f3:75:70:36:f8:13:aa:fd:4e:aa:37:6c:
         d9:4d:83:98:cd:76:29:e9:31:c3:a7:2b:2e:45:92:09:8c:de:
         40:da:29:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 18:59:03 2026 by rpki-client