Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
File:                     E893434A32058DAFE9758FDA7B36659444C9EF8E.mft (raw, json)
Hash identifier:          ncrU6rmF1Yn5scnSqHnQcdtrpfkpOWf9epXlajrHQGc=
Subject key identifier:   DB:E2:FB:33:AD:86:D1:53:EE:90:E5:11:D5:3C:F4:69:45:1E:CD:F9
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       4AFEA1638CA5FC600CAFCD81B371B1838461A6ED
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
Manifest number:          0242
Signing time:             Wed 09 Sep 2026 10:25:30 +0000
Manifest this update:     Wed 09 Sep 2026 10:20:30 +0000
Manifest next update:     Sat 12 Sep 2026 21:08:30 +0000
Files and hashes:         1: 3231312e3134392e39322e302f32322d3234203d3e20323034373635.roa (hash: zu7A0YqOUsStSCL9XmMvV8JI6as35lqa/fkbIpxCsuU=)
                          2: 3130312e3233322e3235322e302f32322d3234203d3e20323034373635.roa (hash: Jf0nSP1QjgiNIQhdrUFTjytdDY0TmEhyfIpVa+7R0NI=)
                          3: 3231312e3134392e36302e302f32322d3234203d3e20323034373635.roa (hash: 7V36+GTIj9SXQJg7tLFnRoq+tkYB8vWy1KKimX7T6e4=)
                          4: 3131392e35392e3132392e302f32342d3234203d3e20313938393639.roa (hash: dNjRVPUi8SeJi6wfWA5kpGRV6M0Yhi+9BNbX7d5K6RM=)
                          5: 3131392e35392e3133312e302f32342d3234203d3e20313938393639.roa (hash: Igedmkrmmt6w/coBrWoPE5I/S4pHWuUb36wo85gMF2M=)
                          6: 3231312e3134392e34342e302f32322d3234203d3e20323034373635.roa (hash: JOuDarRFxX6hedZ9d+aM+Mp8ReI4i452AlyZanVV94A=)
                          7: 3130312e3233322e3230382e302f32322d3234203d3e20323034373635.roa (hash: zL0Dm0mURydYd7+TsCOqL5DQfpsmBMxpHIw7pKf+HsM=)
                          8: 3231312e3134392e33342e302f32342d3234203d3e20313937363436.roa (hash: 5x/Vxtm5m5rkP6zFckDqlG3l/AjZ13Z5TGq14rxe+2s=)
                          9: 3231312e3134392e38382e302f32322d3234203d3e20323034373635.roa (hash: re30P74Bbm0hmGv2RhIcziLM8r3Wt2LJElxw1K1ooLg=)
                          10: 3130312e3233322e3139322e302f32322d3234203d3e20323034373635.roa (hash: /0sg8ccLTkO3g1ldJzbTiAFtKDlkkCPb7uCa7Ysudpo=)
                          11: 3131392e35392e3133302e302f32342d3234203d3e20313938343836.roa (hash: sCJBIczjSjKHwYg4tr7Vt4b9W/CSWx+cTZb6kw5fUgI=)
                          12: 3231312e3134392e37322e302f32322d3234203d3e20323034373635.roa (hash: zXlo1VA9iQTDPz3KGS73pe5bQ11qgiCZzBV45rhkKNM=)
                          13: 3231312e3134392e37362e302f32322d3234203d3e20323034373635.roa (hash: Jh9N6MjH+92KExvSY1br25KQHKZt03whAcPmQQtTsZM=)
                          14: 3130312e3233322e3232382e302f32322d3234203d3e20323034373635.roa (hash: ELull7wYpAhnMMP1UUEW0JriulkO97jfKNOmPBLe3Ao=)
                          15: E893434A32058DAFE9758FDA7B36659444C9EF8E.crl (hash: 47Y5buXzdWuXEBaHQUF+cKBzTXj7YNKTIzf7/enlFKU=)
                          16: 3231312e3134392e33352e302f32342d3234203d3e20313937363436.roa (hash: Im2H24Yr/6b3QfJrulqbSm/zgWvML9X71XNr/4p53L0=)
                          17: 3231312e3134392e34302e302f32322d3234203d3e20323034373635.roa (hash: cTF/1P0hKocHB9czSD+ya7E09e6MNaALbBW1WrMk3qw=)
                          18: 3231312e3134392e33332e302f32342d3234203d3e20313937363436.roa (hash: R0/2iTeh2DLPcz2gqCFDzilBADOZ6v71FJD7uxFPFJQ=)
                          19: 3130312e3233322e3139362e302f32322d3234203d3e20323034373635.roa (hash: 3MZhZdqFlGUXrs41Ixg9lETuk2pcfcfoIp+5TjNL/f0=)
                          20: 3130312e3233322e3234342e302f32322d3234203d3e20323034373635.roa (hash: j47sMbHM1m2pa9sdXpdOqe2ulNU6K+ubDOp951xAJ40=)
                          21: 3231312e3134392e35362e302f32322d3234203d3e20323034373635.roa (hash: VhRwOwc2/6uy/9jZXno2xQ/IEWxs3AJLgM3zUgVetRc=)
                          22: 3231312e3134392e33362e302f32322d3234203d3e20323133373035.roa (hash: vHWiz6x+VBqj0f9UFCYPCsW1JK5bYID4vJQiFZNMWjU=)
                          23: 3132332e39382e302e302f32342d3234203d3e20313937353430.roa (hash: f8C6VLPJ6OvFB09dBz6mz+VP2ro/1UGGvxqqWBCcEq8=)
                          24: 3231312e3134392e33322e302f32342d3234203d3e20313937363436.roa (hash: E1+jSIF+26ZCWmYBRLcZrk43sgfcRZnSJXfTb4Ao+zI=)
                          25: 3130312e3233322e3234382e302f32322d3234203d3e20323034373635.roa (hash: 5SXjckLKgvKsrKMfCX5zCQiw9HEgb8VVY5iiv+S/LGU=)
                          26: 3130312e3233322e3231362e302f32322d3234203d3e20323034373635.roa (hash: Idjjoy5317eBYu+nyDOXXCnOhaPQ4lKa05rCZCo6iv0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 22:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fe:a1:63:8c:a5:fc:60:0c:af:cd:81:b3:71:b1:83:84:61:a6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Sep  9 10:20:30 2026 GMT
            Not After : Sep 12 21:08:30 2026 GMT
        Subject: CN=DBE2FB33AD86D153EE90E511D53CF469451ECDF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8c:24:ae:1e:9f:56:49:ca:40:29:e2:7d:49:
                    64:7e:71:3b:e5:0b:62:8f:6a:8c:fe:e8:d2:63:e3:
                    b9:3f:a6:61:64:36:6d:ec:c4:25:f5:fc:f3:3a:1d:
                    53:9a:d9:43:08:10:7d:83:2a:78:86:1e:04:ae:77:
                    10:1b:fa:2e:c7:10:4a:e9:a9:f1:9f:60:6c:f2:75:
                    5d:c9:92:8b:4c:f1:86:17:a3:dd:e6:31:f9:e2:65:
                    f7:60:b9:6d:34:1f:7c:5a:fd:f9:d9:97:ee:97:51:
                    2e:2d:ad:5e:23:b4:c0:81:ed:73:55:d2:db:09:6a:
                    28:05:3c:ba:9d:20:0b:ad:29:e8:8d:51:d0:70:4f:
                    b4:c7:70:ad:8a:4f:a6:3a:af:e2:e8:9e:6b:89:72:
                    a5:e2:b6:f7:14:de:e7:ef:1b:13:1e:08:6d:5d:be:
                    8e:1d:a4:84:bb:69:39:80:71:b4:01:2a:f5:99:dc:
                    d0:9f:d1:61:70:c7:06:3c:8f:bd:43:09:ad:31:e4:
                    5b:7f:82:2f:08:1d:ab:33:bf:af:fd:47:8e:a2:4e:
                    85:a5:b1:20:b8:3d:eb:12:6b:d0:b9:f4:bb:97:08:
                    2e:03:9c:a2:b0:0f:d0:7f:bd:2d:db:26:17:15:6d:
                    8c:c6:c0:c6:92:71:3b:19:b6:12:3e:14:e3:21:fd:
                    1a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E2:FB:33:AD:86:D1:53:EE:90:E5:11:D5:3C:F4:69:45:1E:CD:F9
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:4e:c2:82:c0:1c:0e:c6:5a:c6:f9:32:aa:6e:4c:17:e4:e9:
         c3:3e:36:4b:91:9c:a6:53:0f:59:13:23:24:28:94:3a:66:17:
         ac:e2:8c:46:23:ed:b8:f3:f5:69:4c:a7:72:f5:42:17:75:44:
         9e:c7:d7:d8:83:a5:c0:72:f4:8b:80:a4:9d:b1:b8:5a:11:9a:
         7d:94:e6:f2:3c:fd:50:c7:87:1e:82:a1:94:68:c2:71:c6:b3:
         99:25:e4:92:a1:85:58:93:bd:2f:67:9a:fc:33:90:fc:30:f5:
         35:48:11:59:a3:1d:55:5f:e9:68:12:93:d2:12:6a:d2:33:1e:
         07:de:78:d9:2e:3d:c5:d4:ae:31:54:dc:b6:57:bb:9d:6a:49:
         01:51:99:65:57:9b:00:ae:21:f5:07:55:92:c9:a1:3c:a8:bf:
         bc:69:b5:45:b4:d5:7b:9c:3a:8d:ce:10:25:65:5d:96:35:08:
         c3:fc:b3:79:3a:b9:54:26:79:98:84:36:28:bc:80:75:95:bd:
         8f:83:7d:be:92:98:4a:8b:e7:8d:96:b9:82:09:84:1f:ca:c9:
         d0:c6:28:52:ab:1d:0e:a5:6a:41:69:96:90:b3:0b:1b:09:a5:
         29:2b:0f:31:5b:15:70:70:95:2a:67:db:7b:b7:32:fb:53:26:
         d7:f0:71:73
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUSv6hY4yl/GAMr82Bs3Gxg4Rhpu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0
NEM5RUY4RTAeFw0yNjA5MDkxMDIwMzBaFw0yNjA5MTIyMTA4MzBaMDMxMTAvBgNV
BAMTKERCRTJGQjMzQUQ4NkQxNTNFRTkwRTUxMUQ1M0NGNDY5NDUxRUNERjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcjCSuHp9WScpAKeJ9SWR+cTvl
C2KPaoz+6NJj47k/pmFkNm3sxCX1/PM6HVOa2UMIEH2DKniGHgSudxAb+i7HEErp
qfGfYGzydV3JkotM8YYXo93mMfniZfdguW00H3xa/fnZl+6XUS4trV4jtMCB7XNV
0tsJaigFPLqdIAutKeiNUdBwT7THcK2KT6Y6r+LonmuJcqXitvcU3ufvGxMeCG1d
vo4dpIS7aTmAcbQBKvWZ3NCf0WFwxwY8j71DCa0x5Ft/gi8IHaszv6/9R46iToWl
sSC4PesSa9C59LuXCC4DnKKwD9B/vS3bJhcVbYzGwMaScTsZthI+FOMh/RqrAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU2+L7M62G0VPukOUR1Tz0aUUezfkwHwYDVR0j
BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2
NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC9FODkzNDM0QTMyMDU4
REFGRTk3NThGREE3QjM2NjU5NDQ0QzlFRjhFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAME7CgsAcDsZa
xvkyqm5MF+Tpwz42S5GcplMPWRMjJCiUOmYXrOKMRiPtuPP1aUyncvVCF3VEnsfX
2IOlwHL0i4CknbG4WhGafZTm8jz9UMeHHoKhlGjCccazmSXkkqGFWJO9L2ea/DOQ
/DD1NUgRWaMdVV/paBKT0hJq0jMeB9542S49xdSuMVTctle7nWpJAVGZZVebAK4h
9QdVksmhPKi/vGm1RbTVe5w6jc4QJWVdljUIw/yzeTq5VCZ5mIQ2KLyAdZW9j4N9
vpKYSovnjZa5ggmEH8rJ0MYoUqsdDqVqQWmWkLMLGwmlKSsPMVsVcHCVKmfbe7cy
+1Mm1/Bxcw==
-----END CERTIFICATE-----
Generated at Wed Sep 9 20:25:20 2026 by rpki-client