Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
File:                     9B22C19D842E45AA84439366694E4C828C309CEE.mft (raw, json)
Hash identifier:          0LBE7OCcpridBAQFavBZfbhyw+PILbEPnhxMmHRht0c=
Subject key identifier:   90:C8:C4:8D:F2:41:E8:E4:D1:75:8A:94:B3:5F:8C:32:14:F6:A5:25
Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
Certificate issuer:       /CN=9B22C19D842E45AA84439366694E4C828C309CEE
Certificate serial:       34800E68653F2038E2469BD4A4867C67B807586B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
Manifest number:          0142
Signing time:             Tue 08 Sep 2026 13:44:18 +0000
Manifest this update:     Tue 08 Sep 2026 13:39:18 +0000
Manifest next update:     Fri 11 Sep 2026 17:00:18 +0000
Files and hashes:         1: 32372e302e3231322e302f32322d3232203d3e203233363530.roa (hash: BnR+PZKY+8aUOoAAdYWVdmIHPHgi3uTNp1OUx0HV2Z0=)
                          2: 323430363a653738303a3a2f33322d3332203d3e2030.roa (hash: 4YJSYUZz+y0drZu0mLeTComBF+bUtE2t5ycXyBEG5cE=)
                          3: 32372e302e3231322e302f32342d3234203d3e2030.roa (hash: 1gxpHLl2efiqy1rtRuIFJL0j7IXIqK55wGOLHOlWhC8=)
                          4: 9B22C19D842E45AA84439366694E4C828C309CEE.crl (hash: 5Uf/x8ErC6Jw0GzMG20iB3drKCBYxs6KJFzo2qpqk14=)
                          5: 32372e302e3230342e302f32342d3234203d3e203233363530.roa (hash: kmojd1hZzl8eLQcyhLIgSj+c6qsc+7TrYy2dOio3d9M=)
                          6: 32372e302e3231322e302f32322d3232203d3e2030.roa (hash: +iZTzZqG/Rk14nBbLideA4U8/BW7aonvG3f2nUwUPSc=)
                          7: 3130332e3230382e34382e302f32322d3232203d3e203233363530.roa (hash: d9aV06/I/yR7XXF+WUMOhwENi/Ebl/QjLsljFViuUts=)
                          8: 32372e302e3230342e302f32322d3232203d3e203233363530.roa (hash: sBmAoVfm8kE81yTw5+u0KE1EiqXy58q7aq+7I1OCX2I=)
                          9: 32372e302e3230382e302f32322d3232203d3e203233363530.roa (hash: mis4Fg6j4oEjPSppTkgYv+gKi6EKDKX+hCYTZN1jN8s=)
                          10: 32372e302e3230372e302f32342d3234203d3e203233363530.roa (hash: VWps80thoEZA5PpxAR3RVodjSjiD0JLOvGC+4Emt3yQ=)
                          11: 32372e302e3230382e302f32312d3231203d3e203233363530.roa (hash: W8GeqtiB4Bpe9lZt2oYz7ItMcwW4KI9RTCNyPrXs30E=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 17:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:80:0e:68:65:3f:20:38:e2:46:9b:d4:a4:86:7c:67:b8:07:58:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE
        Validity
            Not Before: Sep  8 13:39:18 2026 GMT
            Not After : Sep 11 17:00:18 2026 GMT
        Subject: CN=90C8C48DF241E8E4D1758A94B35F8C3214F6A525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:07:1b:26:b7:2d:92:28:69:37:d7:a1:c3:
                    c1:87:a1:8d:ec:09:b7:5d:be:fc:99:cc:d1:d2:19:
                    4e:6a:06:0b:a4:cf:ec:0e:65:3f:7b:e0:a3:a2:70:
                    37:ee:aa:8b:7a:5b:76:de:f9:8a:31:1d:41:d6:84:
                    15:fa:c7:fd:44:4a:5e:ef:ad:38:d4:3d:24:08:10:
                    e3:fb:bc:50:71:d1:70:99:89:41:f6:34:1c:24:8c:
                    f2:6c:4e:c8:a5:6c:fb:75:46:1e:6e:6b:22:56:f3:
                    27:86:1f:50:28:16:54:b8:01:54:14:8a:02:d0:e9:
                    ec:b9:38:da:f9:f0:ad:00:5d:72:d4:55:38:38:9b:
                    ac:42:7f:79:c2:b5:75:16:ca:a0:28:21:0f:fd:73:
                    70:54:66:1e:5d:85:2a:ad:7c:7c:5d:78:29:0d:4b:
                    98:2f:33:de:00:67:c1:8f:a2:fd:f9:48:f8:62:9e:
                    bf:f5:3c:d1:fd:49:37:80:a4:5c:d7:e0:a5:99:d4:
                    17:ea:2a:49:a6:e9:d9:7e:c6:ae:be:98:37:ec:aa:
                    56:2f:b3:cb:f8:ed:b0:0c:b3:f2:70:35:7a:97:25:
                    46:75:a0:26:e6:39:88:16:6d:51:57:62:20:21:ce:
                    48:4f:01:ad:3d:bb:de:1f:e7:ae:d4:c6:69:5d:a4:
                    aa:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C8:C4:8D:F2:41:E8:E4:D1:75:8A:94:B3:5F:8C:32:14:F6:A5:25
            X509v3 Authority Key Identifier:
                keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9b:8a:12:ff:d9:15:75:4c:46:94:7f:08:aa:a2:f1:22:57:
         8e:61:0b:1d:a9:31:a0:b7:0d:ac:92:68:35:36:a2:17:7a:5b:
         b5:97:bc:30:85:fd:7f:29:1b:19:b0:f6:0b:4b:94:6d:c4:d3:
         45:17:ba:0a:ee:a7:ff:10:72:c3:74:19:7b:3b:e0:d7:8f:8b:
         59:47:9f:ed:cc:8a:9e:05:60:0f:57:69:eb:ff:c7:c6:71:c5:
         b5:80:d0:c5:44:31:7a:24:7a:0c:e5:28:55:95:6e:cd:a9:b3:
         18:1c:5c:a2:51:f5:11:d8:01:e0:0b:2e:03:5e:c3:53:c8:43:
         d5:92:c5:35:7c:c6:e0:c0:dd:55:45:5d:06:71:c9:40:79:de:
         f0:36:4f:81:4b:78:2a:c0:73:50:7c:84:45:01:5e:89:f6:d3:
         8e:38:e6:07:6b:b5:a8:db:87:1a:f0:33:90:ee:f2:0c:de:f5:
         95:fb:31:fa:dc:78:d9:26:69:ff:ed:16:52:51:19:8a:b8:64:
         9c:5a:b0:b2:3b:c8:d8:54:80:9d:f7:c2:3f:86:e5:a0:90:dd:
         d7:98:a3:c7:92:b0:2e:7a:3b:56:58:74:52:87:23:0d:55:0c:
         24:54:fe:46:1e:fd:cc:71:55:46:66:3f:d9:f0:88:54:6c:44:
         03:dd:b3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:31:45 2026 by rpki-client