Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
File:                     9B22C19D842E45AA84439366694E4C828C309CEE.mft (raw, json)
Hash identifier:          oIEggvN3a06Rl4xdcu6yMn+NofcDvPPLe3T21P2eBJs=
Subject key identifier:   45:26:01:62:E8:8A:A8:66:D0:72:8D:AB:51:20:F4:CF:9E:87:BA:2A
Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
Certificate issuer:       /CN=9B22C19D842E45AA84439366694E4C828C309CEE
Certificate serial:       09BEF1DBE1A31D643017D1A339D711D37A3D08D8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
Manifest number:          0111
Signing time:             Sun 26 Jul 2026 15:46:57 +0000
Manifest this update:     Sun 26 Jul 2026 15:41:57 +0000
Manifest next update:     Mon 27 Jul 2026 18:46:57 +0000
Files and hashes:         1: 32372e302e3231322e302f32322d3232203d3e203233363530.roa (hash: BnR+PZKY+8aUOoAAdYWVdmIHPHgi3uTNp1OUx0HV2Z0=)
                          2: 32372e302e3231322e302f32322d3232203d3e2030.roa (hash: +iZTzZqG/Rk14nBbLideA4U8/BW7aonvG3f2nUwUPSc=)
                          3: 32372e302e3230382e302f32312d3231203d3e203233363530.roa (hash: W8GeqtiB4Bpe9lZt2oYz7ItMcwW4KI9RTCNyPrXs30E=)
                          4: 323430363a653738303a3a2f33322d3332203d3e2030.roa (hash: 4YJSYUZz+y0drZu0mLeTComBF+bUtE2t5ycXyBEG5cE=)
                          5: 32372e302e3230342e302f32342d3234203d3e203233363530.roa (hash: kmojd1hZzl8eLQcyhLIgSj+c6qsc+7TrYy2dOio3d9M=)
                          6: 9B22C19D842E45AA84439366694E4C828C309CEE.crl (hash: WXX2xLuEe7jIlCtU+/uoMKKUuulorWVJt+xEu/8fYb8=)
                          7: 3130332e3230382e34382e302f32322d3232203d3e203233363530.roa (hash: d9aV06/I/yR7XXF+WUMOhwENi/Ebl/QjLsljFViuUts=)
                          8: 32372e302e3230372e302f32342d3234203d3e203233363530.roa (hash: VWps80thoEZA5PpxAR3RVodjSjiD0JLOvGC+4Emt3yQ=)
                          9: 32372e302e3230342e302f32322d3232203d3e203233363530.roa (hash: sBmAoVfm8kE81yTw5+u0KE1EiqXy58q7aq+7I1OCX2I=)
                          10: 32372e302e3231322e302f32342d3234203d3e2030.roa (hash: 1gxpHLl2efiqy1rtRuIFJL0j7IXIqK55wGOLHOlWhC8=)
                          11: 32372e302e3230382e302f32322d3232203d3e203233363530.roa (hash: mis4Fg6j4oEjPSppTkgYv+gKi6EKDKX+hCYTZN1jN8s=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 18:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:be:f1:db:e1:a3:1d:64:30:17:d1:a3:39:d7:11:d3:7a:3d:08:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE
        Validity
            Not Before: Jul 26 15:41:57 2026 GMT
            Not After : Jul 27 18:46:57 2026 GMT
        Subject: CN=45260162E88AA866D0728DAB5120F4CF9E87BA2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9c:05:69:f2:55:8b:01:89:67:08:02:e5:ee:
                    b7:1d:26:70:f7:32:80:3d:38:fe:36:af:36:e0:0e:
                    81:4f:1e:c4:ae:4d:1f:3d:c3:86:2d:16:f5:75:fb:
                    12:3b:16:e1:18:1e:61:c3:2e:5b:45:96:bd:49:55:
                    63:0a:8d:d7:af:bc:aa:2a:ef:be:de:13:d0:e4:4b:
                    70:ac:da:79:68:59:49:44:6b:01:a1:dc:f8:77:dd:
                    ec:ed:39:cc:b7:95:87:bd:37:b9:ea:06:a8:93:d3:
                    13:ca:79:ac:36:5a:20:ba:36:4e:a5:23:80:5e:ec:
                    7f:09:a8:25:29:6b:bf:8f:6f:32:6e:12:ba:7f:e7:
                    ac:16:9a:53:ef:da:04:87:77:71:f3:3f:d6:74:5b:
                    40:ce:c7:99:53:42:0d:3f:e0:75:8c:1a:d5:4d:e8:
                    5c:57:26:60:34:f7:4f:a3:32:f8:33:11:20:0d:5f:
                    9a:1d:57:c3:1a:8f:7d:ec:37:19:96:59:ad:97:1b:
                    da:10:64:71:82:f4:b0:27:d1:47:7b:0f:e7:b7:0f:
                    9b:64:d6:8e:72:55:c0:d9:33:c3:58:d7:23:6c:b8:
                    29:db:72:00:be:4a:aa:e5:49:ab:42:1f:da:9c:fd:
                    09:bd:01:ed:ce:11:f4:fa:15:17:18:89:89:3a:5c:
                    cf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:26:01:62:E8:8A:A8:66:D0:72:8D:AB:51:20:F4:CF:9E:87:BA:2A
            X509v3 Authority Key Identifier:
                keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5c:a8:5f:e5:76:26:e3:dc:f8:d4:22:7a:63:33:fc:05:9f:
         36:51:42:ac:02:d3:b2:94:8a:20:3b:64:de:87:95:4f:92:9f:
         65:90:3f:53:4d:e0:89:28:12:7e:79:d7:25:fe:d3:60:e4:10:
         5d:d0:8c:46:66:a9:1d:02:21:81:ad:77:5a:c4:1b:f3:1f:26:
         2f:4e:11:bc:53:a8:f5:08:1e:c7:ba:52:26:64:63:ac:96:23:
         d5:d5:5b:0a:10:d2:77:0d:08:17:9b:06:80:54:f7:c6:c3:45:
         69:67:ea:c3:d3:98:e5:f6:84:6b:98:b2:22:34:52:af:b8:b1:
         de:4e:e1:93:d7:d4:e4:0d:af:c4:6c:8e:cc:fb:7e:e1:32:58:
         49:e7:5e:58:b2:18:92:7c:ad:78:77:37:bd:58:f4:ff:f1:21:
         b2:f3:c2:90:6a:2b:ac:0d:b3:ee:a3:25:fc:47:5a:d5:6b:e2:
         4b:c9:b3:c0:b0:63:05:a1:b6:b8:88:18:b9:cd:57:f8:b4:8a:
         92:e9:7a:6d:fb:92:e5:9d:68:0d:55:38:00:4f:ec:04:fa:f4:
         64:cf:79:0d:3b:77:cf:69:8f:43:40:7c:41:7f:fb:ce:ee:63:
         2b:a1:26:f3:9c:44:77:ed:79:5e:c1:22:ca:50:4c:c3:47:a5:
         a5:f9:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:37:22 2026 by rpki-client