Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft
File:                     D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft (raw, json)
Hash identifier:          5bN6wYTONSh/01cJJcapGOPotH/Nq4HYzemJdZ4wwdE=
Subject key identifier:   06:61:97:2B:6D:80:1A:DA:78:39:6C:36:28:AC:53:77:7B:AF:BA:18
Authority key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80
Certificate issuer:       /CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80
Certificate serial:       3742275E989C02035EF07CDAAB4A2CEDBDEEA56E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft
Manifest number:          DF
Signing time:             Fri 28 Aug 2026 06:47:50 +0000
Manifest this update:     Fri 28 Aug 2026 06:42:50 +0000
Manifest next update:     Mon 31 Aug 2026 13:33:50 +0000
Files and hashes:         1: 323430303a353430303a3a2f33322d3332203d3e2030.roa (hash: GHsGrth7ip4IuQtwHI1hcsguA2fNuYO4g2UTrLkxeMU=)
                          2: 3130332e3232322e3139322e302f32322d3232203d3e2030.roa (hash: kSZsRPKkn+fO9KmuamYn7A4rJ1w7FiU1lG47DtciKdk=)
                          3: 3231392e3233322e33322e302f32312d3231203d3e2034383437.roa (hash: 19OWcoaieBtLmTSPQYB3Qb8dIYvVSsw5E2tnoiH7Kx0=)
                          4: 3231392e3233322e33322e302f31392d3139203d3e2034383437.roa (hash: XnvWHCHXJJHlF0VPu6jLiAqdmQ9yX8bDWf+QnfAsvcU=)
                          5: 34352e3235332e36382e302f32322d3232203d3e2030.roa (hash: mmMfzoUN1gpXnyhzt0vhchCEg6AvelT3TF2IUsxWxcM=)
                          6: 3130332e3233352e3134382e302f32322d3232203d3e2030.roa (hash: Y0YyaYjGyKIlIKXTKEIEynRYQ5GTL8UjVEAC8Ds5ChE=)
                          7: 3231392e3233322e35362e302f32312d3231203d3e2034383437.roa (hash: lw/R3INf1/Of5Zr58lokdX06wXsULy/mmXgkyhpRaBw=)
                          8: 35392e3130382e39312e302f32342d3234203d3e203138323435.roa (hash: t3Rtro7rqy01zijDzj7kZjiqLfqCkrk5i7GAf6LIfoI=)
                          9: 3231392e3233322e33322e302f32302d3230203d3e2034383437.roa (hash: ahFzTowcg8RurCXrOIyB3W96Jwlje6M6e87CUFLxMk0=)
                          10: D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl (hash: eOPe4yGvaNJ+TksZifkyKYgN2hb/QZfhLlFqmqbO4jA=)
                          11: 3231392e3233322e33362e302f32322d3232203d3e2034383437.roa (hash: bmOU5gtClm+CxO3KqtpunOqLSiUQw3h4LJIR2hU/7uc=)
                          12: 35392e3130382e302e302f31362d3136203d3e2034383437.roa (hash: +MVFENXiTS5qu1cGyUwlG21oFkjrekCQs7zCw/wtnVk=)
                          13: 3135302e3234322e3136382e302f32322d3232203d3e2034383437.roa (hash: msUHNNmDuf0xFczzqOuI1kN210zxZ1Wrfaif6pe6eEA=)
                          14: 35392e3130382e36342e302f31382d3138203d3e2034383437.roa (hash: UZg0Pagp0Gw27BW9AwJK8jAPOGF7fxdA7nHKJO5oxaM=)
                          15: 3231392e3233322e34342e302f32322d3232203d3e2034383437.roa (hash: 5nVAN8TukMmhCfRksOm2Om3KwxeVxz5mu4z2JJ0Wqo4=)
                          16: 35392e3130382e33322e302f31392d3139203d3e2034383437.roa (hash: dxgLrIfF64T7S4w49qMJsSs0eRb10ZprN7ZucyGPm+M=)
                          17: 35392e3130382e3232342e302f32302d3230203d3e2034383437.roa (hash: RXfkLYOn1avjUMDreVTOH1SQP55YSQigEG0a9ocHRoI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 13:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:42:27:5e:98:9c:02:03:5e:f0:7c:da:ab:4a:2c:ed:bd:ee:a5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80
        Validity
            Not Before: Aug 28 06:42:50 2026 GMT
            Not After : Aug 31 13:33:50 2026 GMT
        Subject: CN=0661972B6D801ADA78396C3628AC53777BAFBA18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:10:e7:ec:45:81:02:d3:8e:07:a7:8d:d8:
                    4a:fd:1e:12:1f:1a:17:c6:5d:15:4e:9f:b1:dd:b2:
                    86:cc:8e:96:70:2c:c6:f8:f6:78:f2:c7:09:92:bb:
                    88:4d:fb:14:86:ab:53:a7:18:8f:7f:48:0c:5e:9f:
                    3e:91:a2:fe:c3:18:47:a1:69:ef:8f:89:a4:19:0f:
                    f1:82:d0:c5:c4:bd:91:9c:02:f2:68:69:0a:f6:32:
                    9d:dc:74:ee:21:76:d3:bf:fa:49:d4:2d:22:b5:0f:
                    39:6b:03:cc:7b:8d:e5:69:64:07:42:d3:42:75:e8:
                    07:ee:55:5c:fa:80:f3:c0:4f:b6:61:81:6b:ab:70:
                    2e:30:79:be:5f:84:0a:e3:35:16:bb:bb:2f:09:c3:
                    91:d2:c2:32:b5:5e:9a:f9:ea:50:4f:be:98:4f:7d:
                    cd:69:33:2a:19:6a:05:69:68:c5:08:f0:76:c9:3d:
                    65:8b:1a:dd:c3:07:f7:85:00:eb:2b:34:3b:ad:ed:
                    b6:c3:3b:8c:81:ee:01:35:c5:2c:34:56:63:2d:bf:
                    69:2f:85:c4:51:aa:fc:11:11:bc:e4:43:02:bc:77:
                    d7:a6:6a:e3:33:76:75:17:00:ee:ed:02:08:bb:34:
                    7f:6e:b7:3e:32:84:0b:9a:64:c5:ba:47:50:43:c7:
                    c2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:61:97:2B:6D:80:1A:DA:78:39:6C:36:28:AC:53:77:7B:AF:BA:18
            X509v3 Authority Key Identifier:
                keyid:D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:96:24:4f:41:f5:62:cb:71:b9:0e:a9:32:ae:0a:94:2b:aa:
         ca:2e:f8:f3:e6:de:ff:32:3a:04:ff:a9:b3:e1:ec:b5:68:90:
         d5:07:dc:f7:fa:a1:dc:11:10:bb:ae:1e:76:c7:dd:11:27:0e:
         de:3b:30:56:33:c7:28:ee:56:aa:7c:47:d9:64:3a:b8:05:db:
         4d:7b:80:0a:f2:95:b4:c5:1c:40:16:17:4f:fd:c1:89:d9:5a:
         19:6a:57:2c:52:57:62:73:31:dd:a6:dd:92:69:7d:0a:76:98:
         59:7b:ac:d9:fc:bf:1a:20:10:4d:b8:86:66:6f:32:bb:1a:c1:
         6a:fc:d8:48:28:c4:2e:f5:6a:c5:d0:69:d3:e3:c0:9b:76:d7:
         e3:8b:2b:2b:23:8f:9f:b5:d1:4a:54:72:af:aa:8c:dd:ad:17:
         ef:19:cd:ef:99:dc:21:5b:7d:72:ee:37:28:57:d8:fa:92:e5:
         26:6c:ae:a4:02:42:29:88:ac:a8:34:6d:26:d8:76:d5:87:16:
         52:99:97:0e:bd:d6:e3:45:04:27:a1:d0:9d:55:3c:97:61:3b:
         83:7f:44:bb:03:8e:1b:d2:7b:30:42:53:d0:92:1f:82:84:8e:
         f1:93:47:dd:6d:75:fc:34:57:0e:8c:b2:6c:31:b8:8d:a4:93:
         92:43:b3:2a
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUN0InXpicAgNe8Hzaq0os7b3upW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVE
MkZDMkY4MDAeFw0yNjA4MjgwNjQyNTBaFw0yNjA4MzExMzMzNTBaMDMxMTAvBgNV
BAMTKDA2NjE5NzJCNkQ4MDFBREE3ODM5NkMzNjI4QUM1Mzc3N0JBRkJBMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzBDn7EWBAtOOB6eN2Er9HhIf
GhfGXRVOn7HdsobMjpZwLMb49njyxwmSu4hN+xSGq1OnGI9/SAxenz6Rov7DGEeh
ae+PiaQZD/GC0MXEvZGcAvJoaQr2Mp3cdO4hdtO/+knULSK1DzlrA8x7jeVpZAdC
00J16AfuVVz6gPPAT7ZhgWurcC4web5fhArjNRa7uy8Jw5HSwjK1Xpr56lBPvphP
fc1pMyoZagVpaMUI8HbJPWWLGt3DB/eFAOsrNDut7bbDO4yB7gE1xSw0VmMtv2kv
hcRRqvwREbzkQwK8d9emauMzdnUXAO7tAgi7NH9utz4yhAuaZMW6R1BDx8JPAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUBmGXK22AGtp4OWw2KKxTd3uvuhgwHwYDVR0j
BBgwFoAU1e8qeSFm+U++Mzd+AjkDTtL8L4AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4
ODY1MTAxNTE4MTMwMzgxMC8wL0Q1RUYyQTc5MjE2NkY5NEZCRTMzMzc3RTAyMzkw
MzRFRDJGQzJGODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwODg2NTEwMTUxODEzMDM4MTAvMC9ENUVGMkE3OTIxNjZG
OTRGQkUzMzM3N0UwMjM5MDM0RUQyRkMyRjgwLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZYkT0H1Ystx
uQ6pMq4KlCuqyi748+be/zI6BP+ps+HstWiQ1Qfc9/qh3BEQu64edsfdEScO3jsw
VjPHKO5WqnxH2WQ6uAXbTXuACvKVtMUcQBYXT/3BidlaGWpXLFJXYnMx3abdkml9
CnaYWXus2fy/GiAQTbiGZm8yuxrBavzYSCjELvVqxdBp0+PAm3bX44srKyOPn7XR
SlRyr6qM3a0X7xnN75ncIVt9cu43KFfY+pLlJmyupAJCKYisqDRtJth21YcWUpmX
Dr3W40UEJ6HQnVU8l2E7g39EuwOOG9J7MEJT0JIfgoSO8ZNH3W11/DRXDoyybDG4
jaSTkkOzKg==
-----END CERTIFICATE-----
Generated at Sun Aug 30 07:53:17 2026 by rpki-client