Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft
File:                     2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft (raw, json)
Hash identifier:          Bd1wvUicmEtd0NBmWw56bOdtxsuc0rXtWMGJL99AMv8=
Subject key identifier:   21:85:53:8E:9C:09:01:D7:C1:4D:31:E7:3F:03:DD:E0:ED:C9:43:91
Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02
Certificate issuer:       /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
Certificate serial:       7014B70C7A76D43FE81C0577475E308E897CCB72
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft
Manifest number:          D2
Signing time:             Fri 28 Aug 2026 06:47:47 +0000
Manifest this update:     Fri 28 Aug 2026 06:42:47 +0000
Manifest next update:     Mon 31 Aug 2026 10:19:47 +0000
Files and hashes:         1: 3130332e38392e3230382e302f32322d3332203d3e203633353930.roa (hash: aALX3aOKwwp/SPIBVgMPP66lPH8KqheqSJmPAjhi6YA=)
                          2: 323430313a6263303a3a2f33322d3332203d3e203633353930.roa (hash: TPSszVN+8Pbz1TsiHiEjxy5VChSSHol8CjHoOEGJOTg=)
                          3: 3138322e35312e302e302f31362d3332203d3e203633353930.roa (hash: 3hmkGs0JouDTMcFOG02oaxz9EBpb6+3pVfcwNoMfCnU=)
                          4: 3130332e38392e3232342e302f32322d3332203d3e203633353930.roa (hash: xPqLH3vSxBWwkwgM44juU0NpuNPWTKiO7rqIBeWBn9w=)
                          5: 3130332e312e3136382e302f32322d3332203d3e203633353930.roa (hash: 4SmdW5yQ1BkT5m/mXTBM8INwsGWWICXAU6G0EV96W4U=)
                          6: 323430313a6134303a3a2f33322d3332203d3e203633353930.roa (hash: 01hVO3Dhjs374qNWNOyuCZdB5R6MX/fdF8hWB/9VVAU=)
                          7: 323430313a6334303a3a2f33322d3332203d3e203633353930.roa (hash: CuXgWm0Nqe9AYnqUxSwmShC4YVfJqgkVyMfy068ZT9E=)
                          8: 3130332e38392e3232382e302f32322d3332203d3e203633353930.roa (hash: oPAoPSWuubFEtWOCP2vBpoWSw8R6tL93wROObbKldQs=)
                          9: 3130332e38392e3139362e302f32322d3332203d3e203633353930.roa (hash: POVfvrUTMuZckTabUTNssA5JCbjaHyrnmGhHkMfdCFg=)
                          10: 3130332e38392e3231322e302f32322d3332203d3e203633353930.roa (hash: XfQ90sm0h9AY/a9oxgAnwABs9fDSSrZNhWBBrTxZXW8=)
                          11: 3130332e38392e3230302e302f32322d3332203d3e203633353930.roa (hash: /WciqUYn8kdU7BqgBJ/2piYXE2u5//OdgGrwZFgn8cc=)
                          12: 323430313a3963303a3a2f33322d3332203d3e203633353930.roa (hash: ZKPdJe+SpTQrbBKIoaYGv5S+DuDFKJDZjdm+ay/zOKM=)
                          13: 3130332e38392e3138382e302f32322d3332203d3e203633353930.roa (hash: 7sElvkZeZx3hI0ORSorK0Y27EG5kUQxX14BBuxWG8ro=)
                          14: 323430313a6234303a3a2f33322d3332203d3e203633353930.roa (hash: weJSvtD3oxhkA6PeZsrs25FeeBX7z9vT4TlLLSRwKZA=)
                          15: 2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl (hash: PEgNLnZXdjDsOxrZ49UC5C0qsok0fhu5aScx9DDnrf4=)
                          16: 323430313a6163303a3a2f33322d3332203d3e203633353930.roa (hash: P/VGbDyt9NeeD07D9ZJr7dosUhUQcWIVOqgmzR6B+fM=)
                          17: 3130332e38392e3230342e302f32322d3332203d3e203633353930.roa (hash: wQZNQ8htskRoCTool3ebx10NlszNudhoZTfs1p8qovY=)
                          18: 323430303a666234303a3a2f33322d3332203d3e203633353930.roa (hash: DQOm+eJmnZGiO+3cYKLxfRbcn1Le9RAEeUv8o8KBuM8=)
                          19: 323430313a6434303a3a2f33322d3332203d3e203633353930.roa (hash: iGmA7MzBUalSs5I5h/yDaZantBoDdFYyGVmhaTz7kv4=)
                          20: 323430303a666334303a3a2f33322d3332203d3e203633353930.roa (hash: jz9IIUHMSZmfbKZ4Pdu2g4oNgkcHgtBmI0ci4+psKGM=)
                          21: 3130332e38392e3232302e302f32322d3332203d3e203633353930.roa (hash: a5twgtrnWTuwEz+pvgWx+pYogSZ6vAVwyLaBizfXN/8=)
                          22: 3130332e38392e3231362e302f32322d3332203d3e203633353930.roa (hash: 6WP7rgBCkoUWm8g6EtNd+TcDQZuIZK6ggdX1RHtlbG4=)
                          23: 323430303a373130303a3a2f33322d3332203d3e203633353930.roa (hash: KAEQc28Y+KwHxr7cwk9O/n6NViFo4hGPdby6zHQ8jDU=)
                          24: 323430303a666263303a3a2f33322d3332203d3e203633353930.roa (hash: scTA2LtM4ynnak7FPLhO7wrTqigefLDDFqW4WeMlIvw=)
                          25: 3130332e38392e3139322e302f32322d3332203d3e203633353930.roa (hash: 29GO6aImAZT/5f0LvZV/6XTx4MsilG58kgTYpyiogvw=)
                          26: 323430313a6363303a3a2f33322d3332203d3e203633353930.roa (hash: 8b+PA21aKEMPiUuYpnoITzfBpqDQqtFaP8fwhAFdf+E=)
                          27: 3230322e3134332e3130302e302f32322d3332203d3e203633353930.roa (hash: ZSkI2Jm/KAqVijiOmSriC0xXqwlsFsiYALewpBoCLQc=)
                          28: 3130332e38392e3138342e302f32322d3332203d3e203633353930.roa (hash: 1IkwOm3KW3sZUwq1drhT3q9hdFBd/chP6Zkc93sIeRU=)
                          29: 323430303a666363303a3a2f33322d3332203d3e203633353930.roa (hash: Z5f//iTCSLuHkojgDle2zKsJnzq2R6JvY6Zy7eohwdk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 10:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:14:b7:0c:7a:76:d4:3f:e8:1c:05:77:47:5e:30:8e:89:7c:cb:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
        Validity
            Not Before: Aug 28 06:42:47 2026 GMT
            Not After : Aug 31 10:19:47 2026 GMT
        Subject: CN=2185538E9C0901D7C14D31E73F03DDE0EDC94391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:5f:a3:52:e3:87:d8:c5:b1:61:71:d5:76:
                    63:08:b8:14:ad:8c:1d:75:ec:b0:0e:41:94:02:a6:
                    64:72:6a:42:21:0e:0e:b2:e1:c0:f4:e7:81:66:f4:
                    89:aa:ac:8c:0d:18:ed:ed:2e:b8:fd:13:8b:f0:e9:
                    a1:68:b9:27:0f:fe:e9:65:4d:34:11:74:63:f2:d2:
                    ff:4e:12:de:90:22:73:4c:7e:5f:6f:77:d4:74:94:
                    cc:be:63:09:a1:96:46:29:25:e3:4b:48:0f:d7:a8:
                    10:da:6d:14:1c:1f:83:44:48:68:6e:08:30:15:91:
                    20:68:a3:a0:01:a8:40:20:74:4f:81:1f:f8:25:78:
                    97:1c:bd:ab:bf:20:33:13:4f:59:70:5e:52:48:9f:
                    f9:cd:cf:a8:df:66:d1:2f:23:91:a7:8a:42:b0:5e:
                    a4:de:ad:70:15:b7:16:66:b4:56:87:91:9f:28:93:
                    bb:fb:9b:87:8f:53:e8:66:38:6f:ef:20:09:94:27:
                    cf:69:e1:6a:ba:45:46:bc:5d:94:2a:fa:ae:ba:33:
                    a4:eb:9b:96:5b:ab:0b:76:b0:e4:ec:66:eb:0c:85:
                    7b:ba:b5:38:b6:ab:04:61:52:82:83:6e:40:25:65:
                    b0:db:7b:35:3c:37:f8:78:00:25:03:ac:f0:2a:e8:
                    84:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:85:53:8E:9C:09:01:D7:C1:4D:31:E7:3F:03:DD:E0:ED:C9:43:91
            X509v3 Authority Key Identifier:
                keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8d:62:72:c7:44:26:98:3d:be:c5:21:5e:ba:02:9e:4c:53:
         37:76:5d:62:58:73:a6:38:4e:11:c8:9a:ae:53:6e:af:69:58:
         87:31:96:e1:89:f0:2d:f8:4d:da:df:e6:a6:03:2c:b1:1b:e5:
         3b:e0:66:29:63:bc:d7:c6:8b:f3:8c:22:b6:0d:f6:8d:94:94:
         e1:da:12:48:23:8d:ad:90:24:68:f5:5d:dd:2c:25:49:23:4f:
         a2:9f:ce:47:61:c5:7b:dc:9d:f7:6d:a7:d4:8b:d0:17:7e:f3:
         f0:3c:a0:cd:8f:18:e4:e7:31:e9:0e:70:ae:0d:96:e1:2a:c2:
         8b:4d:00:d8:62:12:af:74:d5:8e:0b:e7:6d:71:53:18:04:24:
         ac:46:7a:99:36:3b:fb:c2:2b:a8:5b:db:d3:6d:60:1a:c2:61:
         8b:b7:d3:39:4e:a1:dc:70:94:44:4e:91:0a:16:79:13:f5:e4:
         ad:d8:22:6b:bf:cf:45:6a:80:8b:9b:59:16:f0:f3:be:84:08:
         40:d3:87:77:02:39:f9:c9:d1:3c:f1:e9:22:ce:dd:4d:08:ae:
         a2:3d:8c:df:e7:cc:3f:2f:1c:a0:33:1e:ad:56:82:f9:89:09:
         f2:c2:eb:b2:ec:e9:86:6f:43:47:f2:24:00:52:f8:ca:bb:f8:
         8c:ee:23:63
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUcBS3DHp21D/oHAV3R14wjol8y3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFC
RjI3QjIwMjAeFw0yNjA4MjgwNjQyNDdaFw0yNjA4MzExMDE5NDdaMDMxMTAvBgNV
BAMTKDIxODU1MzhFOUMwOTAxRDdDMTREMzFFNzNGMDNEREUwRURDOTQzOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxl1+jUuOH2MWxYXHVdmMIuBSt
jB117LAOQZQCpmRyakIhDg6y4cD054Fm9ImqrIwNGO3tLrj9E4vw6aFouScP/ull
TTQRdGPy0v9OEt6QInNMfl9vd9R0lMy+YwmhlkYpJeNLSA/XqBDabRQcH4NESGhu
CDAVkSBoo6ABqEAgdE+BH/gleJccvau/IDMTT1lwXlJIn/nNz6jfZtEvI5GnikKw
XqTerXAVtxZmtFaHkZ8ok7v7m4ePU+hmOG/vIAmUJ89p4Wq6RUa8XZQq+q66M6Tr
m5Zbqwt2sOTsZusMhXu6tTi2qwRhUoKDbkAlZbDbezU8N/h4ACUDrPAq6ISxAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUIYVTjpwJAdfBTTHnPwPd4O3JQ5EwHwYDVR0j
BBgwFoAUImXC6BvMzE6SKrEcWBreMb8nsgIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4
OTA2MjE0MDkyMjI5ODM3MC8wLzIyNjVDMkU4MUJDQ0NDNEU5MjJBQjExQzU4MUFE
RTMxQkYyN0IyMDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFCRjI3QjIwMi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwODkwNjIxNDA5MjIyOTgzNzAvMC8yMjY1QzJFODFCQ0ND
QzRFOTIyQUIxMUM1ODFBREUzMUJGMjdCMjAyLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE41icsdEJpg9
vsUhXroCnkxTN3ZdYlhzpjhOEciarlNur2lYhzGW4YnwLfhN2t/mpgMssRvlO+Bm
KWO818aL84witg32jZSU4doSSCONrZAkaPVd3SwlSSNPop/OR2HFe9yd922n1IvQ
F37z8DygzY8Y5Ocx6Q5wrg2W4SrCi00A2GISr3TVjgvnbXFTGAQkrEZ6mTY7+8Ir
qFvb021gGsJhi7fTOU6h3HCURE6RChZ5E/Xkrdgia7/PRWqAi5tZFvDzvoQIQNOH
dwI5+cnRPPHpIs7dTQiuoj2M3+fMPy8coDMerVaC+YkJ8sLrsuzphm9DR/IkAFL4
yrv4jO4jYw==
-----END CERTIFICATE-----
Generated at Sat Aug 29 07:02:35 2026 by rpki-client