Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
File:                     727633DA248F6AC4626E0DF9B33145B74FD58F03.mft (raw, json)
Hash identifier:          BUK3aWA5/gF+bptBiHryBwyHelEFqXY4a/fFejZIktM=
Subject key identifier:   24:3D:52:F8:7F:4D:68:BE:B4:1D:5A:F8:0A:36:C5:C1:29:CF:81:F2
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Certificate issuer:       /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial:       6411A2D22FFDC86B0EDD0EC65214E06E68D9DB9C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
Manifest number:          BF
Signing time:             Fri 28 Aug 2026 06:48:13 +0000
Manifest this update:     Fri 28 Aug 2026 06:43:13 +0000
Manifest next update:     Mon 31 Aug 2026 17:19:13 +0000
Files and hashes:         1: 3231382e39382e3137362e302f32342d3234203d3e203538353432.roa (hash: XFdMvu8G/zSKT5wrWBdxWp+W6TQONNq83QdMat+lt2k=)
                          2: 3231382e39382e3137362e302f32342d3234203d3e20313436383431.roa (hash: W9YQVXCZAs9kS2UDOyKiYaw3OS4DRjkHfthCx48ARa8=)
                          3: 3231382e39382e3231312e302f32342d3234203d3e20313436383431.roa (hash: DKgvwB10v2KlhQb9PUhUx7Cu1QGaNp7YFa9x57886nA=)
                          4: 3231382e39382e3137372e302f32342d3234203d3e203538353432.roa (hash: BxSgCE5UaiCEinToAh7HtaYOYFUIIUe9Fj7YHmDaEeY=)
                          5: 3231382e39382e3231302e302f32342d3234203d3e20313436383431.roa (hash: yyPoXI8TawnrApBjndo7j1KSbBtPvYmc36UAqXtEA8U=)
                          6: 727633DA248F6AC4626E0DF9B33145B74FD58F03.crl (hash: aKgRH+xxw6Co0wISXrkMApUSj0ew36p0Lir4a1lSE4k=)
                          7: 3231382e39382e3231342e302f32342d3234203d3e20313436383431.roa (hash: INioRRkxf3xa+grpqxBw9dO54uDwmH9qAz6YD6mDzno=)
                          8: 3231382e39382e3137362e302f32342d3234203d3e2034383337.roa (hash: 6fIbINtNcGKIPP4RrSqGB51a1pyintd2JTCE/IScmZA=)
                          9: 3231382e39382e3139332e302f32342d3234203d3e203538353432.roa (hash: qt4/6TOa7o32+dkGdPJJfaVcIo3Vl62WqM/O9RzlxHI=)
                          10: 3231382e39382e3231332e302f32342d3234203d3e20313436383431.roa (hash: BQ36hCBywhGt28SwU89T+JTovsJVAPR6cNm45te4lfA=)
                          11: 3231382e39382e3230382e302f32342d3234203d3e20313436383431.roa (hash: V5WFXW8smGcHXMjpvp9LaOkbL4/Ei94lNvyV8nVmaL0=)
                          12: 3231382e39382e3137372e302f32342d3234203d3e20313436383431.roa (hash: HCyPGKwa4eeE5ZjLHnpqql9PGySx5osAgA1FMWrBU+0=)
                          13: 3231382e39382e3137382e302f32342d3234203d3e20313436383431.roa (hash: h+7NMVJMGskysHGTL7ek7cRzWtLu2iBmcr8RhLJIuRo=)
                          14: 3231382e39382e3138322e302f32342d3234203d3e20313436383431.roa (hash: 6znvLKLvv9KQQlxGvtEJcXW6b4MyVSay/jA4EVDpYhc=)
                          15: 3231382e39382e3231322e302f32342d3234203d3e20313436383431.roa (hash: mh4howHx2myQ3DM1H8Q4i0fqcnXhCL5MgENCUx3z93s=)
                          16: 3231382e39382e3138332e302f32342d3234203d3e20313436383431.roa (hash: BWgtN9ZlNkUkI1/9ORhwYHGUf2fn6nY77N3GU7vIwKg=)
                          17: 3231382e39382e3138312e302f32342d3234203d3e20313436383431.roa (hash: vLrt3AJ67GN9KG7EzWnUz0wi/QliKTTJODDo8xicHfo=)
                          18: 3231382e39382e3231352e302f32342d3234203d3e20313436383431.roa (hash: aywp0tqCBgRXzid69Cf+hmOo2wFnk5gKkSw0y125MMI=)
                          19: 3231382e39382e3137392e302f32342d3234203d3e20313436383431.roa (hash: ARWBa9IdK08EGnOSuh23uDfuB0JMI9PCXpZKCN/m7l4=)
                          20: 3231382e39382e3230392e302f32342d3234203d3e20313436383431.roa (hash: R2FUehBztHdIvg3EWxnn9vSmNq2pxzwjM3Saq/Q0+P4=)
                          21: 3231382e39382e3136302e302f32342d3234203d3e2034383337.roa (hash: 28ClLRNHc1ca5OaJY9IvDzg6NXbTQfy3ShDofWhJRXo=)
                          22: 3231382e39382e3138302e302f32342d3234203d3e20313436383431.roa (hash: 8vnvx69UZI9UjNoNLKJj/mjRHvJ90Etw1BCB1sZRg4Y=)
                          23: 3231382e39382e3139322e302f32342d3234203d3e203538353432.roa (hash: ZXHCilq7M6t5w4oLyy7/q0uzHX7ckcRbYUXkDNUYUO0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 15:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:11:a2:d2:2f:fd:c8:6b:0e:dd:0e:c6:52:14:e0:6e:68:d9:db:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
        Validity
            Not Before: Aug 28 06:43:13 2026 GMT
            Not After : Aug 31 17:19:13 2026 GMT
        Subject: CN=243D52F87F4D68BEB41D5AF80A36C5C129CF81F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:49:64:e2:83:a2:3c:b2:a1:8e:89:97:8d:48:
                    d0:f6:d7:05:fb:d2:25:05:fb:73:8f:5a:cc:93:b1:
                    a5:36:b3:fd:4d:27:c6:7c:d8:fc:9c:bf:a1:49:69:
                    a2:79:28:66:12:6c:7d:d6:18:eb:ef:91:28:41:7b:
                    c7:e2:e5:a6:d4:78:46:45:22:cb:fb:25:7c:23:58:
                    bb:00:87:4c:77:b9:97:80:67:35:c7:7a:81:5c:25:
                    a5:d7:62:77:2f:58:99:06:5c:62:f0:8a:ea:e0:fb:
                    d2:29:b3:e5:40:7f:67:10:8b:8d:67:4e:14:d8:90:
                    ea:9c:ca:fc:b5:75:fe:be:ee:f6:be:75:f1:f1:26:
                    af:bd:2d:0b:8e:48:fd:73:db:7e:50:74:83:7d:67:
                    f0:d9:b9:45:ec:38:b0:fc:f9:4c:09:71:bf:8a:b2:
                    6f:6a:66:2e:19:0f:26:1d:58:51:f9:08:ba:9a:2a:
                    44:f3:0d:21:f7:97:93:c2:c7:27:8e:da:25:6b:cc:
                    9b:5f:56:b1:03:3d:ac:a5:75:e6:f1:8d:72:65:ca:
                    ed:03:4d:a5:63:69:f4:bd:5e:5a:4a:46:38:18:83:
                    d5:9c:f2:dc:88:6b:15:d3:b4:41:17:ba:aa:e7:a7:
                    fc:ee:69:2e:b1:42:63:35:1f:cb:58:79:07:a6:76:
                    c8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3D:52:F8:7F:4D:68:BE:B4:1D:5A:F8:0A:36:C5:C1:29:CF:81:F2
            X509v3 Authority Key Identifier:
                keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:5a:b4:88:e0:d7:28:13:00:e4:3e:09:ef:67:f6:00:11:6f:
         12:a9:e8:19:26:8b:3b:4b:29:40:0d:3d:a7:d5:86:bc:18:4a:
         5a:58:ea:16:ff:8e:ec:ea:d5:e6:4c:88:f2:cf:d6:52:67:4a:
         d1:ec:df:cf:59:4e:5e:48:04:8e:35:7d:d9:12:4d:f4:28:3d:
         68:83:e3:d4:bc:81:47:54:92:45:46:0b:ab:43:db:33:47:7a:
         46:b3:63:a4:3f:29:03:42:fe:1b:fe:39:67:6e:3c:7c:59:28:
         73:e3:1d:37:6d:f7:3d:44:d1:da:64:4f:2a:d4:4e:fb:2a:ab:
         ff:74:72:5e:85:58:90:0a:50:ad:dc:09:01:e7:52:95:5e:02:
         1b:32:9b:09:4c:a9:a9:26:f2:92:23:8a:61:1f:1a:fd:6e:e6:
         ee:30:d0:37:21:a8:fd:35:82:8c:c3:d9:b5:7c:a8:33:83:4b:
         6c:77:5f:4f:af:a6:ee:42:6d:cc:2f:e9:b6:92:a5:4d:5b:79:
         f1:e8:f5:64:13:15:e8:d6:ff:de:0c:84:f4:41:91:76:98:aa:
         62:9f:1a:2c:a2:1b:49:1f:49:20:1c:ab:58:41:a8:63:94:d5:
         a7:64:0d:8d:ab:24:3c:48:d4:91:a1:99:d8:7a:9c:76:09:96:
         b2:0f:a8:e2
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUZBGi0i/9yGsO3Q7GUhTgbmjZ25wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0
RkQ1OEYwMzAeFw0yNjA4MjgwNjQzMTNaFw0yNjA4MzExNzE5MTNaMDMxMTAvBgNV
BAMTKDI0M0Q1MkY4N0Y0RDY4QkVCNDFENUFGODBBMzZDNUMxMjlDRjgxRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5SWTig6I8sqGOiZeNSND21wX7
0iUF+3OPWsyTsaU2s/1NJ8Z82Pycv6FJaaJ5KGYSbH3WGOvvkShBe8fi5abUeEZF
Isv7JXwjWLsAh0x3uZeAZzXHeoFcJaXXYncvWJkGXGLwiurg+9Ips+VAf2cQi41n
ThTYkOqcyvy1df6+7va+dfHxJq+9LQuOSP1z235QdIN9Z/DZuUXsOLD8+UwJcb+K
sm9qZi4ZDyYdWFH5CLqaKkTzDSH3l5PCxyeO2iVrzJtfVrEDPayldebxjXJlyu0D
TaVjafS9XlpKRjgYg9Wc8tyIaxXTtEEXuqrnp/zuaS6xQmM1H8tYeQemdsiRAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUJD1S+H9NaL60HVr4CjbFwSnPgfIwHwYDVR0j
BBgwFoAUcnYz2iSPasRibg35szFFt0/VjwMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDU0Mzc4NzUzMjc0Njc1NS8wLzcyNzYzM0RBMjQ4RjZBQzQ2MjZFMERGOUIzMzE0
NUI3NEZENThGMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0RkQ1OEYwMy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ1NDM3ODc1MzI3NDY3NTUvMC83Mjc2MzNEQTI0OEY2
QUM0NjI2RTBERjlCMzMxNDVCNzRGRDU4RjAzLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlq0iODXKBMA
5D4J72f2ABFvEqnoGSaLO0spQA09p9WGvBhKWljqFv+O7OrV5kyI8s/WUmdK0ezf
z1lOXkgEjjV92RJN9Cg9aIPj1LyBR1SSRUYLq0PbM0d6RrNjpD8pA0L+G/45Z248
fFkoc+MdN233PUTR2mRPKtRO+yqr/3RyXoVYkApQrdwJAedSlV4CGzKbCUypqSby
kiOKYR8a/W7m7jDQNyGo/TWCjMPZtXyoM4NLbHdfT6+m7kJtzC/ptpKlTVt58ej1
ZBMV6Nb/3gyE9EGRdpiqYp8aLKIbSR9JIByrWEGoY5TVp2QNjaskPEjUkaGZ2Hqc
dgmWsg+o4g==
-----END CERTIFICATE-----
Generated at Sat Aug 29 07:27:46 2026 by rpki-client