Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
File:                     CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft (raw, json)
Hash identifier:          +QqzBjGYNhvbUPy7fWLIQQ1NkhirOkPq42qa3vGWsBM=
Subject key identifier:   F7:CF:8B:51:F8:B0:7D:89:A0:B7:3E:1C:E8:C9:84:D0:33:27:6E:A3
Authority key identifier: CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
Certificate issuer:       /CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Certificate serial:       62F6AD2F9A3495D3D474E4E062B2BE1C0719CA4B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
Manifest number:          09
Signing time:             Mon 13 Apr 2026 03:54:17 +0000
Manifest this update:     Mon 13 Apr 2026 03:49:17 +0000
Manifest next update:     Tue 14 Apr 2026 05:09:17 +0000
Files and hashes:         1: 323430323a666634303a3a2f33322d3634203d3e2039393339.roa (hash: Irg076e/60wxxAFs8LaU705EfiMKolswU73/51uxVbY=)
                          2: 3231382e39372e3137362e302f32302d3230203d3e2039393339.roa (hash: 7PSW0tMNyGrnbrrCaZmNRJ5IAXyNScpk2tdB1ptCA68=)
                          3: 3231382e39372e3138382e302f32322d3232203d3e2039393339.roa (hash: +G6lCsgfk7uWMzBw4ImLzEgulhmE/NNciG8WMfAwxqA=)
                          4: 3230332e3134382e33352e302f32342d3234203d3e2039393339.roa (hash: ZZgewr8RVh/+Twq6QUA6ON8snGHwxRMYNX6zih97I/s=)
                          5: 3230332e3134382e32372e302f32342d3234203d3e2039393339.roa (hash: Fl6UP4ZZO9vo8+nuqb6TjfEh0/CghLfBlNcy4SZFmPE=)
                          6: 3230332e3134382e32302e302f32322d3232203d3e2039393339.roa (hash: kdaeAr7E0r/rkHkUkUn/GRQDVO3ansN771tR0fE4xHs=)
                          7: 3230332e3134382e35322e302f32322d3232203d3e2039393339.roa (hash: qZKa/jOVYlo9uS2Vt0Or+U6S/Vnqbjf2yeKPK/nwqwc=)
                          8: 3230332e3134382e32332e302f32342d3234203d3e2039393339.roa (hash: zxNue3N6Ii1kq1sQ2dACNt5zmLBjM4gYYzd57rbrXUk=)
                          9: 3130332e34392e3138302e302f32322d3234203d3e2039393339.roa (hash: juBBiAhtbK1V5wVzHcm7mLwfcmy+CTDo3qPiLa2nwP4=)
                          10: 3231382e39372e3136342e302f32322d3232203d3e2039393339.roa (hash: PBNodTPl2AQfEfxCKqc43cm79vB2LI0bukvEOlFG2Gw=)
                          11: 3231382e39372e3136302e302f31392d3234203d3e2039393339.roa (hash: k4+fg8C2hbwNPzLmG4G+qvi1WLKh32ah+UEl/BbuCoY=)
                          12: 3231382e39372e3136302e302f32302d3230203d3e2039393339.roa (hash: o3TjiUZNVyrVXjI2HiIadR4I4RmHSIDY+Hq9fYkNR5Q=)
                          13: 3230332e3134382e302e302f31392d3139203d3e2039393339.roa (hash: m+B7KbUv15oqmrPM/7Hn8fXNpheglxGVjvTi/GjgkNQ=)
                          14: 3231382e39372e3137322e302f32322d3232203d3e2039393339.roa (hash: P277/T4eGGrFGV8jZUfaWSd1zYvJIrtME/DL6maRQ+Y=)
                          15: 3230332e3134382e31322e302f32322d3232203d3e2039393339.roa (hash: 9UAex7M8k/LCSl+W4FCwhSEXW4AjjxNySCYkIWy78OA=)
                          16: CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl (hash: w/Nku1pCc4OyBGyuSDwyq8X1E+tY+uIMl5j5cQk7yUI=)
                          17: 3230332e3134382e302e302f31382d3234203d3e2039393339.roa (hash: OfFByel+DCFzurA0eWoD4UO4ZoHls3g26hE+8MfUOek=)
                          18: 3230332e3134382e33322e302f31392d3139203d3e2039393339.roa (hash: ds/z4tGsVLWNrcQFMR24ubAuo21XVQEoJuoDCDC+GH8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 05:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f6:ad:2f:9a:34:95:d3:d4:74:e4:e0:62:b2:be:1c:07:19:ca:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
        Validity
            Not Before: Apr 13 03:49:17 2026 GMT
            Not After : Apr 14 05:09:17 2026 GMT
        Subject: CN=F7CF8B51F8B07D89A0B73E1CE8C984D033276EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c4:83:b1:30:2a:77:5a:dd:17:32:5a:3c:ea:
                    2b:b0:9f:08:08:ed:39:03:97:8d:c4:00:02:f5:a6:
                    39:09:b5:0c:ac:87:a1:b9:7b:ff:ec:3a:0a:02:98:
                    6e:dd:7a:1a:08:27:9f:b0:81:23:2b:60:d0:13:3c:
                    67:c8:80:14:69:c9:e7:db:3b:2e:c7:96:4f:b0:27:
                    79:b7:b0:5f:a2:8c:ff:72:bc:54:0b:11:3f:2b:60:
                    5d:c2:14:ab:73:04:a5:f6:a0:53:52:79:d9:60:8e:
                    93:a4:23:4a:c9:f4:6a:d2:3a:37:fe:5d:dd:8a:57:
                    a3:c3:95:af:8f:5e:ab:07:4a:04:c7:66:48:cd:13:
                    3a:93:5f:ef:5b:fa:6f:b8:aa:90:45:75:52:8b:83:
                    81:21:a4:50:a2:04:31:1e:61:dc:47:5e:c0:94:20:
                    96:1f:e9:30:64:2c:53:98:36:de:fc:c3:e7:84:af:
                    a3:af:48:81:d0:45:fb:13:97:8c:75:39:8b:8a:66:
                    82:f6:b4:65:a6:95:42:d6:71:f5:1a:6e:e6:bf:18:
                    1e:19:08:f9:b9:fa:47:dd:c0:f4:15:ff:98:53:fb:
                    ce:30:ae:e1:6b:41:f6:68:bc:a9:6a:fb:e6:a6:ec:
                    25:88:24:2a:38:4e:d2:ed:1f:cc:32:20:a4:20:0c:
                    ff:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CF:8B:51:F8:B0:7D:89:A0:B7:3E:1C:E8:C9:84:D0:33:27:6E:A3
            X509v3 Authority Key Identifier:
                keyid:CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:33:c5:d4:2b:13:30:7d:2b:82:fe:35:15:d1:a1:48:32:86:
         bf:9d:2f:0a:bd:0e:cb:88:96:1c:2c:1d:cd:ff:6b:c1:ba:53:
         f7:9e:a7:12:a2:29:a7:26:ac:e0:f3:34:8c:6b:4a:d9:85:4b:
         68:34:14:93:d4:42:3e:73:96:77:df:87:f1:7b:74:c9:2a:ae:
         3d:62:b5:03:79:69:fc:c7:91:74:0e:bd:84:ec:c2:db:db:80:
         9a:33:d0:45:48:24:9b:f1:8e:2b:da:37:71:44:f4:35:72:de:
         8e:dc:f9:fa:0b:5f:03:68:d2:7a:30:88:8b:aa:f8:e9:18:90:
         08:29:12:3a:f3:8f:8e:c1:40:b2:cb:4c:4b:43:bb:f2:ee:46:
         a3:43:e7:91:4d:6e:10:c1:a6:ac:58:a8:b8:4f:3f:c2:7d:9e:
         80:77:ad:c8:a9:c0:d8:94:af:13:76:34:6d:b9:53:60:46:44:
         87:1e:98:d2:e1:86:4b:76:d3:e8:be:83:ae:18:b6:18:31:c2:
         46:69:41:d3:33:b6:30:6f:15:70:f9:5b:f6:39:e9:bd:4e:93:
         bf:ac:d4:57:23:60:f5:14:fe:a3:00:a7:e6:1b:92:ef:27:91:
         1c:e6:cf:a6:28:67:78:c6:e5:41:20:14:e3:3f:3e:b4:78:23:
         6a:bb:c8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:05:53 2026 by rpki-client