Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
File:                     29BAE90B795BA6BB50390EB31964E6F823BAB331.mft (raw, json)
Hash identifier:          YhnPejCLUbV0wG+Y//0KCX2hfn5RDF/7ZXCjP+PEHXU=
Subject key identifier:   5E:D9:84:6D:BB:3B:0E:38:94:C8:93:DE:23:F5:5E:AF:BB:B2:BF:DB
Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
Certificate issuer:       /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Certificate serial:       581B9791FC1E1EBF828AB582C5B29D934B65A567
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
Manifest number:          84
Signing time:             Tue 14 Jul 2026 08:25:50 +0000
Manifest this update:     Tue 14 Jul 2026 08:20:50 +0000
Manifest next update:     Wed 15 Jul 2026 12:05:50 +0000
Files and hashes:         1: 3132322e3230302e39322e302f32342d3234203d3e2034383437.roa (hash: 7MKytXnVY3xTke2Q8+t8jq61Vb4/fGpyyq+FUQmQJnw=)
                          2: 3131342e36362e38312e302f32342d3234203d3e2034383038.roa (hash: DQgk0NoRfkqgILds3YUN9ncexo35feZAfTqpFHdqjmw=)
                          3: 3132322e3230302e36382e302f32332d3233203d3e2034383437.roa (hash: DBCbk6MBsne5yFcDN/1ext+/m/nBPtwfRFNsBlsk0+A=)
                          4: 3132322e3230302e37382e302f32342d3234203d3e2034383437.roa (hash: F+5G2tOBlVTwpojIu2RWks8TZtYttNGuYi9aLoVwvA8=)
                          5: 29BAE90B795BA6BB50390EB31964E6F823BAB331.crl (hash: ZnkbPxEwji5PKSVn+NADvvSb+ANzoLhPIVIICsC2yt0=)
                          6: 3132322e3230302e38322e302f32342d3234203d3e2034383038.roa (hash: iXPCWNvWzlbiyKQV1tytAGROlhAXSqRq6+d7dUU2dC0=)
                          7: 3132322e3230302e39322e302f32342d3234203d3e2034383038.roa (hash: 4nrH9LfsUqF1kG4hbRAgCUaFjmEZbef1g1MPoHFYyJc=)
                          8: 3132322e3230302e37382e302f32342d3234203d3e2034383038.roa (hash: iZ+UPJZRYFv38gs9qgOgP60v6lhbfpea4kBBrPAAlmc=)
                          9: 3132322e3230302e38342e302f32332d3233203d3e2034383437.roa (hash: Sy0DoHCGElAr96NNn+1jmBipOF87gYOaf8SMvzlgHcI=)
                          10: 3132322e3230302e39322e302f32332d3233203d3e2034383437.roa (hash: uin0SgixTaYZJ3n/wNUUiTbNcosdsZ8/3gkowJLHTew=)
                          11: 323430333a373538303a3a2f33322d3332203d3e203338333634.roa (hash: kmvkwlJ7w+pkja0hVcX0tlL6TVc6mN3qMP/ouy0N+b8=)
                          12: 3132322e3230302e38362e302f32342d3234203d3e2034383038.roa (hash: oS2jMaoEFE4sG5rQcBiPluuvCuNl0NOgHIY832u8x+I=)
                          13: 3132322e3230302e38322e302f32342d3234203d3e2034383437.roa (hash: Xp6isEa2ewBI3m6lqm1H70tKTkaKIvsLOOgR2gG3b8k=)
                          14: 3132322e3230302e38362e302f32342d3234203d3e2034383437.roa (hash: 04Q++9CzWyL1iOZV12B67bzkPYaoZgGLpQXoBVdnaCc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:1b:97:91:fc:1e:1e:bf:82:8a:b5:82:c5:b2:9d:93:4b:65:a5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
        Validity
            Not Before: Jul 14 08:20:50 2026 GMT
            Not After : Jul 15 12:05:50 2026 GMT
        Subject: CN=5ED9846DBB3B0E3894C893DE23F55EAFBBB2BFDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fe:f7:1c:1c:20:e9:7e:d5:d7:4c:38:dc:99:
                    ee:88:8e:2a:ae:07:79:79:08:20:b4:c2:3d:cc:2d:
                    ec:56:05:7f:07:1e:bf:79:9b:a3:ed:9c:6f:a4:6e:
                    9c:bc:9c:c3:0b:54:62:ca:ce:08:72:6c:56:80:9e:
                    87:57:1f:a7:b9:45:59:ed:ca:98:f0:26:20:17:e5:
                    13:46:4d:86:cd:92:e2:97:5e:82:39:5e:24:1c:ae:
                    cb:a2:d5:87:cb:7a:1c:48:bd:e6:da:bc:2b:58:4c:
                    f7:c1:fa:01:a2:e8:bc:89:75:6c:c7:d3:3a:45:a7:
                    2e:87:8d:3b:6d:2d:5d:36:55:47:a5:e2:a7:bf:fb:
                    66:9e:df:3a:33:b8:b3:50:61:f6:0c:9b:8a:fa:2c:
                    f8:6f:23:1e:e5:94:eb:c9:eb:b7:63:2f:6e:78:36:
                    fb:bf:50:ec:97:7e:93:39:59:37:05:ca:20:8f:19:
                    04:e6:46:57:fc:cf:89:4d:b7:2f:d2:08:1a:d8:fa:
                    d9:08:a4:83:e3:49:37:4e:c8:e5:6f:8d:8c:72:e0:
                    11:c7:07:f6:bd:3c:f8:0d:39:d2:71:2f:81:6f:f3:
                    28:d6:26:cf:ea:da:af:db:1a:f5:40:cd:16:81:3c:
                    d0:da:fa:3c:e1:b3:88:53:8b:4f:f8:e4:e9:9e:d1:
                    60:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D9:84:6D:BB:3B:0E:38:94:C8:93:DE:23:F5:5E:AF:BB:B2:BF:DB
            X509v3 Authority Key Identifier:
                keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1d:ca:0b:72:73:9b:57:02:ed:f8:fa:d3:de:9e:4f:9c:47:
         96:7d:d6:a0:5e:cf:65:ec:39:41:b0:08:e1:ce:f6:44:64:1c:
         fb:14:3e:8d:52:12:22:2f:59:35:79:0e:e4:9c:5b:3f:89:5a:
         45:6c:9e:2c:de:9a:77:c2:31:02:68:48:10:b5:05:bc:c3:e0:
         74:81:bf:2d:91:52:1a:10:db:bd:d8:b5:0e:dd:30:71:3a:d6:
         d4:dd:c7:d5:29:23:87:8c:5a:0c:6a:79:cf:b6:ef:9f:d3:06:
         27:f7:b6:3d:87:bf:ad:41:ba:86:d4:20:1d:0f:5f:86:41:98:
         df:cc:0e:0e:40:db:4c:9f:74:da:9b:b2:56:44:5d:25:92:73:
         73:23:08:48:2f:81:8e:8e:56:a0:64:c5:85:42:7c:41:64:57:
         53:46:4b:2f:38:5a:91:36:ee:7d:97:97:0f:a2:a4:69:4e:16:
         05:f3:a5:7d:15:42:fd:8b:a3:5d:10:27:1b:6f:05:13:8b:f0:
         84:41:1d:a8:11:18:a3:68:5e:1d:78:23:b9:18:29:5c:ab:89:
         36:72:f2:dd:93:81:a3:cb:4f:00:99:66:27:93:40:27:d3:de:
         47:14:66:92:79:e9:4b:ae:08:87:1d:bc:c0:29:a7:bb:55:6d:
         2e:aa:a6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:15:07 2026 by rpki-client