Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
File:                     DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft (raw, json)
Hash identifier:          6fbvrTutbOKRLXByJYz0gJYGHhUsWRgY61tm9qe6RUQ=
Subject key identifier:   5B:76:14:27:2B:00:73:16:20:D4:E6:59:01:7B:1C:C5:4F:16:53:49
Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Certificate issuer:       /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Certificate serial:       0E896CD144C252DB2C12215CC9B5B9D6DDC20A9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
Manifest number:          088D
Signing time:             Sat 29 Aug 2026 02:18:57 +0000
Manifest this update:     Sat 29 Aug 2026 02:13:57 +0000
Manifest next update:     Sun 30 Aug 2026 04:36:57 +0000
Files and hashes:         1: AS23841.roa (hash: wEUvCNR/rKJWyrTLZUbTTDGl4gJBMRJxFsOhTzXHPL0=)
                          2: AS56045.roa (hash: Sj+zkf1QBneksosVvlGTYqabQnQIK98krOeZSewEqzo=)
                          3: AS56046.roa (hash: L0IGOoqKSUNImb0u8ATchISxkJoet0N41akZbQhyYj4=)
                          4: AS138407.roa (hash: 3TB7XIICfQETicAQCosTtecuvqT6okRABqxXNpHYYAA=)
                          5: AS56047.roa (hash: 6yV6FfC0mgK3OBIRrQGi9V+3v0Lgu2zn2mgCEOgjjxU=)
                          6: AS24444.roa (hash: mfeFlkraXUnHE+EJSfjsorfrUJkk5fhEB0LLhsQ/7Tw=)
                          7: AS24400.roa (hash: a4be9ufSGcSzoO+bPyj2ln1R2KIlFISitHcoD+tzkJo=)
                          8: AS56040.roa (hash: HAf7F9EWBjdlapesgsZYw3pD1/yntlTbz9ScTpLDXmY=)
                          9: AS134810.roa (hash: vVI23KDnRIV35irtyp9YW+UefrJsv3fHoTZRg+9kpPM=)
                          10: AS24445.roa (hash: DZegihrCtiCII+XmyBxLg4R1Cno6yWwc2qusoHCNYq0=)
                          11: AS132510.roa (hash: nW/Xu5rFcjc6MZ1OWK+RDXCb9OeXARjibpfGArwLV0Q=)
                          12: AS56048.roa (hash: w85FK5Xi6UJXCjTt0OGD+rSCxMm1hYU55HPbDDEFoEw=)
                          13: DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl (hash: qre/hCBOR8zMcRbSLTG+MLo22wJ6Gc9tlD+ppUIdVMg=)
                          14: AS56044.roa (hash: xvUWbL7g3ulk/dOrd6pcqVMKirqKk512vkfuU8j5CKM=)
                          15: AS56042.roa (hash: jE/QWfvDkxz7wbfuhxiu1dTA1gKaLjOQMTOprQdX424=)
                          16: AS132525.roa (hash: OI2D/LOrw8v8MsfSn4U9jZZajkRd5TQ5iclsby9oa5E=)
                          17: AS135054.roa (hash: potv43MxFxLckeV83NSTRcSW7QiMa9bKPAG8rf/anoM=)
                          18: AS9808.roa (hash: +V5U5RDBpxyUCaRlNckfrInNUH9jBVryC/b8K2yh2d0=)
                          19: AS139080.roa (hash: pW0L+G1KXVHEfGEJUDhd8Sjnk8JGdVqgT34t4eVafog=)
                          20: AS141425.roa (hash: JIOqNrntGHAd8+iQ6oFeH8vj+w3+1mPDPGOuDZGfboY=)
                          21: AS56041.roa (hash: nj+wjVaDhP+iRXd7ALvLAa5Qary/voYZTiMkqHP5pxo=)
                          22: AS38019.roa (hash: NrvLDrKm2/usxgI8ad97vE8ynyGFmr/pRiZ0AHc6Vto=)
                          23: AS140105.roa (hash: cbLY07/0cjAui3nt1HvHxL/XetLIxK/ZZzrxslSceck=)
                          24: AS24547.roa (hash: +QewlAx55F1Or3rdS/E6mVrf2EocK3eKcUg3m+oauKM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Aug 2026 04:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:89:6c:d1:44:c2:52:db:2c:12:21:5c:c9:b5:b9:d6:dd:c2:0a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
        Validity
            Not Before: Aug 29 02:13:57 2026 GMT
            Not After : Aug 30 04:36:57 2026 GMT
        Subject: CN=5B7614272B00731620D4E659017B1CC54F165349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:62:ea:a6:5d:33:59:74:43:84:22:c0:4b:
                    13:dc:1a:22:6c:f9:94:5d:31:5a:62:da:10:e3:b2:
                    6e:eb:01:a4:e2:7a:e6:72:19:45:45:a2:97:1d:6f:
                    19:26:76:8a:89:fb:12:77:4c:31:80:cd:f8:74:da:
                    8b:e1:6e:dd:e3:ec:43:35:a9:80:f4:dd:d8:40:16:
                    74:04:d8:98:90:63:7b:fc:e5:14:31:a0:d0:e7:5d:
                    67:4d:09:3a:1b:c0:e9:ce:75:0a:1b:6a:21:37:96:
                    bd:1b:05:7b:97:dc:f1:62:00:88:1a:5b:85:45:60:
                    0e:30:ed:ec:b7:a3:d0:f4:7c:55:2e:59:b8:5a:d6:
                    26:1d:99:0e:87:db:c8:72:fe:07:71:33:2d:12:6d:
                    d8:60:0b:46:1f:2e:d3:7b:fd:f3:5a:12:83:26:e9:
                    b6:0f:b2:7b:75:c7:34:c9:d5:ef:bb:bc:52:9a:ee:
                    30:56:e9:45:99:25:4a:35:d4:3d:e2:b8:04:73:5f:
                    38:1a:f4:63:d6:c4:40:ef:60:b5:d4:ad:e1:65:91:
                    28:2a:b6:d4:a6:b8:dc:9a:e4:28:0a:d3:dd:05:0f:
                    4c:2c:4a:db:5b:d4:72:21:59:fd:ac:4e:80:9e:ca:
                    93:a1:64:9d:ad:ad:17:86:c9:e0:3c:0d:1e:82:72:
                    a9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:76:14:27:2B:00:73:16:20:D4:E6:59:01:7B:1C:C5:4F:16:53:49
            X509v3 Authority Key Identifier:
                keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e3:d8:31:3d:43:d9:94:63:aa:43:f6:7e:37:8b:21:3b:6c:
         70:86:e1:92:cc:6a:3b:1f:2a:ca:8b:ec:be:2c:66:27:e4:cf:
         b4:63:2e:63:9d:dc:3e:16:94:87:bf:42:79:3c:d6:f7:78:31:
         8b:4f:60:b5:38:71:87:ae:09:e9:c5:dd:71:b2:c4:3a:bf:70:
         1d:3b:da:97:cc:32:8e:16:d5:9b:32:ff:01:2b:6e:64:a3:2e:
         da:68:e6:66:ff:40:d8:21:c0:92:3a:0f:ec:64:85:59:9a:2d:
         ee:12:43:bc:2f:6d:85:de:f1:f2:75:a3:68:00:2f:fa:10:3d:
         8a:af:59:23:6d:4a:05:03:c9:d1:20:09:f0:16:d2:c9:59:54:
         2f:35:4e:6b:e6:63:fe:0c:e6:25:c2:a0:4b:ac:04:91:c2:59:
         33:08:7c:81:55:ae:0d:8f:7e:bc:20:3e:70:e1:3a:da:a5:25:
         f6:ce:d0:16:7f:e6:ec:bc:b2:a0:fb:a6:7b:bc:27:37:3a:01:
         4c:68:25:b1:26:bf:d5:0b:96:4b:78:6f:be:e6:94:13:29:93:
         30:88:c8:95:4d:31:bd:18:48:ec:7c:18:aa:37:e7:72:69:3d:
         95:ef:18:e2:e6:45:c3:8d:d2:21:a9:7f:e8:41:bb:10:19:2c:
         5b:62:20:55
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUDols0UTCUtssEiFcybW51t3CCp0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRDVGM0QwMDAwMTEwLwYDVQQFEyhEQkIyM0M3RUU0
OTIyMTJFQTg1OEI3OEUxQzY2QkYyMjk4RTVBQ0Q0MB4XDTI2MDgyOTAyMTM1N1oX
DTI2MDgzMDA0MzY1N1owMzExMC8GA1UEAxMoNUI3NjE0MjcyQjAwNzMxNjIwRDRF
NjU5MDE3QjFDQzU0RjE2NTM0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALBNYuqmXTNZdEOEIsBLE9waImz5lF0xWmLaEOOybusBpOJ65nIZRUWilx1v
GSZ2ion7EndMMYDN+HTai+Fu3ePsQzWpgPTd2EAWdATYmJBje/zlFDGg0OddZ00J
OhvA6c51ChtqITeWvRsFe5fc8WIAiBpbhUVgDjDt7Lej0PR8VS5ZuFrWJh2ZDofb
yHL+B3EzLRJt2GALRh8u03v981oSgybptg+ye3XHNMnV77u8UpruMFbpRZklSjXU
PeK4BHNfOBr0Y9bEQO9gtdSt4WWRKCq21Ka43JrkKArT3QUPTCxK21vUciFZ/axO
gJ7Kk6Fkna2tF4bJ4DwNHoJyqQUCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBRbdhQn
KwBzFiDU5lkBexzFTxZTSTAfBgNVHSMEGDAWgBTbsjx+5JIhLqhYt44cZr8imOWs
1DAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODcyODM0MDk1Nzc1NzQ3LzAvREJCMjND
N0VFNDkyMjEyRUE4NThCNzhFMUM2NkJGMjI5OEU1QUNENC5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvMjdJOGZ1U1NJ
UzZvV0xlT0hHYV9JcGpsck5RLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH
MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NDg3MjgzNDA5
NTc3NTc0Ny8wL0RCQjIzQzdFRTQ5MjIxMkVBODU4Qjc4RTFDNjZCRjIyOThFNUFD
RDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQBf49gxPUPZlGOqQ/Z+N4shO2xwhuGSzGo7HyrKi+y+LGYn
5M+0Yy5jndw+FpSHv0J5PNb3eDGLT2C1OHGHrgnpxd1xssQ6v3AdO9qXzDKOFtWb
Mv8BK25koy7aaOZm/0DYIcCSOg/sZIVZmi3uEkO8L22F3vHydaNoAC/6ED2Kr1kj
bUoFA8nRIAnwFtLJWVQvNU5r5mP+DOYlwqBLrASRwlkzCHyBVa4Nj368ID5w4Tra
pSX2ztAWf+bsvLKg+6Z7vCc3OgFMaCWxJr/VC5ZLeG++5pQTKZMwiMiVTTG9GEjs
fBiqN+dyaT2V7xji5kXDjdIhqX/oQbsQGSxbYiBV
-----END CERTIFICATE-----
Generated at Sat Aug 29 07:03:18 2026 by rpki-client