Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
File:                     DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft (raw, json)
Hash identifier:          XHJOehVvoSo8pIwsuk1utpw8AnHpQZi3hW+DNiH7KjU=
Subject key identifier:   1D:94:A6:D4:0C:C0:D1:B3:BD:5D:CE:1C:1C:D4:BB:CC:48:FB:BD:8D
Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Certificate issuer:       /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Certificate serial:       0508E97B8A73963FE8EFB0BA00747C43A097C307
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
Manifest number:          05DB
Signing time:             Tue 14 Jul 2026 21:38:54 +0000
Manifest this update:     Tue 14 Jul 2026 21:33:54 +0000
Manifest next update:     Wed 15 Jul 2026 22:34:54 +0000
Files and hashes:         1: AS38019.roa (hash: U6ixfE9SjrUcIzYjlZsp4Fj1rcEuF62LhMylUtVvRxk=)
                          2: AS132525.roa (hash: RJcGeq6n4JRwoMzC3PHFyoRuqqunvbMnt7joPjaChQI=)
                          3: AS135054.roa (hash: potv43MxFxLckeV83NSTRcSW7QiMa9bKPAG8rf/anoM=)
                          4: AS24444.roa (hash: z+jKi4U2ysgBhx/Ek/8pygV1zvoXM39yHbYfQGdyoFc=)
                          5: AS56046.roa (hash: UpBHOwn5wvumc57BF9B50qxaI/hmxAXC3/+Big3ftbE=)
                          6: AS24400.roa (hash: cfPzMMewYx7gjGz8Zp0qU9gBSR5zsM6kDX5XSkfwx9M=)
                          7: AS56042.roa (hash: z9TStiekLoa7fY+MO+3yQ+3Og8DvJUQ1AEnp2yMH0+s=)
                          8: AS134810.roa (hash: uCuc09kuT519jIA089mWGybf0KXQ2DLpvazGC1o2/oo=)
                          9: AS139080.roa (hash: pW0L+G1KXVHEfGEJUDhd8Sjnk8JGdVqgT34t4eVafog=)
                          10: DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl (hash: GrZ6YEBnH656pAqbxvkrIk6RzumAYeJRkuNJZ8s2Rdk=)
                          11: AS56048.roa (hash: 4edDcumCn+Qb5FRmdMh29h6qoknP9rsNv+JA9Wwo0NE=)
                          12: AS56047.roa (hash: kZ7IOLrYEQvLCTYx3KjZmoB0wrKNgXhES+ARyjoaDDI=)
                          13: AS24445.roa (hash: +wqi1r2yrNtL05S/e73pMkhkXxT6hBBdptM6ZZOzQjM=)
                          14: AS23841.roa (hash: wEUvCNR/rKJWyrTLZUbTTDGl4gJBMRJxFsOhTzXHPL0=)
                          15: AS138407.roa (hash: mdEstKPY1PmZmoFkGYyReJHsModWrzGLYeFCK9C526M=)
                          16: AS132510.roa (hash: nW/Xu5rFcjc6MZ1OWK+RDXCb9OeXARjibpfGArwLV0Q=)
                          17: AS24547.roa (hash: 972FjqWGqa7y+RsRMLmn1J3PIYWpVoNd/RUzQ+HY00g=)
                          18: AS56041.roa (hash: 6Dv1cc1O/yLCaMOZycm6+BHk58dy2J7jeWLNBUfEJ+8=)
                          19: AS140105.roa (hash: cbLY07/0cjAui3nt1HvHxL/XetLIxK/ZZzrxslSceck=)
                          20: AS56040.roa (hash: CiCzdDaGwRn2uqUxjQdc4Eu3cisRlqra2MyJbB26KN4=)
                          21: AS9808.roa (hash: atKZCttMM+yh47ylf/251MIZwsi6s4+w/yTAL+b8byw=)
                          22: AS56044.roa (hash: fySgsNdI0VaQG5w+0a74pK5zuMORl7lQYZqkRHUEzWI=)
                          23: AS141425.roa (hash: JIOqNrntGHAd8+iQ6oFeH8vj+w3+1mPDPGOuDZGfboY=)
                          24: AS56045.roa (hash: Wwb+nB+fowKnrevSTnsSDQfbwjUQCfGjJvuhRCTSIX8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 22:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:08:e9:7b:8a:73:96:3f:e8:ef:b0:ba:00:74:7c:43:a0:97:c3:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
        Validity
            Not Before: Jul 14 21:33:54 2026 GMT
            Not After : Jul 15 22:34:54 2026 GMT
        Subject: CN=1D94A6D40CC0D1B3BD5DCE1C1CD4BBCC48FBBD8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:01:44:9b:91:97:6b:f5:71:06:25:65:bd:42:
                    04:39:6f:c8:da:21:f2:1d:16:fb:c5:8e:a6:8e:6a:
                    8d:ac:6a:e3:48:36:9b:fb:9d:32:df:4f:e0:db:a7:
                    74:63:ac:44:67:0b:bd:f3:e5:3f:d6:3d:7b:6e:db:
                    84:07:d1:79:56:41:74:43:01:0b:17:ef:a0:85:92:
                    c6:02:a7:16:4e:e3:9d:7e:83:c0:7a:4b:88:8c:66:
                    d0:d2:17:fd:9a:f0:0a:8a:e0:4d:2b:d2:fd:e9:dd:
                    17:60:97:a5:11:e1:24:13:30:9f:78:22:92:11:3c:
                    d4:e7:81:45:8e:9e:62:72:95:5a:16:02:db:08:89:
                    bb:c8:97:a1:e9:3c:5d:44:96:db:ec:b8:d2:75:d6:
                    86:a4:cc:dc:1a:80:41:b2:f0:7b:c3:1a:f2:79:80:
                    28:be:f2:05:5b:3f:63:c1:04:d0:d9:13:8b:10:3b:
                    e9:7f:b8:4d:92:15:e5:58:64:45:f9:36:3e:84:36:
                    40:02:67:ff:bf:01:08:5f:15:b1:0d:0d:73:63:d9:
                    e2:29:e3:95:22:93:18:8a:8a:32:df:e5:90:f8:9e:
                    c9:0b:1f:c4:61:e7:38:1c:3c:0a:b8:06:a5:f2:ee:
                    8b:87:fd:4b:71:77:96:52:2d:58:5d:76:3f:ce:34:
                    e4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:94:A6:D4:0C:C0:D1:B3:BD:5D:CE:1C:1C:D4:BB:CC:48:FB:BD:8D
            X509v3 Authority Key Identifier:
                keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:93:50:28:28:fa:13:2c:cb:b5:c0:d0:50:a4:9e:1f:f5:f8:
         89:75:e3:74:50:69:a0:b6:d9:2e:43:22:76:ad:63:b3:79:fb:
         59:b0:9e:b2:d4:cb:0c:3d:68:99:07:78:af:c7:ca:e5:82:26:
         a6:ca:ce:a4:32:dc:50:6f:46:62:5a:b0:14:c8:87:c4:48:aa:
         be:2e:57:11:a9:89:d5:e6:00:27:5f:33:f4:65:47:a2:a9:f8:
         20:ae:1a:55:cd:a2:7a:dd:f0:fe:5d:d6:40:b6:0c:2f:59:19:
         02:71:27:52:72:b0:56:32:dd:76:bd:d7:6b:39:39:dc:fa:36:
         8e:f8:66:8b:f3:15:f8:4c:42:73:1a:42:ba:b9:2a:f4:9e:f4:
         ba:a3:eb:56:40:16:f9:c2:8c:d0:f2:ce:f8:60:e9:8c:68:b4:
         4b:4c:4e:ac:ac:32:5e:51:dd:d3:cb:60:d2:8e:d5:7a:0a:60:
         99:46:53:81:72:9d:92:3b:c4:df:5b:86:82:c3:89:1c:7d:cd:
         e0:67:e6:62:cc:4c:ca:02:9b:05:7b:27:b0:14:ce:c5:40:22:
         c7:cb:2a:fe:86:a6:e2:58:c7:fa:a3:b6:dc:3b:bf:b2:e9:08:
         0c:57:93:86:ff:3e:6e:76:2b:ee:0c:02:d3:69:55:02:57:f4:
         e7:e8:64:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 23:44:15 2026 by rpki-client