Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
File:                     DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft (raw, json)
Hash identifier:          YAOMd/8Z1CoD7/sFQoECTL0z/UqpuasOmYUdBOtQPJs=
Subject key identifier:   72:7F:77:C2:57:71:A2:2A:5C:AF:EE:E5:46:32:68:96:CE:1C:49:7C
Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Certificate issuer:       /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Certificate serial:       1DBB3920FFC89271B2C61FD474189C2110297E09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
Manifest number:          09FF
Signing time:             Wed 14 Oct 2026 10:07:03 +0000
Manifest this update:     Wed 14 Oct 2026 10:02:03 +0000
Manifest next update:     Sat 17 Oct 2026 14:35:03 +0000
Files and hashes:         1: AS9808.roa (hash: OuxEfO6ZK+xAbL8cJeCLrwjLjMggz9t3qK1QJY58aYs=)
                          2: AS140105.roa (hash: cbLY07/0cjAui3nt1HvHxL/XetLIxK/ZZzrxslSceck=)
                          3: AS24400.roa (hash: EM5XQPVVS2iCW908KvswLyUoAJBIvh1wSED/ZQUlnfs=)
                          4: AS24444.roa (hash: e0guTjJsdpuYjrjey5yjKBv2v2TR4lUhylfa3B5VqRg=)
                          5: DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl (hash: 5ucwAXMRn/9H0Y7u9pU3p/oatkmIbtrMG/DUWQdSMN4=)
                          6: AS56046.roa (hash: ByVWTfVDZp0rdSP+2BiBShzM9pp7hFOoBPtiLVsv/4E=)
                          7: AS139080.roa (hash: Ixaiu3+twhX8iBdxlGpsu4fNXlfx2qPq2Dz6Sj3ApYs=)
                          8: AS138407.roa (hash: 3TB7XIICfQETicAQCosTtecuvqT6okRABqxXNpHYYAA=)
                          9: AS23841.roa (hash: wEUvCNR/rKJWyrTLZUbTTDGl4gJBMRJxFsOhTzXHPL0=)
                          10: AS24547.roa (hash: qcUsBYxk9GfASEGAVNZQVBM6PUJZO/0LS9BMgEa39Eo=)
                          11: AS56042.roa (hash: jE/QWfvDkxz7wbfuhxiu1dTA1gKaLjOQMTOprQdX424=)
                          12: AS56048.roa (hash: mDZTg6S8UPo5S9uCeONPhh4g9XT6Ku9groL7zfXKOrg=)
                          13: AS56047.roa (hash: lbOaD3ZNPZ4/4v8et/4577bOI37p6v+ng3b+EBGiM0g=)
                          14: AS135054.roa (hash: potv43MxFxLckeV83NSTRcSW7QiMa9bKPAG8rf/anoM=)
                          15: AS56040.roa (hash: 8uiIoJM3cFXmYh1VVmt9rUJRX/EpguJACe6TjU3Y0gI=)
                          16: AS141425.roa (hash: JIOqNrntGHAd8+iQ6oFeH8vj+w3+1mPDPGOuDZGfboY=)
                          17: AS56041.roa (hash: fXns+Ktmx2/58wRfjelabNhKQ1irdsG+h0m+EIC8fhU=)
                          18: AS24445.roa (hash: GCVs62RkfZA6WMPmoBq3pff6StckGuCzOkqcYMGatnk=)
                          19: AS38019.roa (hash: E1yVifHTjCfA/PvlGPpA9wXomKkrHRfKfAkGdwa9pDE=)
                          20: AS56045.roa (hash: jdp0IZFNjotDlV3Csi6khMaQsoOd04oW+bmB9IcZZ5M=)
                          21: AS56044.roa (hash: xvUWbL7g3ulk/dOrd6pcqVMKirqKk512vkfuU8j5CKM=)
                          22: AS132525.roa (hash: +/2dbn6wXfH+ezZqMQumZp4gdrAwffKvArLP12JT/XU=)
                          23: AS132510.roa (hash: nW/Xu5rFcjc6MZ1OWK+RDXCb9OeXARjibpfGArwLV0Q=)
                          24: AS134810.roa (hash: Qmjc3LrwRpIg7MHvoR1K5wXXQyIblNiCRFtiD43m5NQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 14:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:bb:39:20:ff:c8:92:71:b2:c6:1f:d4:74:18:9c:21:10:29:7e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
        Validity
            Not Before: Oct 14 10:02:03 2026 GMT
            Not After : Oct 17 14:35:03 2026 GMT
        Subject: CN=727F77C25771A22A5CAFEEE546326896CE1C497C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:65:46:ef:d3:7f:6a:ee:76:5c:50:b6:95:d6:
                    0a:70:77:c8:95:31:29:3e:a0:24:22:0f:8c:ce:d9:
                    c2:72:e3:57:0c:d5:27:e1:f2:78:85:5b:c0:1f:2e:
                    44:b8:56:35:b6:39:cb:12:72:67:9b:94:1d:86:68:
                    b9:7c:68:0c:42:ee:48:93:2c:42:62:0b:69:06:34:
                    ad:53:24:e6:31:88:c2:44:6c:58:55:2b:37:75:69:
                    bf:ca:a4:5a:9e:f0:28:e4:52:29:00:fe:bc:86:69:
                    c7:ec:3a:1a:35:3e:7c:c4:f6:c9:d6:6b:72:71:7e:
                    b1:09:67:36:05:81:34:5b:00:b8:2d:2a:4f:6e:d9:
                    b9:71:ca:d5:9c:04:4a:05:80:5b:0e:8d:ee:52:06:
                    e2:42:f4:ae:66:73:43:4f:a7:c3:c0:ea:6c:ea:2f:
                    02:68:e1:4c:5a:8a:f3:95:18:c7:e8:14:b4:91:94:
                    ed:e5:ea:a0:de:7e:ba:e4:e6:2b:a5:66:51:1c:4c:
                    63:9c:ea:0d:bb:ef:25:2b:8d:a2:95:a9:de:a5:ca:
                    61:06:cd:81:16:8f:ce:6e:e7:82:8b:76:53:bb:34:
                    ff:3e:be:b2:53:d4:66:46:c6:09:96:13:7e:00:11:
                    65:46:67:05:a3:6f:e2:75:9b:61:fa:12:a9:17:25:
                    b0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7F:77:C2:57:71:A2:2A:5C:AF:EE:E5:46:32:68:96:CE:1C:49:7C
            X509v3 Authority Key Identifier:
                keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:5a:52:61:b9:93:88:c4:6e:1b:ac:c2:a9:16:d7:ca:9a:d7:
         07:e1:d5:70:88:f9:47:6a:4a:46:5c:3a:f7:ec:f3:7a:14:49:
         80:4d:6c:86:4f:94:55:fd:99:43:b5:a2:0d:af:ec:cc:56:12:
         9c:d8:a4:37:ca:f4:d4:ae:d2:2b:3b:4d:08:3e:69:07:9a:86:
         51:77:65:4f:89:b4:12:b1:f9:52:02:4e:8f:e8:b1:71:94:23:
         1b:32:cd:18:6c:44:69:7f:0b:ad:eb:40:55:2e:24:b0:a3:0f:
         e8:f2:e5:e2:da:03:5e:da:5b:23:9f:31:e5:2d:62:b2:19:11:
         34:d9:a3:c8:37:3f:4a:05:74:dd:c6:eb:fc:66:f2:8c:f2:d2:
         e1:1f:6c:08:03:7d:88:d3:61:38:bd:30:35:68:10:a7:ab:d5:
         2d:d7:ca:df:c9:2e:67:d3:c6:bb:10:38:f4:ba:f5:26:dd:c4:
         85:c3:69:1a:92:3e:f5:61:50:25:a4:0e:fa:1d:df:24:4e:e6:
         3a:72:b2:bc:c1:65:c5:5a:62:08:c5:d6:57:61:a4:e8:1f:c1:
         fa:1e:c4:9f:a6:0a:3c:69:39:f3:65:6a:ec:e6:de:ba:dd:d5:
         d4:a4:a6:70:3c:31:68:43:1c:68:92:91:14:e7:45:0d:c7:72:
         c0:00:e7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:09:35 2026 by rpki-client