Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
File:                     BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft (raw, json)
Hash identifier:          EscczJwqp8/jGT1Ck2/olizZrdord9ACqdITy+xeSAU=
Subject key identifier:   3E:2F:74:A5:2B:F1:88:A1:9F:D0:44:D1:49:1B:E4:F8:B8:53:8C:D2
Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
Certificate issuer:       /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Certificate serial:       7238234AACEB4C8361783787CC8A959FE0CB1B00
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
Manifest number:          E2
Signing time:             Fri 28 Aug 2026 06:47:59 +0000
Manifest this update:     Fri 28 Aug 2026 06:42:59 +0000
Manifest next update:     Mon 31 Aug 2026 15:45:59 +0000
Files and hashes:         1: 3131392e31352e3134312e302f32342d3234203d3e2034383132.roa (hash: iiZs9oCDJ3ydR1g9N7+3kpsirBvuQMlUfkeknyeUI0Y=)
                          2: 323430303a393630303a383830303a3a2f34382d3438203d3e2034383132.roa (hash: 6yt1vZTM0OmhcugzzBuMuaCYULNg8Jv+YWa4pkue5ss=)
                          3: 3131372e37342e3132382e302f31372d3137203d3e2030.roa (hash: 5MlJOu/q0Q3Mts15LBalJ1sepbxwUb+VkGap3rDiJX0=)
                          4: 3131392e31352e3133362e302f32332d3233203d3e2034383132.roa (hash: iyslGkiLEqEVdSW+oe1E81pt4IuqOMx8h6+odH4uEqQ=)
                          5: 3230322e3133362e3231362e302f32332d3233203d3e2034383132.roa (hash: 5nY2Qwd6G9qtAhzlBDk/6R/77a/5eMpOO710Otrer40=)
                          6: 3230322e3133362e3231392e302f32342d3234203d3e2030.roa (hash: eb+lsP1zS4a52kp7rQjQfcngt6O8DL6ngxHMW6QjVVI=)
                          7: 3230332e3137362e3137302e302f32342d3234203d3e203234313431.roa (hash: dLZCqmYnbpIP4WgY5kD3pZF1/DxQRaLbx47WEz5mzfQ=)
                          8: 3230322e3133362e3231322e302f32322d3232203d3e203137363231.roa (hash: HS2oviokuHzJsSm9+Rr59oYhpd+2iiBE6DvBEyPQZ/8=)
                          9: 3230332e3137362e3136382e302f32312d3231203d3e2030.roa (hash: ktYlnhepu1386GTakqSOMD/xAMbEFqEMJ4uaT/SuP0A=)
                          10: 3230322e3133362e3232312e302f32342d3234203d3e2030.roa (hash: jw6K4jbxX8BotBAL0cYgDRlD+uP6PPaf5dlMjJNsaZo=)
                          11: 3131372e37342e3132382e302f32312d3231203d3e2034383132.roa (hash: 7u1P3VkjpxSppg+34NH/Zm1EsjCmHFLZUKt9OAhN12I=)
                          12: 3131392e31352e3134302e302f32342d3234203d3e2034383132.roa (hash: HnuA7sY67JCdIKygqMB5pRKk8VyJBnV37OTStjv4ilI=)
                          13: 323430303a393630303a3a2f33322d3332203d3e2030.roa (hash: qYpetUirBdZkWClubflhJXT8wvgjzSRaXKzICEAC+VE=)
                          14: 3231302e352e3135322e302f32312d3231203d3e2034383132.roa (hash: +ZHNbMnaFGN/uSkWabSmE75mffioRCBu0BsefK4v1lY=)
                          15: 3131392e31352e3133362e302f32312d3231203d3e2030.roa (hash: MqgqdLkRcEcvofxTsK+/JIWiyCzdozy0h5Q+QPR0tCo=)
                          16: BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl (hash: 2/uSA1EnQ75Zz0xS8lxY5vSrh500InstKoVYMu8QeuQ=)
                          17: 3230322e3133362e3232322e302f32332d3233203d3e203137363231.roa (hash: F0Ayq3cjkuvxzFYX3SHZlSLuhDvOKIvqp12/bsu/n/4=)
                          18: 3230322e3133362e3230382e302f32322d3232203d3e2034383132.roa (hash: OmiSIjODLWcoDnY4QUVBhclHnKvfmJsqsRP35eLApYo=)
                          19: 3230332e3137362e3136382e302f32342d3234203d3e203234313431.roa (hash: N3T0xG4+OaQjiFYOMeZy4UHEZPVVz8y2/BHszGOiCDM=)
                          20: 3231302e352e3135302e302f32342d3234203d3e203234313431.roa (hash: y6kqJ1YDTpOPqPKWU+Y/iiteI55ARuprTHApGMr7IZA=)
                          21: 3230322e3133362e3230382e302f32322d3232203d3e203137363231.roa (hash: Z9J0afLCLJZwi8MldJRUz1J6biRfJ6fEP/d2kNLGKC4=)
                          22: 3230322e3133362e3231322e302f32322d3232203d3e2034383132.roa (hash: 0XWbWX26rruXa4apWMj3I3fHxpgDOl2SGcq4AhkL8tU=)
                          23: 32372e3131332e3132382e302f31382d3138203d3e2030.roa (hash: KK1RzKFiNcTfRxJmVFKufBBeLgH5EWmCWHV585IznMo=)
                          24: 3231302e352e3134342e302f32312d3231203d3e203234313431.roa (hash: +lv73T9O9q5n81quuhvlQDnpqcRdKWzD0TRd2MlglfA=)
                          25: 3231302e352e3134342e302f32312d3231203d3e2034383132.roa (hash: MtpPUBiQt8TPtxsCGqf8Ze8tDRRRKP8x2cQp71EJDDk=)
                          26: 3230322e3133362e3231382e302f32342d3234203d3e203137363231.roa (hash: S3k9nkhW8JiHW7HA1P7oI4rU1lVF7/FTM2rJjszLFy8=)
                          27: 3230322e3133362e3232302e302f32342d3234203d3e203137363231.roa (hash: AWmE9yewJh0fhz6Pfas9ClXLsdjyofQ7PMvv9lZQdis=)
                          28: 3131372e37342e3133362e302f32322d3232203d3e2034383132.roa (hash: A3jgln8L7FCj6nrGICiP8rRiROVpbxAhiphG6oEQwXY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 15:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:38:23:4a:ac:eb:4c:83:61:78:37:87:cc:8a:95:9f:e0:cb:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
        Validity
            Not Before: Aug 28 06:42:59 2026 GMT
            Not After : Aug 31 15:45:59 2026 GMT
        Subject: CN=3E2F74A52BF188A19FD044D1491BE4F8B8538CD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2d:ce:0b:91:22:68:f4:13:61:f1:41:90:2e:
                    15:71:bd:da:db:ce:f9:23:be:1d:31:c4:fc:4c:db:
                    05:0d:06:45:2a:57:7c:d5:88:d2:aa:4e:f9:fe:ab:
                    1f:df:6c:be:09:4d:d4:99:ae:95:7a:3e:01:90:dd:
                    7f:86:23:ab:ef:d5:61:b1:f9:d5:fe:b1:a6:6e:3f:
                    dc:38:2d:1e:a5:c9:89:ca:2b:c3:83:b2:1a:3f:09:
                    3b:64:64:1c:cc:68:64:18:bc:f6:55:93:57:4f:24:
                    86:d3:82:f1:8f:a3:2a:bb:83:46:22:73:2f:ff:fb:
                    8b:6c:0f:8c:11:a1:c5:78:42:58:69:5c:20:1e:96:
                    da:20:69:80:bb:69:b8:82:bf:ee:1e:4b:54:54:13:
                    ef:fd:e7:1e:09:52:b9:bd:be:7e:cb:9c:70:cd:06:
                    04:78:06:a5:f0:a1:bb:97:67:ee:34:af:6f:97:95:
                    e1:92:31:10:2a:27:8c:e2:51:f8:13:4e:c9:a8:dd:
                    33:ad:88:c7:2c:be:57:15:c1:d3:d6:51:a8:bb:d9:
                    44:00:cc:12:5c:6e:74:f9:ca:fc:6b:bd:76:b5:41:
                    65:02:dd:a5:a2:72:43:ea:c3:75:ee:98:09:37:e6:
                    84:bd:6b:13:9e:bb:f1:f0:5a:2d:b7:a5:3b:38:79:
                    14:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2F:74:A5:2B:F1:88:A1:9F:D0:44:D1:49:1B:E4:F8:B8:53:8C:D2
            X509v3 Authority Key Identifier:
                keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:dc:99:ff:ac:80:f4:0d:39:21:80:3b:3e:de:f2:0f:d5:8f:
         d7:76:f2:7e:77:69:fb:34:93:76:67:8e:14:2b:69:77:e3:e3:
         2b:d1:97:89:fd:fc:46:1a:da:39:0e:5e:7e:cd:2d:ae:31:8c:
         51:12:46:1e:33:53:c2:c8:ca:a1:27:c5:f8:3c:73:95:cb:e9:
         8a:39:e6:ee:37:42:5b:27:9f:1a:5a:84:1a:9b:eb:d8:82:1d:
         6e:66:ef:6c:69:b8:bd:e9:ee:9d:f8:ae:f7:d4:33:0c:93:46:
         0f:e9:70:33:b8:81:81:72:18:e3:91:38:a7:e2:a5:dc:51:85:
         b1:4b:2c:0e:08:bf:18:6c:01:43:03:3e:7d:eb:2e:d8:fe:13:
         e3:6b:96:79:3c:62:85:f3:6c:e5:ff:c5:df:6f:a6:24:17:eb:
         13:af:f1:37:3a:44:ec:f6:16:45:70:04:af:63:dc:df:94:95:
         95:4e:f7:bb:ca:e6:97:91:38:21:65:d6:f3:5d:b1:37:95:0f:
         25:4d:8a:ce:fb:28:a4:03:94:d0:ce:9c:01:9d:73:21:fe:19:
         d5:a9:bf:8f:33:15:80:58:21:df:65:c2:f7:c5:bc:52:83:31:
         52:93:d5:19:ac:c7:e3:87:8a:aa:de:a9:ac:a5:16:ad:40:68:
         e5:46:e0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:02:33 2026 by rpki-client