Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
File:                     D569CE49ED940955318F718AEACD6D410BFF66B3.mft (raw, json)
Hash identifier:          41llLg2oU0MIDKymvcnxqxb0Ewz0sXUbnXd+s23gBhw=
Subject key identifier:   3D:AA:50:2F:A9:D6:9E:84:33:0E:0E:DF:3E:00:A7:76:BE:95:B4:77
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Certificate issuer:       /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial:       2E77316D2ABFF4B4097DFC067395AD4E5D9C0509
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
Manifest number:          8F
Signing time:             Tue 14 Jul 2026 03:20:18 +0000
Manifest this update:     Tue 14 Jul 2026 03:15:18 +0000
Manifest next update:     Wed 15 Jul 2026 04:26:18 +0000
Files and hashes:         1: 34332e3232372e3235322e302f32332d3233203d3e2034383038.roa (hash: kqBTKXZuUTFu7ozAEqtreqOTWSE2PVCXlgb+48hQccY=)
                          2: 3130332e33382e3232342e302f32332d3233203d3e2034383038.roa (hash: 7dPSFCDj0PIzP6El/y+lacMv5iRRwMATYARYTzcJCTg=)
                          3: 34332e3232382e33382e302f32332d3233203d3e2034383038.roa (hash: mpbAsvFDLG/ZIcdpHFPiePOhuggrNP073Yxd6/YcbSE=)
                          4: 3130332e33382e3232362e302f32332d3233203d3e2034383038.roa (hash: bXClGDPYbjWgMEq8SA5ZPYKAYZZCbMQZiJ3UF69ee60=)
                          5: 3130332e34372e34382e302f32322d3232203d3e2034383038.roa (hash: tQrGvA+ovIhb2o+IGqUAyjVnC1YGmGLo20op2NAtTds=)
                          6: 34332e3232382e33362e302f32332d3233203d3e2034383038.roa (hash: Xa5AXQxRxhiNUn0Q383X3+I1dkYG4/UzCR3ox8vQoXk=)
                          7: 3130332e34372e35302e302f32332d3233203d3e2034383038.roa (hash: 5oyY01hEuqvle1ETlN/iZfm3VvugkwkDCcQO5FZtFZk=)
                          8: 3130332e33372e3137322e302f32322d3232203d3e2034383437.roa (hash: ZLSAj91TCNLWpmJqAuFupd75mGM7DIEK9ACn9QOoMRU=)
                          9: D569CE49ED940955318F718AEACD6D410BFF66B3.crl (hash: YcBDoMt+AhAp+gwCbhD6gPOXH+OjhnyW9akXqDXAGXg=)
                          10: 3130332e34332e3138342e302f32332d3233203d3e2034383038.roa (hash: 58sAFUQcffD9Ee3VUeCuDzcGIFTa8oRrzCJsEFONdi4=)
                          11: 34332e3234312e3234302e302f32332d3233203d3e2034383038.roa (hash: Lydf+HeHIzjAwoZErdFDn5KtbiIWOENNEr7cVYyLFk0=)
                          12: 34332e3234312e3234322e302f32332d3233203d3e2034383038.roa (hash: sVydZ+GvGDFoPNuzhCTpLN5HOyW0wDG576NjGm+vN2Y=)
                          13: 3130332e34372e34382e302f32332d3233203d3e2034383038.roa (hash: EGFeWmWIyr+USyiqXj6ibb0EHfeKnqu7Opu/tId22Yk=)
                          14: 3130332e39332e3230342e302f32322d3232203d3e2034383437.roa (hash: c3GeuIs4VkQfLWWRwfzcWcUnDjF1Zl2LhsyNxr5DM1U=)
                          15: 3130332e3139382e36322e302f32332d3233203d3e2034383038.roa (hash: tozC0Xn5DxnoxIpvuHYtie3w0rP28y+UfkhwTkZQI30=)
                          16: 34332e3234332e3133382e302f32332d3233203d3e2034383038.roa (hash: UFc1MA45ujfU5YItyaYkZq1sEQBdwiNu5jfwq/iSPDU=)
                          17: 35392e3135332e36342e302f32322d3232203d3e2030.roa (hash: gYggE55VWRSwMIbG1Cq3gSFhE0CBxFxT1X9h0NKFL8I=)
                          18: 34332e3234332e3133362e302f32332d3233203d3e2034383038.roa (hash: MeegwRZIHce0h2CLLPnHVq97GiQa/EeEGjxY12mLK40=)
                          19: 3130332e34332e3138362e302f32332d3233203d3e2034383038.roa (hash: +/hzGXAPdjUFZN2ItUhpXUD6o25OXmDnYup+aveZY+s=)
                          20: 34332e3232372e3235342e302f32332d3233203d3e2034383038.roa (hash: cdPx20syskwekFlfeG9W3LsffSVTsSoPcPp0Zkm0kCM=)
                          21: 3130332e3139382e36302e302f32332d3233203d3e2034383038.roa (hash: MBq3OH/vne3tS8JtiUeLcCuvfUCea9w4ciYPqhPXhsQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 04:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:77:31:6d:2a:bf:f4:b4:09:7d:fc:06:73:95:ad:4e:5d:9c:05:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
        Validity
            Not Before: Jul 14 03:15:18 2026 GMT
            Not After : Jul 15 04:26:18 2026 GMT
        Subject: CN=3DAA502FA9D69E84330E0EDF3E00A776BE95B477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:64:10:c7:09:4c:63:7c:4c:7a:1e:b4:58:21:
                    36:bf:7c:04:72:60:e3:ca:75:f1:d4:46:a2:60:32:
                    7c:bd:43:a6:09:7c:e5:df:2b:e5:3b:a2:43:ac:2e:
                    29:7e:a8:ea:f4:0d:92:95:e6:f9:86:42:e3:94:f5:
                    71:a9:bb:0c:73:e8:65:7b:ef:e7:cc:f3:6e:89:6a:
                    ad:b7:e4:19:0d:95:d6:49:ff:6b:4f:0d:01:b1:1d:
                    b1:06:e8:8d:c1:b2:b6:bd:10:76:d1:58:c3:15:46:
                    26:66:e8:15:c3:e9:57:9f:0c:27:7e:74:77:e6:54:
                    5d:7a:18:4b:b5:70:17:1b:e1:69:f9:50:65:e2:ec:
                    d3:6d:78:86:d8:e4:39:18:5c:6b:45:bb:85:63:b1:
                    4e:fa:8f:aa:8f:c5:70:0f:20:db:44:8b:6d:0b:82:
                    61:7c:fc:72:ac:4e:42:15:19:f0:c8:54:36:9c:bf:
                    fd:be:d8:54:1b:79:85:05:26:b3:0f:34:ec:b5:78:
                    c9:45:29:4e:8a:46:76:9b:ed:8f:3a:15:ec:63:5a:
                    5d:f4:49:c2:dd:a8:20:04:69:cd:fc:1c:75:be:ca:
                    68:1d:f1:16:c1:f8:37:5b:ce:59:26:6b:d5:08:e4:
                    a7:1b:38:ad:b1:07:9c:70:52:47:ab:b0:be:bd:ea:
                    b8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AA:50:2F:A9:D6:9E:84:33:0E:0E:DF:3E:00:A7:76:BE:95:B4:77
            X509v3 Authority Key Identifier:
                keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:8e:1c:12:2f:81:70:15:3c:bb:9e:44:b9:82:92:68:ff:15:
         6c:b6:64:d5:85:13:8d:33:17:84:d8:ff:c7:68:00:0e:ca:27:
         e7:28:3d:c7:61:06:6d:89:62:c9:92:18:1a:04:6c:4b:fc:81:
         14:17:1c:bf:5d:22:52:d2:bb:bb:40:5f:25:a4:9f:f1:a6:8b:
         d3:45:c5:bd:55:e3:65:1d:be:f9:05:15:1f:ea:86:b3:a6:05:
         e5:a3:55:18:9c:b1:ed:f5:9f:c4:ec:b0:3a:ed:0a:a0:47:40:
         7d:b8:04:9b:32:40:73:4f:9b:d7:93:85:51:b6:59:c8:1e:64:
         41:95:6e:23:65:65:e2:e3:71:42:db:61:4e:82:ba:17:ba:ba:
         a5:0f:14:36:dc:cc:c4:8c:25:02:e0:54:55:c1:81:56:69:86:
         81:1c:da:ec:44:20:e7:be:b8:89:89:72:3e:68:ce:35:e3:d5:
         73:30:ed:3a:61:6b:5a:7e:68:a9:8d:c1:7e:8a:b6:d4:da:75:
         7a:df:5d:47:9f:87:c8:ae:7c:53:ab:3b:c6:e7:9e:a8:17:00:
         40:36:c8:30:8c:92:31:34:69:3d:25:b0:aa:ac:2d:77:5a:55:
         39:4b:8c:25:3b:66:f0:e3:b8:e2:6b:6c:f5:a4:be:3f:9e:3b:
         77:ab:a3:4a
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIULncxbSq/9LQJffwGc5WtTl2cBQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEw
QkZGNjZCMzAeFw0yNjA3MTQwMzE1MThaFw0yNjA3MTUwNDI2MThaMDMxMTAvBgNV
BAMTKDNEQUE1MDJGQTlENjlFODQzMzBFMEVERjNFMDBBNzc2QkU5NUI0NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbZBDHCUxjfEx6HrRYITa/fARy
YOPKdfHURqJgMny9Q6YJfOXfK+U7okOsLil+qOr0DZKV5vmGQuOU9XGpuwxz6GV7
7+fM826Jaq235BkNldZJ/2tPDQGxHbEG6I3Bsra9EHbRWMMVRiZm6BXD6VefDCd+
dHfmVF16GEu1cBcb4Wn5UGXi7NNteIbY5DkYXGtFu4VjsU76j6qPxXAPINtEi20L
gmF8/HKsTkIVGfDIVDacv/2+2FQbeYUFJrMPNOy1eMlFKU6KRnab7Y86FexjWl30
ScLdqCAEac38HHW+ymgd8RbB+Ddbzlkma9UI5KcbOK2xB5xwUkersL696rgZAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUPapQL6nWnoQzDg7fPgCndr6VtHcwHwYDVR0j
BBgwFoAU1WnOSe2UCVUxj3GK6s1tQQv/ZrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMzMDg1OTA5MjUwODY3My8wL0Q1NjlDRTQ5RUQ5NDA5NTUzMThGNzE4QUVBQ0Q2
RDQxMEJGRjY2QjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEwQkZGNjZCMy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTI1MDg2NzMvMC9ENTY5Q0U0OUVEOTQw
OTU1MzE4RjcxOEFFQUNENkQ0MTBCRkY2NkIzLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYo4cEi+BcBU8
u55EuYKSaP8VbLZk1YUTjTMXhNj/x2gADson5yg9x2EGbYliyZIYGgRsS/yBFBcc
v10iUtK7u0BfJaSf8aaL00XFvVXjZR2++QUVH+qGs6YF5aNVGJyx7fWfxOywOu0K
oEdAfbgEmzJAc0+b15OFUbZZyB5kQZVuI2Vl4uNxQtthToK6F7q6pQ8UNtzMxIwl
AuBUVcGBVmmGgRza7EQg5764iYlyPmjONePVczDtOmFrWn5oqY3Bfoq21Np1et9d
R5+HyK58U6s7xueeqBcAQDbIMIySMTRpPSWwqqwtd1pVOUuMJTtm8OO44mts9aS+
P547d6ujSg==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:09:48 2026 by rpki-client