Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
File:                     F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft (raw, json)
Hash identifier:          6XoRUMCmmPZWm8cRow2/Dh6T5ZQvJSTGnqoHO3yrepY=
Subject key identifier:   2B:DC:B0:F0:53:A1:DA:73:29:F5:B3:B0:79:9B:63:20:C6:88:26:84
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Certificate issuer:       /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial:       648D676893620B84CFA7C9E4D14FB1CA0A32267A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
Manifest number:          D7
Signing time:             Fri 04 Sep 2026 00:14:23 +0000
Manifest this update:     Fri 04 Sep 2026 00:09:23 +0000
Manifest next update:     Mon 07 Sep 2026 04:27:23 +0000
Files and hashes:         1: 3131342e3131342e3131322e302f32302d3234203d3e20313337373032.roa (hash: PkCwWnw3PHTq+vYK1KUV313Oht0v/DXlfYx5SoIP84M=)
                          2: 3131342e3131342e3131322e302f32302d3234203d3e2034383337.roa (hash: FuAefi2k+MxwWEA1e6EeFXVUaieSOTb8VmLKkzGo0uU=)
                          3: 3131342e3131342e39362e302f32302d3234203d3e20313337373032.roa (hash: muvu6CQMqTuNlfNzK3PNDYlQpfEfxnnrgjlIM12wZFs=)
                          4: 3131342e3131342e3131322e302f32302d3234203d3e203231383539.roa (hash: HRMXKfc+EpXqjefGAqI2D0frnesKyXTLaWckWOelSRU=)
                          5: 3131342e3131342e39362e302f32302d3234203d3e2034383337.roa (hash: eZtOjO7I2MepkQbn85egh1Lnu1i+4JgpVaoIbcoDMcY=)
                          6: 3131342e3131342e36342e302f31392d3234203d3e20313337373032.roa (hash: pEKwX9Ft0ck+emjCFmodH06AapcEO9wPvQT5NdDyWVI=)
                          7: 3131342e3131342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7mISZsZ4HIxbAs3JkW8PttavON7sghcgz5ug1T/w3Jk=)
                          8: 3131342e3131342e302e302f31382d3234203d3e203536303436.roa (hash: wyOP2OkcK0RyKhtQQ5BY1J2XPn5SwDwaHoFghxO5Lgo=)
                          9: 3131342e3131342e302e302f31382d3234203d3e2034383337.roa (hash: zQmY5XoxEgFfEocFlMn7zYUhUWjw1W1jR7h66vVfXRg=)
                          10: 3131342e3131342e39362e302f32302d3234203d3e203231383539.roa (hash: Ah1hAptQgQx/TDu32iuzbvTZnvkTCVkVVLy9/9WPaaU=)
                          11: 3131342e3131342e36342e302f31392d3234203d3e2034383337.roa (hash: uZR3/1/4YF72OuVTrOxRu4XvI1rHNO9/mv3P+UxzZfs=)
                          12: 3131342e3131342e302e302f31382d3234203d3e203231383539.roa (hash: pIt4b7xnDcf/2bsqo3Gx9aNls8ZbD3maIVn+Eh0MmrM=)
                          13: 3131342e3131342e3132382e302f31372d3234203d3e203536303436.roa (hash: FWWMCAx1W0KCQG5LZnRL2X3DIQBk/s6lX410aw4wRiM=)
                          14: 323430343a333730303a3a2f33322d3634203d3e203231383539.roa (hash: Sn+tT3R7FUIVQa1TjOf+NsbHTswr92j/YhOMUuFNzYg=)
                          15: 3131342e3131342e3131322e302f32302d3234203d3e203536303436.roa (hash: UyvVI1qV2GuzweCMNqtEtPn8qvUYEiO6ioVdsraU5O8=)
                          16: 323430343a333730303a3a2f33322d3634203d3e203536303436.roa (hash: pOPse9BV3gn6djAX7ecHkFVIUgN70stV1LcDDmPTYl8=)
                          17: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl (hash: ec031osM+UpSUL8mGP6fI6IgTzLT84m5pCpi2+F1iQY=)
                          18: 3131342e3131342e39362e302f32302d3234203d3e203536303436.roa (hash: ezCUIC9VcjeRK2+GTssm4PV96+Ina4oiGh1Ju4wnOtE=)
                          19: 3131342e3131342e36342e302f31392d3234203d3e203536303436.roa (hash: aF3GG9ClQmKfqqoms2b8ZBWCHJr//2BMFFxxL7swPtg=)
                          20: 3131342e3131342e3132382e302f31372d3234203d3e203231383539.roa (hash: TvprcYp8fQ7VaasMW02+bn5WNN6zIFcA0VFszax2RFE=)
                          21: 3131342e3131342e302e302f31382d3234203d3e20313337373032.roa (hash: nLm7pgJsZIIGPL2vx/lrEFek1uPCaLKs4C53MBfr6vs=)
                          22: 3131342e3131342e36342e302f31392d3234203d3e203231383539.roa (hash: /UPLNtJyBw1bgK76/hFyIRStLrGQRkZjpwXFOle6bEA=)
                          23: 323430343a333730303a3a2f33322d3634203d3e20313337373032.roa (hash: qs2qxnTmOlEyVS6Qau2xA7nlczXR/QB+A2OlVAzfu34=)
                          24: 323430343a333730303a3a2f33322d3634203d3e2034383337.roa (hash: zuCmu28tlc/6Dxb5FY/JmG6mSgbcxgNnqnOntLlSdwo=)
                          25: 3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa (hash: SfeGMuqHWzoAv9iGacYRYzdpfa3BDEWC2CuQowRuJd4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 15:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8d:67:68:93:62:0b:84:cf:a7:c9:e4:d1:4f:b1:ca:0a:32:26:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
        Validity
            Not Before: Sep  4 00:09:23 2026 GMT
            Not After : Sep  7 04:27:23 2026 GMT
        Subject: CN=2BDCB0F053A1DA7329F5B3B0799B6320C6882684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c9:e9:c0:7d:01:1e:5d:be:73:1b:0a:0f:bb:
                    22:fc:2b:74:5a:e2:75:15:5d:4e:ab:a4:6d:08:85:
                    30:f2:09:4f:6c:d6:89:1f:59:d4:75:78:e1:a3:dd:
                    0b:ee:35:02:4f:7b:3c:86:19:ef:b4:58:cc:ed:ea:
                    d5:6d:72:2c:98:92:f7:80:e0:20:86:04:80:23:a4:
                    51:2a:d2:87:c7:89:4a:6c:b5:1a:55:d7:72:33:66:
                    94:05:69:e1:aa:ea:29:42:9d:16:fc:2b:31:3c:70:
                    50:22:e1:8d:35:78:7e:77:b6:26:8e:ab:fa:b5:ce:
                    34:58:71:48:95:8f:e4:5b:e6:53:dc:97:01:22:14:
                    21:7f:c4:1f:f2:a6:f7:08:54:ff:b1:c6:d7:b2:13:
                    7b:8a:60:7f:4b:23:b8:1f:64:07:53:84:68:ba:9b:
                    e6:1f:cc:59:94:cd:dc:6e:57:bc:1a:b7:04:11:8e:
                    a4:21:3e:f8:59:50:62:66:cd:a8:0d:f6:69:94:6e:
                    fa:a6:b0:2a:72:ef:03:e6:2e:b2:f6:e3:d5:cf:84:
                    f6:43:cb:b8:c0:05:77:42:de:71:52:d7:c7:04:53:
                    c4:9b:bc:cb:a2:b7:05:47:c3:9a:f7:24:9d:5b:b4:
                    0a:60:e4:60:11:83:5f:dc:b4:bf:6e:33:6c:89:6c:
                    77:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DC:B0:F0:53:A1:DA:73:29:F5:B3:B0:79:9B:63:20:C6:88:26:84
            X509v3 Authority Key Identifier:
                keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:1b:e6:d6:39:31:06:c0:88:d2:1d:1e:f9:2e:e9:1d:e7:9c:
         b2:00:e2:db:3d:86:4c:c3:20:66:d3:7a:7c:28:15:9d:cb:8a:
         19:85:25:1e:be:6a:ef:b3:4d:8f:21:10:b9:5b:40:0d:03:cc:
         31:ae:5f:5d:05:a0:86:01:7f:d9:92:7e:bf:1c:57:91:b5:95:
         25:2d:e3:91:cc:f8:46:0f:19:5a:a4:b0:f2:e1:07:ca:4a:2a:
         b6:16:32:42:95:d1:32:97:36:ff:c1:03:d4:b6:0e:92:96:9e:
         aa:3f:cf:31:7e:dd:12:11:db:f4:49:8f:35:20:69:91:f6:db:
         5b:2a:f1:53:25:69:65:3a:52:01:98:35:8c:3d:58:23:9e:99:
         cc:d1:fe:55:30:cb:d5:f3:6b:5e:a4:08:ab:14:3c:31:08:bd:
         54:b8:63:92:f2:aa:8e:17:a4:28:51:4a:ce:72:56:85:d3:11:
         c9:f5:09:e3:03:57:e4:82:4f:d6:55:01:70:15:41:d2:d8:16:
         59:db:7e:a1:4b:97:83:b4:3e:24:ce:b4:26:28:70:84:a4:47:
         44:11:87:99:8b:d1:3f:00:68:2d:77:f6:da:39:87:2a:0d:fc:
         7f:41:e5:3b:6c:74:6d:3e:8f:2c:fa:09:19:23:89:ee:6c:39:
         c9:89:84:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:22:50 2026 by rpki-client