Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
File:                     94A04007C18934EEFD779445BA5349A8FBDB19DF.mft (raw, json)
Hash identifier:          OzMBcmCMc0S2cqwqrzRL0CDWr3OKBjA0HCTPn2D7OUo=
Subject key identifier:   06:A5:7E:8A:C6:53:7A:DC:E3:96:CA:59:B8:96:A9:23:1D:76:A1:1D
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Certificate issuer:       /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial:       0CD326C398F116C55BDF3AC2086F14525CCA24FD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
Manifest number:          8D
Signing time:             Sun 26 Jul 2026 20:37:34 +0000
Manifest this update:     Sun 26 Jul 2026 20:32:34 +0000
Manifest next update:     Mon 27 Jul 2026 23:26:34 +0000
Files and hashes:         1: 94A04007C18934EEFD779445BA5349A8FBDB19DF.crl (hash: CPK0FOIrwqS2oP09/11mZiGXPztFu37/KIHwGJYaG5g=)
                          2: 34352e3235302e34302e302f32322d3332203d3e203538343631.roa (hash: 9CaLvoN1eYCp7Xv/nRR420eYv7/If00ope76q9V3HCo=)
                          3: 323430303a313734303a3a2f33322d313238203d3e20313337373935.roa (hash: 0NLn1TjiH7ZQugYHz0U6scqxEDr1vFkoOGSZqocn4BE=)
                          4: 3130332e33362e3230382e302f32322d3332203d3e2034383337.roa (hash: 6Kk8anRGGcyDebTFWlv/ymR0kPxhO2tNsW9AZ20S/xA=)
                          5: 34352e3235302e34302e302f32322d3332203d3e203536303431.roa (hash: NGZrGAFxgiHzexq2IofFsLwb6uxFAsBmn1Ow7FzcJBg=)
                          6: 3130332e3131362e3138342e302f32322d3332203d3e20313337373935.roa (hash: EpJUiL82WCFmgrDdSZPF24mlGOs9L/efXkKQUa75Peg=)
                          7: 3130332e3231392e33322e302f32322d3332203d3e2034383337.roa (hash: Jk41kAWGPXXzkq+R+8DdZZEOIG50IWN+ozjGIKaa+IU=)
                          8: 3130332e3231392e33362e302f32322d3332203d3e203538343631.roa (hash: +5Aen4gBbhvr4RgAoGXeqXSzdfciSyM7Altnae7HfsY=)
                          9: 323430333a333438303a3a2f33322d313238203d3e20313337373935.roa (hash: 01EQRfFNBLZtIBFUU+0+xXPUTEcW/BIBd90WQEzHptk=)
                          10: 323430303a313763303a3a2f33322d313238203d3e20313337373935.roa (hash: yzONsYi5N+SM+OLZBFdqRCr3ZLEz27kAoxggpJWW9UI=)
                          11: 34352e3235302e33362e302f32322d3332203d3e2034383337.roa (hash: Wlhz50rrfhaHks6SQoofee0N3RSyE8dAGgAN/vQSK9U=)
                          12: 3130332e3231392e33362e302f32322d3332203d3e203536303431.roa (hash: Hq0hZTyQQ5FQtDz59K2Zq2ZtTRPVUznk2o2LxDY7rlw=)
                          13: 3130332e3231392e33322e302f32322d3332203d3e203536303431.roa (hash: rLWGREJ9nji3Oorbvdg7tTAoZn7v999fkb8uYyetyjc=)
                          14: 3130332e3231392e33322e302f32322d3332203d3e203538343631.roa (hash: XQjhRzo/rx/IDy+A+cvqn5D7gzFqFUImFbNjlJhG0Jk=)
                          15: 34352e3235302e34302e302f32322d3332203d3e2034383337.roa (hash: EAaYwNd0lpYc0bg5b49dtzIlWXe8A0pgSFh06kZY9Zs=)
                          16: 3130332e3231392e32382e302f32322d3332203d3e203536303431.roa (hash: gQpM2GIv2RqhUOBQIUUVpwQ0JBNdKs+u03+D9iHE/zQ=)
                          17: 323430303a313834303a3a2f33322d313238203d3e20313337373935.roa (hash: J/0DZa7OnZ48Jbysk3JSfZGDjUSqzgnIbELiC9NKhPg=)
                          18: 3130332e3231392e32382e302f32322d3332203d3e203538343631.roa (hash: 7see7mUP5RiDFD85n7obIwjrZr6JjitwwbnUFue3amg=)
                          19: 3130332e3231392e32382e302f32322d3332203d3e2034383337.roa (hash: J9pnuoN4vw/XBkCeNzwqo0Ctq27wQAgAWX0UKgdxN9c=)
                          20: 3130332e3231392e33322e302f32312d3332203d3e2034383337.roa (hash: qK0kAsOigkdUaF7IQ1NgfNZAa44NyfjEtYU0d1m4+1E=)
                          21: 34352e3235302e33322e302f32322d3332203d3e2034383337.roa (hash: LsvU/Z+7W+dJDtCnWU+MMDHZdO6s/DcGQSZ6YBn3WLU=)
                          22: 3231392e3233322e3132382e302f31392d3332203d3e20313337373935.roa (hash: tVD4bz8KmaurUHu/A7Es1Bli7Y3sTy5tzURf1uPAf1g=)
                          23: 3130332e3231392e33362e302f32322d3332203d3e2034383337.roa (hash: ONNnz84jBhcHYnXQ3A0lIZhQnu12JiV5NeaIfBKeeTc=)
                          24: 34332e3234302e3230342e302f32322d3332203d3e2034383337.roa (hash: qeWw9LAoOwB1x5e+0OFKFERBUgZGVkU5Fz80amsjkic=)
                          25: 323430323a666663303a3a2f33322d313238203d3e20313337373935.roa (hash: KTy4mQXfQF/bSwV80iNhpUCiYJrAX6vXxjisC+VZBco=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 23:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d3:26:c3:98:f1:16:c5:5b:df:3a:c2:08:6f:14:52:5c:ca:24:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
        Validity
            Not Before: Jul 26 20:32:34 2026 GMT
            Not After : Jul 27 23:26:34 2026 GMT
        Subject: CN=06A57E8AC6537ADCE396CA59B896A9231D76A11D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:13:ef:8c:78:0e:df:30:c5:9b:2c:12:3e:
                    69:a5:70:bb:2b:10:89:3f:2c:67:e3:10:e4:87:a2:
                    6c:f9:f8:f4:f7:2f:5a:32:82:4f:ce:f7:6c:c5:db:
                    b3:75:6f:ed:2a:d7:94:9f:34:b4:09:0f:9e:42:d7:
                    f0:0e:3b:71:83:37:d7:7a:1c:8b:7d:b1:28:4e:48:
                    5f:78:81:6d:a4:60:ca:2a:77:94:74:9c:4c:f4:fb:
                    19:6c:82:02:2f:53:5b:1c:38:00:75:cf:f1:c8:82:
                    5c:9c:82:98:7f:d6:17:48:49:75:01:42:29:4f:f7:
                    05:6a:28:c8:80:86:93:6a:a7:e4:c2:c7:df:c9:60:
                    98:7d:0e:19:44:9e:a4:8b:74:21:29:d0:44:53:db:
                    75:e6:2d:44:14:0d:23:99:ac:96:9d:10:db:aa:80:
                    2f:b2:dd:36:fa:9c:de:ab:8f:49:7c:90:ac:19:37:
                    a8:b2:ab:11:53:bd:e4:8f:d9:1a:58:c8:3d:0e:fd:
                    fe:f9:a4:ac:00:8c:79:46:62:5a:a1:01:2e:fb:53:
                    1d:a7:0a:37:95:95:67:72:0d:91:70:aa:a7:af:68:
                    f8:59:f6:47:74:bc:c8:8d:68:4d:64:8a:1c:c8:ea:
                    c7:79:96:76:80:2f:64:e0:c0:40:22:32:ef:c0:4f:
                    9b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A5:7E:8A:C6:53:7A:DC:E3:96:CA:59:B8:96:A9:23:1D:76:A1:1D
            X509v3 Authority Key Identifier:
                keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:5c:0a:98:46:cc:5c:40:f7:91:10:5d:69:45:e3:64:4a:d4:
         c2:05:f6:06:5f:19:21:cf:b3:a7:87:b2:52:be:da:42:fa:1e:
         7c:77:a3:67:25:5a:01:21:f4:80:bd:8c:06:97:ef:9a:05:56:
         ca:0e:22:79:a1:39:fb:af:fc:a3:f8:f6:40:fb:e3:12:64:5d:
         d3:69:4b:0c:11:47:53:db:bb:95:b9:46:b4:89:e8:44:07:df:
         cd:f4:aa:65:d7:e0:5c:29:7e:39:ce:cc:d7:b9:e5:53:d5:cc:
         74:cb:27:f1:a1:c2:89:ad:3a:a0:12:56:16:c3:1c:5f:01:43:
         a8:df:2f:6b:ac:bf:dc:3b:bb:48:69:ec:a1:39:ed:57:a9:39:
         04:8f:15:75:60:64:12:b0:84:6c:ec:cb:57:1b:c5:bc:51:3f:
         80:f6:a1:c6:ee:8e:1a:0d:73:e2:e3:3c:4a:8b:03:e7:8d:a1:
         33:9d:91:54:c0:71:57:a4:c7:32:5b:92:33:7f:ef:31:21:d4:
         de:39:2c:3e:3a:a5:fb:c9:cf:9f:5c:b1:0f:4e:94:b6:91:72:
         bb:20:c9:1d:a3:8a:b1:74:0f:31:43:8f:46:51:2a:2f:28:50:
         b4:17:90:0a:c3:ec:c2:e9:dd:23:d5:03:2e:fb:de:22:3d:89:
         80:9d:77:cc
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUDNMmw5jxFsVb3zrCCG8UUlzKJP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRBMDQwMDdDMTg5MzRFRUZENzc5NDQ1QkE1MzQ5QThG
QkRCMTlERjAeFw0yNjA3MjYyMDMyMzRaFw0yNjA3MjcyMzI2MzRaMDMxMTAvBgNV
BAMTKDA2QTU3RThBQzY1MzdBRENFMzk2Q0E1OUI4OTZBOTIzMUQ3NkExMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1bhPvjHgO3zDFmywSPmmlcLsr
EIk/LGfjEOSHomz5+PT3L1oygk/O92zF27N1b+0q15SfNLQJD55C1/AOO3GDN9d6
HIt9sShOSF94gW2kYMoqd5R0nEz0+xlsggIvU1scOAB1z/HIglycgph/1hdISXUB
QilP9wVqKMiAhpNqp+TCx9/JYJh9DhlEnqSLdCEp0ERT23XmLUQUDSOZrJadENuq
gC+y3Tb6nN6rj0l8kKwZN6iyqxFTveSP2RpYyD0O/f75pKwAjHlGYlqhAS77Ux2n
CjeVlWdyDZFwqqevaPhZ9kd0vMiNaE1kihzI6sd5lnaAL2TgwEAiMu/AT5tHAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUBqV+isZTetzjlspZuJapIx12oR0wHwYDVR0j
BBgwFoAUlKBAB8GJNO79d5RFulNJqPvbGd8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcwMDQwMDIwNTAzNzU3MC8wLzk0QTA0MDA3QzE4OTM0RUVGRDc3OTQ0NUJBNTM0
OUE4RkJEQjE5REYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTRBMDQwMDdDMTg5MzRFRUZENzc5NDQ1QkE1MzQ5QThGQkRCMTlERi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTY3MDA0MDAyMDUwMzc1NzAvMC85NEEwNDAwN0MxODkz
NEVFRkQ3Nzk0NDVCQTUzNDlBOEZCREIxOURGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelwKmEbMXED3
kRBdaUXjZErUwgX2Bl8ZIc+zp4eyUr7aQvoefHejZyVaASH0gL2MBpfvmgVWyg4i
eaE5+6/8o/j2QPvjEmRd02lLDBFHU9u7lblGtInoRAffzfSqZdfgXCl+Oc7M17nl
U9XMdMsn8aHCia06oBJWFsMcXwFDqN8va6y/3Du7SGnsoTntV6k5BI8VdWBkErCE
bOzLVxvFvFE/gPahxu6OGg1z4uM8SosD542hM52RVMBxV6THMluSM3/vMSHU3jks
Pjql+8nPn1yxD06UtpFyuyDJHaOKsXQPMUOPRlEqLyhQtBeQCsPswundI9UDLvve
Ij2JgJ13zA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:55 2026 by rpki-client