Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
File:                     6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft (raw, json)
Hash identifier:          cKjS/3zgpTBt3znbIm0ci2z/koQaa7lw+jbiOEd80Uk=
Subject key identifier:   39:1E:0B:7D:1D:6C:23:6D:37:CE:63:74:F5:CE:76:4A:0A:A7:14:05
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       61AA22B8D960FC4720031E3BB73916ACDCA1013F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
Manifest number:          8D
Signing time:             Sun 26 Jul 2026 15:06:52 +0000
Manifest this update:     Sun 26 Jul 2026 15:01:52 +0000
Manifest next update:     Mon 27 Jul 2026 16:09:52 +0000
Files and hashes:         1: 32372e3130392e3132342e302f32322d3232203d3e2034383131.roa (hash: rYu/eBQM4h8/XihKL8IwRwGboqy1k9QH6j6PxhBjm+I=)
                          2: 3132312e34362e3234362e302f32342d3234203d3e2034383131.roa (hash: UdhPDpYX1v0Mwbch7R6+oi4dEsD74pACn2DpgqSxhjs=)
                          3: 34352e3132342e3132342e302f32322d3232203d3e2034383132.roa (hash: CXEpAmsvqUr2yoEBoF7EcLtMxD3Q11yE8kM6MZ+Yois=)
                          4: 3132312e34362e3235302e302f32342d3234203d3e2034383131.roa (hash: 3NXFOW+JxLSqSLZN+FPKsUDOS5JMhZ+sra5cXJvMIzU=)
                          5: 3132312e34362e3235322e302f32342d3234203d3e2034383131.roa (hash: cxwtN8rgMwMkJebqJNIyJvCO710JkpyekZUx7VMA6FU=)
                          6: 3132312e34362e3233352e302f32342d3234203d3e2034383131.roa (hash: mJAl+LwwvXOwdBQoGHrfrqfj6m3rDD+aqn7fMRg2QmI=)
                          7: 3132312e34362e3233392e302f32342d3234203d3e2034383131.roa (hash: caHxbqdTaK/FENayyJGGA0UrdY4LzN4IKHKwr6s7HqI=)
                          8: 3132312e34362e3233302e302f32332d3233203d3e2034383131.roa (hash: EiA+BqlbegLoPMI7F5c+3foAfHhrJkLe37gcyYaiUmY=)
                          9: 3132312e34362e3234342e302f32342d3234203d3e2034383131.roa (hash: WKUTb3+nU8Q8MVc6zgKN74/b/hNERmvdsnThxBvo2+0=)
                          10: 3132312e34362e3235312e302f32342d3234203d3e2034383131.roa (hash: wRj2VcGqF83HOgkXpso91G8BmGLTATNaFM8r75p6m9c=)
                          11: 3130332e3139322e3235322e302f32322d3232203d3e2034383132.roa (hash: zY7BeZ54qOlA5fmxZp3uwnE81EWFDJk9pWozMKFYWaI=)
                          12: 3132312e34362e3232342e302f32322d3232203d3e2034383132.roa (hash: yKAHVIn3NJVUHJeWRyBNQvW/+Ho4lCgMnLH+ppAs5Js=)
                          13: 3132312e34362e3234392e302f32342d3234203d3e2034383131.roa (hash: cmvIW4sXtGEpVBV8idr95fS3oeQBOCkjgxn412lwIng=)
                          14: 3132312e34362e3233322e302f32332d3233203d3e2034383131.roa (hash: ya78O7sAuJyhGsU6/IknufRy2nAzwBu9UN31pB+KKU4=)
                          15: 3132312e34362e3234372e302f32342d3234203d3e2034383131.roa (hash: /+nt7+UOHmSZFs074ayJyo2pAYIiFXSopSVIKfFhb/s=)
                          16: 3132312e34362e3235332e302f32342d3234203d3e2034383131.roa (hash: h5S/8OMiNh1ekmL5NK6fWlNsK0E9t/53SO5cpRd3yug=)
                          17: 3132312e34362e3233382e302f32342d3234203d3e2034383131.roa (hash: lreg6XU0+Tzz4w970jTicRygNZq0vFs5IE++gRHl1AU=)
                          18: 3132312e34362e3234382e302f32342d3234203d3e2034383131.roa (hash: BY+32YYbz6Jpz8IY+jYppjE5SMjBqxs8ovr+0lLa7LY=)
                          19: 3132312e34362e3234352e302f32342d3234203d3e2034383131.roa (hash: K2+E96TOB123eDmds7ch4nsFIxsPGZkKGQ6NOjteGKo=)
                          20: 3130332e32382e3231322e302f32322d3232203d3e2034383131.roa (hash: qc620Oxlzt7dIVpTjlxhUtMjAuP4sggvYYhOIp/BQvg=)
                          21: 3132312e34362e3233342e302f32342d3234203d3e2034383131.roa (hash: rJ8PevUKkS81OG8WLF73jjwLU+IGqr6tI9ot5kVJi+Y=)
                          22: 3132312e34362e3235342e302f32342d3234203d3e2034383131.roa (hash: 3pXA4qKU3vp45gTirzMkKrU8Zk4wL0OLas0e2KqoDHA=)
                          23: 3132312e34362e3233362e302f32342d3234203d3e2034383131.roa (hash: aOL2twD5oXm+ZXFKGnkUGShNfSgPt+QKt3iWK0pV7Ro=)
                          24: 6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl (hash: kkLX//LZGQLLZb+7hUG97BmIplrtoLeawdmfYqt2jNE=)
                          25: 3132312e34362e3232382e302f32332d3233203d3e2034383131.roa (hash: TBV0rA9ZmBSUANRyc1CQcvo6lPmJXx2ohYh8pyszCa4=)
                          26: 3132312e34362e3233372e302f32342d3234203d3e2034383131.roa (hash: 5Ea7CEt1wZxAZnI6KN8ov4WmZLGvDEjxqq46jr+KFXY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 16:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:aa:22:b8:d9:60:fc:47:20:03:1e:3b:b7:39:16:ac:dc:a1:01:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: Jul 26 15:01:52 2026 GMT
            Not After : Jul 27 16:09:52 2026 GMT
        Subject: CN=391E0B7D1D6C236D37CE6374F5CE764A0AA71405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:31:ca:68:88:26:df:97:df:7e:95:9b:2b:
                    09:5f:f1:53:ce:d6:19:1a:bd:c9:a2:4b:eb:df:30:
                    fd:46:5d:f0:b2:50:07:be:62:91:4b:60:c0:6a:2c:
                    40:63:bc:a9:6b:7e:11:b4:8e:62:35:f3:0f:4c:8a:
                    c6:73:70:04:3f:44:06:7b:d2:00:59:35:48:1c:18:
                    0b:6d:de:dc:d9:e4:14:c8:2e:f3:c2:18:a0:a2:b5:
                    5d:24:ec:8e:ed:67:cf:87:e1:fc:61:bc:28:a7:99:
                    f5:e8:63:1f:3c:bb:c4:a9:41:7a:f8:e8:0e:23:1f:
                    3b:36:5f:95:3a:43:42:07:b8:d2:d7:c2:06:d7:21:
                    a5:f3:47:b9:b7:74:db:81:c8:20:70:08:c2:f3:a1:
                    07:5e:65:b1:80:66:d2:52:e5:17:4b:92:79:0f:5c:
                    72:95:74:75:01:61:b6:d3:d0:e1:b3:c2:6b:a5:1c:
                    0a:a1:14:10:97:36:83:58:2b:55:48:a6:d9:8d:ac:
                    c2:48:91:42:e3:2d:b7:36:d3:b2:ba:03:81:a7:06:
                    c0:3e:18:42:07:f1:39:6e:3e:fe:48:72:1e:51:c3:
                    ce:ca:56:7a:5b:52:c6:d3:ed:d9:a0:e8:b8:34:66:
                    d3:4a:20:fa:3e:df:48:df:c8:0b:75:21:f4:3c:e8:
                    67:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1E:0B:7D:1D:6C:23:6D:37:CE:63:74:F5:CE:76:4A:0A:A7:14:05
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c9:78:9c:9c:02:40:fa:e6:10:e8:2e:02:5d:80:a5:89:63:
         b4:82:e0:83:c3:84:f1:b2:4a:a4:b5:e4:b2:80:d7:97:c6:d7:
         38:b1:e5:a2:c0:55:2a:50:13:fe:04:69:37:ac:bf:7e:99:bf:
         55:16:05:9a:02:94:88:59:03:58:58:5f:12:7b:f3:f0:53:36:
         e4:b0:b2:c6:22:34:55:a9:2c:1a:40:dc:f3:40:56:4d:70:40:
         29:6c:d1:c2:33:81:c1:69:e2:33:7e:f7:f8:ae:ce:6d:61:a7:
         ea:89:df:42:f0:54:f7:68:9e:60:8c:59:66:ff:61:1e:c8:85:
         a2:7d:df:9f:cf:34:b9:65:75:79:13:80:d2:28:24:35:27:6d:
         84:8c:c3:eb:fe:80:9a:34:f8:a1:85:e9:5c:a0:dc:9d:ad:d9:
         8d:2b:49:bc:30:73:17:80:7b:6e:df:bc:fc:3d:aa:10:aa:36:
         9e:fa:17:75:cb:e1:34:90:e0:56:e4:67:4b:03:6b:d1:ca:b3:
         92:cd:34:fe:34:25:88:c7:57:d4:67:b4:77:4d:4c:32:7d:9f:
         81:5d:9e:12:9f:80:97:c1:83:6d:44:07:d7:6b:08:53:3a:a6:
         c3:25:2b:0e:4a:4e:d7:d6:2f:9e:ab:27:46:e1:f6:bf:91:45:
         a0:bb:d5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:52:59 2026 by rpki-client