Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
File:                     96E9344F9168341F216708A437FB9801FEBBBBB6.mft (raw, json)
Hash identifier:          5JbpqayjeBxlS8pm1fIc9lI2C7epwERwQD6ySgDN95A=
Subject key identifier:   0E:0F:12:48:18:71:FA:D2:07:BF:CE:A9:69:52:0A:F1:A6:B6:8C:66
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Certificate issuer:       /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial:       72D4792761362CBB8E26604635A119578D645B1B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
Manifest number:          0F
Signing time:             Tue 21 Apr 2026 19:25:22 +0000
Manifest this update:     Tue 21 Apr 2026 19:20:22 +0000
Manifest next update:     Wed 22 Apr 2026 22:30:22 +0000
Files and hashes:         1: 34332e3234382e3131362e302f32322d3234203d3e203233363530.roa (hash: vglH3M0xcxEvSH+h9DlHFW87vk0hGteBC86CggpyUHU=)
                          2: 34332e3234382e39362e302f32312d3234203d3e20313331343833.roa (hash: Cbx2xtO5R9KLAIBkUga5T+Cl/X2FlkGWwG7xPUozF9M=)
                          3: 323430333a346563303a3a2f33322d313238203d3e20313533393131.roa (hash: +vAKNesRJpkeK2fmkHIfQhTubjoGkEWxAQJbsVi8ILY=)
                          4: 96E9344F9168341F216708A437FB9801FEBBBBB6.crl (hash: Ilbkdkd27AoA/lHDxkormcCZOSApMyoC8egTiYLuLvE=)
                          5: 34332e3234382e3132382e302f32302d3234203d3e20313331343833.roa (hash: OJovoqNhjvhUTCryR/n/2jjYPyHwta6rRRccyMUeLZ8=)
                          6: 323430333a346563303a3a2f33322d313238203d3e20313331343833.roa (hash: YIU2CmkLXb+BejZAyCUpflttZ3bwK24l0VWQW6oqEJY=)
                          7: 34332e3234382e37362e302f32322d3234203d3e203233363530.roa (hash: dE5KBuEdxaP+cmPlwFFz9k3bcWMMkmCAjonkfCkklX0=)
                          8: 34332e3234382e39362e302f32312d3234203d3e2034383337.roa (hash: 3oBmRp7hQ3jAIokrCEPb4m5hzF6M4+MEZU+Jmm/7qMM=)
                          9: 34332e3234382e37362e302f32322d3234203d3e20313331343833.roa (hash: UKLAmnW4UxMRrBgW0MT4omcrnDzgslUpaFRlpWwslLI=)
                          10: 34332e3234382e3131362e302f32322d3234203d3e20313533393131.roa (hash: mI2r7zoGl3B06ATUJWbVG4P4Kp/guwKwSUfh90y6bTw=)
                          11: 323430333a346563303a3a2f33322d313238203d3e2034383337.roa (hash: 2oOC4IREjOvTvxPuiyC1tXBVBVkt+KsdaPeWwbtwVq0=)
                          12: 34332e3234382e3131362e302f32322d3234203d3e2034383337.roa (hash: XXYsVjOzfPpzlF1hSAUJUFt6EyaTgHaSRtGNjAVONvY=)
                          13: 34332e3234382e37362e302f32322d3234203d3e2034383337.roa (hash: QWfbk4XCQ871gQBIMFxv2zPD0xR19WvOVfQBasCfw6E=)
                          14: 34332e3234382e39362e302f32312d3234203d3e203233363530.roa (hash: CZyxq4Axg27pvm6gklcp7uljOLOkMOivYM49Q+8hREg=)
                          15: 3130332e38352e38342e302f32322d3234203d3e203233363530.roa (hash: 6zRZofU/EXd1Ir3F0v4JnVrefxN0vGbXM25qC+brQ8I=)
                          16: 34332e3234382e3132382e302f32302d3234203d3e20313533393131.roa (hash: 5e69bDbyPENByL7zpUwjJ8X/3etroZMgBaplGmRUI/Y=)
                          17: 34332e3234382e3131362e302f32322d3234203d3e203536303436.roa (hash: gVicYA8wg3kSPKxeAjr55EyVpnpxdbSptzxhI8LjYZc=)
                          18: 34332e3234382e3133362e302f32342d3234203d3e20313531333032.roa (hash: fo88I1wyKTXOJ8h2nzTlUGDcNSPTy4qwAJ9/bjYje0I=)
                          19: 3130332e38352e38342e302f32322d3234203d3e20313331343833.roa (hash: E/J1F3R5MG7zDozz3Tj19GdCZrQLSsVqj6L5OudoYxw=)
                          20: 34332e3234382e37362e302f32322d3234203d3e20313533393131.roa (hash: +i7jUNHa8/+Kuz9bDzcMfl+CPgHoeQnPoVQjZJw80XA=)
                          21: 3130332e38352e38342e302f32322d3234203d3e20313533393131.roa (hash: n3fpWzbLZD3ba+vQtKPRUj72mJTpOCcRue1OOUAjygY=)
                          22: 323430333a346563303a3a2f33322d313238203d3e203536303436.roa (hash: zFUWQFa+lQikyT+CZCenb0EHKryU8UWKx6d3dEYjKCE=)
                          23: 34332e3234382e3133302e302f32342d3234203d3e20313531333032.roa (hash: UByMT9Hh/O3sfYXD6z6x764spWsOdsV3xcxLVvQAC/k=)
                          24: 34332e3234382e3130312e302f32342d3234203d3e20313531333032.roa (hash: pTxdoHYTL3E6emGvaRmXjOZ9k4V8WfvYOQrjeGFQeCw=)
                          25: 34332e3234382e3132382e302f32302d3234203d3e203233363530.roa (hash: KARxv6ejz/DxVf/yeh49QE+JXnDBUPjqfdKmZ98wmls=)
                          26: 34332e3234382e3132382e302f32302d3234203d3e203536303436.roa (hash: OnIWIXz5aXPXFdzyH2ENcA4sZCDE/160wY4iJXjRfrA=)
                          27: 34332e3234382e3131362e302f32322d3234203d3e20313331343833.roa (hash: NtH4C5qyOKGfE4eGCEl2HgmXVUp6oHMUA11/6yN52ow=)
                          28: 34332e3234382e39362e302f32312d3234203d3e203536303436.roa (hash: zxVKAQFHx7Vh+p8IAolDZmw8BrqIiGprwXg+isARhNg=)
                          29: 3130332e38352e38342e302f32322d3234203d3e2034383337.roa (hash: LwBElQfOZL6btoKu05EsVhwdk7CwlMh1tYL3oDERXyE=)
                          30: 34332e3234382e3133322e302f32342d3234203d3e20313531333032.roa (hash: Z11St3BiD+t7jH1l4MU7O9YJPkxobzgPSQcFOiY3fNg=)
                          31: 34332e3234382e37362e302f32322d3234203d3e203536303436.roa (hash: 6vAiySraKvMpCDAOY0EZ4anWAfX4UBTDp6w/43rblH8=)
                          32: 34332e3234382e3130312e302f32342d3234203d3e20313331343833.roa (hash: nxDjxnLALt/hIwHKRbfhK43Ckh4MK60QwEKg4P/wLbE=)
                          33: 3130332e38352e38342e302f32322d3234203d3e203536303436.roa (hash: CPS8C3dlUFZkTHBbXy9+u513/OlouyaV/3BeZYhp7+k=)
                          34: 34332e3234382e39362e302f32312d3234203d3e20313533393131.roa (hash: 4lZjBy4AS/x6wupeb4d35/qvjcEA95HinSt1YPmReYM=)
                          35: 34332e3234382e3133392e302f32342d3234203d3e20313531333032.roa (hash: AK+K+0XIaKSyfH3tOaCzhbJoDErfkhloUd+G63Q3Dmw=)
                          36: 34332e3234382e3132382e302f32302d3234203d3e2034383337.roa (hash: p/j36UhZgj1I4OTOgHOWv28ZKKwaM9MsHPW0cCr8u7M=)
                          37: 34332e3234382e3133352e302f32342d3234203d3e20313531333032.roa (hash: poyvcx+dFWMCEbVQc6Dn/ntIWbTKGttlClAKngfq1+E=)
                          38: 323430333a346563303a3a2f33322d313238203d3e203233363530.roa (hash: sY0rOPSe+85Hf1K1fPfcXuwKBHbyl1LSdfNn1Coa0eY=)
                          39: 34332e3234382e3133372e302f32342d3234203d3e20313531333032.roa (hash: SnAUOFSYu3ns2lNh8+Xxmfj0gmWAuXXcRnixKEha85k=)
                          40: 34332e3234382e3133342e302f32342d3234203d3e20313531333032.roa (hash: 4XwmqFPrtk/JTpTo7xczg1VTr/y+AnAZhQ62vWMrg7Y=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d4:79:27:61:36:2c:bb:8e:26:60:46:35:a1:19:57:8d:64:5b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
        Validity
            Not Before: Apr 21 19:20:22 2026 GMT
            Not After : Apr 22 22:30:22 2026 GMT
        Subject: CN=0E0F12481871FAD207BFCEA969520AF1A6B68C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:47:fe:c6:23:9e:a5:5c:76:13:33:f8:21:22:
                    04:47:c1:63:c9:b4:ce:74:05:bd:3e:75:42:0e:8e:
                    ff:16:6c:f5:56:b1:59:55:4f:5d:98:3a:cc:47:ae:
                    2e:8c:e0:e2:d4:e3:83:4c:b4:fa:72:20:b6:56:97:
                    a0:85:fa:79:e5:54:bb:8c:58:54:07:87:7b:bc:8d:
                    5c:e1:b5:8f:ac:71:67:3b:13:7e:eb:bb:a0:1f:f4:
                    9a:f4:aa:d1:ba:aa:93:ef:a7:0b:fb:bf:e4:3e:5e:
                    80:c7:b6:9e:f6:9b:81:5c:48:18:4e:de:86:33:e6:
                    ff:cf:32:fd:22:bd:42:ab:2f:87:2c:0d:0a:18:d0:
                    bb:bf:bc:54:9c:63:c9:a9:b7:55:76:5f:a2:46:1c:
                    e9:9d:18:f6:b3:64:01:0a:27:5b:56:5d:32:1a:03:
                    cb:e6:fa:14:dd:54:5d:3e:5a:70:a7:f7:99:90:b7:
                    ef:b7:c9:fa:6f:c9:eb:b8:c6:b3:0c:bc:ef:d7:30:
                    e9:79:e0:4d:2e:fe:00:8c:06:a6:69:6b:f3:e7:1a:
                    62:e8:00:72:2d:d3:d3:c9:54:8a:91:71:ff:04:5c:
                    5d:0d:81:17:93:e1:c5:89:98:10:ad:17:36:0d:73:
                    2d:9f:72:e6:a8:9f:c2:ae:cf:e2:fb:cb:76:09:0a:
                    4a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0F:12:48:18:71:FA:D2:07:BF:CE:A9:69:52:0A:F1:A6:B6:8C:66
            X509v3 Authority Key Identifier:
                keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5f:bb:22:1e:63:f8:dd:36:de:1c:a5:c0:79:b7:36:15:a7:
         90:d8:bb:dc:f7:34:ec:e0:d5:16:45:28:fb:60:32:0b:7b:ee:
         f1:5e:1e:69:40:db:9a:e3:65:4c:9d:77:6b:86:18:34:e3:13:
         69:3d:41:bc:ea:55:40:10:85:e6:d8:26:45:fe:5b:c7:27:08:
         38:c5:c2:9e:71:6c:fb:95:ed:f5:d0:9f:b0:72:7a:ac:5d:f5:
         36:73:15:aa:8f:31:04:ac:65:67:15:ff:0f:22:93:5f:33:7a:
         8d:f3:2b:e8:2e:2a:c1:7b:4d:59:83:b1:dd:8d:51:0e:94:48:
         05:f7:ab:f3:38:9b:f5:72:26:55:f0:08:82:74:a1:f0:63:12:
         17:cd:63:97:be:d9:b4:3f:34:06:b9:e4:e0:f0:4b:4a:83:24:
         b3:01:d8:c8:61:9d:9a:6f:31:18:6d:8d:6d:88:81:21:0a:c0:
         e9:87:d7:52:93:87:9a:46:cd:e3:29:93:93:3e:a6:2b:06:90:
         9d:de:5c:f8:88:dc:eb:f3:bc:7e:2f:75:db:cd:5c:80:8c:6a:
         12:46:1e:03:6d:d6:f5:f4:2d:01:4a:c6:60:16:c2:44:7b:d7:
         63:17:8b:9a:00:ea:b7:ef:72:2a:f3:47:df:68:14:e0:bc:ab:
         61:7a:4a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:07:23 2026 by rpki-client