Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
File:                     96E9344F9168341F216708A437FB9801FEBBBBB6.mft (raw, json)
Hash identifier:          8Q4Icu1obNIc6PNs6rqSiHuQYxaSw1gs/WA5n0V5gPo=
Subject key identifier:   04:AA:D2:6F:56:AB:EE:6E:4E:CA:CF:12:F2:FA:C7:07:61:66:AE:50
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Certificate issuer:       /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial:       7670D2ADF0D8730FE3AB9D0BED57B48C5A12E866
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
Manifest number:          E1
Signing time:             Tue 27 Oct 2026 09:44:34 +0000
Manifest this update:     Tue 27 Oct 2026 09:39:34 +0000
Manifest next update:     Fri 30 Oct 2026 18:50:34 +0000
Files and hashes:         1: 34332e3234382e3131362e302f32322d3234203d3e2034383337.roa (hash: XXYsVjOzfPpzlF1hSAUJUFt6EyaTgHaSRtGNjAVONvY=)
                          2: 34332e3234382e3131362e302f32322d3234203d3e20313331343833.roa (hash: NtH4C5qyOKGfE4eGCEl2HgmXVUp6oHMUA11/6yN52ow=)
                          3: 34332e3234382e3133352e302f32342d3234203d3e20313531333032.roa (hash: poyvcx+dFWMCEbVQc6Dn/ntIWbTKGttlClAKngfq1+E=)
                          4: 34332e3234382e37362e302f32322d3234203d3e20313331343833.roa (hash: UKLAmnW4UxMRrBgW0MT4omcrnDzgslUpaFRlpWwslLI=)
                          5: 323430333a346563303a3a2f33322d313238203d3e203233363530.roa (hash: sY0rOPSe+85Hf1K1fPfcXuwKBHbyl1LSdfNn1Coa0eY=)
                          6: 34332e3234382e37362e302f32322d3234203d3e2034383337.roa (hash: QWfbk4XCQ871gQBIMFxv2zPD0xR19WvOVfQBasCfw6E=)
                          7: 34332e3234382e3130312e302f32342d3234203d3e20313531333032.roa (hash: pTxdoHYTL3E6emGvaRmXjOZ9k4V8WfvYOQrjeGFQeCw=)
                          8: 34332e3234382e3132382e302f32302d3234203d3e203233363530.roa (hash: KARxv6ejz/DxVf/yeh49QE+JXnDBUPjqfdKmZ98wmls=)
                          9: 34332e3234382e37362e302f32322d3234203d3e203536303436.roa (hash: 6vAiySraKvMpCDAOY0EZ4anWAfX4UBTDp6w/43rblH8=)
                          10: 3130332e38352e38342e302f32322d3234203d3e20313531333030.roa (hash: lHSYO0F3ssvnx5FUMfba6S1Q4iOJFR1M1E1gq7OVuHI=)
                          11: 34332e3234382e3132382e302f32302d3234203d3e2034383337.roa (hash: p/j36UhZgj1I4OTOgHOWv28ZKKwaM9MsHPW0cCr8u7M=)
                          12: 3130332e38352e38342e302f32322d3234203d3e2034383337.roa (hash: LwBElQfOZL6btoKu05EsVhwdk7CwlMh1tYL3oDERXyE=)
                          13: 34332e3234382e3133302e302f32342d3234203d3e20313531333032.roa (hash: UByMT9Hh/O3sfYXD6z6x764spWsOdsV3xcxLVvQAC/k=)
                          14: 323430333a346563303a3a2f33322d313238203d3e203536303436.roa (hash: zFUWQFa+lQikyT+CZCenb0EHKryU8UWKx6d3dEYjKCE=)
                          15: 34332e3234382e37362e302f32322d3234203d3e20313531333030.roa (hash: QlEa5gSH/Wh5fhVrLoUaArIljcV76wVr//MZRkxeMok=)
                          16: 34332e3234382e3133372e302f32342d3234203d3e20313531333032.roa (hash: SnAUOFSYu3ns2lNh8+Xxmfj0gmWAuXXcRnixKEha85k=)
                          17: 96E9344F9168341F216708A437FB9801FEBBBBB6.crl (hash: d1Fiowhu8dCCQr9Xf6UkBDNf3NEH89yVieOFgT7MXbo=)
                          18: 34332e3234382e3132382e302f32302d3234203d3e20313331343833.roa (hash: OJovoqNhjvhUTCryR/n/2jjYPyHwta6rRRccyMUeLZ8=)
                          19: 34332e3234382e39362e302f32312d3234203d3e20313531333030.roa (hash: 9lQhY1UIq3FLiptRI3EXq8KONNhqBq6tdBI9BfGvI8Y=)
                          20: 34332e3234382e3131362e302f32322d3234203d3e20313531333030.roa (hash: GCUOBWl+V+XCnXbx6rdSC8yUM/CpYntIvzJHuCjiBHg=)
                          21: 3130332e38352e38342e302f32322d3234203d3e203536303436.roa (hash: CPS8C3dlUFZkTHBbXy9+u513/OlouyaV/3BeZYhp7+k=)
                          22: 34332e3234382e39362e302f32312d3234203d3e203536303436.roa (hash: bg6zPuU8Ssz8W/nlu3pvUl1iE6RuAke/SXjsH15qWRU=)
                          23: 34332e3234382e39362e302f32312d3234203d3e203233363530.roa (hash: CZyxq4Axg27pvm6gklcp7uljOLOkMOivYM49Q+8hREg=)
                          24: 34332e3234382e3130312e302f32342d3234203d3e20313331343833.roa (hash: nxDjxnLALt/hIwHKRbfhK43Ckh4MK60QwEKg4P/wLbE=)
                          25: 323430333a346563303a3a2f33322d313238203d3e20313331343833.roa (hash: YIU2CmkLXb+BejZAyCUpflttZ3bwK24l0VWQW6oqEJY=)
                          26: 3130332e38352e38342e302f32322d3234203d3e20313331343833.roa (hash: E/J1F3R5MG7zDozz3Tj19GdCZrQLSsVqj6L5OudoYxw=)
                          27: 34332e3234382e39362e302f32312d3234203d3e2034383337.roa (hash: 3oBmRp7hQ3jAIokrCEPb4m5hzF6M4+MEZU+Jmm/7qMM=)
                          28: 323430333a346563303a3a2f33322d313238203d3e2034383337.roa (hash: 2oOC4IREjOvTvxPuiyC1tXBVBVkt+KsdaPeWwbtwVq0=)
                          29: 34332e3234382e3133322e302f32342d3234203d3e20313531333032.roa (hash: Z11St3BiD+t7jH1l4MU7O9YJPkxobzgPSQcFOiY3fNg=)
                          30: 34332e3234382e37362e302f32322d3234203d3e203233363530.roa (hash: dE5KBuEdxaP+cmPlwFFz9k3bcWMMkmCAjonkfCkklX0=)
                          31: 323430333a346563303a3a2f33322d313238203d3e20313531333030.roa (hash: iRw2UFtaa/yuLpD/0N/uAzewEYnOeV1zI1MMbaXH7ao=)
                          32: 34332e3234382e3131362e302f32322d3234203d3e203233363530.roa (hash: vglH3M0xcxEvSH+h9DlHFW87vk0hGteBC86CggpyUHU=)
                          33: 34332e3234382e3133392e302f32342d3234203d3e20313531333032.roa (hash: AK+K+0XIaKSyfH3tOaCzhbJoDErfkhloUd+G63Q3Dmw=)
                          34: 34332e3234382e3133342e302f32342d3234203d3e20313531333032.roa (hash: 4XwmqFPrtk/JTpTo7xczg1VTr/y+AnAZhQ62vWMrg7Y=)
                          35: 34332e3234382e3132382e302f32302d3234203d3e20313531333030.roa (hash: AX01uCm8CDciBHnXn32mLyK7Hk19LcdY/Ab+pDwwEl0=)
                          36: 34332e3234382e3131362e302f32322d3234203d3e203536303436.roa (hash: gVicYA8wg3kSPKxeAjr55EyVpnpxdbSptzxhI8LjYZc=)
                          37: 34332e3234382e3133362e302f32342d3234203d3e20313531333032.roa (hash: fo88I1wyKTXOJ8h2nzTlUGDcNSPTy4qwAJ9/bjYje0I=)
                          38: 34332e3234382e39362e302f32312d3234203d3e20313331343833.roa (hash: Cbx2xtO5R9KLAIBkUga5T+Cl/X2FlkGWwG7xPUozF9M=)
                          39: 3130332e38352e38342e302f32322d3234203d3e203233363530.roa (hash: 6zRZofU/EXd1Ir3F0v4JnVrefxN0vGbXM25qC+brQ8I=)
                          40: 34332e3234382e3132382e302f32302d3234203d3e203536303436.roa (hash: YOf0bSr4MFI4TJxOtY7hHe+xbX/Xx+j1JZ2QddjM7ts=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 11:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:70:d2:ad:f0:d8:73:0f:e3:ab:9d:0b:ed:57:b4:8c:5a:12:e8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
        Validity
            Not Before: Oct 27 09:39:34 2026 GMT
            Not After : Oct 30 18:50:34 2026 GMT
        Subject: CN=04AAD26F56ABEE6E4ECACF12F2FAC7076166AE50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:80:08:0f:c2:57:de:f1:48:d8:2d:b3:c8:a6:
                    5e:f7:ee:9b:5f:00:b3:45:38:a5:13:25:a6:f6:a8:
                    61:5e:4a:a6:20:82:b7:e7:95:04:4d:56:9a:b2:2a:
                    d9:8c:fd:16:12:44:8b:90:e6:2f:71:d9:61:69:f1:
                    ab:24:40:f4:45:a2:74:fc:4b:c4:f1:92:d0:6d:8c:
                    ae:d0:73:d7:c0:a7:f8:19:81:ab:87:70:a2:cc:63:
                    1c:1d:0c:52:c5:43:93:9d:b8:19:dc:58:48:10:7a:
                    58:30:66:55:d4:87:e8:25:33:5d:0c:75:c7:f5:f8:
                    7c:c4:eb:a9:63:f9:f2:c0:87:c9:a5:ae:07:b7:12:
                    e2:06:13:f5:e6:7b:96:a6:fb:5d:9b:b2:bf:12:31:
                    5a:49:15:72:1b:5e:99:58:40:3d:a0:75:d9:53:b3:
                    79:d4:50:f9:48:67:7a:fc:18:80:8a:ab:56:05:92:
                    e0:8d:76:35:1f:51:fd:ea:a1:21:b1:e9:44:f1:0d:
                    f6:42:11:68:a6:8a:19:d4:62:e6:7e:c0:9c:a4:f7:
                    97:c5:87:e8:9e:46:04:76:0b:6a:15:78:1a:d9:bf:
                    ed:37:44:6e:00:f7:ad:e2:be:6c:da:f6:22:bd:4c:
                    17:d1:72:9e:c3:f2:b2:74:7f:f0:a0:8f:42:e2:9e:
                    ad:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AA:D2:6F:56:AB:EE:6E:4E:CA:CF:12:F2:FA:C7:07:61:66:AE:50
            X509v3 Authority Key Identifier:
                keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:52:14:c0:6c:98:83:c3:c2:32:11:ea:7a:1f:e4:a9:dc:fa:
         9f:5f:54:f0:6f:23:f3:ae:0e:76:55:6c:81:98:10:bb:e3:cd:
         d5:34:9a:2a:53:93:66:74:2e:e6:76:f5:81:9e:60:57:64:c5:
         4f:23:31:0a:4f:d8:69:d6:f0:b3:55:61:43:95:60:61:3a:c0:
         31:6a:88:63:7b:c3:b7:8b:c1:76:5b:f2:b2:96:d7:be:b9:c1:
         35:86:ec:e3:e7:11:32:99:ec:7b:05:f5:33:c0:b8:b7:8c:2c:
         96:4f:48:57:47:5f:1c:7c:93:10:d4:a4:61:c4:a6:88:e1:22:
         14:75:b0:38:b1:19:57:70:c8:e7:94:fd:8a:06:da:32:27:38:
         0b:9f:6e:64:b6:84:8f:5f:79:29:67:1d:ef:ea:a4:19:cc:25:
         1b:e9:72:60:64:74:59:79:35:75:a5:2c:7a:5e:ed:94:8b:98:
         26:bc:07:90:af:4b:97:a9:e3:31:e7:d7:12:f6:63:be:90:68:
         b7:6f:c8:0c:6c:07:ae:5a:27:16:fb:38:32:69:68:04:4a:c0:
         07:87:13:1f:6f:d1:8b:7c:9a:5f:68:c8:c2:5b:3f:c4:d1:0e:
         64:17:b1:73:d5:4a:8b:ec:82:43:b3:94:59:ee:17:a8:1f:05:
         e6:eb:3f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:08:07 2026 by rpki-client