Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
File:                     9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft (raw, json)
Hash identifier:          bgaliiA/sgYBCegJSjr5tfpIxHktFH6NJnGr76tgiGc=
Subject key identifier:   8A:77:CF:ED:88:71:1E:D7:CB:F4:13:63:7E:8A:7E:48:76:23:05:5A
Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
Certificate issuer:       /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Certificate serial:       17A9D308660A2FE39B25FF981F46B5F0D27934B2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
Manifest number:          5F
Signing time:             Tue 14 Jul 2026 06:05:35 +0000
Manifest this update:     Tue 14 Jul 2026 06:00:35 +0000
Manifest next update:     Wed 15 Jul 2026 08:07:35 +0000
Files and hashes:         1: 3132302e3133312e31362e302f32342d3234203d3e20313339303939.roa (hash: BMtu6B3U38eAWu5YqoZqyKgTEf3PbC5gRaMCWmOmm+I=)
                          2: 3132302e3133312e32352e302f32342d3234203d3e20313339303939.roa (hash: jaUN8w1uCkO8pF2L476a3dLINbH+eUPrcR66NG/n09Q=)
                          3: 3132302e3133312e32362e302f32332d3233203d3e20313339303939.roa (hash: qeabMb+wsuy1HRs/tstZGEc3Gh+XVRmfsuQ0R4nRKAY=)
                          4: 3132302e3133312e32382e302f32322d3232203d3e20313339303939.roa (hash: oiYdWekPPS1HIVqjarl2S5jGeG4FDDjseRNxYSyQzFo=)
                          5: 3132302e3133312e31392e302f32342d3234203d3e20313339303939.roa (hash: gFKYwJKOqZKKQPpUOYFHwiPbsrAs7XTTjNMgNcv1148=)
                          6: 3132302e3133312e32362e302f32342d3234203d3e20313339303939.roa (hash: wH8z8CKW7uEoQPjfHSlwgXnhsDPuyQf70qPeV9PeGM4=)
                          7: 3132302e3133312e31382e302f32342d3234203d3e20313339303939.roa (hash: ZhL9/4i3ODs6aX7o53WQ/DaiGBL27xevMOs/uL/pP1A=)
                          8: 3132302e3133312e31372e302f32342d3234203d3e20313339303939.roa (hash: 4QEq/wQbMNRaZiuEyXcy3QgjgWFP25IY4Kh7zxl1iQE=)
                          9: 3132302e3133312e31382e302f32332d3233203d3e20313339303939.roa (hash: pYS0lTYyVDBux3Ph4diRJtOMRVLU2UsuZ+UtPge0LOc=)
                          10: 323430393a363130303a3a2f34342d3434203d3e20313339303939.roa (hash: IJVwZvhrjlbbs9/stTqy9sPMHmBqzhhxOBT2U812mtY=)
                          11: 3132302e3133312e32382e302f32342d3234203d3e20313339303939.roa (hash: hYxxYoIZP3J/iYtdqCMEcZXtw+8pCLe3+9PRn+6kkYQ=)
                          12: 3132302e3133312e31362e302f32302d3230203d3e20313339303939.roa (hash: g9EJlxPo5Vmi9EZLAasUbxA0Zdty7zwD43BQ77affTs=)
                          13: 3132302e3133312e33302e302f32342d3234203d3e20313339303939.roa (hash: Tkspm1nyfAj09MFCGZ2HBjswbzx/Z6VReAzGEzENDuM=)
                          14: 3132302e3133312e33312e302f32342d3234203d3e20313339303939.roa (hash: zs+2Rg8d2lVyqGgR1D88RUigfUtxShIadf7BvzBvThQ=)
                          15: 3132302e3133312e32372e302f32342d3234203d3e20313339303939.roa (hash: KUFaQVC1MHjM4zq/+lDuE235IOW8JbYZFTmixvWFaqM=)
                          16: 9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl (hash: b6ypjATFHSf1gXrmqVb8iTzZjRdfemLq0CNJEQjACcg=)
                          17: 3132302e3133312e32392e302f32342d3234203d3e20313339303939.roa (hash: EtbUl0kLq9Nml7bDba/KGz/xY2wlocPgPIri+F35CCU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 08:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a9:d3:08:66:0a:2f:e3:9b:25:ff:98:1f:46:b5:f0:d2:79:34:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
        Validity
            Not Before: Jul 14 06:00:35 2026 GMT
            Not After : Jul 15 08:07:35 2026 GMT
        Subject: CN=8A77CFED88711ED7CBF413637E8A7E487623055A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:15:64:ab:96:34:4a:5d:f2:90:fc:49:ae:89:
                    23:ac:85:6b:97:0b:fe:48:a3:dd:19:ee:b1:fb:0c:
                    8c:05:e2:43:e4:8c:81:ca:8d:5a:69:71:7e:91:28:
                    fa:72:a4:d5:7e:14:dd:25:82:ae:4a:e2:28:45:b2:
                    71:29:3d:87:6c:c1:3c:a0:31:34:80:0b:71:73:31:
                    c0:6d:6f:bb:50:ed:28:c9:ff:f0:b9:c6:87:fd:49:
                    f6:6a:d6:98:0e:84:88:6a:47:b3:6d:c7:f7:99:29:
                    46:aa:d5:a0:75:dc:65:c6:9f:c1:f7:80:d5:77:6d:
                    b7:93:45:ed:ae:d7:7e:39:4d:1e:58:48:35:4a:9a:
                    ea:b0:d5:ed:3b:88:00:b6:93:72:7a:a0:fd:94:86:
                    cf:10:db:7e:07:53:f9:2a:cd:16:7a:91:59:5e:b6:
                    65:4c:8f:1f:1e:46:55:b0:06:f9:82:72:63:08:b5:
                    a5:ef:14:df:56:51:5b:c8:bb:d4:5e:60:e8:57:4d:
                    f0:2e:19:45:e4:61:20:c7:40:4c:e3:8d:c1:14:4c:
                    be:d5:e1:4c:37:2f:ca:3e:fe:d7:13:a4:21:a2:e1:
                    9e:5b:a4:18:7a:d1:28:ac:f3:76:5e:60:28:93:30:
                    09:74:66:fc:09:bf:f1:8d:0b:14:02:9e:da:bd:e6:
                    81:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:77:CF:ED:88:71:1E:D7:CB:F4:13:63:7E:8A:7E:48:76:23:05:5A
            X509v3 Authority Key Identifier:
                keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:0d:66:f1:aa:60:fe:ed:13:38:cb:c8:8a:d0:54:75:84:a5:
         eb:f7:05:e4:df:6e:06:22:c4:23:c8:09:59:a3:68:7c:b8:63:
         9b:48:9c:8e:65:b8:30:14:77:39:f2:e3:d2:3f:5f:47:38:3c:
         75:04:67:16:20:be:d4:bb:75:26:32:5f:19:9c:c3:dc:2d:5d:
         ff:7e:e1:44:21:98:f2:c1:75:7c:67:55:c7:d6:86:06:83:4f:
         f6:b2:d2:3d:7e:1a:27:4e:15:dc:6a:da:39:1b:b7:64:21:a4:
         38:9a:e3:ac:99:7f:0e:eb:6a:b1:3b:8d:2f:a2:ea:6d:a1:f1:
         b9:07:34:40:c0:d1:7b:c3:2a:47:51:3c:df:9f:c9:29:10:cf:
         bd:01:d8:e6:dc:5f:61:e6:65:1b:ea:15:6a:74:cf:36:33:34:
         b7:b6:26:57:26:e0:99:79:85:93:4f:a1:48:61:ef:f7:e0:15:
         d9:89:28:38:a8:80:a5:e6:7d:1a:4a:89:fd:86:37:04:21:5a:
         02:30:ad:3e:8d:50:cc:89:92:72:b6:ab:3f:a5:59:9e:08:0f:
         6d:28:a7:9f:9d:2f:bb:c0:43:f8:e9:65:9b:c5:f9:32:72:c9:
         ce:a4:c6:17:ba:95:f2:bf:8c:8a:28:41:1f:2f:c6:ac:77:b1:
         33:42:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:04:54 2026 by rpki-client