Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
File:                     4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft (raw, json)
Hash identifier:          N7Szs33Oa0tN6GgBEZ2KLbR7ZLAyVlpA9xJs9FTNKmI=
Subject key identifier:   2F:CA:97:B0:F4:2F:92:F7:46:E3:52:B9:24:27:6E:BA:FA:AE:AA:2A
Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
Certificate issuer:       /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Certificate serial:       12EF719FACF8540111056EAE88562568066FDC78
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
Manifest number:          93
Signing time:             Fri 28 Aug 2026 06:47:40 +0000
Manifest this update:     Fri 28 Aug 2026 06:42:40 +0000
Manifest next update:     Mon 31 Aug 2026 17:43:40 +0000
Files and hashes:         1: 3230332e3139322e312e302f32342d3234203d3e2034363131.roa (hash: 0KdLEVUiybk5V4n+f+0dKRmU6UVh7v523bGbqNGXd8I=)
                          2: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl (hash: RwURgSuYB2Jzt7sha+004wwaQCTZp+f2CZj36s8feUw=)
                          3: 3130332e36362e33332e302f32342d3234203d3e2034363131.roa (hash: n5yRgo6J2D5FtGrXkvOOKqNrGph1QpbzvpT/k6W4Gyg=)
                          4: 3230332e3139322e342e302f32342d3234203d3e2034363131.roa (hash: 17kgFGc3cSe7uHyaAKqp7oAC5dXyj9elPuMYbCDiwxE=)
                          5: 3230332e3139322e322e302f32342d3234203d3e2034363131.roa (hash: 5kRdUKU+ZXXchqJyoqf+wUpdIG1fnufxQH0iQlauhG0=)
                          6: 323430323a616663303a3a2f33322d3332203d3e2034363131.roa (hash: f3GHixVb1HwjhyVU8K4swaXzIGI0Hioddav5kM0XXUw=)
                          7: 3230332e3139322e31302e302f32342d3234203d3e2034363131.roa (hash: B5g+2JRh5TgR/UTOSPrdbR+qCyH6GJDVipqqxDIoaCk=)
                          8: 3130332e36362e33322e302f32342d3234203d3e2034363131.roa (hash: pGPnNL8I17M9sBQn6scU0wF53hsmAZju26aVp9ckSkQ=)
                          9: 3130332e36362e33342e302f32342d3234203d3e2034363131.roa (hash: tjZDTuEgQlRXpFbbaG0NArZJgDuaiVOSE05Z7p9qiAI=)
                          10: 3130332e3232382e3133382e302f32342d3234203d3e2034363131.roa (hash: yTCamlVpkLTaQtiao0McbVEofmqZPgYyOVfZcUXNIMg=)
                          11: 3230322e3132332e3130372e302f32342d3234203d3e2034363131.roa (hash: 3tbE64n/dii7GNRtLZg5K6aHAbP1egLJB2VvyhZEfFU=)
                          12: 3130332e3232382e3133392e302f32342d3234203d3e2034363131.roa (hash: QdeAkUPnqLpZiSPqBIxzU0fpw+Eqvq8f9jvgOeoo9mg=)
                          13: 3130332e3232382e3133372e302f32342d3234203d3e2034363131.roa (hash: QQ4ATBeNE3ml6YUNfv/6tpe2Kv/BmFijIHp4Rv9IGTo=)
                          14: 3130332e3232382e3133362e302f32342d3234203d3e2034363131.roa (hash: gi5/C7Ig+PLVimVU9eNIn1aKpNA5wgBO2EvkhiKLFtQ=)
                          15: 3130332e36362e33352e302f32342d3234203d3e2034363131.roa (hash: gY+qMgWgJvHs6SDZmlGFp+AAc3uGBrjBkD6f9uzt130=)
                          16: 3230332e3139322e372e302f32342d3234203d3e2034363131.roa (hash: SDHyN9XXrw0odzkF0QeNY9cKYZ9QdH1ieH7qxu1iHl8=)
                          17: 3230332e3139322e392e302f32342d3234203d3e2034363131.roa (hash: Uy+BapU0I48WC0bWQ2ZydXi48JznYrjW62PXNe53HUM=)
                          18: 3230332e3139322e382e302f32342d3234203d3e2034363131.roa (hash: ExwddNKPU24UIMMf46gIGo0/55R/RolIT8ID+4HvTfo=)
                          19: 3230322e3132332e3131302e302f32342d3234203d3e2034363131.roa (hash: 155iifkZEs6RHAaqhrEQCAQN53twEduDtnNVPAqFrTI=)
                          20: 3230332e3139322e362e302f32342d3234203d3e2034363131.roa (hash: CRUJkzzmVRsaFDZOKPvn/CRKcvAx+oeYntLvx9WwCyk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 15:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ef:71:9f:ac:f8:54:01:11:05:6e:ae:88:56:25:68:06:6f:dc:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
        Validity
            Not Before: Aug 28 06:42:40 2026 GMT
            Not After : Aug 31 17:43:40 2026 GMT
        Subject: CN=2FCA97B0F42F92F746E352B924276EBAFAAEAA2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:17:51:16:09:5d:92:43:69:cd:78:8a:f9:9c:
                    f7:89:45:50:f1:08:22:2a:7c:49:0a:fd:87:b8:90:
                    51:5a:80:6c:61:05:f2:68:11:e0:af:72:f6:25:af:
                    06:1f:bb:b4:3b:6d:f6:2e:b8:22:61:aa:df:49:b1:
                    29:64:ab:34:8f:11:7a:9b:5f:06:e3:74:17:3a:f0:
                    f9:e0:36:1f:47:71:40:4a:34:84:8b:67:1f:02:73:
                    d2:53:3a:ac:b2:0d:9a:4c:bc:84:ce:ed:1b:cd:15:
                    1c:94:5b:69:9e:ae:01:6a:fe:78:43:76:a9:8c:bb:
                    9f:19:53:68:2a:9d:7b:2f:9e:d5:25:e4:57:bf:22:
                    44:a3:a0:e4:03:a2:41:61:08:59:12:81:c8:4a:57:
                    79:04:32:4a:d6:8a:a8:0f:a4:65:6d:9e:56:68:88:
                    53:22:bb:f2:14:5e:05:91:0a:84:56:43:27:c0:da:
                    e2:7d:ec:da:27:24:e4:09:d5:ba:59:b8:76:a3:3c:
                    5a:2a:48:b3:bb:ee:e1:eb:7d:bf:45:9b:47:fe:50:
                    a3:2a:e7:0c:95:6f:5e:9d:70:ea:e2:1e:dd:3b:16:
                    63:51:90:a8:d2:f5:d5:b7:64:65:46:37:8d:31:b7:
                    eb:78:31:24:20:86:31:91:87:e0:42:4b:db:1a:50:
                    08:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CA:97:B0:F4:2F:92:F7:46:E3:52:B9:24:27:6E:BA:FA:AE:AA:2A
            X509v3 Authority Key Identifier:
                keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:6c:1f:d3:06:fa:50:eb:59:22:ef:06:d2:ab:de:b9:9b:d5:
         18:f2:a2:81:ed:0a:2e:b7:ad:cf:6f:b0:12:83:2f:0a:09:aa:
         58:72:b6:1e:c2:5c:e5:e6:f9:4d:de:b1:83:1c:26:ba:75:23:
         18:9d:df:6f:ec:61:84:95:69:a2:39:a5:02:37:37:81:5b:a6:
         09:44:00:59:9e:6d:a7:32:e5:f0:b4:71:f5:29:ee:75:3b:f1:
         32:ee:64:1a:fa:52:cf:79:11:68:5d:56:50:6e:7e:05:a2:d3:
         73:52:5d:d9:6e:d6:29:b8:5e:5e:81:14:0d:ea:97:f1:d8:3f:
         c4:9d:e8:16:cd:3a:9a:3e:e2:ae:5c:67:cb:0f:53:0c:b1:27:
         55:df:58:46:c1:3b:4e:9c:3d:33:94:78:bd:b7:7f:15:0a:d2:
         76:c1:69:82:56:91:75:08:16:2c:26:01:1a:67:3b:fb:6d:ab:
         8f:a6:23:a8:3d:86:37:de:d0:bf:01:e6:d2:b3:9d:87:48:e0:
         c8:de:13:d3:fd:54:41:97:cc:11:5c:62:a0:bb:84:99:4d:b7:
         3c:8d:3f:5a:23:b1:30:7f:6f:de:5d:6c:09:a9:ab:7f:ca:56:
         9a:36:79:39:6e:f8:19:cc:9d:65:b8:47:bb:82:c8:9b:26:88:
         fd:70:6e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:06:08 2026 by rpki-client