Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
File:                     95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft (raw, json)
Hash identifier:          GDSS0V9i/FKs1Sbkpi7CackABqSlX3Eu/P/RabR9TdE=
Subject key identifier:   A1:D6:19:8F:62:66:BA:6F:7A:9F:7F:14:02:F0:DE:AB:A9:CD:9D:6E
Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
Certificate issuer:       /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Certificate serial:       6AF9C1C4998A63A3877435583849C9E1A9E999A1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
Manifest number:          8B
Signing time:             Fri 28 Aug 2026 06:47:53 +0000
Manifest this update:     Fri 28 Aug 2026 06:42:53 +0000
Manifest next update:     Mon 31 Aug 2026 13:34:53 +0000
Files and hashes:         1: 323430313a343538303a3a2f33322d3332203d3e203539303136.roa (hash: 4SF8Pp3L2TEVYRT22za3SayHJbSFtZ5mUY5kMm8lMLE=)
                          2: 323430313a343438303a3a2f33322d3332203d3e203539303136.roa (hash: tijXdtP2aEYodGJFVcP655ov9AvFTQq/eg3860Iq/s8=)
                          3: 323430313a343238303a3a2f33322d3332203d3e203539303136.roa (hash: wvGE2b5TSnKIY0jATltop2J3jnvexdzdvqHvS8nfqoc=)
                          4: 323430313a333838303a3a2f33322d3332203d3e203539303136.roa (hash: nIUpPle9V8mZQDvkQEuy67ZE77I4TcZ0g8BdblFs/40=)
                          5: 323430313a343638303a3a2f33322d3332203d3e203539303136.roa (hash: v55q9HAun0RdcyFLU8631U5FHjTmdXNRLzVCguNt9C8=)
                          6: 323430313a336538303a3a2f33322d3332203d3e203539303136.roa (hash: 10u8/tQ0bj2m7WAt3d3KZeYYZx3ooQ6ech4KzfSDNOQ=)
                          7: 323430313a333938303a3a2f33322d3332203d3e203539303136.roa (hash: bTUMqZDoaHrSxBkNQJ8uuKsEF6Z9jgMuGDUhgCcaTtc=)
                          8: 3130332e3233372e3139322e302f31392d3234203d3e203539303136.roa (hash: GyFDLjhmzslpLAkxLQMKXf73yrWrvHv9QN2FG7CWGMg=)
                          9: 323430313a336238303a3a2f33322d3332203d3e203539303136.roa (hash: BoT0BkuMQMjkrkhKJtwZepcOx6+TP+AJ/fdiDyAwVI0=)
                          10: 323430313a336438303a3a2f33322d3332203d3e203539303136.roa (hash: DbLTFeOIezLKCvvhDSZf0uP4appQbtTjeFlkdxoCVo4=)
                          11: 323430313a343738303a3a2f33322d3332203d3e203539303136.roa (hash: Iyb1KGBqBHdVxysl3Ic3fe6dw60fKYWZn5LRMnbYIEg=)
                          12: 95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl (hash: WNR/a887X52ZRgJBEl5ChIl0AuiUOtuhMlJnWuJEEnA=)
                          13: 323430313a346138303a3a2f33322d3332203d3e203539303136.roa (hash: TA9sNJg7is21RvuqNvlhYmi7s0BOFgm0l6CxlSd3k3E=)
                          14: 3130332e3233372e3137362e302f32302d3234203d3e203539303136.roa (hash: F6kjKUL9Cuh7q/O+3aOPpPcOXiPPLNq3m8dj5BQeoJw=)
                          15: 3130332e3233372e3232342e302f32302d3234203d3e203539303136.roa (hash: 6b/8l+Uh6nKe1lChpPD2qoAHroOaap5ZOEDgUWycvko=)
                          16: 323430313a336138303a3a2f33322d3332203d3e203539303136.roa (hash: u0/hBW5D7s2jYfYBv53rUbNvjfHmSGPr9Qius6arWjQ=)
                          17: 323430313a343138303a3a2f33322d3332203d3e203539303136.roa (hash: OSFQ0l/OO8+SL8jJPJmY4WFRjU1QPttWYeUk5dMi/6I=)
                          18: 323430313a336338303a3a2f33322d3332203d3e203539303136.roa (hash: bilHjyNG8k1Ew4Jg5iP3JCfreUTY5fsiIjRCV50N4d4=)
                          19: 323430313a343338303a3a2f33322d3332203d3e203539303136.roa (hash: vu/T9HfTgNGQsuDixmS4B1wmKEiY+xqCh70hJ2TmJE4=)
                          20: 323430313a336638303a3a2f33322d3332203d3e203539303136.roa (hash: ucjz/dlhV3ok/6hDmWxU2mJ+pwi0UxkJY3B5u/KGHYU=)
                          21: 3130332e3233372e3234302e302f32312d3234203d3e203539303136.roa (hash: dVO/5l2P8SLtHbMGokjm4j5F0UAo9VepYQjfk/K44Lk=)
                          22: 323430313a343038303a3a2f33322d3332203d3e203539303136.roa (hash: iDdse9Ls6yfGVdjhkQRk57LbL20OKYaIkbT6DLWWFss=)
                          23: 323430313a343838303a3a2f33322d3332203d3e203539303136.roa (hash: L3uEhrRZb8f4yuEifKGAUDh5wDZ3Fi8QViYq2N6q/6w=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 13:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f9:c1:c4:99:8a:63:a3:87:74:35:58:38:49:c9:e1:a9:e9:99:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
        Validity
            Not Before: Aug 28 06:42:53 2026 GMT
            Not After : Aug 31 13:34:53 2026 GMT
        Subject: CN=A1D6198F6266BA6F7A9F7F1402F0DEABA9CD9D6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:aa:2d:34:98:02:7b:ba:2a:43:21:51:66:e6:
                    ce:92:79:b1:e0:e6:95:6b:13:6d:78:4d:7d:81:9c:
                    02:5d:86:6c:74:4f:09:f4:0c:1f:ad:f5:54:82:a5:
                    f2:69:d9:c1:e1:7f:1a:56:e1:5b:60:ad:cf:bf:ff:
                    01:ea:c2:5b:08:97:f0:e3:b0:3a:72:bc:74:8e:cb:
                    45:e7:d8:92:4f:92:58:ae:77:98:7f:24:6c:db:0c:
                    4f:4a:02:dc:cf:0c:68:43:90:ae:8a:5f:a6:d3:c4:
                    db:28:ba:9e:cb:82:86:51:99:14:bb:57:83:8e:9c:
                    42:a5:5a:2d:b7:dd:c6:0d:93:9c:85:8f:16:90:07:
                    dc:c0:48:2d:0c:e8:ff:1f:e9:2f:5b:b5:47:53:97:
                    a7:50:dc:8e:33:41:81:57:10:5f:5d:d6:ba:d5:5f:
                    e0:4b:ec:66:21:c9:a7:31:c8:ab:a8:7e:35:51:6b:
                    b4:66:73:cb:6e:4c:59:22:a1:3f:1d:75:2c:3d:9c:
                    91:a7:51:59:91:fd:43:ec:8f:e3:fb:62:75:22:95:
                    09:9c:4d:8b:52:a0:ae:de:f2:2a:b2:7a:cb:40:b1:
                    86:52:d8:d5:0f:5c:8f:fa:e1:47:b7:e9:f7:95:46:
                    fd:21:7e:00:e7:c3:16:d8:e8:89:c2:dd:8c:50:66:
                    7c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D6:19:8F:62:66:BA:6F:7A:9F:7F:14:02:F0:DE:AB:A9:CD:9D:6E
            X509v3 Authority Key Identifier:
                keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:8a:ae:73:1e:33:65:73:ff:49:fc:81:47:dd:d9:11:9d:01:
         9c:e8:30:2e:37:e8:78:76:bc:6b:c2:9b:92:9e:1e:34:d6:e6:
         25:2f:8e:84:3d:40:84:78:00:55:17:4c:b4:23:c2:32:a4:51:
         c7:95:be:37:43:a8:c6:2b:29:8b:b3:7b:93:0c:5d:f9:03:91:
         05:64:f0:4e:f0:bc:93:dc:5b:06:75:dd:18:d8:8c:80:94:3f:
         32:a1:b2:36:81:62:0b:07:77:e7:ca:d7:31:dc:bf:76:cc:68:
         4d:77:b8:4f:a7:6a:67:02:48:22:b8:93:c5:70:96:ce:4a:82:
         a8:24:e1:91:90:71:13:0b:c5:1d:ba:01:84:4a:6b:a8:b9:bb:
         46:70:fa:90:27:83:ce:95:d9:4d:57:26:20:6f:6b:14:cc:f1:
         76:25:5b:28:95:a7:3c:3b:70:ca:b2:9c:62:96:fc:9e:fd:98:
         ba:af:4b:50:82:d4:e5:16:7d:99:6b:54:26:f7:cf:61:ec:1a:
         12:fa:a9:01:16:0d:b1:b8:ab:f7:7f:84:2a:44:37:c9:80:17:
         50:65:9a:8d:91:eb:52:b8:0e:f5:b1:3d:5a:c4:4c:3f:ac:01:
         40:c6:aa:34:86:06:45:18:56:57:c0:6e:0a:9f:c1:3c:c2:fe:
         3d:a5:d7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:39:45 2026 by rpki-client