Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
File:                     9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft (raw, json)
Hash identifier:          beXk2oadJM8+ICteir6z3WwdQW52pX7DMPY/Ld96R4c=
Subject key identifier:   DD:0C:9F:C3:E2:20:94:7F:C4:37:BA:6F:13:1F:9C:1C:85:64:77:A6
Authority key identifier: 9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A
Certificate issuer:       /CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
Certificate serial:       21130186F05DB9933CE3EE0EA9942F934C7262D3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
Manifest number:          78
Signing time:             Tue 06 Oct 2026 16:30:17 +0000
Manifest this update:     Tue 06 Oct 2026 16:25:17 +0000
Manifest next update:     Fri 09 Oct 2026 18:37:17 +0000
Files and hashes:         1: 34352e3132362e3131322e302f32322d3232203d3e2034383437.roa (hash: FalWQte9mnWrzLhbGi0PVklPjT0Bn3VWP8JzYdGRCIo=)
                          2: 323430373a373838303a3a2f33322d3332203d3e2030.roa (hash: QxnPT1CIMAlqQ663ZFA8jDyFlWdXGbjN3pr40XZAsmQ=)
                          3: 3130332e37372e32382e302f32322d3232203d3e2034383437.roa (hash: vKwURYO29V/idSwbJGJlUZZ+tWxs6as8Y7t32HvFqRM=)
                          4: 323430373a383838303a3a2f33322d3332203d3e2030.roa (hash: xQENf1adNMYSG70l6LP4CsgYjWDbEv8Mt7TMAnvJgDQ=)
                          5: 9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl (hash: GkWP8r++Km0Zvf9hcfR8r2ol67cCt0fIWP5M3iksnzo=)
                          6: 3130332e37362e3232322e302f32332d3233203d3e2034383038.roa (hash: hvHbFL+mk63mg9G7EHAKDLKYkUIUHd1ngpu3mdvWYho=)
                          7: 323430363a3838303a3a2f33322d3332203d3e2030.roa (hash: zLQafVdFQlmu+N0ToNivjL+0KsdsUwTBCbVeEqvITFw=)
                          8: 3130332e37362e3232302e302f32322d3232203d3e2034383038.roa (hash: qFzMYF5TRk3uV/gHYGorbe73VYUDEY4eRdheDspwrIk=)
                          9: 3130332e37362e3232342e302f32322d3232203d3e2034383437.roa (hash: /7dkC0KCXVakh473Sdc/GvCBLnVg8PslCmydwVIeiDg=)
                          10: 3130332e3233362e3234342e302f32322d3232203d3e2034383437.roa (hash: Y5trOlbR/plNg3QWBKYijC8voHHhxrp8lORe45SD0+M=)
                          11: 323430373a373738303a3a2f33322d3332203d3e2030.roa (hash: gzEc3CXXGcQWOxotohoedVP4pF9FVlgNODLpwKx8fUc=)
                          12: 3130332e37362e3232302e302f32322d3232203d3e2034383437.roa (hash: bVqfzO+arD4Um5tS69MlIDABilnX2cRx9SBb5y88I2A=)
                          13: 3130332e37372e32382e302f32322d3232203d3e2034383038.roa (hash: Jlx/wNWNgrDfC/9kYEd+x916pqVJYgsFM7pPmFGjYfk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 18:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:13:01:86:f0:5d:b9:93:3c:e3:ee:0e:a9:94:2f:93:4c:72:62:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
        Validity
            Not Before: Oct  6 16:25:17 2026 GMT
            Not After : Oct  9 18:37:17 2026 GMT
        Subject: CN=DD0C9FC3E220947FC437BA6F131F9C1C856477A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ca:0a:d9:ab:6f:41:61:81:9a:e7:90:92:19:
                    83:34:dc:af:b2:a2:c2:fc:1b:18:67:64:11:76:72:
                    c4:37:83:c3:3d:b6:ce:c3:5c:7b:4f:a1:89:f3:9b:
                    13:f4:2c:32:a7:eb:8a:85:ca:58:12:b5:ec:e2:0d:
                    54:4e:79:6c:5d:27:8d:af:47:e7:a2:bb:5a:90:55:
                    ce:33:a6:8c:95:4e:cf:a0:b5:43:93:0a:b7:44:8c:
                    c2:7d:ce:05:bb:44:4c:ce:f2:cd:99:45:19:8f:69:
                    e2:e5:1a:a1:c9:fc:42:43:05:b7:92:aa:fe:bb:95:
                    0a:ce:53:f4:cb:fe:29:16:a4:f3:65:ef:23:9d:92:
                    48:e7:2a:60:03:09:3a:c8:60:da:3a:e0:b5:32:fb:
                    db:c4:ad:c4:27:93:2e:c9:41:fb:91:06:bf:b1:47:
                    16:32:a6:dc:35:c6:e3:9a:ee:29:d9:2b:b8:e0:2f:
                    5d:eb:90:90:7c:35:4d:d6:c6:3e:d3:60:ff:99:84:
                    90:fd:70:5a:ba:7b:d1:c2:98:f5:74:66:96:c0:5c:
                    b0:50:77:4d:0f:89:b7:2e:bf:5a:a8:90:8c:38:e4:
                    c2:10:99:15:e4:5b:e5:e3:af:97:37:a7:78:27:9e:
                    80:c2:45:54:1e:bd:ab:c5:b9:d7:be:8d:2e:cf:3d:
                    9c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0C:9F:C3:E2:20:94:7F:C4:37:BA:6F:13:1F:9C:1C:85:64:77:A6
            X509v3 Authority Key Identifier:
                keyid:9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7c:1c:99:51:02:fe:91:e0:ff:22:c1:19:00:4d:5a:a3:ac:
         8e:d8:4e:87:27:14:66:d8:d9:12:e0:53:f2:f9:0c:3c:1f:52:
         2a:56:f5:95:0f:ac:17:01:2e:8a:20:42:99:19:e9:1d:cc:0c:
         8a:12:96:b7:0e:bd:19:64:26:84:39:f5:44:74:c1:2d:2d:1d:
         79:e7:62:c6:c6:96:0d:36:9d:9f:18:3f:98:cd:43:7b:77:62:
         5b:1c:69:73:9d:42:3a:b3:55:eb:b6:66:d5:fe:53:7c:f6:e5:
         08:79:3e:28:ce:c1:27:d4:ea:d8:95:c4:a6:10:c2:26:be:b3:
         70:f7:55:76:58:44:c1:b4:a6:f9:de:d7:74:d9:41:ee:b1:5c:
         f1:cf:c4:d6:24:bf:c5:87:b9:ac:cf:5b:2a:45:6a:a5:17:6e:
         37:07:cf:b9:d9:93:c8:75:38:b2:39:2f:ab:35:81:99:ab:27:
         53:2e:3c:61:1d:b4:b3:08:20:89:d9:06:46:20:f3:0c:05:fb:
         e4:e1:b4:c4:dd:90:42:8e:5b:14:be:2e:85:11:17:75:2d:d2:
         f2:2b:96:b4:fc:dd:61:c3:98:30:d2:11:e2:ec:c4:06:70:75:
         6d:72:76:86:a4:bb:f7:b5:02:b6:4c:65:c5:93:8e:fc:6c:36:
         2a:31:65:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:33:46 2026 by rpki-client