Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
File:                     9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft (raw, json)
Hash identifier:          VGGV11r3uZ/2+tFBShHjb+vxbxc2clnoGffedvKgKBc=
Subject key identifier:   35:93:75:F1:96:6A:46:E2:20:15:85:70:7B:41:A4:6B:59:1E:D5:91
Authority key identifier: 9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A
Certificate issuer:       /CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
Certificate serial:       2940519548A30C4FB14AF7B23B7FC94E11A1804B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
Manifest number:          0F
Signing time:             Wed 24 Jun 2026 08:17:08 +0000
Manifest this update:     Wed 24 Jun 2026 08:12:08 +0000
Manifest next update:     Thu 25 Jun 2026 11:10:08 +0000
Files and hashes:         1: 323430373a373738303a3a2f33322d3332203d3e2030.roa (hash: gzEc3CXXGcQWOxotohoedVP4pF9FVlgNODLpwKx8fUc=)
                          2: 323430373a383838303a3a2f33322d3332203d3e2030.roa (hash: xQENf1adNMYSG70l6LP4CsgYjWDbEv8Mt7TMAnvJgDQ=)
                          3: 3130332e37372e32382e302f32322d3232203d3e2034383038.roa (hash: Jlx/wNWNgrDfC/9kYEd+x916pqVJYgsFM7pPmFGjYfk=)
                          4: 3130332e37362e3232342e302f32322d3232203d3e2034383437.roa (hash: /7dkC0KCXVakh473Sdc/GvCBLnVg8PslCmydwVIeiDg=)
                          5: 3130332e37362e3232322e302f32332d3233203d3e2034383038.roa (hash: hvHbFL+mk63mg9G7EHAKDLKYkUIUHd1ngpu3mdvWYho=)
                          6: 3130332e37372e32382e302f32322d3232203d3e2034383437.roa (hash: vKwURYO29V/idSwbJGJlUZZ+tWxs6as8Y7t32HvFqRM=)
                          7: 3130332e3233362e3234342e302f32322d3232203d3e2034383437.roa (hash: Y5trOlbR/plNg3QWBKYijC8voHHhxrp8lORe45SD0+M=)
                          8: 9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl (hash: Lnn3yyKAKGHaFjkcWY2M5lioQLOXlYpW6yDY0jnHazQ=)
                          9: 323430363a3838303a3a2f33322d3332203d3e2030.roa (hash: zLQafVdFQlmu+N0ToNivjL+0KsdsUwTBCbVeEqvITFw=)
                          10: 34352e3132362e3131322e302f32322d3232203d3e2034383437.roa (hash: FalWQte9mnWrzLhbGi0PVklPjT0Bn3VWP8JzYdGRCIo=)
                          11: 3130332e37362e3232302e302f32322d3232203d3e2034383038.roa (hash: qFzMYF5TRk3uV/gHYGorbe73VYUDEY4eRdheDspwrIk=)
                          12: 323430373a373838303a3a2f33322d3332203d3e2030.roa (hash: QxnPT1CIMAlqQ663ZFA8jDyFlWdXGbjN3pr40XZAsmQ=)
                          13: 3130332e37362e3232302e302f32322d3232203d3e2034383437.roa (hash: bVqfzO+arD4Um5tS69MlIDABilnX2cRx9SBb5y88I2A=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Jun 2026 09:48:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:40:51:95:48:a3:0c:4f:b1:4a:f7:b2:3b:7f:c9:4e:11:a1:80:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
        Validity
            Not Before: Jun 24 08:12:08 2026 GMT
            Not After : Jun 25 11:10:08 2026 GMT
        Subject: CN=359375F1966A46E2201585707B41A46B591ED591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:84:e7:ec:9d:06:de:2b:98:a0:db:21:9f:d3:
                    53:f6:58:89:25:a5:3b:28:90:7c:35:eb:e1:6b:37:
                    ec:7a:29:3b:e5:04:75:d1:35:64:93:8a:28:88:3d:
                    31:df:d8:5c:23:c0:cb:f2:74:32:c4:4c:7a:cb:ec:
                    32:e7:44:08:bf:1c:f2:92:b9:de:b3:fc:bc:8e:3c:
                    e3:03:96:22:73:e9:4f:56:53:a3:09:18:74:28:16:
                    54:b7:77:f5:c7:bd:18:6f:8f:3b:d6:32:07:26:cc:
                    38:c6:0e:08:38:1b:79:6f:49:03:8d:3d:ae:04:3d:
                    e6:e3:ab:e6:eb:6a:db:ce:ea:40:e8:85:bc:8c:1e:
                    3f:ce:bf:16:ba:04:b2:87:a7:3c:44:49:d6:ce:ac:
                    be:ea:f9:01:da:f0:d0:ef:ae:50:75:b7:39:13:3a:
                    53:4a:fe:dd:cc:1d:0d:af:bb:34:cd:bb:fb:d2:5c:
                    4d:0f:e4:ce:28:c0:c6:f9:dd:e3:6c:4a:72:09:4d:
                    5e:de:a5:c0:8d:49:05:93:e7:13:30:89:de:ed:25:
                    28:73:8a:ba:49:4c:63:45:81:10:fc:8b:76:16:33:
                    64:5c:b9:df:a7:cb:40:34:90:0d:c9:46:e0:a6:38:
                    b0:66:81:ba:15:6d:35:1c:f1:8b:89:4a:73:47:56:
                    52:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:93:75:F1:96:6A:46:E2:20:15:85:70:7B:41:A4:6B:59:1E:D5:91
            X509v3 Authority Key Identifier:
                keyid:9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:54:4b:98:a1:17:a7:9b:2b:5b:b8:69:a6:19:65:74:ad:77:
         e5:ed:e6:1f:95:8e:ad:72:c6:6d:0d:e7:cf:02:cd:aa:7c:b2:
         ac:6f:70:7e:23:3e:26:9c:7f:32:1e:b3:5f:96:62:bf:bc:28:
         40:2e:dd:f8:02:e0:40:9f:98:ce:84:10:ec:a1:f5:cc:a9:cb:
         8a:0d:a5:d6:39:1a:bb:e5:07:3f:45:6c:de:22:27:75:87:60:
         cd:fc:01:7d:2d:2a:29:65:aa:b2:3e:66:54:84:c5:18:cb:70:
         11:e0:ce:71:bb:d8:3b:58:f3:62:e8:0f:e6:c2:57:76:3b:de:
         ce:59:18:d4:bc:74:25:5d:40:19:9e:87:7d:98:cc:34:fb:0e:
         4b:16:2e:b3:d0:75:b0:06:ad:c9:d0:6e:85:55:f1:77:d6:34:
         1b:33:ad:29:75:80:a9:bf:f5:c4:a4:c2:d2:2c:fb:72:75:0b:
         ad:05:50:1a:a8:58:5b:0f:e8:eb:11:42:6d:76:59:6e:42:4e:
         dd:25:a4:0e:4f:9a:77:38:8a:37:34:3b:22:b6:11:93:4c:6b:
         9b:0d:6a:1d:80:56:4f:fb:a5:84:16:63:4b:e7:7a:1e:a9:fb:
         e8:40:7d:30:ba:0d:ae:6b:73:b8:8a:42:67:07:d9:67:46:b5:
         18:ea:68:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 17:06:28 2026 by rpki-client