Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft
File:                     3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft (raw, json)
Hash identifier:          EwEWuMFk6ePE+xxPbFB0eWob/wQv3A5HBOwGO6MgLj0=
Subject key identifier:   2C:5E:7D:D2:41:B7:50:B5:6D:18:D0:35:ED:10:E0:62:4F:DF:9C:7D
Authority key identifier: 39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC
Certificate issuer:       /CN=A91209740000/serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC
Certificate serial:       05A0E3154F16455641A73AA3CD3F83DA852E03F7
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft
Manifest number:          02C6
Signing time:             Thu 13 Aug 2026 20:41:37 +0000
Manifest this update:     Thu 13 Aug 2026 20:36:37 +0000
Manifest next update:     Sat 15 Aug 2026 00:40:37 +0000
Files and hashes:         1: 3135342e382e3139322e302f32312d3231203d3e203435303930.roa (hash: AQRHueSDteG1Bv9/2Jo+YeZq8xH+W1bEyKxJbI5sr5k=)
                          2: 3135342e382e3132382e302f31372d3137203d3e203435303930.roa (hash: 0sr7kTAUJTHQOumWe9+9dVINRU4J9gIj1CAAlinJWzQ=)
                          3: 3135342e382e3230362e302f32332d3233203d3e203435303930.roa (hash: 6yP8Xt7daqxqV1ywWnbuJYw9J7LYyXPBb5jtCYKUjAk=)
                          4: 3135342e382e3133322e302f32332d3233203d3e203435303930.roa (hash: SWnENGU00Efm4Xs/Ye6ghapyUfpuVE13wlHYMdQVJEs=)
                          5: 3135342e382e3136302e302f31392d3139203d3e203435303930.roa (hash: cFXO25DbUNHgkNckaWlyq5kJA3eE+dNfAX/5azT3sf8=)
                          6: 3135342e382e3230342e302f32332d3233203d3e203435303930.roa (hash: dB/y27Xfn48GEsIUY7otGJXame0ky7e4YnlXe+GrjCY=)
                          7: 3135342e382e3133362e302f32312d3231203d3e203435303930.roa (hash: RJnHtPliglccY19H3h2KWWjvbPLuCtFv1+ALRV/6WeM=)
                          8: 3135342e382e3234382e302f32312d3231203d3e203435303930.roa (hash: 8gRHtouL2bLRfPWudNbg+c5S6PWeHK2579jKGZL9Kvo=)
                          9: 3135342e382e3230382e302f32302d3230203d3e203435303930.roa (hash: ZQz/O22MTMUek+0zKBVGN5vrkbQkHB5F/FMNHGhBDOM=)
                          10: 3135342e382e3133302e302f32332d3233203d3e203435303930.roa (hash: PlOvxEsiceaBmrwi9Y0oLmqES7d7f6yZYQByrUtLv30=)
                          11: 3135342e382e3133342e302f32332d3233203d3e203435303930.roa (hash: AS6DMdcu3X9ATA3nP93cGiSkoIDo6M7D8LKgXjmJWgk=)
                          12: 3135342e382e3230302e302f32322d3232203d3e203435303930.roa (hash: DZE3OeEjuFsZsVgnRszHdgpL4rP7j6LZeNurCr4Z2Cw=)
                          13: 3135342e382e3132382e302f32332d3233203d3e203435303930.roa (hash: d8vrVWQmsv4NlTYHcrNfgj9LZGyjxdjZ8OmrqEqAExs=)
                          14: 3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl (hash: 2L1TZr49TOGACmY56qmFkvDkvTU3KM4/q/9Gd34A6XQ=)
                          15: 3135342e382e3234302e302f32312d3231203d3e203435303930.roa (hash: iB5+YQ3TDQDQUWMOn6xehEpOzuBG2Q+Fd4hiZru9UPI=)
                          16: 3135342e382e3234302e302f32302d3230203d3e203435303930.roa (hash: xAfqjwLdDrCkqZjmByvLddM16gkqguZVlyvK8q6kqZk=)
                          17: 3135342e382e3134342e302f32302d3230203d3e203435303930.roa (hash: NMawdsIIdl1oQseMxc0vIYnBkhsdRuKhrrDT0P0qcSI=)
                          18: 3135342e382e3232342e302f32302d3230203d3e203435303930.roa (hash: v5X6bVjXVyxk3rPnBTQ+YqDy+TM93hPxL6xwQae8C28=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 00:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a0:e3:15:4f:16:45:56:41:a7:3a:a3:cd:3f:83:da:85:2e:03:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91209740000, serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC
        Validity
            Not Before: Aug 13 20:36:37 2026 GMT
            Not After : Aug 15 00:40:37 2026 GMT
        Subject: CN=2C5E7DD241B750B56D18D035ED10E0624FDF9C7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:4a:f4:36:05:33:6f:31:87:7a:75:5e:5b:
                    7a:7c:cb:bd:82:f7:9e:ba:ec:fa:f2:f4:be:3b:ed:
                    82:72:99:72:a3:f9:4b:db:d9:a6:6e:1c:26:ea:16:
                    1c:69:b8:08:c9:6d:f0:02:4d:95:9e:25:30:bf:53:
                    ed:77:a3:e1:86:a2:06:9f:6a:f3:8f:fe:cb:56:81:
                    d6:72:68:07:ab:b3:28:58:e7:4a:5d:02:18:e6:db:
                    33:d2:ea:4e:cf:7c:34:67:f3:2f:82:a4:0d:15:81:
                    cf:98:d5:4c:ca:98:55:20:0c:53:09:69:ae:72:e7:
                    56:a7:33:a7:9b:2a:24:00:9b:ae:73:8a:af:ec:03:
                    23:21:5b:f8:71:17:35:2f:3c:2d:3f:35:31:05:2d:
                    04:fc:30:e4:a6:58:6c:67:5d:4c:2c:58:86:d7:6d:
                    04:19:a1:f0:38:48:6b:71:08:6b:aa:50:50:23:4b:
                    80:9a:b6:59:cc:29:6a:bd:3b:0f:bd:74:c7:bb:64:
                    43:99:07:13:5f:f0:70:8e:9d:b8:3b:fe:f6:1e:24:
                    66:a3:45:11:67:cd:f0:a5:25:41:3d:1d:c3:52:93:
                    b6:56:1e:75:a7:0b:90:07:59:b8:8e:af:df:73:0c:
                    9d:d3:fb:8a:e8:79:49:0c:18:a6:00:4a:1f:5d:3e:
                    24:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5E:7D:D2:41:B7:50:B5:6D:18:D0:35:ED:10:E0:62:4F:DF:9C:7D
            X509v3 Authority Key Identifier:
                keyid:39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:c5:96:28:25:7a:2b:d7:38:b6:7a:9c:3e:bc:3e:ed:f4:92:
         37:c6:48:79:35:76:da:47:6e:f6:18:1a:df:76:3c:e5:be:88:
         52:b2:d5:25:46:6e:74:04:45:8a:af:ec:20:47:9d:1b:83:18:
         7f:1f:b5:c7:06:8d:df:f0:f9:16:b8:a9:3f:15:d8:7d:d0:1b:
         32:99:d8:6e:d1:79:50:39:82:82:34:e6:22:83:f3:2d:75:c0:
         c3:90:18:cb:0c:aa:e8:78:0f:f5:ea:b2:3d:e6:d3:7d:da:e4:
         08:e9:84:e6:41:fc:bb:6e:77:ce:2c:8d:e7:e2:67:0e:e5:57:
         85:57:db:1e:53:be:da:82:47:f3:5f:ba:8c:4e:c1:03:49:78:
         22:3b:cb:10:d7:be:8a:8f:ba:90:ee:e9:2f:88:e9:a4:f4:85:
         5e:9c:d9:ee:be:c3:00:ad:62:fe:2b:68:0b:15:9c:91:0f:d7:
         9f:03:2a:ea:7c:a2:eb:02:a8:da:91:ee:65:be:00:45:7c:64:
         f9:2c:38:3d:30:97:0e:05:a4:f4:f9:f6:95:86:a6:3e:96:5a:
         75:2a:e4:c0:0a:b4:05:78:d3:02:6a:f1:fc:d3:8b:0e:8c:8f:
         35:74:33:ba:8b:c9:ad:f2:16:a8:0d:78:96:5e:f1:fc:ad:46:
         5b:ea:a7:31
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUBaDjFU8WRVZBpzqjzT+D2oUuA/cwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEygzOTA5Q0NGNjlE
N0YxQTE3RENBMDE4NzhGQUUwNkVDMzlCMzhFM0JDMB4XDTI2MDgxMzIwMzYzN1oX
DTI2MDgxNTAwNDAzN1owMzExMC8GA1UEAxMoMkM1RTdERDI0MUI3NTBCNTZEMThE
MDM1RUQxMEUwNjI0RkRGOUM3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ57SvQ2BTNvMYd6dV5benzLvYL3nrrs+vL0vjvtgnKZcqP5S9vZpm4cJuoW
HGm4CMlt8AJNlZ4lML9T7Xej4YaiBp9q84/+y1aB1nJoB6uzKFjnSl0CGObbM9Lq
Ts98NGfzL4KkDRWBz5jVTMqYVSAMUwlprnLnVqczp5sqJACbrnOKr+wDIyFb+HEX
NS88LT81MQUtBPww5KZYbGddTCxYhtdtBBmh8DhIa3EIa6pQUCNLgJq2Wcwpar07
D710x7tkQ5kHE1/wcI6duDv+9h4kZqNFEWfN8KUlQT0dw1KTtlYedacLkAdZuI6v
33MMndP7iuh5SQwYpgBKH10+JB8CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQsXn3S
QbdQtW0Y0DXtEOBiT9+cfTAfBgNVHSMEGDAWgBQ5Ccz2nX8aF9ygGHj64G7Dmzjj
vDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzAvMzkwOUND
RjY5RDdGMUExN0RDQTAxODc4RkFFMDZFQzM5QjM4RTNCQy5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJGRDFGRjIvT1FuTTlwMV9H
aGZjb0JoNC11QnV3NXM0NDd3LmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH
MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw
NDA4MDE2NS8wLzM5MDlDQ0Y2OUQ3RjFBMTdEQ0EwMTg3OEZBRTA2RUMzOUIzOEUz
QkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQAWxZYoJXor1zi2epw+vD7t9JI3xkh5NXbaR272GBrfdjzl
vohSstUlRm50BEWKr+wgR50bgxh/H7XHBo3f8PkWuKk/Fdh90Bsymdhu0XlQOYKC
NOYig/MtdcDDkBjLDKroeA/16rI95tN92uQI6YTmQfy7bnfOLI3n4mcO5VeFV9se
U77agkfzX7qMTsEDSXgiO8sQ176Kj7qQ7ukviOmk9IVenNnuvsMArWL+K2gLFZyR
D9efAyrqfKLrAqjake5lvgBFfGT5LDg9MJcOBaT0+faVhqY+llp1KuTACrQFeNMC
avH804sOjI81dDO6i8mt8haoDXiWXvH8rUZb6qcx
-----END CERTIFICATE-----
Generated at Fri Aug 14 16:09:47 2026 by rpki-client