Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
File:                     BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft (raw, json)
Hash identifier:          nhK4P836Wjf49gpGGnyqbQAavslbHL6n3wZermt+ljI=
Subject key identifier:   54:7D:34:F6:A8:EE:AD:5C:57:03:1E:07:83:2A:F2:5C:6F:F4:8A:24
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Certificate issuer:       /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial:       5EED4C30F55BEA3DCE104EC01844334BE9419D43
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
Manifest number:          9D
Signing time:             Tue 12 May 2026 17:50:37 +0000
Manifest this update:     Tue 12 May 2026 17:45:37 +0000
Manifest next update:     Wed 13 May 2026 20:31:37 +0000
Files and hashes:         1: 36392e3233312e3132382e302f31382d3234203d3e20313335363239.roa (hash: i3tzGoy9z14VYKRZErV4ccYrCvQWVU9YyKnJBvsNCy4=)
                          2: 36392e3233352e3138342e302f32312d3231203d3e203130323036.roa (hash: XdIIytMKeURqugQsIhiCG8921zvCYPpLFXWW/uA/1S4=)
                          3: 36392e3233342e3139322e302f31382d3234203d3e20313335363239.roa (hash: 2JgPRqzChL6aRN2HHWJ+liAA49OceEMdwqv4mL4g3TA=)
                          4: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl (hash: r4efW+yq1xPfNJnkbrCFmZykQiNui2SYqqKkKoAK+Ac=)
                          5: 35322e38322e302e302f31352d3234203d3e20313335363239.roa (hash: BKfKRfeGnTe+uCfmNH8LGxHMZkSFP82yHfMi+FwAgaw=)
                          6: 36392e3233352e3138342e302f32312d3231203d3e2039383038.roa (hash: YP3gTor7CQAO9/TMt7oBlKkQ5mhEZRk35ZJ848nmL1c=)
                          7: 36392e3233302e3139322e302f31382d3234203d3e20313335363239.roa (hash: /uf0g79WaYYKp8U6K7QwR/TfIar6CyVBAf2iICVpTWY=)
                          8: 36382e37392e302e302f31382d3234203d3e20313335363239.roa (hash: xBimZBgddQkxVZ4hekblEfEIhExEpMzz0u8+4zAsM8o=)
                          9: 36392e3233352e3132382e302f31382d3234203d3e20313335363239.roa (hash: xFWMWs1c6SAwWOInmbWsHWAmEOaJMBB4hoMBTc7gn8c=)
                          10: 3136312e3138392e302e302f31362d3234203d3e20313335363239.roa (hash: VArv7wtcC799gjidJmBBAegNoq7R1zV2WHiORYAIAis=)
                          11: 36392e3233352e3138342e302f32312d3231203d3e20313335363239.roa (hash: bXtRngVO1ZHZloYd3fw60uZkV2dYuwOu5FeJjvbf0DU=)
                          12: 36392e3233352e3138342e302f32312d3231203d3e20313334373631.roa (hash: np+j/2H1LcK7mut452khZieuC8xhFqCKScZ+LH57rOQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ed:4c:30:f5:5b:ea:3d:ce:10:4e:c0:18:44:33:4b:e9:41:9d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
        Validity
            Not Before: May 12 17:45:37 2026 GMT
            Not After : May 13 20:31:37 2026 GMT
        Subject: CN=547D34F6A8EEAD5C57031E07832AF25C6FF48A24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:37:82:95:65:a1:6a:44:9e:ee:4c:82:f0:
                    59:2e:ab:8d:c6:3b:a3:5e:2d:06:d3:2e:31:8d:c9:
                    b0:05:68:34:c9:66:f1:4d:97:c0:22:0f:5f:b0:c8:
                    cc:c7:21:a4:24:d3:b4:04:9a:1a:4f:8f:c5:4e:88:
                    7c:ed:60:aa:8d:1e:6c:1b:e4:f6:bb:b0:24:8c:f9:
                    bb:d4:7c:82:e0:e3:85:6b:1f:12:7c:9b:9a:1e:ab:
                    23:e3:5b:7c:1f:d2:09:80:6b:8f:0c:0d:b1:b1:64:
                    10:a9:94:5b:ae:62:8b:c1:62:6f:bb:12:37:45:a5:
                    24:cc:fe:08:fd:32:a9:b4:a3:4e:28:57:fc:f4:0b:
                    4c:ce:19:c4:6c:88:e9:db:3f:4b:c8:49:ca:a4:4a:
                    f4:d0:7c:76:1f:8d:91:da:3f:8e:87:55:a9:4f:c9:
                    f7:2d:42:a2:df:94:2a:50:a5:4e:0b:50:56:8f:a0:
                    b5:4d:0c:12:6f:a0:0c:83:b2:04:ff:55:8c:a1:73:
                    8a:63:60:68:3c:0e:ed:9d:25:81:49:7b:3a:e2:2b:
                    56:72:b0:25:da:bf:b4:64:af:69:94:bd:f5:16:e0:
                    46:20:33:a5:cb:1b:03:ad:a5:3e:7f:cc:90:51:e5:
                    86:6e:7c:b2:63:91:51:76:74:e4:1e:bf:fa:70:ee:
                    10:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7D:34:F6:A8:EE:AD:5C:57:03:1E:07:83:2A:F2:5C:6F:F4:8A:24
            X509v3 Authority Key Identifier:
                keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:99:f3:12:6c:01:78:ae:d5:ab:a2:40:d0:1a:50:16:21:8e:
         01:28:d9:13:d4:aa:94:41:ce:e1:19:a9:9b:0c:5a:07:7b:3e:
         07:e6:94:12:54:32:31:43:f1:be:32:60:23:a5:d8:c3:10:84:
         a5:68:97:18:31:91:68:31:32:ce:d1:cf:36:55:cc:87:bb:e0:
         8a:da:9b:d7:24:b7:3e:45:42:07:99:d7:52:3c:cd:41:64:ac:
         e4:2b:a8:76:f3:3d:f8:cb:cd:ac:a1:e4:75:31:3f:9e:d7:90:
         66:65:90:5c:01:cf:d5:c9:98:a2:b2:3a:b1:e6:d1:2a:e7:cf:
         18:a2:ba:a7:c3:78:95:d5:94:21:94:f8:71:77:0c:c5:24:83:
         6b:77:6d:f9:79:57:08:ca:1e:eb:55:fa:7d:f2:84:58:e1:db:
         ee:07:1e:89:4b:b3:7f:0f:7a:92:40:14:71:c6:df:bf:c3:00:
         fa:3a:7c:b0:3d:c3:22:7f:a8:bc:8e:ee:05:75:0e:e8:81:46:
         3d:80:9e:62:27:2b:22:84:e5:ec:4b:08:b1:60:97:d3:3b:47:
         c5:6a:1d:aa:34:7e:16:eb:63:ee:29:83:85:f0:df:f7:0d:5d:
         ef:0a:d3:fb:61:ef:63:30:8e:23:52:d7:62:ed:98:71:60:85:
         ca:6a:cc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:07:04 2026 by rpki-client