Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
File:                     79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft (raw, json)
Hash identifier:          dQVjtkXMCOmUDdJbsx08YImeL81KdVSHktpMNJmjhbw=
Subject key identifier:   89:8B:49:9B:C6:E5:86:7D:3D:FA:90:CE:CC:41:AA:F6:9C:74:BF:AE
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Certificate issuer:       /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial:       59495FECC6FFEC2BAD6E18F19CC83AE05DDE33D6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
Manifest number:          0109
Signing time:             Fri 24 Jul 2026 08:05:41 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:41 +0000
Manifest next update:     Sat 25 Jul 2026 09:04:41 +0000
Files and hashes:         1: 3130332e37312e36392e302f32342d3234203d3e203233363530.roa (hash: /q4hZIIPN68k3lCoLu2BxKZ1dZGnAau8Tu6zQfHJhw8=)
                          2: 3138302e3231302e3231322e302f32342d3234203d3e20313531323936.roa (hash: WXBy7PYl+0tZAAd5uZFc08h2pkIGftVU2VXMO2BUPZA=)
                          3: 3138302e3231302e3231322e302f32322d3232203d3e20313531323936.roa (hash: LcT6ji4n5le6EwNrdut4qkUvWOWYyD5Xceg1g5j20sU=)
                          4: 3130332e37312e37312e302f32342d3234203d3e203233363530.roa (hash: qE+HB/jL/dZZaPj/SB367pzcLZMK04ZRnLQNWi1ZLY0=)
                          5: 323430363a383838303a3a2f34382d3438203d3e20313531323936.roa (hash: 2rEfRZGA1EAeckbEG0PTZGNkMZ/YcjvJUN2WIG7ZIvU=)
                          6: 3130332e392e32342e302f32322d3232203d3e20313531323936.roa (hash: pcCIdHW+Wr27+f4tlmgbNg3rAcusLNN5epai2nB9kY4=)
                          7: 323430363a383838303a3a2f33322d3332203d3e20313531323936.roa (hash: VM1qHITDY0vlR5ts4U5Mlsvp4cbzTSQCBviUKQgtlBQ=)
                          8: 3130332e392e3130382e302f32322d3232203d3e20313531323936.roa (hash: BQkj9JY42h/4Ktqm5PZu183HmciBKbXBVRuupkHRF58=)
                          9: 3138302e3231302e3231352e302f32342d3234203d3e20313531323936.roa (hash: MzfDml4PqPQJ0/ptTbSE1GmPtQY9+lQxHmlpHCDwjlQ=)
                          10: 3130332e37312e36382e302f32342d3234203d3e20313531323936.roa (hash: dM03n1V3wFLUQUW85D+oQAH0VrRiu7aigFAwGGt0A3Q=)
                          11: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl (hash: MWD2yvXGDEafdrEHONq/TICmHCLjoF6wQV16bX/75JM=)
                          12: 3138302e3231302e3231332e302f32342d3234203d3e203233363530.roa (hash: +d9P+V3G5sTLZcX3O027aMRCCx2RtHNSuFPtmq5GEhU=)
                          13: 3130332e37312e36382e302f32322d3232203d3e20313531323936.roa (hash: r/IDS7Iz5LYv/Jd7YSBUHW70Me/1R2X9UxvKyLsfnTc=)
                          14: 3130332e37312e37302e302f32342d3234203d3e203233363530.roa (hash: ZznsMKL8WEpiTUGcpGB1ChW+1Alx4+mo8vWVh9DMguk=)
                          15: 3138302e3231302e3231342e302f32342d3234203d3e20313531323936.roa (hash: G3Fj6cauJg8SJxIqxWjSGGbh00wiyR3jukfiw++d+Jg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:49:5f:ec:c6:ff:ec:2b:ad:6e:18:f1:9c:c8:3a:e0:5d:de:33:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
        Validity
            Not Before: Jul 24 08:00:41 2026 GMT
            Not After : Jul 25 09:04:41 2026 GMT
        Subject: CN=898B499BC6E5867D3DFA90CECC41AAF69C74BFAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0d:bd:8e:e2:d7:e9:9d:7f:e1:06:e9:87:09:
                    fb:88:97:e5:08:29:ca:d2:9b:27:f2:c2:b9:4f:d2:
                    34:81:9c:69:74:f9:b7:fd:1c:51:a1:d4:e9:f5:19:
                    2f:d1:30:8b:06:6f:eb:a5:8b:82:c4:1a:f5:70:f0:
                    ce:cc:cd:c6:f2:5d:2d:3d:76:90:b5:cb:6b:a4:4c:
                    f0:c0:f6:c3:90:e6:db:b2:dc:f2:eb:2d:56:54:c5:
                    0a:ff:ce:7c:6f:4d:5f:b0:3e:41:ba:fd:1d:c4:20:
                    a1:24:79:58:09:52:0c:20:09:45:43:1f:8f:da:01:
                    79:7e:07:cd:5c:86:a1:62:ac:dc:45:da:f2:35:d9:
                    0d:24:fe:ab:8b:0f:04:5d:40:6f:db:eb:e4:92:90:
                    30:6f:1b:a4:9e:8d:bb:f4:f5:08:d1:74:4f:9d:e1:
                    ad:eb:dd:b0:a1:a8:65:0b:ec:ef:dd:4d:1f:77:2e:
                    c6:10:18:da:c7:eb:a5:8c:53:bc:9a:a0:4a:b1:9e:
                    35:ff:f1:84:e3:44:b4:ec:e2:02:77:bf:03:cd:2c:
                    5d:28:93:89:ae:4f:bd:09:1d:ca:91:97:f3:5a:f9:
                    99:48:3b:cc:29:f3:b2:43:c1:34:0e:7d:15:26:a9:
                    49:df:17:da:4f:71:08:ab:5c:cb:5a:6a:04:f7:24:
                    38:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8B:49:9B:C6:E5:86:7D:3D:FA:90:CE:CC:41:AA:F6:9C:74:BF:AE
            X509v3 Authority Key Identifier:
                keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:cc:16:64:c8:71:2f:10:2f:9e:45:21:70:61:41:d4:f8:68:
         9e:3b:a7:58:c4:70:a1:f8:a5:73:63:33:6a:7a:ce:63:5a:f9:
         19:5d:00:94:cf:8b:6f:d1:d8:e5:b0:a9:98:f9:b3:81:b5:7d:
         5d:6c:6d:49:b1:93:51:8c:7b:2c:82:43:cb:6a:24:88:21:11:
         cf:4a:1d:cb:e7:ef:1d:06:fb:ec:7f:d9:4f:d0:e9:e7:95:87:
         ea:65:46:65:7b:b8:2b:95:38:2c:4f:06:b0:c2:37:26:1b:85:
         03:2b:0d:bf:0d:c7:d9:d1:b7:0c:44:6e:13:55:f4:db:0c:b6:
         c5:39:68:da:01:c3:d1:53:3d:8c:c4:59:b2:d5:5a:75:ea:8a:
         a6:d9:35:7a:8a:3a:11:b6:2b:67:e6:2c:21:9a:91:44:02:0a:
         03:c3:9f:4b:7b:5d:ec:06:31:3b:b5:4a:9f:b0:a2:62:92:4a:
         ab:eb:f2:98:d3:64:bf:ff:c8:41:a9:2d:d9:4d:a8:aa:03:aa:
         22:d6:a5:59:0f:1d:94:ec:32:f3:86:36:dc:3c:c2:68:59:3f:
         89:55:e1:a8:8e:31:62:33:7a:c2:62:af:68:e8:e5:18:e4:60:
         ea:31:c9:6c:07:76:3d:31:cd:8f:3b:6b:df:aa:0d:07:f2:b1:
         69:51:70:83
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUWUlf7Mb/7CutbhjxnMg64F3eM9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJB
MEY0MzJCRjAeFw0yNjA3MjQwODAwNDFaFw0yNjA3MjUwOTA0NDFaMDMxMTAvBgNV
BAMTKDg5OEI0OTlCQzZFNTg2N0QzREZBOTBDRUNDNDFBQUY2OUM3NEJGQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCDb2O4tfpnX/hBumHCfuIl+UI
KcrSmyfywrlP0jSBnGl0+bf9HFGh1On1GS/RMIsGb+uli4LEGvVw8M7MzcbyXS09
dpC1y2ukTPDA9sOQ5tuy3PLrLVZUxQr/znxvTV+wPkG6/R3EIKEkeVgJUgwgCUVD
H4/aAXl+B81chqFirNxF2vI12Q0k/quLDwRdQG/b6+SSkDBvG6Sejbv09QjRdE+d
4a3r3bChqGUL7O/dTR93LsYQGNrH66WMU7yaoEqxnjX/8YTjRLTs4gJ3vwPNLF0o
k4muT70JHcqRl/Na+ZlIO8wp87JDwTQOfRUmqUnfF9pPcQirXMtaagT3JDgXAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUiYtJm8blhn09+pDOzEGq9px0v64wHwYDVR0j
BBgwFoAUeazK1EkVKe2jgXDzSliE0qD0Mr8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDg4MTAyNS8wLzc5QUNDQUQ0NDkxNTI5RURBMzgxNzBGMzRBNTg4
NEQyQTBGNDMyQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJBMEY0MzJCRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ4ODEwMjUvMC83OUFDQ0FENDQ5MTUy
OUVEQTM4MTcwRjM0QTU4ODREMkEwRjQzMkJGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHswWZMhxLxAv
nkUhcGFB1PhonjunWMRwofilc2MzanrOY1r5GV0AlM+Lb9HY5bCpmPmzgbV9XWxt
SbGTUYx7LIJDy2okiCERz0ody+fvHQb77H/ZT9Dp55WH6mVGZXu4K5U4LE8GsMI3
JhuFAysNvw3H2dG3DERuE1X02wy2xTlo2gHD0VM9jMRZstVadeqKptk1eoo6EbYr
Z+YsIZqRRAIKA8OfS3td7AYxO7VKn7CiYpJKq+vymNNkv//IQakt2U2oqgOqItal
WQ8dlOwy84Y23DzCaFk/iVXhqI4xYjN6wmKvaOjlGORg6jHJbAd2PTHNjztr36oN
B/KxaVFwgw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:57:30 2026 by rpki-client