Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
File:                     9684E4B95F47A986892F9930EF9D9E453227439F.mft (raw, json)
Hash identifier:          bGjy2/1MU/MxkwHLkTcx+k2YsU1uMsQ52SnnDB6lZfU=
Subject key identifier:   F3:3B:F3:6C:BF:E4:3E:75:BC:8D:9F:B4:7A:71:88:69:DE:B7:B9:0C
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Certificate issuer:       /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial:       0427E44D1EDE68A439F412F2912CF50DA11743D3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
Manifest number:          A2
Signing time:             Wed 13 May 2026 05:24:01 +0000
Manifest this update:     Wed 13 May 2026 05:19:01 +0000
Manifest next update:     Thu 14 May 2026 07:08:01 +0000
Files and hashes:         1: 3130332e34312e302e302f32342d3234203d3e20313331353734.roa (hash: TofZGKZXkXwQ1NVeXRbCcMAjpMcwrwDtI6F24dZ7WT0=)
                          2: 3130332e34312e332e302f32342d3234203d3e20313334373630.roa (hash: /j0LswSNXCsNpXgcRLD/3LdCZx3vSt9vIECErqtDi7w=)
                          3: 34332e3232372e382e302f32322d3232203d3e2030.roa (hash: rFWuKZANl9HR+2+j6XziWRcJMug5PNmcsitIIwWuKlA=)
                          4: 34332e3234392e3137302e302f32332d3234203d3e20313531333032.roa (hash: TViUEFSUDt+dBd98dAM8WDyGrFeARupa+y25tQ3Xkpo=)
                          5: 3231312e3130312e3230382e302f32302d3230203d3e2030.roa (hash: dzhJetwhygZWORFnMAANn17o0nAIbSRkwyKQXtWL2bM=)
                          6: 34332e3234392e3137312e302f32342d3234203d3e20313331353734.roa (hash: uS/v5pS/8LsE1KboKlgwPa0r9AUO/FNI2ZRy4jqzFQo=)
                          7: 3130332e34312e3136342e302f32322d3232203d3e20313334373630.roa (hash: JGGbu1AchEm6gwsQvta+dJIpocamBYNAN8qvKm/lZk0=)
                          8: 3130332e3134332e31382e302f32332d3233203d3e20313334373630.roa (hash: pzsCYGXeY52FfqmwZq5tlLMJLmom8MQOUPOwEibOqe0=)
                          9: 3130332e3134332e31362e302f32332d3233203d3e20313334373630.roa (hash: 1g6t3exMx24cwEMgY2KveH3dixYd24sg7I/SmcDE884=)
                          10: 34332e3234392e3137302e302f32342d3234203d3e20313331353734.roa (hash: 0u75Dz9NUfxGKoMPcV5RDsGtZmNW5DPaSlMYJBChnT8=)
                          11: 9684E4B95F47A986892F9930EF9D9E453227439F.crl (hash: WhCO8TsbPAUc9WaYXqTmTOOYt9inAwSL2mIzWaBM2e4=)
                          12: 34332e3234392e3136382e302f32332d3234203d3e20313531333032.roa (hash: 56mIz73y8Fag4vyUb19heMLIyjzwutiwremvkxG5UvY=)
                          13: 34332e3234392e3136382e302f32342d3234203d3e20313531333032.roa (hash: bFSMaDup9Ycm3OuQxmjkPRgJBcR+tRlpQ+vDKCyHYkA=)
                          14: 3130332e34312e322e302f32342d3234203d3e20313331353734.roa (hash: MBRSyxBnowaE6dGwCKBTr8xjqRGqjbmJM8nSVaaIYEE=)
                          15: 34332e3234392e3136382e302f32332d3234203d3e20313331353734.roa (hash: dIVnTnlidXm0fTkWWM5Bl7Vt6fCzb/q4QIPIzd/VdcQ=)
                          16: 323430303a393632303a3a2f33322d3536203d3e20313331353734.roa (hash: UIdybOLdanzkw714KalMD+c6lUnXmyZyESW3lLcQRJk=)
                          17: 3130332e33392e3230302e302f32322d3234203d3e20313331353734.roa (hash: 5xMWNkW1klQcDp4QWHmfoXOnt2+cbg8IcOUQAYdb1Io=)
                          18: 3130332e34312e322e302f32342d3234203d3e20313334373630.roa (hash: GHs4Ice+IXgOdXzh11tNCtQfPSNUyk6aC0/QcmPGzko=)
                          19: 34332e3234392e3136392e302f32342d3234203d3e20313531333032.roa (hash: D6hWvznx4k3AsLSzPZQiMru4ALXwRjJERJ9OjTSouQE=)
                          20: 3130332e34312e322e302f32332d3233203d3e20313334373630.roa (hash: SCN97S2wwNnV/ZgxJpPHs3iMMe/lJtzr3ZRPjKn4Z8M=)
                          21: 3130332e34312e302e302f32332d3233203d3e20313334373630.roa (hash: Y6ym5hhQgZvyhUCRDxWiIFvfMhKYw0X+/4gByoyJMXg=)
                          22: 3130332e34312e312e302f32342d3234203d3e20313331353734.roa (hash: XLQFYLz+tc1UxhxL0QSQ9SLNiBHi7J4Tj9p/+uW97eg=)
                          23: 3130332e34312e332e302f32342d3234203d3e20313331353734.roa (hash: WH7tyIEmjprytM6YWjBB9xp1Npd/pU0lhZCNIY+OwQk=)
                          24: 34332e3235302e33322e302f32322d3232203d3e20313334373630.roa (hash: AQjaQMZN9JXVfWKQ/jLFTa4k1E9drRu7j1URRVSdUXo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:27:e4:4d:1e:de:68:a4:39:f4:12:f2:91:2c:f5:0d:a1:17:43:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
        Validity
            Not Before: May 13 05:19:01 2026 GMT
            Not After : May 14 07:08:01 2026 GMT
        Subject: CN=F33BF36CBFE43E75BC8D9FB47A718869DEB7B90C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:54:a5:52:40:cb:e0:95:15:81:b2:59:0c:f6:
                    c6:fd:aa:a2:dc:8e:1f:23:9c:78:3e:89:39:c3:ff:
                    b4:5e:b8:01:2b:cf:45:c6:80:ea:0d:62:ef:4a:76:
                    6c:5c:36:34:19:a3:89:69:a5:ed:48:65:06:27:63:
                    a3:d7:4b:01:b2:70:2a:c5:51:8d:fa:3f:de:07:e9:
                    b8:25:0c:90:d2:ae:86:b6:62:00:7c:3d:17:93:57:
                    f2:eb:15:78:c3:f1:a3:6c:31:cb:84:18:95:03:47:
                    68:c1:c5:f4:ab:73:41:51:29:20:a3:a6:16:68:39:
                    5e:47:f6:3b:bc:6d:3a:17:46:09:e3:2d:7d:a3:67:
                    44:c0:26:f3:85:00:c9:69:20:3f:b5:d8:08:d9:bd:
                    a5:33:a4:91:c8:b3:82:f8:cd:b8:b9:d7:7c:9a:ee:
                    68:b6:f3:84:9b:cf:38:e3:0f:1b:4c:0f:28:64:60:
                    ad:6c:f5:f9:ed:df:4e:1b:ca:87:1d:13:e7:83:7d:
                    e9:59:1c:24:f2:6b:4b:4e:8a:f8:43:b8:26:ba:61:
                    bd:e0:eb:2a:6e:6a:ec:4f:f4:d1:4d:13:84:58:4b:
                    39:e9:89:f7:b5:be:a9:0b:2b:2b:c9:d8:4c:1e:e3:
                    38:b1:1d:81:30:13:ed:7c:7e:cc:a3:49:85:f9:dd:
                    f5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3B:F3:6C:BF:E4:3E:75:BC:8D:9F:B4:7A:71:88:69:DE:B7:B9:0C
            X509v3 Authority Key Identifier:
                keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:0f:84:2c:ea:ad:9a:ad:e0:e8:91:cf:d7:df:d8:21:02:4c:
         e8:89:9d:32:33:25:f5:4f:8b:35:3c:36:1f:8e:f0:9b:54:19:
         d0:67:96:8d:15:16:39:08:75:db:ad:34:bb:8b:64:96:05:95:
         d2:40:cd:4e:3d:b2:f4:7d:7a:49:f8:71:20:dc:77:b3:2d:35:
         93:be:be:2d:37:91:72:7e:fc:e8:4a:4a:65:68:25:9d:8a:bc:
         6f:89:f1:97:ef:20:47:16:cd:0c:e0:99:a9:ea:68:83:14:21:
         d1:a3:ab:5c:c7:d0:dc:1c:72:36:50:ae:e1:2d:f0:b0:37:6b:
         6e:a2:58:1b:7b:7b:9f:7c:db:4b:22:24:0a:b0:58:6d:d3:18:
         74:91:14:1c:c1:a9:4b:e4:ae:4d:b8:ad:a1:fd:22:3c:3d:0c:
         c0:75:77:c9:c3:2f:bf:45:17:23:7f:d8:21:5d:c6:79:bc:63:
         4f:84:4d:61:bd:f7:56:1d:0c:b7:26:c5:8e:7e:6a:82:53:6a:
         3d:f6:25:54:be:a3:e8:d9:88:26:32:e2:b9:44:41:7a:37:c0:
         dd:b2:e8:0a:30:8d:58:9c:fa:b2:b3:a0:da:20:27:a0:ac:22:
         d2:b1:5e:7c:31:f8:08:26:19:2e:d3:ac:76:52:0e:99:8c:d5:
         9e:e5:e0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:37:12 2026 by rpki-client