Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
File:                     9684E4B95F47A986892F9930EF9D9E453227439F.mft (raw, json)
Hash identifier:          FsQW6+xELhi7i1LtS5Dap/m9ddpHvwRE308E/M/14OQ=
Subject key identifier:   2F:C1:01:B9:38:A6:7A:90:B0:E8:9C:F4:17:A7:FB:65:09:A3:79:74
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Certificate issuer:       /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial:       5A9856F6680444E9FFC6C70B82F3B34D1F79F2C1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
Manifest number:          0102
Signing time:             Thu 23 Jul 2026 15:18:58 +0000
Manifest this update:     Thu 23 Jul 2026 15:13:58 +0000
Manifest next update:     Fri 24 Jul 2026 19:06:58 +0000
Files and hashes:         1: 9684E4B95F47A986892F9930EF9D9E453227439F.crl (hash: hY//vSHuUhasVfEohQDizfLYwTToi16I42YFbWIvNr8=)
                          2: 3130332e34312e302e302f32342d3234203d3e20313331353734.roa (hash: TofZGKZXkXwQ1NVeXRbCcMAjpMcwrwDtI6F24dZ7WT0=)
                          3: 3130332e34312e302e302f32322d3232203d3e20313331353734.roa (hash: 9/QDE3gE/sRHkLVbxl56Vq/WuOTZKU48oTSiZX8DXK8=)
                          4: 3130332e3134332e31362e302f32332d3233203d3e20313334373630.roa (hash: 1g6t3exMx24cwEMgY2KveH3dixYd24sg7I/SmcDE884=)
                          5: 3130332e34312e322e302f32342d3234203d3e20313331353734.roa (hash: MBRSyxBnowaE6dGwCKBTr8xjqRGqjbmJM8nSVaaIYEE=)
                          6: 3130332e34312e302e302f32332d3233203d3e20313334373630.roa (hash: Y6ym5hhQgZvyhUCRDxWiIFvfMhKYw0X+/4gByoyJMXg=)
                          7: 34332e3234392e3136382e302f32342d3234203d3e20313531333032.roa (hash: bFSMaDup9Ycm3OuQxmjkPRgJBcR+tRlpQ+vDKCyHYkA=)
                          8: 34332e3234392e3136392e302f32342d3234203d3e20313531333032.roa (hash: D6hWvznx4k3AsLSzPZQiMru4ALXwRjJERJ9OjTSouQE=)
                          9: 34332e3234392e3136382e302f32332d3234203d3e20313531333032.roa (hash: 56mIz73y8Fag4vyUb19heMLIyjzwutiwremvkxG5UvY=)
                          10: 3130332e3134332e31382e302f32332d3233203d3e20313334373630.roa (hash: pzsCYGXeY52FfqmwZq5tlLMJLmom8MQOUPOwEibOqe0=)
                          11: 323430303a393632303a3a2f33322d3536203d3e20313331353734.roa (hash: UIdybOLdanzkw714KalMD+c6lUnXmyZyESW3lLcQRJk=)
                          12: 3231312e3130312e3230382e302f32302d3230203d3e2030.roa (hash: dzhJetwhygZWORFnMAANn17o0nAIbSRkwyKQXtWL2bM=)
                          13: 34332e3234392e3137312e302f32342d3234203d3e20313331353734.roa (hash: uS/v5pS/8LsE1KboKlgwPa0r9AUO/FNI2ZRy4jqzFQo=)
                          14: 3130332e34312e332e302f32342d3234203d3e20313331353734.roa (hash: WH7tyIEmjprytM6YWjBB9xp1Npd/pU0lhZCNIY+OwQk=)
                          15: 3130332e34312e332e302f32342d3234203d3e20313334373630.roa (hash: /j0LswSNXCsNpXgcRLD/3LdCZx3vSt9vIECErqtDi7w=)
                          16: 34332e3232372e382e302f32322d3232203d3e2030.roa (hash: rFWuKZANl9HR+2+j6XziWRcJMug5PNmcsitIIwWuKlA=)
                          17: 3130332e33392e3230302e302f32322d3234203d3e20313331353734.roa (hash: 5xMWNkW1klQcDp4QWHmfoXOnt2+cbg8IcOUQAYdb1Io=)
                          18: 34332e3234392e3137302e302f32332d3234203d3e20313531333032.roa (hash: TViUEFSUDt+dBd98dAM8WDyGrFeARupa+y25tQ3Xkpo=)
                          19: 3130332e34312e322e302f32332d3233203d3e20313334373630.roa (hash: SCN97S2wwNnV/ZgxJpPHs3iMMe/lJtzr3ZRPjKn4Z8M=)
                          20: 3130332e34312e312e302f32342d3234203d3e20313331353734.roa (hash: XLQFYLz+tc1UxhxL0QSQ9SLNiBHi7J4Tj9p/+uW97eg=)
                          21: 3130332e34312e3136342e302f32322d3232203d3e20313334373630.roa (hash: JGGbu1AchEm6gwsQvta+dJIpocamBYNAN8qvKm/lZk0=)
                          22: 34332e3234392e3137302e302f32342d3234203d3e20313331353734.roa (hash: 0u75Dz9NUfxGKoMPcV5RDsGtZmNW5DPaSlMYJBChnT8=)
                          23: 3130332e34312e322e302f32342d3234203d3e20313334373630.roa (hash: GHs4Ice+IXgOdXzh11tNCtQfPSNUyk6aC0/QcmPGzko=)
                          24: 34332e3235302e33322e302f32322d3232203d3e20313334373630.roa (hash: AQjaQMZN9JXVfWKQ/jLFTa4k1E9drRu7j1URRVSdUXo=)
                          25: 34332e3234392e3136382e302f32332d3234203d3e20313331353734.roa (hash: dIVnTnlidXm0fTkWWM5Bl7Vt6fCzb/q4QIPIzd/VdcQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:98:56:f6:68:04:44:e9:ff:c6:c7:0b:82:f3:b3:4d:1f:79:f2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
        Validity
            Not Before: Jul 23 15:13:58 2026 GMT
            Not After : Jul 24 19:06:58 2026 GMT
        Subject: CN=2FC101B938A67A90B0E89CF417A7FB6509A37974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0b:b9:63:be:64:e5:c1:5d:bf:42:42:78:42:
                    30:dd:de:d9:08:b4:7f:6a:73:1a:95:88:c9:e7:be:
                    cc:fe:9b:b7:b0:7a:52:c4:e4:b2:1e:96:15:b1:fe:
                    bc:e8:16:c0:5d:7e:3c:06:7c:6d:da:f3:ba:8d:a6:
                    83:9d:1e:de:b8:4b:b6:10:fb:9c:96:07:71:66:b3:
                    4d:c8:46:86:85:e2:22:17:50:80:f2:27:e2:f3:8b:
                    35:b2:55:9a:10:f8:5e:72:7c:b3:2b:4b:ef:7f:e9:
                    27:69:b8:d5:66:16:06:c0:c2:33:09:db:04:97:87:
                    d2:95:08:ee:94:3f:8d:34:07:16:fc:b7:d9:a2:44:
                    2b:c3:db:fb:7e:6b:de:97:a0:93:73:cb:cb:ef:93:
                    1b:50:02:97:a0:af:9a:3c:95:4e:76:ea:ba:0f:5b:
                    49:43:87:50:1a:77:65:87:86:95:14:ea:80:ac:08:
                    d1:e6:d6:fe:72:a2:03:de:05:05:fa:6e:07:1a:a4:
                    8c:67:0c:01:08:4e:d8:54:4a:c7:b8:63:92:64:a5:
                    24:70:d3:af:70:68:93:35:a7:7b:ca:52:75:19:2d:
                    14:e9:5a:1f:39:4f:b9:5f:b2:6e:62:29:bb:4b:85:
                    15:c4:73:41:95:cd:ff:18:6e:8e:19:76:01:34:d7:
                    6e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C1:01:B9:38:A6:7A:90:B0:E8:9C:F4:17:A7:FB:65:09:A3:79:74
            X509v3 Authority Key Identifier:
                keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b1:1e:5c:26:7d:36:04:0c:8b:e8:65:ac:57:b3:cb:2c:46:
         94:e2:c3:e5:81:88:6e:98:f5:7f:77:9a:99:d2:84:0d:54:ae:
         b7:6a:cb:5b:3d:fc:3b:03:f4:c0:1a:61:f9:20:52:7e:ef:53:
         b2:84:e0:8a:53:92:0d:a8:5d:1c:9a:46:5c:42:5e:e7:2e:66:
         5b:65:47:13:01:81:86:a9:0d:bd:4b:22:2f:07:b0:fa:6d:69:
         63:ae:98:ab:65:3a:d5:d5:82:4e:d6:42:2e:91:13:69:c4:4e:
         c7:38:f4:08:d8:3f:ac:03:0a:40:be:75:de:f2:56:48:c4:68:
         0b:61:44:1e:92:6a:1b:2a:fd:78:c2:15:45:1a:da:8c:56:1a:
         7a:b6:df:e1:3a:43:bf:9a:09:68:2e:c6:02:28:25:0d:8b:d1:
         df:07:68:25:4e:0d:01:ab:17:c0:ef:b5:36:4b:7d:ec:d4:40:
         aa:b0:a7:2e:b0:56:18:ff:b7:5f:19:7d:26:1e:07:41:ea:6a:
         09:ae:a2:56:21:82:81:18:a0:e8:9f:db:6f:77:f4:dd:3d:fd:
         b0:25:c1:ba:a9:4e:84:c5:5e:57:d7:61:b6:0f:56:bb:71:fa:
         1e:52:3e:22:83:6b:7e:2f:fa:81:cf:fe:77:8b:92:e7:42:76:
         3b:34:2f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:41:08 2026 by rpki-client