Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
File:                     9E09269F04335C992685B10E8709F2C95DC5E8DE.mft (raw, json)
Hash identifier:          8tPLHLlaSHoeRsqpbaTuZv6T8Gjq8Ax6hr8PqjSAWwo=
Subject key identifier:   CF:CC:FF:54:2B:EE:1D:00:EF:E1:55:0D:B4:41:A3:62:A4:47:50:C8
Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
Certificate issuer:       /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Certificate serial:       78B4E97F7C9278C71D95FD18459A87E6F9D86626
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
Manifest number:          0196
Signing time:             Sat 03 Oct 2026 05:26:24 +0000
Manifest this update:     Sat 03 Oct 2026 05:21:24 +0000
Manifest next update:     Tue 06 Oct 2026 08:14:24 +0000
Files and hashes:         1: AS55990.roa (hash: nkM515uXV5KxhmAI7tmB49q5A4TfSDQHkogbTjBP35k=)
                          2: AS134542.roa (hash: ZnbJ0YP4qJMu+eCXVjo7uSCrI+OfIj5RJi+Yrof0D/E=)
                          3: AS58466.roa (hash: I9Z3n9fJE23dB997pVSGu5JQG1MVQ7R0raaeyApmgCY=)
                          4: AS58519.roa (hash: eb2ThEg1K6SyttUCFraxaDXvdAniDXiuEUcBK1/gT9M=)
                          5: AS138421.roa (hash: bLd+4o911pilo/4tPPkRFn8P+mVGRb1EM/LhafQUCps=)
                          6: AS138407.roa (hash: 9pI59+wkO8K1TbvAaS+xQRsm37cPG1Z7yaDk9DwqL7M=)
                          7: 9E09269F04335C992685B10E8709F2C95DC5E8DE.crl (hash: U7STKiVSWHofJVLy3iOTHMCE4HnXehxTF4yD/gKUmJY=)
                          8: AS23724.roa (hash: CzmPoIYMru4oXHqB4t2rulVkZQKF94H9wWqSo1OnqY0=)
                          9: AS4808.roa (hash: hAApWxFXyo8C+Qq7n2XzlAMApFNZhGk1PzWZJa1xqPA=)
                          10: AS136907.roa (hash: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68=)
                          11: AS4811.roa (hash: y1JqGY0fG/a531KhGDAB1LksUq/V23u2Dcboa32J6qo=)
                          12: AS4812.roa (hash: vzUhrujA1c5E8/rZaOH7xpYP8zWCf2GYXeGOsmKkwI4=)
                          13: AS63727.roa (hash: /ITTIiU/HAJCnzScT//JNbcEwe4PkflqDeBXV4HXgxM=)
                          14: AS136958.roa (hash: 13bG9UhsujvYU7asFCTfasm2RqpUmwUuWVi21c8pb4g=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 09:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b4:e9:7f:7c:92:78:c7:1d:95:fd:18:45:9a:87:e6:f9:d8:66:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
        Validity
            Not Before: Oct  3 05:21:24 2026 GMT
            Not After : Oct  6 08:14:24 2026 GMT
        Subject: CN=CFCCFF542BEE1D00EFE1550DB441A362A44750C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bf:0a:e3:ec:d1:34:e0:f0:ff:59:f0:d7:58:
                    5d:f4:85:4b:43:49:a4:b8:0c:78:31:10:ec:5a:e9:
                    2e:0e:ba:5a:d4:43:11:ad:26:ca:cc:f3:ff:e9:f9:
                    46:0f:6c:e7:63:96:96:41:71:4a:af:da:a1:04:40:
                    58:76:41:fc:2b:36:29:a6:5c:66:0f:88:60:69:57:
                    5b:4c:72:ec:fa:f8:0c:68:ac:a8:c2:6a:4b:58:1e:
                    4a:73:9a:42:a1:b2:f0:6b:0c:3c:c7:14:33:ed:54:
                    6a:64:49:5a:34:d7:c6:67:25:b9:e5:4d:81:4c:b1:
                    2f:2d:e8:36:02:6c:ae:8b:52:0b:e7:69:d4:75:84:
                    0c:94:35:06:f4:ce:42:2d:38:81:d9:1b:82:20:78:
                    7c:15:dd:30:2f:ac:0c:91:8c:9a:3e:14:5b:c5:18:
                    e1:5e:19:ab:0f:4a:bc:1c:89:2f:31:41:3d:e8:ba:
                    f0:77:7c:67:39:f8:76:e7:6d:b2:9a:e9:4e:db:90:
                    db:20:97:96:b5:38:e5:a9:b9:f1:b2:2a:f4:af:41:
                    fb:8c:60:a1:ea:56:6d:f6:c8:1c:e0:e2:5e:d4:40:
                    e2:28:16:ff:ea:a4:11:4d:0e:5d:7a:52:8a:ae:ae:
                    0c:fe:44:c3:49:b9:b3:10:6a:d8:e0:75:20:e0:4c:
                    e4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CC:FF:54:2B:EE:1D:00:EF:E1:55:0D:B4:41:A3:62:A4:47:50:C8
            X509v3 Authority Key Identifier:
                keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:7f:70:fb:7e:e7:39:99:b6:7b:38:11:54:ac:8a:9c:db:5b:
         d5:93:51:28:51:87:83:74:5f:3e:cc:42:00:80:2e:8f:a5:0d:
         49:70:32:0c:59:7f:01:6b:4e:86:2b:66:06:8c:51:41:92:fa:
         6e:93:d8:fb:cb:7a:87:62:68:de:cb:ab:44:19:d6:f6:52:43:
         d5:61:ae:12:31:22:4f:43:25:2d:02:a5:d9:62:0c:aa:0a:08:
         94:2e:a3:3e:02:f3:28:5e:90:8b:a8:2c:38:a0:f4:ea:48:84:
         64:c8:16:23:09:81:e2:fc:d5:53:55:e0:e6:3e:41:6e:3e:05:
         e0:7d:d6:da:6d:7d:e0:d9:68:91:11:67:b2:e7:92:9e:16:f1:
         27:7a:76:0e:94:c5:54:45:a6:1f:69:d8:e8:43:25:cb:8e:2e:
         7c:9f:73:14:80:33:d7:e3:55:c4:26:73:63:97:ba:b9:76:bd:
         80:bb:72:84:26:19:73:65:e4:4b:67:db:2f:60:08:35:64:f2:
         27:9b:e6:1e:52:75:40:70:73:c3:8c:86:ed:47:30:48:7b:bb:
         0e:a6:ea:c8:f1:3c:19:c1:e2:c6:82:95:82:ae:be:01:99:e3:
         ec:07:bf:f8:01:a5:18:d6:e0:59:55:fd:f1:ef:0c:5b:38:bf:
         0e:2e:05:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:08:07 2026 by rpki-client