Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
File:                     FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft (raw, json)
Hash identifier:          uPnGvXH6Mls9UVt/co/jiGDqpNuBZjyM59ZDYRaquAA=
Subject key identifier:   CA:10:C8:76:9A:C9:66:B6:1B:1E:7B:1D:3F:7A:4B:21:F8:DD:4A:F7
Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
Certificate issuer:       /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Certificate serial:       3A717C652CE018963CD28AE77F8C0746D74ECDED
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
Manifest number:          99
Signing time:             Wed 13 May 2026 00:25:49 +0000
Manifest this update:     Wed 13 May 2026 00:20:49 +0000
Manifest next update:     Thu 14 May 2026 01:42:49 +0000
Files and hashes:         1: 3131342e3131322e312e302f32342d3234203d3e20313334373030.roa (hash: AxAmAqNBGwbgJ1KIWPX8PWjqXDXzngLGjooerBZTBeM=)
                          2: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl (hash: Y+5UPZas3S9i+y8E6TIrCC7WqwO23h1LmMf8eWfT0SM=)
                          3: 3138332e38312e3137342e302f32342d3234203d3e20313334373030.roa (hash: gmGr7tb+LJTZbz2XvRkEJr+CEAbCgnv2Ur01noSTdE8=)
                          4: 3131342e3131322e31342e302f32342d3234203d3e20313334373030.roa (hash: UhMCkMnvGroSwQ7ia+m7IKuB2v4mMQqHNofiuVYxCx0=)
                          5: 3230322e36392e372e302f32342d3234203d3e20313334373030.roa (hash: 4n0Qyy7FcC7jUzGPnq9KSZS09KYvJ+E8IYZo+rkyA38=)
                          6: 3230322e36392e362e302f32342d3234203d3e20313334373030.roa (hash: CYP2YPEp8Kc9YlJ9Nuiwh9AIGy11PgG48aHgzQAQudM=)
                          7: 3130332e32302e34372e302f32342d3234203d3e20313334373030.roa (hash: +O7jCarcVhvkxjOG9WOSwYElZHlomMQOH8c2i2+MVfc=)
                          8: 3131362e3139362e31352e302f32342d3234203d3e20313334373030.roa (hash: 6lUh4H/tWfmt6Eo7IJApDXDqi/4+5MMSqK6+ovuN2NY=)
                          9: 3138332e38312e3137332e302f32342d3234203d3e20313334373030.roa (hash: lC9BH/8Dkc5XyJPt1hnvPrCRZqXceORZdULnSdFi0Yk=)
                          10: 3131342e3131322e332e302f32342d3234203d3e20313334373030.roa (hash: pMkr4NT6GJvyZexXjysfHkprjU2pT3si++sOJw16JLE=)
                          11: 3130332e32302e34352e302f32342d3234203d3e20313334373030.roa (hash: rIstrkT87fdp0wtxjRupmhJeeERGmKAjq11MMup2jig=)
                          12: 3138332e38312e3137352e302f32342d3234203d3e20313334373030.roa (hash: uGrRlKYLTK/sFUT1l1tlQ69aFEKSWWPVInTfU1ROs+c=)
                          13: 3138322e35302e342e302f32342d3234203d3e20313334373030.roa (hash: 7CecH3wQQhP3mriuWVbByAow+9bSvF5UFIWjRKR4SNQ=)
                          14: 3131342e3131322e302e302f32342d3234203d3e20313334373030.roa (hash: tjD/TrqFoZzLIuXKc0gCp7+vVTuql9sVd0NTSQ+0eac=)
                          15: 3138332e38312e3137322e302f32342d3234203d3e20313334373030.roa (hash: pP2HsBw8GbLJ8b/HmmvEmloPtB3FX7UWLbclVHLtD/Q=)
                          16: 3138322e35302e352e302f32342d3234203d3e20313334373030.roa (hash: Hc6qPVaMuIOmLxt0qBk9KufKDt6pDV+7wig6bn4hjro=)
                          17: 3130332e32302e34342e302f32342d3234203d3e20313334373030.roa (hash: X2zulMdAN7rsvwTgL+Vh9cmDskH+HpHFJbGbdH5qCL8=)
                          18: 3131342e3131322e31352e302f32342d3234203d3e20313334373030.roa (hash: qGGN9z1v3J7blrnZfsZh1ZYNPqm6d1dGjMNkeBUwoBw=)
                          19: 3138322e35302e372e302f32342d3234203d3e20313334373030.roa (hash: HJEdqcX2Jt3b2ii8CCL6/rg/TVCpvfDAV+WX25IkB3E=)
                          20: 3131342e3131322e322e302f32342d3234203d3e20313334373030.roa (hash: +2G6erfa1rLR6JGdLwaEKJTHVZA9qtqDhBJ39tqXT1I=)
                          21: 3138322e35302e362e302f32342d3234203d3e20313334373030.roa (hash: ytyDh9Lr8tKa9QM9mNvELKanc8jjPZxpn6X8jbNKF7o=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:71:7c:65:2c:e0:18:96:3c:d2:8a:e7:7f:8c:07:46:d7:4e:cd:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
        Validity
            Not Before: May 13 00:20:49 2026 GMT
            Not After : May 14 01:42:49 2026 GMT
        Subject: CN=CA10C8769AC966B61B1E7B1D3F7A4B21F8DD4AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3d:91:38:8c:c9:60:b1:ea:05:54:94:9d:54:
                    67:64:9f:d8:56:14:16:89:b6:2a:b3:4f:0f:78:ae:
                    0d:07:d2:8c:c9:1c:23:a5:13:2d:0f:10:c6:a6:5e:
                    72:92:6f:49:35:79:bc:45:2e:09:03:e4:6b:75:ba:
                    4e:86:cf:1d:da:ba:1f:99:25:d2:ba:91:b8:be:9d:
                    f9:33:94:5d:cd:95:ab:15:01:f2:88:09:a7:8a:ff:
                    32:0f:69:7d:89:22:eb:18:28:5c:3a:45:fa:e1:8a:
                    d6:b8:e4:72:0b:72:19:5c:b4:6d:86:bb:5d:e9:0b:
                    ec:a8:86:75:ba:c8:60:b4:7b:67:f5:db:ec:e9:1a:
                    bf:06:24:bb:55:50:d2:b3:5c:c9:b0:98:a1:04:7b:
                    f2:28:67:d3:ce:6e:38:aa:b3:fc:50:1c:d6:28:6f:
                    83:1e:7d:45:5b:ab:a5:e4:52:da:74:cf:fd:55:5f:
                    67:f3:74:73:1d:d2:fe:37:be:90:46:01:16:4e:11:
                    25:87:dc:0e:9a:b7:57:8f:34:1a:56:16:86:02:de:
                    c4:32:34:74:e8:b4:44:e4:df:60:cb:be:8b:63:4b:
                    2d:26:be:ea:7a:40:a1:6b:39:78:50:02:ae:e6:26:
                    47:16:ef:bf:c5:38:b2:0c:b8:56:34:80:31:33:81:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:10:C8:76:9A:C9:66:B6:1B:1E:7B:1D:3F:7A:4B:21:F8:DD:4A:F7
            X509v3 Authority Key Identifier:
                keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:8f:01:8d:55:6d:45:47:54:c4:19:80:e0:32:80:fb:c8:72:
         04:e0:58:e1:e7:ce:a3:db:f5:05:af:dd:17:bc:d8:f2:a4:69:
         a8:18:20:1b:27:b3:9a:14:6e:68:90:31:51:de:ea:06:18:38:
         67:87:fa:78:38:11:a2:96:0b:69:17:01:1d:c7:bf:78:e9:8c:
         1f:97:c6:b6:e2:3b:c1:34:79:59:37:27:5f:d8:5a:fd:7e:58:
         f5:8c:3e:dc:3e:50:c6:2e:a9:d8:91:90:9f:f1:bb:1f:78:04:
         88:3f:bb:35:44:6e:2d:10:72:22:5c:50:df:5b:9a:1d:49:95:
         66:38:48:f1:05:8a:64:fe:d5:d7:a7:fb:b0:8e:38:f1:64:5d:
         3b:d2:25:03:0e:ed:b5:92:97:0b:b1:7e:68:af:56:35:e2:5b:
         10:e5:68:d8:57:d1:78:12:19:d1:33:72:d6:46:38:48:e2:a4:
         06:26:8c:d9:ce:ce:c8:2d:c8:11:03:c0:bb:d5:3e:4f:7c:9d:
         61:2f:c6:e7:72:ff:6d:d8:47:ed:f0:c1:87:6f:c0:64:72:b7:
         51:cf:83:69:6f:bb:f8:52:6e:0d:40:c3:38:9a:ed:04:a5:27:
         66:38:f2:a4:19:c6:5e:9d:20:3a:d0:d0:f9:77:67:6b:60:9f:
         81:3b:1d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:53:56 2026 by rpki-client