Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
File:                     FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft (raw, json)
Hash identifier:          Dw+tuidcUiNZxvZp3MT0M2/aLT1W/oAr35I9BLqb6Pc=
Subject key identifier:   83:8A:44:D5:6C:F1:EA:1C:9D:C3:D3:CF:D5:A7:D6:2E:DC:A5:7B:31
Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
Certificate issuer:       /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Certificate serial:       4766D89B8AFF4F01624E7B6426A042C15D90BFBB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
Manifest number:          F9
Signing time:             Fri 24 Jul 2026 04:55:24 +0000
Manifest this update:     Fri 24 Jul 2026 04:50:24 +0000
Manifest next update:     Sat 25 Jul 2026 07:04:24 +0000
Files and hashes:         1: 3138332e38312e3137352e302f32342d3234203d3e20313334373030.roa (hash: uGrRlKYLTK/sFUT1l1tlQ69aFEKSWWPVInTfU1ROs+c=)
                          2: 3138332e38312e3137322e302f32342d3234203d3e20313334373030.roa (hash: pP2HsBw8GbLJ8b/HmmvEmloPtB3FX7UWLbclVHLtD/Q=)
                          3: 3138322e35302e342e302f32342d3234203d3e20313334373030.roa (hash: 7CecH3wQQhP3mriuWVbByAow+9bSvF5UFIWjRKR4SNQ=)
                          4: 3138322e35302e372e302f32342d3234203d3e20313334373030.roa (hash: HJEdqcX2Jt3b2ii8CCL6/rg/TVCpvfDAV+WX25IkB3E=)
                          5: 3138332e38312e3137332e302f32342d3234203d3e20313334373030.roa (hash: lC9BH/8Dkc5XyJPt1hnvPrCRZqXceORZdULnSdFi0Yk=)
                          6: 3131342e3131322e322e302f32342d3234203d3e20313334373030.roa (hash: +2G6erfa1rLR6JGdLwaEKJTHVZA9qtqDhBJ39tqXT1I=)
                          7: 3131342e3131322e31352e302f32342d3234203d3e20313334373030.roa (hash: qGGN9z1v3J7blrnZfsZh1ZYNPqm6d1dGjMNkeBUwoBw=)
                          8: 3131342e3131322e302e302f32342d3234203d3e20313334373030.roa (hash: tjD/TrqFoZzLIuXKc0gCp7+vVTuql9sVd0NTSQ+0eac=)
                          9: 3230322e36392e372e302f32342d3234203d3e20313334373030.roa (hash: 4n0Qyy7FcC7jUzGPnq9KSZS09KYvJ+E8IYZo+rkyA38=)
                          10: 3138322e35302e352e302f32342d3234203d3e20313334373030.roa (hash: Hc6qPVaMuIOmLxt0qBk9KufKDt6pDV+7wig6bn4hjro=)
                          11: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl (hash: Lfvk1DLHOu+XfnHaXH0KmisM+fKG9YGS2utvTWvc1LY=)
                          12: 3131342e3131322e31342e302f32342d3234203d3e20313334373030.roa (hash: UhMCkMnvGroSwQ7ia+m7IKuB2v4mMQqHNofiuVYxCx0=)
                          13: 3131362e3139362e31352e302f32342d3234203d3e20313334373030.roa (hash: 6lUh4H/tWfmt6Eo7IJApDXDqi/4+5MMSqK6+ovuN2NY=)
                          14: 3130332e32302e34372e302f32342d3234203d3e20313334373030.roa (hash: +O7jCarcVhvkxjOG9WOSwYElZHlomMQOH8c2i2+MVfc=)
                          15: 3131342e3131322e312e302f32342d3234203d3e20313334373030.roa (hash: AxAmAqNBGwbgJ1KIWPX8PWjqXDXzngLGjooerBZTBeM=)
                          16: 3130332e32302e34342e302f32342d3234203d3e20313334373030.roa (hash: X2zulMdAN7rsvwTgL+Vh9cmDskH+HpHFJbGbdH5qCL8=)
                          17: 3230322e36392e362e302f32342d3234203d3e20313334373030.roa (hash: CYP2YPEp8Kc9YlJ9Nuiwh9AIGy11PgG48aHgzQAQudM=)
                          18: 3138332e38312e3137342e302f32342d3234203d3e20313334373030.roa (hash: gmGr7tb+LJTZbz2XvRkEJr+CEAbCgnv2Ur01noSTdE8=)
                          19: 3130332e32302e34352e302f32342d3234203d3e20313334373030.roa (hash: rIstrkT87fdp0wtxjRupmhJeeERGmKAjq11MMup2jig=)
                          20: 3138322e35302e362e302f32342d3234203d3e20313334373030.roa (hash: ytyDh9Lr8tKa9QM9mNvELKanc8jjPZxpn6X8jbNKF7o=)
                          21: 3131342e3131322e332e302f32342d3234203d3e20313334373030.roa (hash: pMkr4NT6GJvyZexXjysfHkprjU2pT3si++sOJw16JLE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:66:d8:9b:8a:ff:4f:01:62:4e:7b:64:26:a0:42:c1:5d:90:bf:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
        Validity
            Not Before: Jul 24 04:50:24 2026 GMT
            Not After : Jul 25 07:04:24 2026 GMT
        Subject: CN=838A44D56CF1EA1C9DC3D3CFD5A7D62EDCA57B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:99:42:f0:a6:cf:16:13:23:2f:dd:59:11:
                    25:36:6a:b4:88:19:f9:63:97:3c:6d:69:72:8e:fc:
                    de:36:da:48:8d:a8:ea:c3:a6:d6:87:96:bd:a7:f3:
                    74:b0:88:aa:89:ad:4a:41:f5:ed:c5:44:c1:db:d1:
                    80:72:0f:61:66:1c:97:6b:bb:44:fa:d4:d2:53:31:
                    d0:0d:38:80:0a:64:fd:6a:75:c0:0c:c6:db:65:60:
                    0c:26:02:dc:46:9f:3e:6c:74:56:74:9b:96:ab:18:
                    82:51:67:b9:84:be:aa:fa:d7:25:51:a0:91:ca:42:
                    ab:4d:55:78:78:63:97:6c:fc:26:8a:5b:38:e1:c9:
                    b6:b9:a3:b2:9d:05:c4:ad:89:29:f4:b6:15:e2:d9:
                    aa:ac:92:57:78:2b:2e:92:13:6d:46:9c:07:75:c8:
                    9e:3b:98:a2:2c:07:b2:e5:e1:53:6f:46:46:d8:17:
                    53:71:bc:3b:7e:30:c9:e6:62:aa:84:e4:4c:24:31:
                    0c:7f:90:d8:84:00:ad:1f:c8:65:48:41:1a:15:37:
                    ab:e0:8f:88:ec:43:4d:81:72:c3:f8:5e:0a:d2:8d:
                    3d:47:3f:a0:6c:7e:f2:86:d7:9c:81:e2:cc:3e:59:
                    62:9f:a0:91:53:60:9e:ad:e5:8b:84:f6:a6:d6:c8:
                    cb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8A:44:D5:6C:F1:EA:1C:9D:C3:D3:CF:D5:A7:D6:2E:DC:A5:7B:31
            X509v3 Authority Key Identifier:
                keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c6:64:21:77:e8:49:15:d6:45:84:23:0f:22:da:17:fd:16:
         82:e0:49:31:51:92:44:71:0d:d2:48:62:4e:95:bf:d1:b8:b0:
         3d:8a:f9:df:e6:1c:5b:cf:78:1b:57:55:de:1a:b9:41:73:a3:
         1a:bc:e0:b4:ba:8e:45:6f:a4:69:ca:b9:fb:57:50:06:d4:de:
         3d:41:a2:a6:16:47:e2:52:ca:c0:2e:51:8a:bb:f4:98:fa:6e:
         e1:3c:7a:c1:c9:dd:40:94:eb:81:05:0b:b0:eb:34:9c:93:26:
         fb:18:23:f7:70:13:49:37:bb:45:6d:da:ac:f9:4c:3e:63:76:
         73:17:d3:33:13:d5:f7:64:f1:19:ba:ea:ef:d0:d2:6a:da:81:
         7e:fe:04:34:ff:ad:e4:6b:95:c4:5e:c9:e2:23:5e:2e:65:ed:
         a0:28:44:61:c0:4f:c7:56:55:ef:ce:27:64:1c:bc:90:fa:32:
         fc:4b:33:92:4b:28:34:7f:a7:e7:4f:0f:26:07:29:fa:3f:66:
         91:11:0a:98:58:c9:4d:dd:1f:af:59:cc:08:1e:79:de:75:80:
         52:2b:a9:61:bf:0d:ee:4e:ef:94:51:a6:59:4c:c1:79:59:ba:
         de:3d:26:f2:10:bc:a3:ce:53:1a:a9:29:7d:a1:49:ee:b3:c7:
         80:f7:d4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:50:08 2026 by rpki-client