Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
File:                     9B22C19D842E45AA84439366694E4C828C309CEE.mft (raw, json)
Hash identifier:          JEKqOnDiF+FzIaW0bqOloGS9I1PQZa9dfFkAUXML3dw=
Subject key identifier:   39:49:02:2E:01:0D:6B:59:9F:14:95:F4:5B:45:96:2C:A2:C5:99:86
Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
Certificate issuer:       /CN=9B22C19D842E45AA84439366694E4C828C309CEE
Certificate serial:       69DA13078817CBAF45CFBB7848F6BF60B2E4F52E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
Manifest number:          010E
Signing time:             Fri 24 Jul 2026 08:35:46 +0000
Manifest this update:     Fri 24 Jul 2026 08:30:46 +0000
Manifest next update:     Sat 25 Jul 2026 11:14:46 +0000
Files and hashes:         1: 32372e302e3230382e302f32322d3232203d3e203233363530.roa (hash: mis4Fg6j4oEjPSppTkgYv+gKi6EKDKX+hCYTZN1jN8s=)
                          2: 32372e302e3231322e302f32322d3232203d3e2030.roa (hash: +iZTzZqG/Rk14nBbLideA4U8/BW7aonvG3f2nUwUPSc=)
                          3: 9B22C19D842E45AA84439366694E4C828C309CEE.crl (hash: VqmxbwOzJy6FkCEf5iRSTERnTtJ3PPdAr3+B2AiKGbA=)
                          4: 32372e302e3230342e302f32342d3234203d3e203233363530.roa (hash: kmojd1hZzl8eLQcyhLIgSj+c6qsc+7TrYy2dOio3d9M=)
                          5: 32372e302e3230382e302f32312d3231203d3e203233363530.roa (hash: W8GeqtiB4Bpe9lZt2oYz7ItMcwW4KI9RTCNyPrXs30E=)
                          6: 323430363a653738303a3a2f33322d3332203d3e2030.roa (hash: 4YJSYUZz+y0drZu0mLeTComBF+bUtE2t5ycXyBEG5cE=)
                          7: 32372e302e3231322e302f32342d3234203d3e2030.roa (hash: 1gxpHLl2efiqy1rtRuIFJL0j7IXIqK55wGOLHOlWhC8=)
                          8: 3130332e3230382e34382e302f32322d3232203d3e203233363530.roa (hash: d9aV06/I/yR7XXF+WUMOhwENi/Ebl/QjLsljFViuUts=)
                          9: 32372e302e3230372e302f32342d3234203d3e203233363530.roa (hash: VWps80thoEZA5PpxAR3RVodjSjiD0JLOvGC+4Emt3yQ=)
                          10: 32372e302e3231322e302f32322d3232203d3e203233363530.roa (hash: BnR+PZKY+8aUOoAAdYWVdmIHPHgi3uTNp1OUx0HV2Z0=)
                          11: 32372e302e3230342e302f32322d3232203d3e203233363530.roa (hash: sBmAoVfm8kE81yTw5+u0KE1EiqXy58q7aq+7I1OCX2I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:da:13:07:88:17:cb:af:45:cf:bb:78:48:f6:bf:60:b2:e4:f5:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE
        Validity
            Not Before: Jul 24 08:30:46 2026 GMT
            Not After : Jul 25 11:14:46 2026 GMT
        Subject: CN=3949022E010D6B599F1495F45B45962CA2C59986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8b:29:23:f4:82:24:3f:38:4d:12:a4:55:36:
                    a1:2d:0a:70:31:d6:cc:5e:e9:00:71:9c:4a:4d:65:
                    28:49:2e:93:3f:63:e6:ab:43:cb:1e:d2:61:76:77:
                    3b:af:73:cb:6f:04:6d:58:26:40:d8:c3:e6:39:55:
                    95:a6:8d:d3:c1:e1:f0:6a:22:c9:2e:b1:68:d7:80:
                    93:c0:07:40:f5:36:14:cd:39:93:5e:9c:68:85:e4:
                    a8:19:e3:a8:3f:17:7f:11:06:6a:94:75:de:7d:3e:
                    bb:06:42:c7:84:04:2c:6c:e0:ea:f7:85:eb:02:43:
                    5d:92:0d:01:f4:ff:a9:1e:32:61:db:2f:cf:17:13:
                    4a:c5:b0:65:83:7d:a0:62:d2:2e:4f:26:1b:b3:59:
                    17:1a:4e:08:30:08:3d:cb:8d:c1:17:2f:e1:63:a1:
                    13:06:0d:d9:eb:06:af:4b:26:f4:8c:e3:f5:8d:86:
                    d6:a9:ed:1d:f7:63:01:70:2b:81:8b:e9:e6:40:3d:
                    ea:3d:06:dd:bb:6f:6e:99:36:6c:92:55:31:99:9a:
                    7f:d4:aa:e9:47:44:21:b1:c3:f5:e0:7e:45:e4:e0:
                    8f:31:94:70:d1:ff:15:fe:e4:8c:a5:03:5e:0d:b8:
                    8b:59:cf:cf:72:51:24:72:8a:f8:28:a0:ab:80:8e:
                    32:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:49:02:2E:01:0D:6B:59:9F:14:95:F4:5B:45:96:2C:A2:C5:99:86
            X509v3 Authority Key Identifier:
                keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a0:1f:45:1c:b1:34:80:34:01:20:fb:a0:43:be:3e:27:1e:
         79:d4:10:6d:c1:0f:28:7b:06:84:7f:35:e6:79:7b:ad:8f:98:
         5e:a2:a4:15:85:83:6b:a3:a8:00:78:15:7e:fc:ce:a5:89:15:
         1b:1d:91:f8:db:16:06:08:b7:7e:c5:5f:05:a0:6f:0f:ba:b2:
         61:ba:c1:70:fb:08:59:89:04:49:a0:0e:78:73:14:d3:1d:e7:
         9a:71:cd:f1:b6:5e:71:bb:56:9a:de:17:3d:35:83:cc:27:8d:
         95:08:74:cd:9a:00:a5:0a:f9:84:29:0a:e3:5c:9d:16:62:18:
         0d:4d:38:d4:8d:42:0f:34:bd:3f:c2:74:13:8b:c6:f5:f4:db:
         ba:05:59:14:c6:a3:4f:b1:37:d2:8d:a0:c4:5a:09:a4:66:68:
         82:f1:9e:bf:1f:d3:5c:47:63:d1:32:e5:66:74:83:30:99:3e:
         08:67:4e:27:50:11:be:fc:e6:76:c5:f5:14:61:5f:5e:9a:35:
         b8:c9:6d:06:00:b5:e9:2d:42:e7:91:34:16:c0:50:95:86:ab:
         8c:a1:a8:cb:7a:4b:9d:e4:f3:fa:49:6a:6c:42:fd:e1:60:15:
         14:8d:10:1c:0f:99:3b:47:a5:93:2a:70:c7:77:15:13:bc:7e:
         62:e9:61:e3
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUadoTB4gXy69Fz7t4SPa/YLLk9S4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4
QzMwOUNFRTAeFw0yNjA3MjQwODMwNDZaFw0yNjA3MjUxMTE0NDZaMDMxMTAvBgNV
BAMTKDM5NDkwMjJFMDEwRDZCNTk5RjE0OTVGNDVCNDU5NjJDQTJDNTk5ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIiykj9IIkPzhNEqRVNqEtCnAx
1sxe6QBxnEpNZShJLpM/Y+arQ8se0mF2dzuvc8tvBG1YJkDYw+Y5VZWmjdPB4fBq
IskusWjXgJPAB0D1NhTNOZNenGiF5KgZ46g/F38RBmqUdd59PrsGQseEBCxs4Or3
hesCQ12SDQH0/6keMmHbL88XE0rFsGWDfaBi0i5PJhuzWRcaTggwCD3LjcEXL+Fj
oRMGDdnrBq9LJvSM4/WNhtap7R33YwFwK4GL6eZAPeo9Bt27b26ZNmySVTGZmn/U
qulHRCGxw/XgfkXk4I8xlHDR/xX+5IylA14NuItZz89yUSRyivgooKuAjjILAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUOUkCLgENa1mfFJX0W0WWLKLFmYYwHwYDVR0j
BBgwFoAUmyLBnYQuRaqEQ5NmaU5MgowwnO4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTcyMTg1OS8wLzlCMjJDMTlEODQyRTQ1QUE4NDQzOTM2NjY5NEU0
QzgyOEMzMDlDRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4QzMwOUNFRS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk3MjE4NTkvMC85QjIyQzE5RDg0MkU0
NUFBODQ0MzkzNjY2OTRFNEM4MjhDMzA5Q0VFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqAfRRyxNIA0
ASD7oEO+PiceedQQbcEPKHsGhH815nl7rY+YXqKkFYWDa6OoAHgVfvzOpYkVGx2R
+NsWBgi3fsVfBaBvD7qyYbrBcPsIWYkESaAOeHMU0x3nmnHN8bZecbtWmt4XPTWD
zCeNlQh0zZoApQr5hCkK41ydFmIYDU041I1CDzS9P8J0E4vG9fTbugVZFMajT7E3
0o2gxFoJpGZogvGevx/TXEdj0TLlZnSDMJk+CGdOJ1ARvvzmdsX1FGFfXpo1uMlt
BgC16S1C55E0FsBQlYarjKGoy3pLneTz+klqbEL94WAVFI0QHA+ZO0elkypwx3cV
E7x+Yulh4w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:42:29 2026 by rpki-client