Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
File:                     71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft (raw, json)
Hash identifier:          99okA8Sr7KXRFoowCnkVMXIDACscD2OuaFYRvrnV/4A=
Subject key identifier:   E5:D0:3D:70:37:70:69:DF:AB:FE:1A:FA:2B:99:B8:B5:DB:72:04:0B
Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0
Certificate issuer:       /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
Certificate serial:       46C8624CAA4C690E5BC7ADB5DC921193FF19AEF9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
Manifest number:          9A
Signing time:             Tue 12 May 2026 19:30:42 +0000
Manifest this update:     Tue 12 May 2026 19:25:42 +0000
Manifest next update:     Wed 13 May 2026 21:27:42 +0000
Files and hashes:         1: 3135302e3234322e3232342e302f32322d3234203d3e20313339303231.roa (hash: edMuLWIKpK7nnE5WfHg22oT2gpNprnepwqo5yESrIQg=)
                          2: 3231382e3234372e38342e302f32332d3233203d3e20313339303231.roa (hash: BUq8dikEBD9/E5M+chQ5i2WOW0qXw/yVjFpuEKKpDN0=)
                          3: 3231382e3234372e36342e302f32302d3230203d3e20313339303231.roa (hash: FdGGm+XsvdXdDtBCIUq2SJv8PFv1A3KuSOTHHDzNHEM=)
                          4: 3231392e3233342e31362e302f32312d3231203d3e20313339303231.roa (hash: A8e2s5zCPHJBFo2lyNcLi8vC/0rHrfeEjoL+zuoBMBk=)
                          5: 34332e3235302e3131362e302f32322d3234203d3e20313339303231.roa (hash: P69vzvvJ+gEfcs3vd5YGHFAOsQiX5VcBoP5Rnr+a/ik=)
                          6: 3231382e3234372e38362e302f32332d3233203d3e20313339303231.roa (hash: 2Qig5JQupD4VU7rBafbTCZkcUKK1Dademz1jBYMnzLM=)
                          7: 3231392e3233342e31362e302f32302d3234203d3e20313339303231.roa (hash: Aa+WxdVJp40uEdOeWIgUVNNnp7psrbPdAACBmCHyDjw=)
                          8: 3130332e3233352e3138342e302f32322d3234203d3e20313339303231.roa (hash: gwsYWrqcYK0ktFka8dQFWvrHKpCXna1yR/uwRK4K9H4=)
                          9: 3130332e3133392e322e302f32332d3233203d3e20313339303231.roa (hash: cmNU4CxgdYWOHffUZLqvma1/Uw6drOsIy7inBDALEaI=)
                          10: 3231392e3233342e382e302f32312d3234203d3e20313339303231.roa (hash: neFIvyXxaBO4GKvxdumHyTp3Jegmpd6j41pGZrduoe4=)
                          11: 3231392e3233342e302e302f32312d3234203d3e20313339303231.roa (hash: +dKM/gllg2/lgDr8VeqMWJOTPZBzrL20J3kdBce6JMo=)
                          12: 3130332e3130382e3139322e302f32322d3234203d3e20313339303231.roa (hash: 6DbMucsNRkT5GNRQ0no2LmjOH16k8wdSciEnNtEFfbQ=)
                          13: 3231382e3234372e38302e302f32322d3232203d3e20313339303231.roa (hash: TqLEMrsq1Mn2IIGkO5wiweM1cBFEqjZzxJ46X/Iy/Xw=)
                          14: 3231382e3234372e38382e302f32312d3231203d3e20313339303231.roa (hash: rVh9TWsozOWM1/9pIJGq8VsQr06FU37yrVIW3pKerpM=)
                          15: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl (hash: SJfj96XTgSjF3EylhHeUpulURXdad+EYlagsVikUFHA=)
                          16: 3130332e3133392e302e302f32332d3233203d3e20313339303231.roa (hash: jX9Cq4xrftQkgKe8M8W18N3LiOowzvHISoWn9fhDKJs=)
                          17: 3231382e3234372e36342e302f31392d3139203d3e20313339303231.roa (hash: OkmPu73amMTWDVpTR3TyQTRJkDCDoCr/0/CnTI4191k=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c8:62:4c:aa:4c:69:0e:5b:c7:ad:b5:dc:92:11:93:ff:19:ae:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
        Validity
            Not Before: May 12 19:25:42 2026 GMT
            Not After : May 13 21:27:42 2026 GMT
        Subject: CN=E5D03D70377069DFABFE1AFA2B99B8B5DB72040B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e3:65:6f:90:43:f9:34:89:e3:b8:5c:b4:30:
                    4c:cc:d5:87:db:90:23:f5:29:45:5c:7b:cb:80:bb:
                    53:3c:7a:06:43:4b:ce:78:b8:9e:29:6c:66:52:3f:
                    05:45:3f:ea:53:59:d5:5c:12:a2:ab:ec:66:45:f7:
                    26:c8:69:55:6c:9e:10:3b:bf:00:72:60:37:f7:47:
                    e8:a7:fc:60:2a:c5:d9:02:c4:30:3a:a2:d5:a2:b2:
                    2b:00:e5:92:b3:ad:db:02:c7:04:31:de:5a:a7:30:
                    cd:97:f0:40:3e:87:ac:3e:20:8d:b3:98:28:26:69:
                    71:a5:04:50:7c:e5:93:2b:9b:92:51:01:11:f9:01:
                    20:b9:5d:36:a5:00:b9:67:bb:03:7c:36:00:94:7d:
                    21:57:1e:2f:28:11:45:0a:5e:52:5d:19:cc:cc:20:
                    9b:b5:19:c7:94:b9:6e:b3:80:ca:4b:73:45:34:19:
                    9d:be:86:2c:02:89:23:b2:a0:a1:30:66:ed:d1:f3:
                    7b:1d:16:2a:f0:96:21:4b:b3:27:27:5d:52:69:f9:
                    62:36:31:75:a8:b4:4c:b5:66:59:dd:e1:0a:fc:a9:
                    37:c3:a7:47:03:b2:5b:f7:d2:1a:b0:b5:e6:fc:d1:
                    6b:89:f4:d8:ab:05:5d:88:7b:0c:d7:dd:af:51:19:
                    a2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D0:3D:70:37:70:69:DF:AB:FE:1A:FA:2B:99:B8:B5:DB:72:04:0B
            X509v3 Authority Key Identifier:
                keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:00:8e:57:ab:9c:35:c6:45:a9:f2:0e:43:7a:4e:f2:9c:72:
         be:8e:cc:6b:cc:3c:dc:46:a8:ce:70:cd:ce:3f:31:ad:51:3d:
         1a:62:03:b5:dd:cd:48:30:4b:98:6d:f6:9c:f7:0d:fa:a0:e9:
         5d:8a:e3:f2:cd:a5:0e:63:e3:de:46:b7:13:cb:67:8f:9c:35:
         6c:bf:56:b6:4c:64:f5:6c:a3:43:40:99:d2:3d:79:17:27:c7:
         d6:59:f6:9d:3e:1e:cc:70:99:fb:cd:0e:f7:d4:81:d9:26:7e:
         43:d4:1e:4d:65:90:e3:56:0e:99:8c:30:31:c0:9e:21:78:39:
         0e:a8:09:37:0b:06:75:5d:9f:76:22:cf:e8:42:34:a6:81:11:
         f6:22:40:2d:a6:5e:81:a8:90:50:1a:df:71:16:7b:79:ae:f8:
         8b:2d:25:21:b7:15:2d:c0:4f:da:40:85:13:b3:53:3b:7f:b2:
         02:4f:55:b7:47:ee:0e:47:60:06:f8:e7:f3:c0:e6:cc:00:18:
         f5:e6:7c:a7:1a:65:e5:19:d9:28:ab:37:47:73:25:63:ec:00:
         bb:ff:f1:bc:cc:24:f2:59:cd:1c:dc:9d:16:e4:db:a5:74:f5:
         f8:04:21:2e:f2:47:ef:83:15:3a:b2:20:5a:8f:c7:99:a3:81:
         22:05:e0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:17 2026 by rpki-client