Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
File:                     727633DA248F6AC4626E0DF9B33145B74FD58F03.mft (raw, json)
Hash identifier:          UHXz/qMAn7dICQW53t/ad5vNCrpHt/ViHKBlbumaznQ=
Subject key identifier:   8C:28:27:ED:70:78:BB:B4:E5:8A:A6:C3:45:1D:EE:7F:73:89:46:C6
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Certificate issuer:       /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial:       6AAF4E24A06976918EF9887B4A37390AA194510D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
Manifest number:          8F
Signing time:             Fri 24 Jul 2026 01:30:01 +0000
Manifest this update:     Fri 24 Jul 2026 01:25:01 +0000
Manifest next update:     Sat 25 Jul 2026 01:48:01 +0000
Files and hashes:         1: 3231382e39382e3137392e302f32342d3234203d3e20313436383431.roa (hash: ARWBa9IdK08EGnOSuh23uDfuB0JMI9PCXpZKCN/m7l4=)
                          2: 3231382e39382e3231352e302f32342d3234203d3e20313436383431.roa (hash: aywp0tqCBgRXzid69Cf+hmOo2wFnk5gKkSw0y125MMI=)
                          3: 3231382e39382e3137362e302f32342d3234203d3e2034383337.roa (hash: 6fIbINtNcGKIPP4RrSqGB51a1pyintd2JTCE/IScmZA=)
                          4: 3231382e39382e3230382e302f32342d3234203d3e20313436383431.roa (hash: V5WFXW8smGcHXMjpvp9LaOkbL4/Ei94lNvyV8nVmaL0=)
                          5: 3231382e39382e3139332e302f32342d3234203d3e203538353432.roa (hash: qt4/6TOa7o32+dkGdPJJfaVcIo3Vl62WqM/O9RzlxHI=)
                          6: 3231382e39382e3137372e302f32342d3234203d3e203538353432.roa (hash: BxSgCE5UaiCEinToAh7HtaYOYFUIIUe9Fj7YHmDaEeY=)
                          7: 3231382e39382e3231312e302f32342d3234203d3e20313436383431.roa (hash: DKgvwB10v2KlhQb9PUhUx7Cu1QGaNp7YFa9x57886nA=)
                          8: 3231382e39382e3138312e302f32342d3234203d3e20313436383431.roa (hash: vLrt3AJ67GN9KG7EzWnUz0wi/QliKTTJODDo8xicHfo=)
                          9: 3231382e39382e3231332e302f32342d3234203d3e20313436383431.roa (hash: BQ36hCBywhGt28SwU89T+JTovsJVAPR6cNm45te4lfA=)
                          10: 3231382e39382e3230392e302f32342d3234203d3e20313436383431.roa (hash: R2FUehBztHdIvg3EWxnn9vSmNq2pxzwjM3Saq/Q0+P4=)
                          11: 3231382e39382e3137382e302f32342d3234203d3e20313436383431.roa (hash: h+7NMVJMGskysHGTL7ek7cRzWtLu2iBmcr8RhLJIuRo=)
                          12: 3231382e39382e3138332e302f32342d3234203d3e20313436383431.roa (hash: BWgtN9ZlNkUkI1/9ORhwYHGUf2fn6nY77N3GU7vIwKg=)
                          13: 727633DA248F6AC4626E0DF9B33145B74FD58F03.crl (hash: 51znxInspwvqlNSr70+4qBFOfao4lb8/BsbHJhXPXhY=)
                          14: 3231382e39382e3231302e302f32342d3234203d3e20313436383431.roa (hash: yyPoXI8TawnrApBjndo7j1KSbBtPvYmc36UAqXtEA8U=)
                          15: 3231382e39382e3231322e302f32342d3234203d3e20313436383431.roa (hash: mh4howHx2myQ3DM1H8Q4i0fqcnXhCL5MgENCUx3z93s=)
                          16: 3231382e39382e3138302e302f32342d3234203d3e20313436383431.roa (hash: 8vnvx69UZI9UjNoNLKJj/mjRHvJ90Etw1BCB1sZRg4Y=)
                          17: 3231382e39382e3138322e302f32342d3234203d3e20313436383431.roa (hash: 6znvLKLvv9KQQlxGvtEJcXW6b4MyVSay/jA4EVDpYhc=)
                          18: 3231382e39382e3137372e302f32342d3234203d3e20313436383431.roa (hash: HCyPGKwa4eeE5ZjLHnpqql9PGySx5osAgA1FMWrBU+0=)
                          19: 3231382e39382e3231342e302f32342d3234203d3e20313436383431.roa (hash: INioRRkxf3xa+grpqxBw9dO54uDwmH9qAz6YD6mDzno=)
                          20: 3231382e39382e3139322e302f32342d3234203d3e203538353432.roa (hash: ZXHCilq7M6t5w4oLyy7/q0uzHX7ckcRbYUXkDNUYUO0=)
                          21: 3231382e39382e3136302e302f32342d3234203d3e2034383337.roa (hash: 28ClLRNHc1ca5OaJY9IvDzg6NXbTQfy3ShDofWhJRXo=)
                          22: 3231382e39382e3137362e302f32342d3234203d3e203538353432.roa (hash: XFdMvu8G/zSKT5wrWBdxWp+W6TQONNq83QdMat+lt2k=)
                          23: 3231382e39382e3137362e302f32342d3234203d3e20313436383431.roa (hash: W9YQVXCZAs9kS2UDOyKiYaw3OS4DRjkHfthCx48ARa8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:af:4e:24:a0:69:76:91:8e:f9:88:7b:4a:37:39:0a:a1:94:51:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
        Validity
            Not Before: Jul 24 01:25:01 2026 GMT
            Not After : Jul 25 01:48:01 2026 GMT
        Subject: CN=8C2827ED7078BBB4E58AA6C3451DEE7F738946C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:89:0a:fe:94:53:32:bf:ca:ad:31:14:e1:
                    d0:02:88:54:13:9e:e4:05:54:21:61:4d:f8:33:0c:
                    08:5e:16:54:cc:4b:a3:35:82:f9:d5:58:b6:e0:5b:
                    38:d5:98:54:7f:88:54:22:23:90:00:7e:7a:3d:a7:
                    bc:0c:1a:6e:02:c8:6a:0c:13:2d:40:65:b1:a5:68:
                    8e:16:12:6c:c6:0c:8a:33:99:56:8d:6b:21:80:36:
                    2e:94:f8:b3:38:c8:c0:35:73:61:15:7c:4d:2d:f6:
                    5f:53:57:18:83:68:c6:ad:a2:5d:ac:cd:5e:c4:8b:
                    57:e7:9f:00:f4:b4:02:b6:84:54:e4:f9:1d:ac:02:
                    04:db:ba:f0:b2:55:ba:db:f3:b4:e5:91:07:b1:d5:
                    b9:ce:43:14:75:35:23:56:5c:6e:9c:5a:be:80:9c:
                    3a:f1:0f:21:62:17:5d:67:82:30:50:79:20:8e:4f:
                    78:d6:78:92:0a:c7:a0:37:77:68:c5:c1:c9:88:f4:
                    f7:91:7e:64:7b:fb:13:28:37:80:0f:ec:8a:b5:22:
                    e7:67:5e:c0:2c:a9:d4:db:a3:b6:60:1e:80:89:aa:
                    f5:de:d7:62:37:d7:48:12:fb:a5:51:c2:00:a4:96:
                    8b:0b:64:6b:8a:f3:56:63:db:d2:19:8f:93:1f:44:
                    f9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:28:27:ED:70:78:BB:B4:E5:8A:A6:C3:45:1D:EE:7F:73:89:46:C6
            X509v3 Authority Key Identifier:
                keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:44:e5:c2:53:05:cf:1f:a8:48:42:34:92:d0:3a:3c:a1:b2:
         1c:d9:d3:10:2a:08:00:05:b5:41:a1:49:5c:99:75:93:83:7b:
         c9:20:5b:d3:e0:26:9d:82:20:b9:1d:88:0a:99:36:3a:40:66:
         f3:7f:27:68:5f:d7:a6:d3:52:b3:57:18:4e:9b:64:6d:a7:f8:
         37:86:22:3b:51:25:d1:e0:80:40:d5:56:77:f0:ed:56:de:b0:
         51:69:e5:83:13:01:a3:a8:1b:8f:9f:09:b3:53:ef:a5:6b:45:
         41:af:cf:32:25:4f:d0:0b:18:49:9d:72:06:a9:8e:6e:69:2c:
         b3:e3:aa:3d:e0:6f:ca:9d:0a:54:47:68:28:f3:c3:e5:b4:70:
         9d:c0:11:bd:32:6a:12:4a:a7:86:c6:5f:2f:88:3b:ac:c9:ca:
         22:d4:8f:19:48:72:2e:d4:9f:94:06:a8:d3:97:3f:79:db:92:
         2a:a6:27:53:47:b5:b5:a3:78:83:29:10:a3:79:b5:eb:2a:08:
         5e:ff:a5:0d:a9:17:32:21:d2:4b:cd:40:1d:e5:eb:05:c2:0d:
         00:b5:e6:ae:ce:71:74:e6:aa:de:c7:7c:d2:a1:98:03:10:fb:
         d0:7e:0e:3d:62:38:32:e5:6e:a9:77:db:da:5e:39:08:17:be:
         f8:bf:b3:c4
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUaq9OJKBpdpGO+Yh7Sjc5CqGUUQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0
RkQ1OEYwMzAeFw0yNjA3MjQwMTI1MDFaFw0yNjA3MjUwMTQ4MDFaMDMxMTAvBgNV
BAMTKDhDMjgyN0VENzA3OEJCQjRFNThBQTZDMzQ1MURFRTdGNzM4OTQ2QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxkYkK/pRTMr/KrTEU4dACiFQT
nuQFVCFhTfgzDAheFlTMS6M1gvnVWLbgWzjVmFR/iFQiI5AAfno9p7wMGm4CyGoM
Ey1AZbGlaI4WEmzGDIozmVaNayGANi6U+LM4yMA1c2EVfE0t9l9TVxiDaMatol2s
zV7Ei1fnnwD0tAK2hFTk+R2sAgTbuvCyVbrb87TlkQex1bnOQxR1NSNWXG6cWr6A
nDrxDyFiF11ngjBQeSCOT3jWeJIKx6A3d2jFwcmI9PeRfmR7+xMoN4AP7Iq1Iudn
XsAsqdTbo7ZgHoCJqvXe12I310gS+6VRwgCklosLZGuK81Zj29IZj5MfRPnDAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUjCgn7XB4u7TliqbDRR3uf3OJRsYwHwYDVR0j
BBgwFoAUcnYz2iSPasRibg35szFFt0/VjwMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDU0Mzc4NzUzMjc0Njc1NS8wLzcyNzYzM0RBMjQ4RjZBQzQ2MjZFMERGOUIzMzE0
NUI3NEZENThGMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0RkQ1OEYwMy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ1NDM3ODc1MzI3NDY3NTUvMC83Mjc2MzNEQTI0OEY2
QUM0NjI2RTBERjlCMzMxNDVCNzRGRDU4RjAzLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkTlwlMFzx+o
SEI0ktA6PKGyHNnTECoIAAW1QaFJXJl1k4N7ySBb0+AmnYIguR2ICpk2OkBm838n
aF/XptNSs1cYTptkbaf4N4YiO1El0eCAQNVWd/DtVt6wUWnlgxMBo6gbj58Js1Pv
pWtFQa/PMiVP0AsYSZ1yBqmObmkss+OqPeBvyp0KVEdoKPPD5bRwncARvTJqEkqn
hsZfL4g7rMnKItSPGUhyLtSflAao05c/eduSKqYnU0e1taN4gykQo3m16yoIXv+l
DakXMiHSS81AHeXrBcINALXmrs5xdOaq3sd80qGYAxD70H4OPWI4MuVuqXfb2l45
CBe++L+zxA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:25 2026 by rpki-client