Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
File:                     29BAE90B795BA6BB50390EB31964E6F823BAB331.mft (raw, json)
Hash identifier:          /5IG9JsDkSZF49tn1uk2kYHR2wrnFpeT3NFIgVlDR6w=
Subject key identifier:   06:FC:11:9A:F5:56:C6:17:9D:EF:4D:25:EE:F1:C9:2F:0E:B0:D4:BB
Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
Certificate issuer:       /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Certificate serial:       04E56889D00D4A7E336A814E87818A07013B66EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
Manifest number:          91
Signing time:             Fri 24 Jul 2026 05:55:31 +0000
Manifest this update:     Fri 24 Jul 2026 05:50:31 +0000
Manifest next update:     Sat 25 Jul 2026 07:12:31 +0000
Files and hashes:         1: 3132322e3230302e39322e302f32342d3234203d3e2034383038.roa (hash: 4nrH9LfsUqF1kG4hbRAgCUaFjmEZbef1g1MPoHFYyJc=)
                          2: 3132322e3230302e38322e302f32342d3234203d3e2034383437.roa (hash: Xp6isEa2ewBI3m6lqm1H70tKTkaKIvsLOOgR2gG3b8k=)
                          3: 3132322e3230302e38322e302f32342d3234203d3e2034383038.roa (hash: iXPCWNvWzlbiyKQV1tytAGROlhAXSqRq6+d7dUU2dC0=)
                          4: 3132322e3230302e37382e302f32342d3234203d3e2034383038.roa (hash: iZ+UPJZRYFv38gs9qgOgP60v6lhbfpea4kBBrPAAlmc=)
                          5: 3131342e36362e38312e302f32342d3234203d3e2034383038.roa (hash: DQgk0NoRfkqgILds3YUN9ncexo35feZAfTqpFHdqjmw=)
                          6: 323430333a373538303a3a2f33322d3332203d3e203338333634.roa (hash: kmvkwlJ7w+pkja0hVcX0tlL6TVc6mN3qMP/ouy0N+b8=)
                          7: 3132322e3230302e38342e302f32332d3233203d3e2034383437.roa (hash: Sy0DoHCGElAr96NNn+1jmBipOF87gYOaf8SMvzlgHcI=)
                          8: 3132322e3230302e37382e302f32342d3234203d3e2034383437.roa (hash: F+5G2tOBlVTwpojIu2RWks8TZtYttNGuYi9aLoVwvA8=)
                          9: 3132322e3230302e38362e302f32342d3234203d3e2034383437.roa (hash: 04Q++9CzWyL1iOZV12B67bzkPYaoZgGLpQXoBVdnaCc=)
                          10: 3132322e3230302e38362e302f32342d3234203d3e2034383038.roa (hash: oS2jMaoEFE4sG5rQcBiPluuvCuNl0NOgHIY832u8x+I=)
                          11: 29BAE90B795BA6BB50390EB31964E6F823BAB331.crl (hash: VDp167NkkSsFAqaEG4zPBPNDiEzphjWZq6gg46y8vvY=)
                          12: 3132322e3230302e39322e302f32342d3234203d3e2034383437.roa (hash: 7MKytXnVY3xTke2Q8+t8jq61Vb4/fGpyyq+FUQmQJnw=)
                          13: 3132322e3230302e36382e302f32332d3233203d3e2034383437.roa (hash: DBCbk6MBsne5yFcDN/1ext+/m/nBPtwfRFNsBlsk0+A=)
                          14: 3132322e3230302e39322e302f32332d3233203d3e2034383437.roa (hash: uin0SgixTaYZJ3n/wNUUiTbNcosdsZ8/3gkowJLHTew=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 07:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e5:68:89:d0:0d:4a:7e:33:6a:81:4e:87:81:8a:07:01:3b:66:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
        Validity
            Not Before: Jul 24 05:50:31 2026 GMT
            Not After : Jul 25 07:12:31 2026 GMT
        Subject: CN=06FC119AF556C6179DEF4D25EEF1C92F0EB0D4BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:29:2e:89:b9:0f:60:43:ae:29:ac:ed:35:c0:
                    cc:94:d8:df:df:e4:5d:ce:21:f6:84:c7:91:1f:78:
                    ca:f7:b3:d1:6e:c3:f9:43:52:7f:38:d3:cf:d9:c2:
                    ce:e6:50:fd:35:38:f3:13:18:b0:cf:27:a2:60:fc:
                    e9:2f:f9:24:45:4d:76:4a:65:62:6b:57:48:4c:aa:
                    53:d3:b8:dd:9a:54:c7:ed:b2:02:9d:14:08:28:8c:
                    f1:6d:7c:52:ca:b4:df:e8:5c:b4:85:c6:4e:2f:46:
                    55:b3:b6:00:72:ce:a4:cc:d4:b5:0e:3d:1d:11:cf:
                    56:8c:9c:b8:3e:63:ce:68:a4:10:27:cf:aa:38:62:
                    25:46:f8:78:c4:95:68:e1:f4:6d:2c:cd:b9:0d:a6:
                    ad:77:4a:8d:9c:8d:84:3e:8e:7d:60:fa:9a:f7:37:
                    ef:23:44:af:dd:83:6d:c0:0f:82:40:9e:1b:dd:85:
                    3f:94:82:d4:47:1a:71:0c:b5:7e:01:39:d7:29:67:
                    d4:c6:42:45:3a:b9:67:e6:0c:3c:f1:d6:fb:c3:0a:
                    9c:ad:23:05:7c:29:ea:76:80:04:55:1a:dc:33:8a:
                    ff:d0:2f:e3:bd:d8:cc:cb:b6:f2:d2:72:2e:09:68:
                    18:d5:18:55:13:dd:16:6e:72:a5:c6:f1:b1:02:ec:
                    53:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FC:11:9A:F5:56:C6:17:9D:EF:4D:25:EE:F1:C9:2F:0E:B0:D4:BB
            X509v3 Authority Key Identifier:
                keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:37:58:e7:4a:76:c4:9a:5b:11:ff:3f:17:6b:09:1f:75:34:
         ac:b8:76:35:ba:cb:78:15:10:2f:7a:d4:7e:c8:c1:3f:d8:ef:
         38:4c:2f:ec:5d:58:87:00:94:32:8e:95:c1:e8:4b:a8:f6:95:
         81:67:44:2a:6c:00:34:da:5a:68:7a:23:29:c3:b9:a1:a0:4e:
         a8:69:3b:02:2b:b8:64:82:17:17:db:f3:21:17:eb:61:ae:0a:
         e5:01:9a:85:d4:a4:24:69:8a:c5:4c:83:d6:48:ee:32:c3:c6:
         4d:db:71:b4:89:02:8e:19:ee:2c:c0:5d:cf:28:da:54:fb:da:
         86:73:34:1d:e3:46:4f:34:8c:10:76:3e:f9:fe:b5:72:51:a1:
         bf:f9:2a:ba:69:30:ca:16:4a:c1:69:9e:78:1f:1e:51:72:c0:
         b2:80:cc:31:c1:48:e2:6c:1f:7f:6a:a6:71:63:3d:93:90:e1:
         7f:4f:0f:50:39:93:ef:d1:c8:a8:d4:6a:8b:f3:65:2d:15:b1:
         86:fc:49:09:85:cc:d0:b6:38:36:7f:0c:fe:a3:82:d6:ab:8a:
         2c:a7:1a:7b:c6:10:85:05:63:3e:6a:be:11:e7:19:2a:4b:7a:
         7b:d7:f6:c0:e2:72:3b:4a:e0:8f:eb:99:7a:e7:e3:c2:a4:7a:
         25:fe:63:19
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUBOVoidANSn4zaoFOh4GKBwE7ZuwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2Rjgy
M0JBQjMzMTAeFw0yNjA3MjQwNTUwMzFaFw0yNjA3MjUwNzEyMzFaMDMxMTAvBgNV
BAMTKDA2RkMxMTlBRjU1NkM2MTc5REVGNEQyNUVFRjFDOTJGMEVCMEQ0QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkKS6JuQ9gQ64prO01wMyU2N/f
5F3OIfaEx5EfeMr3s9Fuw/lDUn8408/Zws7mUP01OPMTGLDPJ6Jg/Okv+SRFTXZK
ZWJrV0hMqlPTuN2aVMftsgKdFAgojPFtfFLKtN/oXLSFxk4vRlWztgByzqTM1LUO
PR0Rz1aMnLg+Y85opBAnz6o4YiVG+HjElWjh9G0szbkNpq13So2cjYQ+jn1g+pr3
N+8jRK/dg23AD4JAnhvdhT+UgtRHGnEMtX4BOdcpZ9TGQkU6uWfmDDzx1vvDCpyt
IwV8Kep2gARVGtwziv/QL+O92MzLtvLSci4JaBjVGFUT3RZucqXG8bEC7FOjAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUBvwRmvVWxhed700l7vHJLw6w1LswHwYDVR0j
BBgwFoAUKbrpC3lbprtQOQ6zGWTm+CO6szEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDg3MTE0OTY1MDY0MDg5Ny8wLzI5QkFFOTBCNzk1QkE2QkI1MDM5MEVCMzE5NjRF
NkY4MjNCQUIzMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2RjgyM0JBQjMzMS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ4NzExNDk2NTA2NDA4OTcvMC8yOUJBRTkwQjc5NUJB
NkJCNTAzOTBFQjMxOTY0RTZGODIzQkFCMzMxLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDdY50p2xJpb
Ef8/F2sJH3U0rLh2NbrLeBUQL3rUfsjBP9jvOEwv7F1YhwCUMo6VwehLqPaVgWdE
KmwANNpaaHojKcO5oaBOqGk7Aiu4ZIIXF9vzIRfrYa4K5QGahdSkJGmKxUyD1kju
MsPGTdtxtIkCjhnuLMBdzyjaVPvahnM0HeNGTzSMEHY++f61clGhv/kqumkwyhZK
wWmeeB8eUXLAsoDMMcFI4mwff2qmcWM9k5Dhf08PUDmT79HIqNRqi/NlLRWxhvxJ
CYXM0LY4Nn8M/qOC1quKLKcae8YQhQVjPmq+EecZKkt6e9f2wOJyO0rgj+uZeufj
wqR6Jf5jGQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:19:18 2026 by rpki-client