Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
File:                     DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft (raw, json)
Hash identifier:          Cqc+uLEro0NMgn9VLm5IHSl4TbJzW2aQluS0LTMQMqw=
Subject key identifier:   BE:57:7E:AF:24:CE:FD:A3:7C:46:CB:1C:F4:F8:23:D6:D3:15:AE:46
Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Certificate issuer:       /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Certificate serial:       3C7921DF22490A6375E5AE46B379F96952D957FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
Manifest number:          09B4
Signing time:             Sun 27 Sep 2026 13:23:00 +0000
Manifest this update:     Sun 27 Sep 2026 13:18:00 +0000
Manifest next update:     Wed 30 Sep 2026 18:26:00 +0000
Files and hashes:         1: DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl (hash: xLTdGhGs6yU15DwEvS1EehKXQWB3NRub0PRBRMEXc18=)
                          2: AS140105.roa (hash: cbLY07/0cjAui3nt1HvHxL/XetLIxK/ZZzrxslSceck=)
                          3: AS56041.roa (hash: fXns+Ktmx2/58wRfjelabNhKQ1irdsG+h0m+EIC8fhU=)
                          4: AS56047.roa (hash: lbOaD3ZNPZ4/4v8et/4577bOI37p6v+ng3b+EBGiM0g=)
                          5: AS132510.roa (hash: nW/Xu5rFcjc6MZ1OWK+RDXCb9OeXARjibpfGArwLV0Q=)
                          6: AS56044.roa (hash: xvUWbL7g3ulk/dOrd6pcqVMKirqKk512vkfuU8j5CKM=)
                          7: AS24400.roa (hash: RquWLj+zP71YiY23iBHwMjOCHCoeiCkH44wWIpq+QtE=)
                          8: AS135054.roa (hash: potv43MxFxLckeV83NSTRcSW7QiMa9bKPAG8rf/anoM=)
                          9: AS38019.roa (hash: E1yVifHTjCfA/PvlGPpA9wXomKkrHRfKfAkGdwa9pDE=)
                          10: AS56045.roa (hash: jdp0IZFNjotDlV3Csi6khMaQsoOd04oW+bmB9IcZZ5M=)
                          11: AS138407.roa (hash: 3TB7XIICfQETicAQCosTtecuvqT6okRABqxXNpHYYAA=)
                          12: AS132525.roa (hash: KXRAidm3k8g3B6g6v2C2CA+34gf198b75gLayFySiLg=)
                          13: AS24547.roa (hash: qcUsBYxk9GfASEGAVNZQVBM6PUJZO/0LS9BMgEa39Eo=)
                          14: AS24444.roa (hash: M4dKuML0b0zhP6UFYYPJP3V/IfOWNrlc4HnOAL+Fvzo=)
                          15: AS134810.roa (hash: Qmjc3LrwRpIg7MHvoR1K5wXXQyIblNiCRFtiD43m5NQ=)
                          16: AS141425.roa (hash: JIOqNrntGHAd8+iQ6oFeH8vj+w3+1mPDPGOuDZGfboY=)
                          17: AS56046.roa (hash: vJWDOR8mWYzvgvNC6PO3ULC9M6B0aUk7DrdxF7SXKN4=)
                          18: AS9808.roa (hash: TTwKn+ulQWOCLxa7cddyB2d8F7KsO/Gg2hi+9ppuhn0=)
                          19: AS56048.roa (hash: mDZTg6S8UPo5S9uCeONPhh4g9XT6Ku9groL7zfXKOrg=)
                          20: AS139080.roa (hash: Ixaiu3+twhX8iBdxlGpsu4fNXlfx2qPq2Dz6Sj3ApYs=)
                          21: AS24445.roa (hash: GCVs62RkfZA6WMPmoBq3pff6StckGuCzOkqcYMGatnk=)
                          22: AS23841.roa (hash: wEUvCNR/rKJWyrTLZUbTTDGl4gJBMRJxFsOhTzXHPL0=)
                          23: AS56040.roa (hash: m2jgVeD0peAb2fgUs66tkpUA+8z9/K0MkxWt066738w=)
                          24: AS56042.roa (hash: jE/QWfvDkxz7wbfuhxiu1dTA1gKaLjOQMTOprQdX424=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 18:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:79:21:df:22:49:0a:63:75:e5:ae:46:b3:79:f9:69:52:d9:57:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
        Validity
            Not Before: Sep 27 13:18:00 2026 GMT
            Not After : Sep 30 18:26:00 2026 GMT
        Subject: CN=BE577EAF24CEFDA37C46CB1CF4F823D6D315AE46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:96:b4:7f:58:21:e5:a1:59:9c:79:00:c5:
                    c1:1a:13:a2:e3:d0:dd:88:a3:c6:8c:97:09:71:6b:
                    9d:13:78:b5:cc:0c:8a:7d:b6:e6:aa:cb:f1:81:a8:
                    a6:cb:33:d6:92:87:24:e9:37:09:c7:3d:51:da:42:
                    40:bb:ef:bb:cb:0f:d6:27:9b:4f:2f:4a:09:69:36:
                    e2:36:b0:62:59:fe:5d:58:88:b2:7c:40:ea:9d:93:
                    3e:73:0a:fa:1a:62:65:f8:58:b2:82:14:16:c8:5f:
                    56:b5:85:71:7e:75:c8:12:ed:68:80:dd:81:64:b1:
                    b8:4f:2e:71:5a:ed:f6:67:c5:29:cd:16:72:9f:77:
                    5c:2a:6f:c0:f6:0e:0a:05:4d:17:1b:16:4d:d9:5d:
                    ce:2b:be:2a:7c:5f:10:66:df:7b:86:d1:ec:4e:4c:
                    5e:02:0c:1c:8f:ec:8b:0e:46:f0:e7:5e:9e:4c:89:
                    29:f4:28:65:a4:e6:e3:2a:a4:3c:53:d5:dc:7d:a9:
                    3a:5e:61:e5:3d:89:2d:bc:ab:66:94:ab:2a:14:34:
                    3c:7b:64:d1:60:cd:10:ca:4f:f1:47:92:1f:e8:84:
                    2f:14:6f:b1:db:9f:5d:f3:93:68:b1:31:88:31:d9:
                    84:8e:f3:2d:42:83:e8:a5:c0:c8:12:28:aa:a5:8d:
                    11:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:57:7E:AF:24:CE:FD:A3:7C:46:CB:1C:F4:F8:23:D6:D3:15:AE:46
            X509v3 Authority Key Identifier:
                keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:a7:90:00:e0:31:67:95:f0:6b:e1:bd:3b:27:c8:bd:f1:a4:
         a7:f1:3d:96:78:4e:6d:f1:2f:85:e3:d4:3b:8b:93:a3:65:78:
         ee:38:88:12:df:9c:79:70:ae:78:6d:c1:a1:5a:af:84:91:b9:
         20:58:a9:dd:53:d1:bd:12:39:f6:47:1e:38:48:f5:e6:73:bd:
         ae:6e:00:c6:8f:3b:9b:68:f5:e5:49:63:72:40:44:e2:03:61:
         50:21:2b:94:74:c0:63:2e:69:54:bc:c8:1e:3a:bd:cd:fd:db:
         a8:3b:af:e8:61:d7:13:9c:93:39:d7:81:7c:0e:e9:3f:42:60:
         85:54:ef:8e:dc:4e:fd:07:84:85:34:18:42:a1:5c:16:f3:2e:
         45:4b:de:60:7a:93:da:0b:0c:1a:27:3b:96:ab:5a:fa:d6:52:
         6a:ed:7d:a6:e6:6e:7d:18:4a:b3:06:f2:f6:35:df:66:d4:9d:
         24:8b:a2:a0:13:9a:77:eb:5e:a1:a6:f5:1b:91:46:ee:28:94:
         fc:ae:8b:b8:f9:77:74:71:04:a1:f6:e6:e1:9e:8d:06:e3:ce:
         c9:ed:b8:2c:b4:b6:2b:b0:a3:84:c3:1f:46:d9:40:06:28:37:
         f5:25:58:11:8e:07:9d:a2:7e:47:1b:be:04:c8:de:1e:5f:f7:
         44:9c:05:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:15:02 2026 by rpki-client