Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
File:                     22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft (raw, json)
Hash identifier:          OhJuTnWsmq35FdlBL6ubCtW4bq2LvJqcDB+XdE6ecKI=
Subject key identifier:   E4:FC:D7:86:DC:42:85:47:53:59:D0:01:E8:F0:14:7E:F5:A4:16:4D
Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
Certificate issuer:       /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Certificate serial:       49494609766937C209F101504B68C25674A2ECB5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
Manifest number:          010A
Signing time:             Wed 07 Oct 2026 10:26:02 +0000
Manifest this update:     Wed 07 Oct 2026 10:21:02 +0000
Manifest next update:     Sat 10 Oct 2026 19:19:02 +0000
Files and hashes:         1: 3131392e36312e302e302f31392d3139203d3e203233373234.roa (hash: K3LP5dwQaXcx4MuNYyKZrH4G4kDDCKExunXmrKN3ytE=)
                          2: 3231312e3135372e3132382e302f31382d3138203d3e203233373234.roa (hash: 9DsUsc7xqSEgA76x3QVEUXlO+lwxmzsItElrdqQxlu8=)
                          3: 3231312e3135372e3134322e302f32332d3234203d3e203233373234.roa (hash: WST2czKsVB/ewvcOeWL+JdFdYr1zVF2oFq9fGdTDQ8s=)
                          4: 3231312e3130302e36342e302f31392d3139203d3e203233373234.roa (hash: gPtJjP9+di7GKh8vu1YDLm/PtPnxTpfuc3EHNBfjqYg=)
                          5: 3231312e3130302e37362e302f32342d3234203d3e203233373234.roa (hash: bXU0GEiRMQlqJiUyGYYppOzk/EUcRuGTtnjtH8K8WwU=)
                          6: 3231312e3135372e3232362e302f32342d3234203d3e203233373234.roa (hash: rjo7jrhrMRVuR0JfRg7FPv4u+eyoOM/AtQUL2V3uCs8=)
                          7: 3231312e3135372e3232382e302f32332d3234203d3e203233373234.roa (hash: nX1kVZajt7R6n+n7AcrtE48zts8+uLXvQJ2dsnVZ75M=)
                          8: 3231312e3135372e3232372e302f32342d3234203d3e203233373234.roa (hash: 1QaZwfBCqfvHN54sX/bej2ZJXj1WVip/KSr91tGlqIg=)
                          9: 3231312e3135372e3232342e302f31392d3139203d3e203233373234.roa (hash: mXdeRxX9NNx5ZnpMgxouFbHE5Nv9XoEo7yaCgv3A0pw=)
                          10: 3231312e3135372e3234302e302f32302d3230203d3e203233373234.roa (hash: gydNdI0Li4afslJy0wyrDnUFBOBJBUoko3onPetP7ro=)
                          11: 3231312e3135372e3136302e302f31392d3139203d3e203233373234.roa (hash: t58PvWUroeia0P5TL6X1Bz4D3AUlx6o+sfFf/IteIdI=)
                          12: 3231312e3135372e3233322e302f32312d3231203d3e203233373234.roa (hash: Mnad/Y1S3127qUStkj6/ae6IpUyrLetwKWDxhz310Tc=)
                          13: 3231312e3135302e36342e302f31392d3139203d3e203233373234.roa (hash: 4RghX/MxjGxNYt3iuL9Mxdh4Io2D3U5e37dKXANiKB0=)
                          14: 3231312e39392e3232342e302f31392d3139203d3e2039383033.roa (hash: M8yX9JIGKoJQxQCCYhZcFEPQjI82xJyedvbvJQsf97Y=)
                          15: 3231312e3135302e302e302f31372d3137203d3e2039383033.roa (hash: AXXRnjUqEURYElm3WaGN7OOXEzIGcz5XFQR6ldopvJc=)
                          16: 3231302e37382e3132382e302f32322d3232203d3e2039383033.roa (hash: g9d3B9hoJrTm52j8B539dJ9HDnLv7lTCn1c0qWVA0Dc=)
                          17: 3231312e3130302e36362e302f32332d3233203d3e203233373234.roa (hash: RQ99QtSP/7GkGYfaamKRVzphPok1okmE3hdXkUarkAY=)
                          18: 22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl (hash: 7umbgK/j0ieIMrRocltCCnzq2sjBnj3RgK27L67NeJ0=)
                          19: 3231312e3130302e37322e302f32342d3234203d3e203233373234.roa (hash: SecKXvNuh0Fsq9JdTecOZLzm1VTOb/94Z648V5IO+DI=)
                          20: 3231312e3135302e36342e302f32302d3230203d3e203233373234.roa (hash: 8Mipqd5VSCLIE7ckbJlkKsFvCvNdrD/MGNTiQIqJBa8=)
                          21: 3130332e37332e3230382e302f32322d3232203d3e2039383033.roa (hash: XVSUK5eRG5UoKF6vo6V6ln8vvFKzxdIbxy8TV6MFmbo=)
                          22: 3231312e3135372e3139322e302f32302d3230203d3e203233373234.roa (hash: g7NQxqPIo2ezw+OBoAAEIKfoyKL904Ydaym44JJkCQc=)
                          23: 3231312e3135302e302e302f31382d3138203d3e203233373234.roa (hash: O+AFP3LztmQknlXORk2THYCllaXkupnfWf00JCkvURk=)
                          24: 3231312e3135372e3132382e302f31392d3139203d3e203233373234.roa (hash: sl7qhUm7RxG5b+OGwzvCXDL0+hR40yg+L5bjzzlV0aU=)
                          25: 3231312e3135302e3132382e302f31382d3234203d3e2039383033.roa (hash: Iy7pJUKS62O213YpRT3Nh6MR3eqtNr5cQw4Mojyr6XM=)
                          26: 3131392e36312e302e302f31372d3137203d3e203233373234.roa (hash: k9oYKjGIXZaSuzUmQ2AAGCKqO0tvJoefFtfoI0N/fyo=)
                          27: 3231312e3135372e3232352e302f32342d3234203d3e203233373234.roa (hash: duppbLzESzwcPhrDvmhz6qAUsN5VpGNvb5VQZcQu5Io=)
                          28: 3231312e3135302e39382e302f32342d3234203d3e2039383033.roa (hash: nN7sg8ZrxgBmgmAOtQzkRhBQ5w8spWBZgpshEw2bK94=)
                          29: 3231312e3135302e3132322e302f32342d3234203d3e2039383033.roa (hash: jeaTrOgdMebawys/6XnnQCO78gyxE7KX43eZsOidPFM=)
                          30: 3231312e3135302e38302e302f32302d3230203d3e203233373234.roa (hash: 10TCtF8APFuMCUSbElN3rH/asDRjrTjYEzpEFraWYXU=)
                          31: 3231312e3130302e36362e302f32342d3234203d3e203233373234.roa (hash: 6sfldsJiJl/wp77yBQ0u4qj4DV6FiX2vcT2hKVsFe3o=)
                          32: 3231312e3135302e3132382e302f32342d3234203d3e2039383033.roa (hash: S7Hcu6QVVzcYJZ+TIhGWLG0GW1wRjr2gL5ORninwvZQ=)
                          33: 3231302e37382e3132382e302f32342d3234203d3e203233373234.roa (hash: Hj0VBjEG1A/Vy5CfFa3SODbtJ9ifdSazK6JMSWZX3f4=)
                          34: 3231312e3130302e36382e302f32332d3233203d3e203233373234.roa (hash: VE+W5cAJWZHQZFaO6dxpe/v1H6DwQ7Pjd3iJdOLXsNw=)
                          35: 3231312e3135302e3130302e302f32342d3234203d3e2039383033.roa (hash: ulsWHD2PqHg5ixQDELnSrRRPPqdYu9uZVrCb73YgWGQ=)
                          36: 3231312e3135302e3131342e302f32332d3233203d3e203233373234.roa (hash: WJkP0W15rAl9+roSJlFkJJU2uJEAC90HgnWnFNu7xEQ=)
                          37: 3231312e3135302e3132342e302f32332d3234203d3e2039383033.roa (hash: 0i23c59Yk1Pcej/NF+Ghnc/xXyH5hIz75ae7eLtgQUw=)
                          38: 3131392e36312e33322e302f31392d3139203d3e203233373234.roa (hash: IeOir/13vFrTa9hbeyjvtXntQyqmWY0jkXl8kwqfY3w=)
                          39: 3231312e3135302e3130302e302f32332d3233203d3e203233373234.roa (hash: 03QuETdXbGvEvqzMXchBhFMKUmxEFeQ/gtsLajwrX1s=)
                          40: 3231312e3135372e3232342e302f32342d3234203d3e203233373234.roa (hash: K7WwzUb7hIRkI35jNdL0ZzawEOqxsqxxhb5E3doscew=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 19:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:49:46:09:76:69:37:c2:09:f1:01:50:4b:68:c2:56:74:a2:ec:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
        Validity
            Not Before: Oct  7 10:21:02 2026 GMT
            Not After : Oct 10 19:19:02 2026 GMT
        Subject: CN=E4FCD786DC4285475359D001E8F0147EF5A4164D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:ad:08:8d:e9:30:e5:f6:0f:0a:a2:a7:33:
                    a6:b1:3d:44:79:bd:b6:d8:b9:83:fc:f1:6f:3c:63:
                    2f:5b:ad:ee:d4:8f:10:c2:60:91:8e:a9:aa:03:bd:
                    2f:6a:07:3f:07:3c:09:1b:82:95:9b:a6:3a:67:2d:
                    9b:b6:51:23:82:a0:48:2c:a3:b4:6d:5b:04:20:64:
                    60:52:de:39:a2:dd:53:e7:90:38:69:78:f2:1b:d5:
                    26:b7:2c:f9:c9:45:b1:f3:4d:d1:1c:35:1a:8f:2a:
                    c0:82:01:5b:80:16:81:17:ef:18:72:4e:e7:50:75:
                    e6:2d:16:a7:49:93:6f:0c:bd:b8:9c:75:bc:38:5f:
                    2c:f2:43:ab:c6:8e:94:08:38:d7:64:4b:84:99:6c:
                    93:c8:23:64:52:42:4e:aa:e0:56:ab:1c:5e:50:d5:
                    2e:46:38:92:ae:0c:53:c9:75:38:c5:bb:85:77:ec:
                    a9:62:b5:f1:bc:81:39:d6:51:2e:4d:1b:08:8c:0b:
                    aa:71:78:2f:2b:d9:07:52:1b:79:20:fc:22:97:6c:
                    83:30:f8:0f:bd:b0:9e:e5:a2:c3:c8:03:04:7c:6e:
                    d2:f2:fe:1a:16:08:cb:b9:bf:08:c5:39:64:5d:29:
                    26:17:21:df:0c:05:de:f2:46:88:d2:63:da:86:55:
                    e2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FC:D7:86:DC:42:85:47:53:59:D0:01:E8:F0:14:7E:F5:A4:16:4D
            X509v3 Authority Key Identifier:
                keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:37:90:f7:36:17:a5:5d:9e:f3:d8:c2:db:ee:3b:89:64:e6:
         02:ba:59:e3:94:07:00:d4:99:ee:b6:01:b5:b1:aa:9f:38:0b:
         5f:fc:ba:43:83:8a:aa:65:4f:f7:5a:60:d1:66:44:e1:83:0e:
         6f:f3:05:6d:53:ac:4d:5e:76:25:16:bc:64:db:05:59:45:b0:
         90:f8:0b:db:54:70:06:c1:cb:a3:2e:79:0c:a1:23:34:2b:d4:
         b7:b4:2b:f9:71:94:0e:b2:63:bb:12:32:4e:81:72:eb:98:69:
         5b:de:7c:43:30:02:bc:b3:99:d2:c6:7b:b7:dd:33:93:36:e5:
         a9:02:76:97:22:20:f8:91:06:4f:88:85:45:a9:e6:bf:9c:9c:
         fa:76:49:cf:f4:9c:c8:ef:20:0e:de:01:1f:a9:54:33:dc:01:
         fd:00:a6:89:76:67:0d:f4:dc:bb:62:74:fe:33:78:04:e3:c8:
         b6:51:d5:fe:e9:c1:36:3a:9c:f7:a5:d9:0d:c8:9d:5d:4a:d2:
         45:2e:ae:bb:f6:2c:9c:db:7a:0d:65:c8:9e:65:78:70:60:cb:
         6b:5b:0b:9b:ff:82:a2:87:5e:ad:5b:38:c0:7b:f2:57:77:bf:
         84:8f:4b:be:96:fa:28:07:46:78:da:af:c4:c9:8f:9b:31:4a:
         78:13:48:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:15:53 2026 by rpki-client