Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
File:                     D569CE49ED940955318F718AEACD6D410BFF66B3.mft (raw, json)
Hash identifier:          JMVNs+OCz5VAEwFg2Jo5x/d8LX9dCcoNYa6USp56oEM=
Subject key identifier:   40:C2:EF:FF:A7:27:EE:25:1E:1C:50:71:0C:02:B1:C5:63:2B:A3:3B
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Certificate issuer:       /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial:       66257729C4818A9592DDD54C283144D7BF1138F3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
Manifest number:          9C
Signing time:             Fri 24 Jul 2026 04:05:19 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:19 +0000
Manifest next update:     Sat 25 Jul 2026 04:47:19 +0000
Files and hashes:         1: 3130332e34372e34382e302f32322d3232203d3e2034383038.roa (hash: tQrGvA+ovIhb2o+IGqUAyjVnC1YGmGLo20op2NAtTds=)
                          2: 34332e3232382e33362e302f32332d3233203d3e2034383038.roa (hash: Xa5AXQxRxhiNUn0Q383X3+I1dkYG4/UzCR3ox8vQoXk=)
                          3: 3130332e34332e3138342e302f32332d3233203d3e2034383038.roa (hash: 58sAFUQcffD9Ee3VUeCuDzcGIFTa8oRrzCJsEFONdi4=)
                          4: 3130332e39332e3230342e302f32322d3232203d3e2034383437.roa (hash: c3GeuIs4VkQfLWWRwfzcWcUnDjF1Zl2LhsyNxr5DM1U=)
                          5: 34332e3234312e3234302e302f32332d3233203d3e2034383038.roa (hash: Lydf+HeHIzjAwoZErdFDn5KtbiIWOENNEr7cVYyLFk0=)
                          6: 3130332e3139382e36322e302f32332d3233203d3e2034383038.roa (hash: tozC0Xn5DxnoxIpvuHYtie3w0rP28y+UfkhwTkZQI30=)
                          7: 3130332e34332e3138362e302f32332d3233203d3e2034383038.roa (hash: +/hzGXAPdjUFZN2ItUhpXUD6o25OXmDnYup+aveZY+s=)
                          8: 3130332e3139382e36302e302f32332d3233203d3e2034383038.roa (hash: MBq3OH/vne3tS8JtiUeLcCuvfUCea9w4ciYPqhPXhsQ=)
                          9: D569CE49ED940955318F718AEACD6D410BFF66B3.crl (hash: SnuKF1SsdOhB/vfvrdIfMJyUWavTSeNFu3bDa07XkfM=)
                          10: 3130332e33382e3232362e302f32332d3233203d3e2034383038.roa (hash: bXClGDPYbjWgMEq8SA5ZPYKAYZZCbMQZiJ3UF69ee60=)
                          11: 34332e3234332e3133382e302f32332d3233203d3e2034383038.roa (hash: UFc1MA45ujfU5YItyaYkZq1sEQBdwiNu5jfwq/iSPDU=)
                          12: 34332e3234312e3234322e302f32332d3233203d3e2034383038.roa (hash: sVydZ+GvGDFoPNuzhCTpLN5HOyW0wDG576NjGm+vN2Y=)
                          13: 34332e3232372e3235342e302f32332d3233203d3e2034383038.roa (hash: cdPx20syskwekFlfeG9W3LsffSVTsSoPcPp0Zkm0kCM=)
                          14: 35392e3135332e36342e302f32322d3232203d3e2030.roa (hash: gYggE55VWRSwMIbG1Cq3gSFhE0CBxFxT1X9h0NKFL8I=)
                          15: 3130332e34372e34382e302f32332d3233203d3e2034383038.roa (hash: EGFeWmWIyr+USyiqXj6ibb0EHfeKnqu7Opu/tId22Yk=)
                          16: 34332e3232372e3235322e302f32332d3233203d3e2034383038.roa (hash: kqBTKXZuUTFu7ozAEqtreqOTWSE2PVCXlgb+48hQccY=)
                          17: 34332e3234332e3133362e302f32332d3233203d3e2034383038.roa (hash: MeegwRZIHce0h2CLLPnHVq97GiQa/EeEGjxY12mLK40=)
                          18: 3130332e33382e3232342e302f32332d3233203d3e2034383038.roa (hash: 7dPSFCDj0PIzP6El/y+lacMv5iRRwMATYARYTzcJCTg=)
                          19: 3130332e33372e3137322e302f32322d3232203d3e2034383437.roa (hash: ZLSAj91TCNLWpmJqAuFupd75mGM7DIEK9ACn9QOoMRU=)
                          20: 3130332e34372e35302e302f32332d3233203d3e2034383038.roa (hash: 5oyY01hEuqvle1ETlN/iZfm3VvugkwkDCcQO5FZtFZk=)
                          21: 34332e3232382e33382e302f32332d3233203d3e2034383038.roa (hash: mpbAsvFDLG/ZIcdpHFPiePOhuggrNP073Yxd6/YcbSE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:25:77:29:c4:81:8a:95:92:dd:d5:4c:28:31:44:d7:bf:11:38:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
        Validity
            Not Before: Jul 24 04:00:19 2026 GMT
            Not After : Jul 25 04:47:19 2026 GMT
        Subject: CN=40C2EFFFA727EE251E1C50710C02B1C5632BA33B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7f:91:e6:0c:15:be:dd:7e:79:0c:c8:ae:08:
                    7b:b1:fd:b0:de:cd:83:b6:14:18:d5:1f:b7:98:20:
                    a3:9e:e9:5d:1d:58:f3:3e:2f:10:87:5a:d7:ce:c0:
                    0f:f0:94:6d:ac:ce:91:ec:38:c2:e8:2f:78:11:d0:
                    59:49:d7:12:84:80:2c:2d:77:c4:7b:bb:70:a9:95:
                    59:8a:d5:9f:60:42:ba:be:bd:30:ea:5a:ff:61:83:
                    9b:e8:88:7f:6c:fb:d9:22:ba:e9:07:a5:d5:1e:82:
                    b8:98:98:ee:e2:b4:73:b9:ec:2b:c1:23:a2:23:54:
                    22:d3:69:62:54:8a:b9:c1:b8:9b:ae:f0:f6:7f:cc:
                    0b:22:df:a4:59:88:85:a6:9c:d0:74:e6:0c:90:74:
                    d9:8c:a9:17:3d:82:3e:9a:d4:30:7e:77:0a:be:d2:
                    37:d8:0e:b2:91:38:e9:77:f7:3f:d0:0d:61:cd:47:
                    51:99:88:a9:5f:7a:ba:16:38:68:ea:11:aa:84:2b:
                    df:92:f6:18:92:d5:34:29:a3:d3:6e:84:08:24:35:
                    30:91:0d:a6:c0:88:a6:80:fc:72:7a:95:dd:e6:96:
                    8e:5d:6d:7a:ec:6e:8e:c7:8d:41:e9:3d:fd:1e:2c:
                    b8:36:5c:20:49:b7:c6:41:7c:f6:91:84:2d:d8:41:
                    82:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C2:EF:FF:A7:27:EE:25:1E:1C:50:71:0C:02:B1:C5:63:2B:A3:3B
            X509v3 Authority Key Identifier:
                keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:df:01:6b:83:23:fb:ec:06:21:6b:8e:31:b7:ef:07:c5:d7:
         46:67:6c:04:84:88:ca:6d:f7:dd:e6:a9:13:ac:80:de:c5:a6:
         a6:e3:7e:30:07:7e:37:08:e1:75:4d:07:22:60:b7:08:76:00:
         72:1d:b1:79:54:1d:23:a0:d1:ea:0e:48:7d:84:46:b5:69:fc:
         cc:c2:25:ab:3e:5e:d5:9c:7b:e4:3d:9f:05:06:a6:4b:47:9c:
         28:4a:4a:e0:b7:45:f4:61:d0:68:7a:ff:77:66:f4:9a:da:6f:
         56:2e:9e:a3:1a:c7:e3:85:d4:3b:d3:06:37:a6:98:16:63:ef:
         56:36:e9:72:57:9b:ce:20:99:d8:af:22:32:cf:ea:4f:fc:5a:
         80:d7:f5:64:8d:06:f8:55:57:95:ee:82:d3:80:7f:66:54:57:
         fe:15:3e:71:17:16:6f:fc:b0:14:80:74:ff:1f:9c:1a:7f:e3:
         49:32:53:db:bf:fc:5e:62:9b:9c:74:ff:6e:30:b3:35:d9:09:
         ed:25:f5:15:2f:0a:15:95:7c:6a:e7:65:df:24:ae:a0:d8:2a:
         41:85:13:58:4b:ef:52:31:0b:3d:bc:6e:32:a5:b2:4a:54:3a:
         56:5a:db:d0:82:d6:d8:3f:59:7c:35:74:22:ff:1c:63:e0:d2:
         03:ae:ee:5c
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUZiV3KcSBipWS3dVMKDFE178ROPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEw
QkZGNjZCMzAeFw0yNjA3MjQwNDAwMTlaFw0yNjA3MjUwNDQ3MTlaMDMxMTAvBgNV
BAMTKDQwQzJFRkZGQTcyN0VFMjUxRTFDNTA3MTBDMDJCMUM1NjMyQkEzM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmf5HmDBW+3X55DMiuCHux/bDe
zYO2FBjVH7eYIKOe6V0dWPM+LxCHWtfOwA/wlG2szpHsOMLoL3gR0FlJ1xKEgCwt
d8R7u3CplVmK1Z9gQrq+vTDqWv9hg5voiH9s+9kiuukHpdUegriYmO7itHO57CvB
I6IjVCLTaWJUirnBuJuu8PZ/zAsi36RZiIWmnNB05gyQdNmMqRc9gj6a1DB+dwq+
0jfYDrKROOl39z/QDWHNR1GZiKlferoWOGjqEaqEK9+S9hiS1TQpo9NuhAgkNTCR
DabAiKaA/HJ6ld3mlo5dbXrsbo7HjUHpPf0eLLg2XCBJt8ZBfPaRhC3YQYITAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUQMLv/6cn7iUeHFBxDAKxxWMrozswHwYDVR0j
BBgwFoAU1WnOSe2UCVUxj3GK6s1tQQv/ZrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMzMDg1OTA5MjUwODY3My8wL0Q1NjlDRTQ5RUQ5NDA5NTUzMThGNzE4QUVBQ0Q2
RDQxMEJGRjY2QjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEwQkZGNjZCMy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTI1MDg2NzMvMC9ENTY5Q0U0OUVEOTQw
OTU1MzE4RjcxOEFFQUNENkQ0MTBCRkY2NkIzLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXd8Ba4Mj++wG
IWuOMbfvB8XXRmdsBISIym333eapE6yA3sWmpuN+MAd+NwjhdU0HImC3CHYAch2x
eVQdI6DR6g5IfYRGtWn8zMIlqz5e1Zx75D2fBQamS0ecKEpK4LdF9GHQaHr/d2b0
mtpvVi6eoxrH44XUO9MGN6aYFmPvVjbpclebziCZ2K8iMs/qT/xagNf1ZI0G+FVX
le6C04B/ZlRX/hU+cRcWb/ywFIB0/x+cGn/jSTJT27/8XmKbnHT/bjCzNdkJ7SX1
FS8KFZV8audl3ySuoNgqQYUTWEvvUjELPbxuMqWySlQ6Vlrb0ILW2D9ZfDV0Iv8c
Y+DSA67uXA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:26:25 2026 by rpki-client