Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
File:                     F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft (raw, json)
Hash identifier:          3CNfTShXQVJpXDxbCD729yQClqr3pu0VremYtC+IdJE=
Subject key identifier:   F6:84:A2:28:00:98:BF:FD:A8:83:BB:08:F3:17:89:FC:FF:BC:16:17
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Certificate issuer:       /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial:       7291B3491E2D8F6DC8E039E5ACF2C7CCBBBE965E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
Manifest number:          A3
Signing time:             Thu 23 Jul 2026 09:23:19 +0000
Manifest this update:     Thu 23 Jul 2026 09:18:19 +0000
Manifest next update:     Fri 24 Jul 2026 12:25:19 +0000
Files and hashes:         1: 3131342e3131342e3132382e302f31372d3234203d3e203536303436.roa (hash: FWWMCAx1W0KCQG5LZnRL2X3DIQBk/s6lX410aw4wRiM=)
                          2: 3131342e3131342e39362e302f32302d3234203d3e2034383337.roa (hash: eZtOjO7I2MepkQbn85egh1Lnu1i+4JgpVaoIbcoDMcY=)
                          3: 323430343a333730303a3a2f33322d3634203d3e203536303436.roa (hash: pOPse9BV3gn6djAX7ecHkFVIUgN70stV1LcDDmPTYl8=)
                          4: 3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa (hash: SfeGMuqHWzoAv9iGacYRYzdpfa3BDEWC2CuQowRuJd4=)
                          5: 3131342e3131342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7mISZsZ4HIxbAs3JkW8PttavON7sghcgz5ug1T/w3Jk=)
                          6: 3131342e3131342e39362e302f32302d3234203d3e20313337373032.roa (hash: muvu6CQMqTuNlfNzK3PNDYlQpfEfxnnrgjlIM12wZFs=)
                          7: 323430343a333730303a3a2f33322d3634203d3e203231383539.roa (hash: Sn+tT3R7FUIVQa1TjOf+NsbHTswr92j/YhOMUuFNzYg=)
                          8: 3131342e3131342e36342e302f31392d3234203d3e20313337373032.roa (hash: pEKwX9Ft0ck+emjCFmodH06AapcEO9wPvQT5NdDyWVI=)
                          9: 3131342e3131342e3131322e302f32302d3234203d3e20313337373032.roa (hash: PkCwWnw3PHTq+vYK1KUV313Oht0v/DXlfYx5SoIP84M=)
                          10: 3131342e3131342e36342e302f31392d3234203d3e203231383539.roa (hash: /UPLNtJyBw1bgK76/hFyIRStLrGQRkZjpwXFOle6bEA=)
                          11: 3131342e3131342e302e302f31382d3234203d3e2034383337.roa (hash: zQmY5XoxEgFfEocFlMn7zYUhUWjw1W1jR7h66vVfXRg=)
                          12: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl (hash: pn6/JL9BLcKarDnI+SmtuQj7DluQdTkBa3hLUaOH+BM=)
                          13: 3131342e3131342e3131322e302f32302d3234203d3e203536303436.roa (hash: UyvVI1qV2GuzweCMNqtEtPn8qvUYEiO6ioVdsraU5O8=)
                          14: 3131342e3131342e39362e302f32302d3234203d3e203231383539.roa (hash: Ah1hAptQgQx/TDu32iuzbvTZnvkTCVkVVLy9/9WPaaU=)
                          15: 3131342e3131342e302e302f31382d3234203d3e203536303436.roa (hash: wyOP2OkcK0RyKhtQQ5BY1J2XPn5SwDwaHoFghxO5Lgo=)
                          16: 323430343a333730303a3a2f33322d3634203d3e20313337373032.roa (hash: qs2qxnTmOlEyVS6Qau2xA7nlczXR/QB+A2OlVAzfu34=)
                          17: 3131342e3131342e302e302f31382d3234203d3e203231383539.roa (hash: pIt4b7xnDcf/2bsqo3Gx9aNls8ZbD3maIVn+Eh0MmrM=)
                          18: 323430343a333730303a3a2f33322d3634203d3e2034383337.roa (hash: zuCmu28tlc/6Dxb5FY/JmG6mSgbcxgNnqnOntLlSdwo=)
                          19: 3131342e3131342e3131322e302f32302d3234203d3e2034383337.roa (hash: FuAefi2k+MxwWEA1e6EeFXVUaieSOTb8VmLKkzGo0uU=)
                          20: 3131342e3131342e36342e302f31392d3234203d3e203536303436.roa (hash: aF3GG9ClQmKfqqoms2b8ZBWCHJr//2BMFFxxL7swPtg=)
                          21: 3131342e3131342e39362e302f32302d3234203d3e203536303436.roa (hash: ezCUIC9VcjeRK2+GTssm4PV96+Ina4oiGh1Ju4wnOtE=)
                          22: 3131342e3131342e36342e302f31392d3234203d3e2034383337.roa (hash: uZR3/1/4YF72OuVTrOxRu4XvI1rHNO9/mv3P+UxzZfs=)
                          23: 3131342e3131342e3132382e302f31372d3234203d3e203231383539.roa (hash: TvprcYp8fQ7VaasMW02+bn5WNN6zIFcA0VFszax2RFE=)
                          24: 3131342e3131342e302e302f31382d3234203d3e20313337373032.roa (hash: nLm7pgJsZIIGPL2vx/lrEFek1uPCaLKs4C53MBfr6vs=)
                          25: 3131342e3131342e3131322e302f32302d3234203d3e203231383539.roa (hash: HRMXKfc+EpXqjefGAqI2D0frnesKyXTLaWckWOelSRU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:91:b3:49:1e:2d:8f:6d:c8:e0:39:e5:ac:f2:c7:cc:bb:be:96:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
        Validity
            Not Before: Jul 23 09:18:19 2026 GMT
            Not After : Jul 24 12:25:19 2026 GMT
        Subject: CN=F684A2280098BFFDA883BB08F31789FCFFBC1617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ae:f2:1a:27:77:f8:05:a8:ac:2e:b2:4a:e7:
                    06:15:b7:90:14:58:0b:85:f2:f0:6f:bf:1f:f3:83:
                    aa:eb:96:fe:28:c8:3e:95:3c:95:e8:ef:e3:ce:36:
                    2e:9c:d4:55:5a:06:7f:41:06:a3:41:ed:79:8f:05:
                    11:98:2b:e5:63:d0:9b:30:36:60:d0:49:1e:79:28:
                    58:f6:0b:5a:83:7a:fd:49:7c:d5:dd:de:13:ac:4a:
                    28:a8:81:57:d8:1a:51:d4:4f:bd:5c:2e:3f:31:99:
                    91:81:79:8d:29:fc:53:42:29:76:c4:d0:84:92:51:
                    b2:aa:62:64:aa:a0:78:94:6d:6a:4d:7b:58:1b:da:
                    87:54:73:98:1a:60:10:00:1d:4d:05:2e:0e:9e:ad:
                    a7:7e:70:b7:bb:7d:e9:db:9e:72:ff:8a:d4:57:a1:
                    27:55:0e:ce:b4:bc:e6:4f:53:93:97:28:e2:75:44:
                    fc:28:fc:75:e7:da:a5:b7:b6:1a:2a:47:23:ec:84:
                    00:56:68:38:88:7c:0f:2e:ad:6c:0f:41:49:5e:e7:
                    ff:21:c4:c3:48:ad:f3:7c:01:e1:02:ae:be:eb:b0:
                    88:a3:2d:9f:2e:48:51:db:76:de:dd:67:ee:89:f3:
                    23:bb:fd:03:ba:38:b6:a7:c0:10:bf:c3:f8:78:a8:
                    c0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:84:A2:28:00:98:BF:FD:A8:83:BB:08:F3:17:89:FC:FF:BC:16:17
            X509v3 Authority Key Identifier:
                keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:a9:ff:32:3b:4a:e7:66:42:4f:01:2f:90:65:a7:7e:27:16:
         0f:b1:25:44:22:6c:50:4f:62:a9:50:c7:b2:f2:59:cd:4d:30:
         92:c4:5e:a1:3b:a0:7a:84:2b:d8:27:39:6e:92:a5:4e:5b:bf:
         8d:78:0a:09:51:12:dd:97:ee:de:45:8d:09:8d:57:d1:dc:4d:
         c6:a1:19:5b:6f:ca:d7:58:9e:c2:5b:91:aa:6c:e5:7e:da:80:
         61:82:2c:71:7e:81:b6:6a:de:c9:0c:da:14:23:1f:db:96:79:
         cf:8d:82:b8:8d:86:1b:b3:d6:a5:a4:90:90:fc:16:d6:c0:10:
         7a:c8:50:b2:40:b7:66:b7:1a:6b:28:48:44:d1:89:de:77:dd:
         16:aa:71:1a:2f:5c:3b:7f:52:0f:a7:59:73:c5:6c:d7:51:db:
         4d:32:c7:5b:1e:ce:0c:9a:4d:c1:ed:6a:04:69:8a:5b:5c:aa:
         43:9b:07:58:ea:67:67:b6:54:d6:f2:59:89:6e:26:37:da:99:
         36:78:a0:be:ab:04:8a:5a:53:c7:4e:91:a0:d5:79:9a:2a:d1:
         71:7b:63:92:d0:45:88:3d:de:6b:8c:85:bc:a3:08:30:0f:3b:
         a6:17:ec:fc:83:da:e6:83:a8:51:d3:7c:06:29:7d:79:8d:40:
         90:16:5f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:44:47 2026 by rpki-client