Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
File:                     F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft (raw, json)
Hash identifier:          TZCK9uLy+DKTVz1xhVZRrIYsQk4ThH6xOgBBQe7jc0w=
Subject key identifier:   74:A6:63:9E:79:3D:82:B3:44:70:F0:15:C0:CF:01:76:A5:7D:7A:54
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Certificate issuer:       /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial:       7E522AD545B47BFFF27CC3B6A6837A7F7A5DF974
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
Manifest number:          44
Signing time:             Tue 12 May 2026 23:15:49 +0000
Manifest this update:     Tue 12 May 2026 23:10:49 +0000
Manifest next update:     Thu 14 May 2026 01:37:49 +0000
Files and hashes:         1: 3131342e3131342e36342e302f31392d3234203d3e203536303436.roa (hash: aF3GG9ClQmKfqqoms2b8ZBWCHJr//2BMFFxxL7swPtg=)
                          2: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl (hash: 06+vocs2POEUuHzy8tNmxPy9cFeFjY6948SHXsMui48=)
                          3: 3131342e3131342e39362e302f32302d3234203d3e2034383337.roa (hash: eZtOjO7I2MepkQbn85egh1Lnu1i+4JgpVaoIbcoDMcY=)
                          4: 3131342e3131342e3131322e302f32302d3234203d3e20313337373032.roa (hash: PkCwWnw3PHTq+vYK1KUV313Oht0v/DXlfYx5SoIP84M=)
                          5: 323430343a333730303a3a2f33322d3634203d3e20313337373032.roa (hash: qs2qxnTmOlEyVS6Qau2xA7nlczXR/QB+A2OlVAzfu34=)
                          6: 3131342e3131342e3131322e302f32302d3234203d3e203536303436.roa (hash: UyvVI1qV2GuzweCMNqtEtPn8qvUYEiO6ioVdsraU5O8=)
                          7: 3131342e3131342e302e302f31382d3234203d3e203536303436.roa (hash: wyOP2OkcK0RyKhtQQ5BY1J2XPn5SwDwaHoFghxO5Lgo=)
                          8: 3131342e3131342e3131322e302f32302d3234203d3e2034383337.roa (hash: FuAefi2k+MxwWEA1e6EeFXVUaieSOTb8VmLKkzGo0uU=)
                          9: 3131342e3131342e302e302f31382d3234203d3e203231383539.roa (hash: pIt4b7xnDcf/2bsqo3Gx9aNls8ZbD3maIVn+Eh0MmrM=)
                          10: 3131342e3131342e302e302f31382d3234203d3e2034383337.roa (hash: zQmY5XoxEgFfEocFlMn7zYUhUWjw1W1jR7h66vVfXRg=)
                          11: 3131342e3131342e36342e302f31392d3234203d3e2034383337.roa (hash: uZR3/1/4YF72OuVTrOxRu4XvI1rHNO9/mv3P+UxzZfs=)
                          12: 3131342e3131342e39362e302f32302d3234203d3e203536303436.roa (hash: ezCUIC9VcjeRK2+GTssm4PV96+Ina4oiGh1Ju4wnOtE=)
                          13: 323430343a333730303a3a2f33322d3634203d3e203536303436.roa (hash: pOPse9BV3gn6djAX7ecHkFVIUgN70stV1LcDDmPTYl8=)
                          14: 3131342e3131342e36342e302f31392d3234203d3e203231383539.roa (hash: /UPLNtJyBw1bgK76/hFyIRStLrGQRkZjpwXFOle6bEA=)
                          15: 3131342e3131342e3131322e302f32302d3234203d3e203231383539.roa (hash: HRMXKfc+EpXqjefGAqI2D0frnesKyXTLaWckWOelSRU=)
                          16: 3131342e3131342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7mISZsZ4HIxbAs3JkW8PttavON7sghcgz5ug1T/w3Jk=)
                          17: 3131342e3131342e39362e302f32302d3234203d3e203231383539.roa (hash: Ah1hAptQgQx/TDu32iuzbvTZnvkTCVkVVLy9/9WPaaU=)
                          18: 323430343a333730303a3a2f33322d3634203d3e2034383337.roa (hash: zuCmu28tlc/6Dxb5FY/JmG6mSgbcxgNnqnOntLlSdwo=)
                          19: 3131342e3131342e3132382e302f31372d3234203d3e203231383539.roa (hash: TvprcYp8fQ7VaasMW02+bn5WNN6zIFcA0VFszax2RFE=)
                          20: 3131342e3131342e36342e302f31392d3234203d3e20313337373032.roa (hash: pEKwX9Ft0ck+emjCFmodH06AapcEO9wPvQT5NdDyWVI=)
                          21: 323430343a333730303a3a2f33322d3634203d3e203231383539.roa (hash: Sn+tT3R7FUIVQa1TjOf+NsbHTswr92j/YhOMUuFNzYg=)
                          22: 3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa (hash: SfeGMuqHWzoAv9iGacYRYzdpfa3BDEWC2CuQowRuJd4=)
                          23: 3131342e3131342e39362e302f32302d3234203d3e20313337373032.roa (hash: muvu6CQMqTuNlfNzK3PNDYlQpfEfxnnrgjlIM12wZFs=)
                          24: 3131342e3131342e3132382e302f31372d3234203d3e203536303436.roa (hash: FWWMCAx1W0KCQG5LZnRL2X3DIQBk/s6lX410aw4wRiM=)
                          25: 3131342e3131342e302e302f31382d3234203d3e20313337373032.roa (hash: nLm7pgJsZIIGPL2vx/lrEFek1uPCaLKs4C53MBfr6vs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:52:2a:d5:45:b4:7b:ff:f2:7c:c3:b6:a6:83:7a:7f:7a:5d:f9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
        Validity
            Not Before: May 12 23:10:49 2026 GMT
            Not After : May 14 01:37:49 2026 GMT
        Subject: CN=74A6639E793D82B34470F015C0CF0176A57D7A54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3f:11:db:37:61:af:7b:b9:10:5a:4c:fa:c2:
                    9b:e2:f3:40:d7:f3:ab:77:f1:d8:99:7f:36:85:a0:
                    4d:f8:f6:17:48:58:47:57:9c:b0:0b:0e:b4:3c:85:
                    7d:b5:d2:10:b3:77:8e:e2:e8:45:72:3d:7c:13:bc:
                    3c:8b:fc:29:fb:9b:55:05:3e:65:f5:51:52:0d:6a:
                    b5:d2:60:79:dd:dc:3c:a5:87:22:11:2b:ba:7e:38:
                    6d:97:b5:f2:c1:4d:0b:a9:e8:94:72:ff:97:ad:78:
                    2e:79:00:28:cc:84:82:86:4e:6a:e7:79:fd:2f:94:
                    58:de:6e:87:15:bb:4e:11:e4:b3:42:e8:39:57:fc:
                    b8:15:88:a2:77:2d:48:4e:04:65:ee:0a:4d:0a:e0:
                    88:cc:05:bc:98:43:89:fe:5f:10:04:84:6e:30:cf:
                    06:89:97:ce:29:73:ae:ed:e9:79:02:2b:43:bd:b2:
                    80:ab:a6:c4:70:f8:93:0c:5b:92:4f:97:80:7e:2d:
                    56:0a:3a:b1:76:1b:61:cc:13:42:e0:63:10:bd:0a:
                    34:62:f3:54:df:fd:20:90:58:50:22:3d:6f:43:fd:
                    ac:77:f9:d7:d7:b1:00:8a:69:f6:a6:de:9d:d9:47:
                    be:ed:9f:98:58:d8:91:73:35:4d:54:1e:d5:ca:62:
                    3a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A6:63:9E:79:3D:82:B3:44:70:F0:15:C0:CF:01:76:A5:7D:7A:54
            X509v3 Authority Key Identifier:
                keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b5:59:7b:70:60:fd:24:d4:e1:58:7c:11:2e:02:2b:ff:ad:
         52:a8:01:bb:f5:7e:30:29:c3:f0:19:be:2d:06:65:d5:fc:17:
         bc:2b:f0:a3:4b:65:39:dd:10:a9:c2:86:d5:cb:df:7d:a4:b0:
         7f:9b:c6:91:f6:e6:f0:1e:c4:2f:25:1e:b9:3e:89:48:e4:e3:
         c8:ea:cb:e1:88:62:2d:e0:03:96:5f:e7:c4:0e:a0:10:53:91:
         8c:78:a1:19:97:d5:cb:0f:9b:51:e3:18:95:22:df:53:62:ed:
         db:c7:01:93:2a:1f:7d:15:47:8e:37:4a:55:02:99:fb:15:3d:
         02:20:64:2a:ca:ba:36:5c:d1:64:d4:63:64:82:d4:21:60:73:
         84:1b:84:cc:03:fd:8e:22:d5:e4:3a:ac:89:b8:10:eb:d3:e4:
         7d:c2:ae:91:fb:9c:39:95:d1:04:48:b8:74:7f:b6:98:93:20:
         15:0b:96:ca:43:ed:47:be:30:38:90:17:59:22:78:f2:80:e7:
         89:00:00:a9:97:12:3d:91:67:b2:10:62:83:7f:b3:35:53:24:
         47:a5:7e:cd:09:18:33:50:19:f6:08:13:cd:10:88:28:6d:1b:
         53:b7:50:2f:71:4f:b5:cf:78:ff:d5:93:c3:a4:7e:ae:4a:79:
         10:aa:cf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:27 2026 by rpki-client