Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft
File:                     69D8917902AD24A5AC6751655C29BB7E9171C796.mft (raw, json)
Hash identifier:          8mVLFhYBGtF8I7tj03qkFjd460qc3FsLXuojFMzH3Vg=
Subject key identifier:   D9:3C:C3:D2:5B:CF:87:35:E4:FA:66:25:4D:50:D3:8F:BA:CF:00:43
Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
Certificate issuer:       /CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Certificate serial:       46705ECFFA19D5FAF02CBFBE306CB8B1C1B02CC4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft
Manifest number:          A2
Signing time:             Thu 23 Jul 2026 23:24:49 +0000
Manifest this update:     Thu 23 Jul 2026 23:19:49 +0000
Manifest next update:     Sat 25 Jul 2026 00:15:49 +0000
Files and hashes:         1: 69D8917902AD24A5AC6751655C29BB7E9171C796.crl (hash: 9aVH2uyixBNVXCCc6E1C5kQkUcVA0hN2ASgtwn/5Fk4=)
                          2: 3130332e33382e38342e302f32332d3233203d3e20313334373731.roa (hash: OYkfJy2ZCj4Za/TpRKMfPiyKkrrwUTpMXOXuHJ2od5U=)
                          3: 34332e3234312e31382e302f32332d3233203d3e20313334373731.roa (hash: g8ilk+sl+dDhM5BKyKcsd2KM49uNuMJTL8GjIoNzrMU=)
                          4: 3130332e33362e36322e302f32342d3234203d3e20313334373731.roa (hash: UFn/+n2/UGx0ym3rutfcS6XWaXzKHZ/3QWzwq+REcvc=)
                          5: 3130332e33362e36302e302f32342d3234203d3e20313334373731.roa (hash: jCXgEQab1q1gI1eQ8F9KbUfgocbUKrDgoRWB09Rj85M=)
                          6: 3130332e33372e31362e302f32332d3233203d3e20313334373731.roa (hash: 11dlVd8fxS5FCZMBSgjdbcNY1ljjmpHUxOVOqtIa5qw=)
                          7: 34332e3234312e31362e302f32332d3233203d3e20313334373731.roa (hash: GZA2gC8XENuEcOocrwCg+OIlW8G++ueVhTApoIsU3TM=)
                          8: 3130332e33362e3136342e302f32342d3234203d3e20313334373731.roa (hash: xNgJ3gV9o1r6D3ANw23YPUw2L/9/jc69Llz4ccRKPUY=)
                          9: 3130332e33372e31382e302f32332d3233203d3e20313334373731.roa (hash: 8hFX86to9/eGPettKuWyn5hjTsPjj2Hpr3Dg3H1fRmc=)
                          10: 34332e3234312e31382e302f32332d3233203d3e203536303431.roa (hash: m1f+3plTbe8uogB2R06Abq+6VChFk04obHB8XA9Z4Ho=)
                          11: 34332e3234312e31362e302f32322d3232203d3e2034383337.roa (hash: Pq8g0RIum0w1LbuK/n8kNmv62uItjiHCar3Kuskg4Ko=)
                          12: 34332e3234322e3230362e302f32332d3233203d3e20313331353432.roa (hash: llonCm2OT3d5znXdLmPBqmPV1XM7orUVFVsm5526JQo=)
                          13: 3130332e33362e3136352e302f32342d3234203d3e20313334373731.roa (hash: G9v1KPz5Flcq9LDq1tg8DoL6SKebPJ1ejmcmypa8BD8=)
                          14: 3130332e33362e36312e302f32342d3234203d3e20313334373731.roa (hash: z8DY57i9OehDi7ebpZyrdNWzcV2//g4+AFn3Lo5pMJw=)
                          15: 34332e3234302e3135362e302f32332d3233203d3e20313334373731.roa (hash: TeSDWKBTe4EvIUkm0+5J0aWmiTxbYu2DsR4+kBNZ4Mw=)
                          16: 34332e3234302e37342e302f32332d3233203d3e203536303431.roa (hash: asq/ziPLMREXANZF09aOFRetG5kvZ1Knbhcmv2aupXM=)
                          17: 3130332e33382e38362e302f32332d3233203d3e20313334373731.roa (hash: mu/l8yjhPKatjhlzFVofGC+jYz2MEHU+ZBSSSLma3us=)
                          18: 34332e3234302e3135382e302f32332d3233203d3e203536303431.roa (hash: Z3SLiBfGQMcdXZ+SsJzrc/fyO0Ut1FVycNVgXVsIGPY=)
                          19: 34332e3234302e37322e302f32332d3233203d3e203536303431.roa (hash: xTGOWcQiZzCe7aoGYkYoE2rr4IsUzCelr8kotB0PPXA=)
                          20: 34332e3234302e3135382e302f32332d3233203d3e20313334373731.roa (hash: qSvESqSS+8/NGX/IiUay4iIZHDU9Cvfs4uU4IgIpKOc=)
                          21: 34332e3234302e37322e302f32332d3233203d3e20313334373731.roa (hash: niOaBgNt3J592u2TM2mQUyFJ98uVCICr8V+xTMvty0g=)
                          22: 34332e3234312e31362e302f32332d3233203d3e203536303431.roa (hash: 12W96oCbuu0szupwn4XkrjUDqJyp17nRLxlI8P3vNVg=)
                          23: 34332e3234322e3230342e302f32332d3233203d3e20313334373731.roa (hash: yhwBa/Ii2uCOPdvqoD3W94WdahALVCDmozhE3EQxqtc=)
                          24: 34332e3234302e3135362e302f32332d3233203d3e203536303431.roa (hash: 3QZ4lklAJ6ksfdni15njMjDBSZhgZE8ZTPS6Hc9UNM4=)
                          25: 34332e3234302e3135362e302f32322d3232203d3e2034383337.roa (hash: GbGKWmxQ6q4U8u0KX49ujLZaCvlv2jY9oUHVdiN1mLs=)
                          26: 3130332e33372e31382e302f32342d3234203d3e20313334373731.roa (hash: ffDSmjBwjUaAh6lymcPk4TvG/WhbWj1XHzVMTW9blTs=)
                          27: 34332e3234322e3230362e302f32332d3233203d3e20313334373731.roa (hash: 6pmdbQz11vFkS0CJLqy0QbyoWZZ3v+k2AmIQQDroATo=)
                          28: 34332e3234302e37342e302f32332d3233203d3e20313334373731.roa (hash: 1+/FnY2kpPYiqpdvgd79J6u/kyxBP7t8sd4IWFum0Hc=)
                          29: 34332e3234302e37322e302f32322d3232203d3e2034383337.roa (hash: uOi29mW77Ft4ORuWZDkSBvHEaj/KYo7tPfD7St6Q+FA=)
                          30: 3130332e33362e3136362e302f32332d3233203d3e20313334373731.roa (hash: VB+bWR5w/uyJ4IKJSDuYz6dafBC8liBhxJoNohyMPGs=)
                          31: 3130332e33362e36332e302f32342d3234203d3e20313334373731.roa (hash: u7z58nWlWiDRubuwIx6Q3OblARyxG5pc0EGoNiPOh4I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 00:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:70:5e:cf:fa:19:d5:fa:f0:2c:bf:be:30:6c:b8:b1:c1:b0:2c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796
        Validity
            Not Before: Jul 23 23:19:49 2026 GMT
            Not After : Jul 25 00:15:49 2026 GMT
        Subject: CN=D93CC3D25BCF8735E4FA66254D50D38FBACF0043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:34:c6:c7:63:19:41:82:57:f1:5e:38:63:5f:
                    ef:b1:5d:eb:84:87:50:4a:5f:9c:b1:ee:bb:2b:a2:
                    02:d7:5e:78:95:1c:6c:ad:19:ca:a0:1d:00:a0:52:
                    44:7d:e9:6f:68:16:31:6f:31:2c:64:60:d3:0f:7c:
                    4d:c6:85:e1:21:32:70:d3:1e:0b:21:8e:1d:ac:74:
                    86:7d:42:ae:9e:74:10:5b:f1:af:14:61:f0:3b:35:
                    9e:de:1e:75:71:e2:d9:f0:d9:e4:09:fc:91:7d:29:
                    aa:ef:4f:17:f2:d5:d7:e6:73:5c:e7:8c:2d:e5:55:
                    a8:c8:93:8e:18:5c:7f:c3:bc:c6:ed:e2:34:5b:3d:
                    43:0b:5b:a1:d6:c0:91:99:94:dc:33:d8:a6:b1:e9:
                    49:fd:17:8e:87:83:ab:84:d7:23:23:76:a8:6e:4e:
                    ee:67:7f:ae:35:49:8a:26:b8:db:ec:a9:76:7c:91:
                    08:e7:2e:77:ca:5b:2b:9f:29:2f:2d:30:54:8e:ce:
                    9e:50:fe:de:65:38:f9:9e:fa:37:a9:b8:fa:7a:5b:
                    46:f1:59:dd:ab:26:91:9e:00:9a:f8:32:cd:99:c9:
                    bf:89:1a:57:72:ff:f1:c3:77:07:1a:35:cb:49:1f:
                    84:6c:c3:14:42:7f:13:c0:ae:72:a6:c5:26:81:b5:
                    bd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3C:C3:D2:5B:CF:87:35:E4:FA:66:25:4D:50:D3:8F:BA:CF:00:43
            X509v3 Authority Key Identifier:
                keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:20:5c:e9:42:c9:90:70:9a:a6:29:5e:0e:fc:73:93:fc:d7:
         e5:3c:03:ba:9a:ea:17:f6:7c:df:62:38:59:9d:8a:8a:d7:ec:
         00:89:fe:92:ef:2f:4b:47:7a:70:d1:fe:1f:36:05:fa:62:f8:
         39:e2:60:57:ed:eb:97:5a:19:c2:d8:c6:ce:6e:2a:41:51:a9:
         d9:ed:7b:d2:d9:ef:24:36:ca:7b:8e:15:a9:fc:1f:ae:2f:05:
         80:33:2a:f6:50:0d:cc:1c:7c:8c:a8:48:e6:8c:6b:8a:fa:5b:
         5f:07:3f:23:f4:ec:12:df:4c:34:51:b2:ac:99:cc:21:e1:09:
         87:60:0c:07:0a:4d:7d:c7:7e:e3:6a:d1:83:42:5b:14:de:a6:
         2e:40:70:dc:01:78:d4:4a:3d:80:92:48:61:ee:90:b3:6b:a5:
         51:8b:ff:15:dd:98:ff:06:0c:bd:2e:e3:7f:c8:b3:27:d0:4b:
         78:c2:ed:a7:c7:89:c2:de:8e:23:cc:8f:f4:1d:4a:b2:46:01:
         fa:20:2c:86:09:0d:35:1f:f3:66:56:50:b0:c8:72:a1:b0:71:
         3f:3d:31:06:68:4e:1e:36:cf:8d:f5:c1:68:d3:e4:60:56:24:
         62:4f:2a:f3:13:c0:c9:b9:01:2b:6c:8e:fe:98:24:a1:10:53:
         05:69:b2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:44:37 2026 by rpki-client