Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft
File:                     833355AAAB477A3A1D2F649973B483982F9BA6CE.mft (raw, json)
Hash identifier:          eFAyFAy0hpqP5/7unGHQ93OQyL8c0KFAxrcRFbklSps=
Subject key identifier:   C6:34:0F:55:D3:2A:02:DA:F1:E8:A3:99:86:22:1E:EE:8D:98:52:25
Authority key identifier: 83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE
Certificate issuer:       /CN=833355AAAB477A3A1D2F649973B483982F9BA6CE
Certificate serial:       04F915DBF38E0A6930F6F87D7C74D0300A7E68EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft
Manifest number:          86
Signing time:             Thu 23 Jul 2026 22:59:46 +0000
Manifest this update:     Thu 23 Jul 2026 22:54:46 +0000
Manifest next update:     Fri 24 Jul 2026 23:33:46 +0000
Files and hashes:         1: 323430343a613030303a3a2f33322d3332203d3e203234313337.roa (hash: f7uZJ4DKuiWV/lnBGFZIRjbdf/EY3CWMNuQe7TulwPI=)
                          2: 3131302e37362e3139322e302f31382d3138203d3e203234313337.roa (hash: A1FWuEjTW0p3C5lu9cQ6PMbCpWod9JNyjtO0cfLmQEU=)
                          3: 34332e3235352e342e302f32322d3232203d3e203234313337.roa (hash: +gOi9g7AvYMGXZweSvI7M0D/yREUi2fnQBbiw9Ibq0Q=)
                          4: 3131392e33312e3139322e302f31392d3139203d3e203234313337.roa (hash: U0iJhAWC0dIqsengmxkd6jMAxVQP/XKrG/Rsti+e4+Y=)
                          5: 833355AAAB477A3A1D2F649973B483982F9BA6CE.crl (hash: 5Tw6OzXan+4iI2RpsDKyxzTn/kfUbnz3hjGPzm9qlKQ=)
                          6: 3130332e3233382e3235322e302f32322d3232203d3e203234313337.roa (hash: hvPHlirHDecyBdSPetseNQaYzkpvvym+uBRstvU2nAo=)
                          7: 3231302e37362e302e302f31392d3139203d3e203234313337.roa (hash: SPXl0CjrEONbgQYjRoIK4mMYVg5YjnRzNpU4hW+1gVM=)
                          8: 3131302e37372e302e302f31372d3137203d3e203234313337.roa (hash: vFT248uRD9dRV6l6REbq38YYVSQHghdQGQxcqm5CnYY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 23:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f9:15:db:f3:8e:0a:69:30:f6:f8:7d:7c:74:d0:30:0a:7e:68:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833355AAAB477A3A1D2F649973B483982F9BA6CE
        Validity
            Not Before: Jul 23 22:54:46 2026 GMT
            Not After : Jul 24 23:33:46 2026 GMT
        Subject: CN=C6340F55D32A02DAF1E8A39986221EEE8D985225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:36:79:26:92:52:4a:73:94:e5:3c:7d:2d:0c:
                    6c:4e:c1:b8:e2:9e:2f:d0:48:9d:d2:60:a9:ce:d3:
                    ec:80:2e:04:a7:8e:bc:bc:e5:46:89:59:31:da:69:
                    17:93:7c:58:6a:6b:4d:0a:c7:be:e0:b1:84:e4:0e:
                    05:50:2c:33:e6:e2:cf:21:87:a1:bd:ff:00:a0:ee:
                    51:4c:63:e0:ac:54:24:11:dd:6f:b5:52:cb:6e:51:
                    0f:59:0a:16:4b:c5:52:2c:07:c3:6e:97:0f:02:6a:
                    e4:3a:85:9c:f3:92:74:e1:4c:8e:18:58:a4:e1:44:
                    f3:48:9c:60:79:10:8b:b4:4f:66:f6:f7:0b:16:c6:
                    b4:8b:0f:a7:d1:ba:36:04:59:4f:da:fc:ee:7e:a1:
                    50:49:d0:dd:0a:c1:8f:64:a4:24:28:a5:b6:f9:86:
                    b3:49:e3:b0:95:14:f3:1f:7e:7c:e8:4d:36:90:10:
                    ee:8c:37:8f:bc:74:e6:ce:79:30:5f:39:75:28:a0:
                    61:4c:01:32:34:46:a3:9a:74:e2:54:b4:8b:0b:e5:
                    74:40:4c:27:55:30:b6:b4:0b:49:05:bf:c6:3c:eb:
                    95:45:17:88:04:91:49:f4:c0:66:9d:4c:30:c1:19:
                    66:77:1e:68:85:9b:72:5a:7d:4b:41:d9:03:40:b6:
                    bb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:34:0F:55:D3:2A:02:DA:F1:E8:A3:99:86:22:1E:EE:8D:98:52:25
            X509v3 Authority Key Identifier:
                keyid:83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5d:56:2c:61:2c:a9:aa:9c:fc:43:12:58:da:bc:28:99:d0:
         37:bf:7e:ea:42:c4:d2:5b:6f:fc:de:f9:a0:46:bd:01:52:6c:
         9d:67:f2:73:f5:55:c0:25:6a:2e:ec:b4:a2:60:32:04:d8:31:
         b5:48:ca:5c:4a:a2:77:13:28:c5:34:ca:36:bd:9a:de:35:4b:
         57:f7:12:57:1f:c5:c9:06:9f:02:65:04:7d:65:4d:37:75:37:
         c3:d9:99:4f:cb:7f:42:98:a9:5e:7f:42:e5:20:dd:5d:4f:31:
         62:77:88:1f:95:19:23:eb:05:b4:a7:54:62:98:27:93:18:e1:
         56:70:b2:24:4b:39:2b:b6:c2:fa:52:17:e7:a0:94:1f:28:a8:
         38:d4:49:b4:03:d9:62:5f:52:a0:e6:a0:14:0b:e9:2c:25:dd:
         8a:64:30:60:3b:c7:b9:3a:3f:a9:39:70:05:c4:57:85:fd:87:
         88:a9:b1:66:c8:fe:75:1e:01:41:fe:ae:c5:eb:05:c0:c9:22:
         a6:cf:06:83:93:c9:7a:7e:63:77:1c:94:f6:de:24:5e:d1:ae:
         9a:71:98:96:6a:53:7c:b8:f7:90:35:7a:b9:67:d8:49:0b:86:
         03:b2:89:d9:17:46:31:2f:33:81:7b:84:2b:c1:59:ca:11:65:
         70:da:f0:ec
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUBPkV2/OOCmkw9vh9fHTQMAp+aOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMzMzU1QUFBQjQ3N0EzQTFEMkY2NDk5NzNCNDgzOTgy
RjlCQTZDRTAeFw0yNjA3MjMyMjU0NDZaFw0yNjA3MjQyMzMzNDZaMDMxMTAvBgNV
BAMTKEM2MzQwRjU1RDMyQTAyREFGMUU4QTM5OTg2MjIxRUVFOEQ5ODUyMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNnkmklJKc5TlPH0tDGxOwbji
ni/QSJ3SYKnO0+yALgSnjry85UaJWTHaaReTfFhqa00Kx77gsYTkDgVQLDPm4s8h
h6G9/wCg7lFMY+CsVCQR3W+1UstuUQ9ZChZLxVIsB8Nulw8CauQ6hZzzknThTI4Y
WKThRPNInGB5EIu0T2b29wsWxrSLD6fRujYEWU/a/O5+oVBJ0N0KwY9kpCQopbb5
hrNJ47CVFPMffnzoTTaQEO6MN4+8dObOeTBfOXUooGFMATI0RqOadOJUtIsL5XRA
TCdVMLa0C0kFv8Y865VFF4gEkUn0wGadTDDBGWZ3HmiFm3JafUtB2QNAtrvhAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUxjQPVdMqAtrx6KOZhiIe7o2YUiUwHwYDVR0j
BBgwFoAUgzNVqqtHejodL2SZc7SDmC+bps4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjY4OTMyMDY4MjY1MTY1MC8wLzgzMzM1NUFBQUI0NzdBM0ExRDJGNjQ5OTczQjQ4
Mzk4MkY5QkE2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODMzMzU1QUFBQjQ3N0EzQTFEMkY2NDk5NzNCNDgzOTgyRjlCQTZDRS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTY2ODkzMjA2ODI2NTE2NTAvMC84MzMzNTVBQUFCNDc3
QTNBMUQyRjY0OTk3M0I0ODM5ODJGOUJBNkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmF1WLGEsqaqc
/EMSWNq8KJnQN79+6kLE0ltv/N75oEa9AVJsnWfyc/VVwCVqLuy0omAyBNgxtUjK
XEqidxMoxTTKNr2a3jVLV/cSVx/FyQafAmUEfWVNN3U3w9mZT8t/QpipXn9C5SDd
XU8xYneIH5UZI+sFtKdUYpgnkxjhVnCyJEs5K7bC+lIX56CUHyioONRJtAPZYl9S
oOagFAvpLCXdimQwYDvHuTo/qTlwBcRXhf2HiKmxZsj+dR4BQf6uxesFwMkips8G
g5PJen5jdxyU9t4kXtGumnGYlmpTfLj3kDV6uWfYSQuGA7KJ2RdGMS8zgXuEK8FZ
yhFlcNrw7A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:49 2026 by rpki-client