Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
File:                     94A04007C18934EEFD779445BA5349A8FBDB19DF.mft (raw, json)
Hash identifier:          TdiGQZ1pt2GtcJbpiVhpXDBVNfgsY2/K89EKr/6f534=
Subject key identifier:   17:5A:F5:9F:71:9D:5C:64:20:1E:A4:59:B0:2B:E5:F4:A7:FC:45:96
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Certificate issuer:       /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial:       3EBEFAA67D0C4AD43BBD69FA9879295C5C085885
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
Manifest number:          CD
Signing time:             Sun 11 Oct 2026 06:35:21 +0000
Manifest this update:     Sun 11 Oct 2026 06:30:21 +0000
Manifest next update:     Wed 14 Oct 2026 10:39:21 +0000
Files and hashes:         1: 3231392e3233322e3132382e302f31392d3332203d3e20313337373935.roa (hash: tVD4bz8KmaurUHu/A7Es1Bli7Y3sTy5tzURf1uPAf1g=)
                          2: 3130332e3231392e33362e302f32322d3332203d3e203536303431.roa (hash: Hq0hZTyQQ5FQtDz59K2Zq2ZtTRPVUznk2o2LxDY7rlw=)
                          3: 34352e3235302e34302e302f32322d3332203d3e203536303431.roa (hash: NGZrGAFxgiHzexq2IofFsLwb6uxFAsBmn1Ow7FzcJBg=)
                          4: 34352e3235302e34302e302f32322d3332203d3e203538343631.roa (hash: 9CaLvoN1eYCp7Xv/nRR420eYv7/If00ope76q9V3HCo=)
                          5: 3130332e33362e3230382e302f32322d3332203d3e2034383337.roa (hash: 6Kk8anRGGcyDebTFWlv/ymR0kPxhO2tNsW9AZ20S/xA=)
                          6: 3130332e3231392e32382e302f32322d3332203d3e203538343631.roa (hash: 7see7mUP5RiDFD85n7obIwjrZr6JjitwwbnUFue3amg=)
                          7: 94A04007C18934EEFD779445BA5349A8FBDB19DF.crl (hash: y/HC2wKC2/sQu5BUW03pvlAX49y/+VRO2fSHDpgc3pM=)
                          8: 3130332e3231392e33322e302f32322d3332203d3e203536303431.roa (hash: rLWGREJ9nji3Oorbvdg7tTAoZn7v999fkb8uYyetyjc=)
                          9: 323430303a313734303a3a2f33322d313238203d3e20313337373935.roa (hash: 0NLn1TjiH7ZQugYHz0U6scqxEDr1vFkoOGSZqocn4BE=)
                          10: 323430333a333438303a3a2f33322d313238203d3e20313337373935.roa (hash: 01EQRfFNBLZtIBFUU+0+xXPUTEcW/BIBd90WQEzHptk=)
                          11: 3130332e3231392e32382e302f32322d3332203d3e2034383337.roa (hash: J9pnuoN4vw/XBkCeNzwqo0Ctq27wQAgAWX0UKgdxN9c=)
                          12: 3130332e3231392e33362e302f32322d3332203d3e203538343631.roa (hash: +5Aen4gBbhvr4RgAoGXeqXSzdfciSyM7Altnae7HfsY=)
                          13: 323430303a313763303a3a2f33322d313238203d3e20313337373935.roa (hash: yzONsYi5N+SM+OLZBFdqRCr3ZLEz27kAoxggpJWW9UI=)
                          14: 34352e3235302e33362e302f32322d3332203d3e2034383337.roa (hash: Wlhz50rrfhaHks6SQoofee0N3RSyE8dAGgAN/vQSK9U=)
                          15: 3130332e3231392e33322e302f32312d3332203d3e2034383337.roa (hash: qK0kAsOigkdUaF7IQ1NgfNZAa44NyfjEtYU0d1m4+1E=)
                          16: 34332e3234302e3230342e302f32322d3332203d3e2034383337.roa (hash: qeWw9LAoOwB1x5e+0OFKFERBUgZGVkU5Fz80amsjkic=)
                          17: 34352e3235302e34302e302f32322d3332203d3e2034383337.roa (hash: EAaYwNd0lpYc0bg5b49dtzIlWXe8A0pgSFh06kZY9Zs=)
                          18: 323430323a666663303a3a2f33322d313238203d3e20313337373935.roa (hash: KTy4mQXfQF/bSwV80iNhpUCiYJrAX6vXxjisC+VZBco=)
                          19: 3130332e3231392e33362e302f32322d3332203d3e2034383337.roa (hash: ONNnz84jBhcHYnXQ3A0lIZhQnu12JiV5NeaIfBKeeTc=)
                          20: 323430303a313834303a3a2f33322d313238203d3e20313337373935.roa (hash: J/0DZa7OnZ48Jbysk3JSfZGDjUSqzgnIbELiC9NKhPg=)
                          21: 3130332e3131362e3138342e302f32322d3332203d3e20313337373935.roa (hash: EpJUiL82WCFmgrDdSZPF24mlGOs9L/efXkKQUa75Peg=)
                          22: 3130332e3231392e33322e302f32322d3332203d3e203538343631.roa (hash: XQjhRzo/rx/IDy+A+cvqn5D7gzFqFUImFbNjlJhG0Jk=)
                          23: 3130332e3231392e32382e302f32322d3332203d3e203536303431.roa (hash: gQpM2GIv2RqhUOBQIUUVpwQ0JBNdKs+u03+D9iHE/zQ=)
                          24: 34352e3235302e33322e302f32322d3332203d3e2034383337.roa (hash: LsvU/Z+7W+dJDtCnWU+MMDHZdO6s/DcGQSZ6YBn3WLU=)
                          25: 3130332e3231392e33322e302f32322d3332203d3e2034383337.roa (hash: Jk41kAWGPXXzkq+R+8DdZZEOIG50IWN+ozjGIKaa+IU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 09:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:be:fa:a6:7d:0c:4a:d4:3b:bd:69:fa:98:79:29:5c:5c:08:58:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
        Validity
            Not Before: Oct 11 06:30:21 2026 GMT
            Not After : Oct 14 10:39:21 2026 GMT
        Subject: CN=175AF59F719D5C64201EA459B02BE5F4A7FC4596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6f:1b:8c:0f:c3:64:e1:88:5e:92:ba:e7:69:
                    cc:57:58:7b:2e:c1:5c:81:e9:0a:34:8d:38:81:ab:
                    b9:97:ef:f7:02:b9:97:08:a4:42:5f:54:02:69:14:
                    59:b1:f6:54:64:24:0c:3e:60:c6:5e:86:fa:7c:16:
                    1f:d2:d1:a5:54:cc:76:98:39:b7:13:df:c0:f4:03:
                    48:c9:79:5d:ed:9b:ec:9d:b0:a3:39:9b:e5:23:1c:
                    dd:b1:ff:0a:a1:ab:20:01:d5:d0:9a:c5:79:67:89:
                    3d:21:35:c5:c3:76:8f:cb:d2:80:2b:f0:5e:6f:6c:
                    2e:20:75:88:25:cc:5c:57:d8:ab:aa:5e:07:29:29:
                    88:92:6a:f6:71:92:99:d2:07:b2:d2:1a:f6:95:b6:
                    4a:be:8c:b4:6f:ad:91:cc:36:77:ea:c3:6c:7f:f6:
                    c2:03:f0:30:d1:ed:e5:96:0f:d1:ef:b2:f9:91:f1:
                    e0:34:54:6b:40:a2:83:a0:77:fc:9b:6f:61:df:a1:
                    58:2a:97:61:05:e7:43:b1:17:8f:c0:a1:64:66:bf:
                    eb:af:ef:b5:b4:07:f4:b7:82:2c:cc:7e:36:3e:f5:
                    68:e2:4b:d6:a5:4e:f9:58:aa:dc:56:79:8d:ff:ca:
                    ad:e1:39:7b:b4:5e:0d:b3:35:1d:5d:72:89:52:c9:
                    4f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5A:F5:9F:71:9D:5C:64:20:1E:A4:59:B0:2B:E5:F4:A7:FC:45:96
            X509v3 Authority Key Identifier:
                keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f8:f4:8e:02:33:4c:53:56:e7:2f:46:2c:bc:02:cd:5e:90:
         d4:c8:4a:d8:7d:98:c9:b2:d0:f8:f4:74:fe:b7:11:5c:33:b5:
         93:0f:b2:5d:be:39:80:cc:21:e8:0c:44:5d:13:cb:14:73:90:
         d6:66:61:fe:96:c5:95:55:39:71:a9:f0:bc:e3:49:cc:80:59:
         47:9f:85:ed:25:8b:bf:f7:19:81:79:43:0f:32:ba:94:71:c2:
         63:38:cc:22:ba:1b:29:ec:72:5b:8f:37:39:11:25:bf:66:f5:
         81:83:3a:25:81:10:c1:6b:26:dc:d5:92:d3:4e:d0:36:e2:f9:
         79:12:5e:fe:6d:ae:0a:0a:69:46:c1:0d:ca:0f:3e:9a:fb:72:
         53:90:e7:1c:6d:36:1c:bd:5f:b6:48:c4:78:3b:fe:c5:74:3b:
         18:2b:e8:ad:6e:e2:2d:63:76:63:79:d1:42:72:0c:84:7b:bd:
         39:8b:12:aa:06:c8:04:77:a8:66:bc:05:62:79:cf:17:8f:76:
         30:e2:62:04:68:88:56:d1:3c:b8:c7:96:9c:92:d7:e8:1b:d5:
         35:ef:ae:07:86:29:96:7e:4f:33:4a:20:a9:72:3b:ac:53:e9:
         88:e0:35:61:2a:70:9f:cb:d2:71:26:60:34:92:fe:c8:52:27:
         b8:76:69:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:17:27 2026 by rpki-client