Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
File:                     96E9344F9168341F216708A437FB9801FEBBBBB6.mft (raw, json)
Hash identifier:          WfR2ZU+OfOdwlmBq/WYx3BXe/grJUrvcNlU/sk0bBbw=
Subject key identifier:   6B:98:CC:AB:53:F2:A3:C4:2D:B8:3F:2D:F2:1F:E8:53:B2:DA:FB:A1
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Certificate issuer:       /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial:       67777B348B4EFE134AB8BEFC1C3DDBF65EC81DBA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
Manifest number:          DA
Signing time:             Mon 12 Oct 2026 00:56:17 +0000
Manifest this update:     Mon 12 Oct 2026 00:51:17 +0000
Manifest next update:     Thu 15 Oct 2026 01:45:17 +0000
Files and hashes:         1: 34332e3234382e39362e302f32312d3234203d3e203536303436.roa (hash: bg6zPuU8Ssz8W/nlu3pvUl1iE6RuAke/SXjsH15qWRU=)
                          2: 34332e3234382e3133302e302f32342d3234203d3e20313531333032.roa (hash: UByMT9Hh/O3sfYXD6z6x764spWsOdsV3xcxLVvQAC/k=)
                          3: 34332e3234382e3133392e302f32342d3234203d3e20313531333032.roa (hash: AK+K+0XIaKSyfH3tOaCzhbJoDErfkhloUd+G63Q3Dmw=)
                          4: 34332e3234382e3131362e302f32322d3234203d3e20313531333030.roa (hash: GCUOBWl+V+XCnXbx6rdSC8yUM/CpYntIvzJHuCjiBHg=)
                          5: 323430333a346563303a3a2f33322d313238203d3e2034383337.roa (hash: 2oOC4IREjOvTvxPuiyC1tXBVBVkt+KsdaPeWwbtwVq0=)
                          6: 323430333a346563303a3a2f33322d313238203d3e203536303436.roa (hash: zFUWQFa+lQikyT+CZCenb0EHKryU8UWKx6d3dEYjKCE=)
                          7: 96E9344F9168341F216708A437FB9801FEBBBBB6.crl (hash: s2dkSdym3MVz0k59zP7Qprrvq/6fPudEjp2NZhxPKWs=)
                          8: 3130332e38352e38342e302f32322d3234203d3e203233363530.roa (hash: 6zRZofU/EXd1Ir3F0v4JnVrefxN0vGbXM25qC+brQ8I=)
                          9: 34332e3234382e3131362e302f32322d3234203d3e2034383337.roa (hash: XXYsVjOzfPpzlF1hSAUJUFt6EyaTgHaSRtGNjAVONvY=)
                          10: 34332e3234382e3133352e302f32342d3234203d3e20313531333032.roa (hash: poyvcx+dFWMCEbVQc6Dn/ntIWbTKGttlClAKngfq1+E=)
                          11: 323430333a346563303a3a2f33322d313238203d3e203233363530.roa (hash: sY0rOPSe+85Hf1K1fPfcXuwKBHbyl1LSdfNn1Coa0eY=)
                          12: 34332e3234382e39362e302f32312d3234203d3e20313531333030.roa (hash: 9lQhY1UIq3FLiptRI3EXq8KONNhqBq6tdBI9BfGvI8Y=)
                          13: 34332e3234382e37362e302f32322d3234203d3e20313531333030.roa (hash: QlEa5gSH/Wh5fhVrLoUaArIljcV76wVr//MZRkxeMok=)
                          14: 34332e3234382e3132382e302f32302d3234203d3e20313531333030.roa (hash: AX01uCm8CDciBHnXn32mLyK7Hk19LcdY/Ab+pDwwEl0=)
                          15: 34332e3234382e37362e302f32322d3234203d3e20313331343833.roa (hash: UKLAmnW4UxMRrBgW0MT4omcrnDzgslUpaFRlpWwslLI=)
                          16: 34332e3234382e3131362e302f32322d3234203d3e203233363530.roa (hash: vglH3M0xcxEvSH+h9DlHFW87vk0hGteBC86CggpyUHU=)
                          17: 34332e3234382e37362e302f32322d3234203d3e203536303436.roa (hash: 6vAiySraKvMpCDAOY0EZ4anWAfX4UBTDp6w/43rblH8=)
                          18: 34332e3234382e39362e302f32312d3234203d3e2034383337.roa (hash: 3oBmRp7hQ3jAIokrCEPb4m5hzF6M4+MEZU+Jmm/7qMM=)
                          19: 34332e3234382e37362e302f32322d3234203d3e2034383337.roa (hash: QWfbk4XCQ871gQBIMFxv2zPD0xR19WvOVfQBasCfw6E=)
                          20: 3130332e38352e38342e302f32322d3234203d3e20313331343833.roa (hash: E/J1F3R5MG7zDozz3Tj19GdCZrQLSsVqj6L5OudoYxw=)
                          21: 34332e3234382e3132382e302f32302d3234203d3e2034383337.roa (hash: p/j36UhZgj1I4OTOgHOWv28ZKKwaM9MsHPW0cCr8u7M=)
                          22: 34332e3234382e3131362e302f32322d3234203d3e203536303436.roa (hash: gVicYA8wg3kSPKxeAjr55EyVpnpxdbSptzxhI8LjYZc=)
                          23: 3130332e38352e38342e302f32322d3234203d3e20313531333030.roa (hash: lHSYO0F3ssvnx5FUMfba6S1Q4iOJFR1M1E1gq7OVuHI=)
                          24: 3130332e38352e38342e302f32322d3234203d3e203536303436.roa (hash: CPS8C3dlUFZkTHBbXy9+u513/OlouyaV/3BeZYhp7+k=)
                          25: 34332e3234382e3131362e302f32322d3234203d3e20313331343833.roa (hash: NtH4C5qyOKGfE4eGCEl2HgmXVUp6oHMUA11/6yN52ow=)
                          26: 34332e3234382e3132382e302f32302d3234203d3e203536303436.roa (hash: YOf0bSr4MFI4TJxOtY7hHe+xbX/Xx+j1JZ2QddjM7ts=)
                          27: 34332e3234382e3130312e302f32342d3234203d3e20313331343833.roa (hash: nxDjxnLALt/hIwHKRbfhK43Ckh4MK60QwEKg4P/wLbE=)
                          28: 323430333a346563303a3a2f33322d313238203d3e20313331343833.roa (hash: YIU2CmkLXb+BejZAyCUpflttZ3bwK24l0VWQW6oqEJY=)
                          29: 34332e3234382e37362e302f32322d3234203d3e203233363530.roa (hash: dE5KBuEdxaP+cmPlwFFz9k3bcWMMkmCAjonkfCkklX0=)
                          30: 323430333a346563303a3a2f33322d313238203d3e20313531333030.roa (hash: iRw2UFtaa/yuLpD/0N/uAzewEYnOeV1zI1MMbaXH7ao=)
                          31: 34332e3234382e3133322e302f32342d3234203d3e20313531333032.roa (hash: Z11St3BiD+t7jH1l4MU7O9YJPkxobzgPSQcFOiY3fNg=)
                          32: 3130332e38352e38342e302f32322d3234203d3e2034383337.roa (hash: LwBElQfOZL6btoKu05EsVhwdk7CwlMh1tYL3oDERXyE=)
                          33: 34332e3234382e3130312e302f32342d3234203d3e20313531333032.roa (hash: pTxdoHYTL3E6emGvaRmXjOZ9k4V8WfvYOQrjeGFQeCw=)
                          34: 34332e3234382e3132382e302f32302d3234203d3e20313331343833.roa (hash: OJovoqNhjvhUTCryR/n/2jjYPyHwta6rRRccyMUeLZ8=)
                          35: 34332e3234382e39362e302f32312d3234203d3e203233363530.roa (hash: CZyxq4Axg27pvm6gklcp7uljOLOkMOivYM49Q+8hREg=)
                          36: 34332e3234382e39362e302f32312d3234203d3e20313331343833.roa (hash: Cbx2xtO5R9KLAIBkUga5T+Cl/X2FlkGWwG7xPUozF9M=)
                          37: 34332e3234382e3133342e302f32342d3234203d3e20313531333032.roa (hash: 4XwmqFPrtk/JTpTo7xczg1VTr/y+AnAZhQ62vWMrg7Y=)
                          38: 34332e3234382e3133372e302f32342d3234203d3e20313531333032.roa (hash: SnAUOFSYu3ns2lNh8+Xxmfj0gmWAuXXcRnixKEha85k=)
                          39: 34332e3234382e3132382e302f32302d3234203d3e203233363530.roa (hash: KARxv6ejz/DxVf/yeh49QE+JXnDBUPjqfdKmZ98wmls=)
                          40: 34332e3234382e3133362e302f32342d3234203d3e20313531333032.roa (hash: fo88I1wyKTXOJ8h2nzTlUGDcNSPTy4qwAJ9/bjYje0I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 01:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:77:7b:34:8b:4e:fe:13:4a:b8:be:fc:1c:3d:db:f6:5e:c8:1d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
        Validity
            Not Before: Oct 12 00:51:17 2026 GMT
            Not After : Oct 15 01:45:17 2026 GMT
        Subject: CN=6B98CCAB53F2A3C42DB83F2DF21FE853B2DAFBA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:36:09:1b:d3:f1:6c:f6:6c:b4:ee:0f:20:e1:
                    95:b8:d1:76:73:5b:c9:df:3f:59:f2:dc:11:2a:ef:
                    35:a1:09:29:b7:10:db:a9:a1:52:95:32:d5:66:48:
                    09:1c:9e:f6:a6:3c:8a:f7:36:9f:ec:31:35:e5:35:
                    81:ce:9b:f4:5d:7f:58:f3:c0:1a:d6:37:c2:5b:6e:
                    b8:d2:c1:8e:1c:dc:39:62:aa:58:10:2d:d3:09:87:
                    5e:4d:a0:07:1b:6d:9c:e2:30:b6:f1:ce:89:6a:ff:
                    03:a9:d6:8b:a3:b5:a8:75:1f:19:9f:b7:b3:af:9c:
                    d1:78:c6:a1:c8:5a:dc:a6:64:bd:df:0c:ef:25:7c:
                    eb:b6:94:f0:88:ad:8d:bf:42:71:12:72:34:5a:fe:
                    fd:f8:66:2f:5b:48:79:d6:8b:84:92:7c:83:c6:39:
                    a6:e0:e0:b6:ab:89:50:6a:b3:8a:e5:95:f1:72:46:
                    f7:d6:5a:a9:59:06:c1:d3:c4:38:b0:d4:f2:33:ea:
                    d1:77:3c:b4:fd:a6:b6:34:cd:ff:4c:39:20:38:3b:
                    31:75:21:0b:43:12:30:3c:cd:0d:ae:0c:e0:05:74:
                    26:e2:56:0f:41:0b:af:f1:b3:c4:4d:8f:03:ac:8d:
                    f4:d8:a3:b3:f9:66:55:04:f6:c2:5f:c9:87:53:af:
                    44:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:98:CC:AB:53:F2:A3:C4:2D:B8:3F:2D:F2:1F:E8:53:B2:DA:FB:A1
            X509v3 Authority Key Identifier:
                keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f7:68:1e:a1:2f:ed:28:38:a7:a0:37:43:ff:ff:23:42:fc:
         1b:a3:84:b1:ca:f8:09:3a:f7:85:47:98:f1:41:96:e9:41:98:
         80:81:09:dd:22:9c:e3:b5:11:48:b3:c6:c9:cc:2c:4f:9d:00:
         61:37:05:a0:29:e2:88:e5:92:57:85:d6:75:49:3f:bc:a2:5a:
         78:40:70:b7:46:e0:0f:12:72:c8:bb:f2:71:7b:d0:c5:34:dd:
         7c:3e:39:07:b6:e9:f3:cf:5a:03:ad:77:a6:aa:bd:06:aa:4e:
         05:0a:6b:5d:39:e5:4d:ca:36:35:01:33:76:bd:04:b5:b0:ed:
         34:ed:5d:5d:f1:18:8f:79:8c:a4:1f:5e:fa:30:3e:e3:bf:3f:
         65:9c:bd:36:34:16:42:a1:a9:22:3a:b5:3e:1c:c0:2a:f9:d5:
         2b:1c:69:86:4b:dc:d5:ce:43:7f:5d:dc:95:35:23:13:e9:9f:
         94:ac:26:94:2c:b8:79:92:92:92:53:7f:ba:7a:a1:61:45:a1:
         68:e9:b2:d5:79:8c:2d:ae:cd:05:13:ee:3a:5e:15:e9:39:69:
         a3:4b:63:f4:5e:09:44:a4:ec:02:3b:93:20:90:d4:d7:7d:f5:
         2e:96:49:42:47:c7:ab:2d:d6:08:51:50:e4:40:b0:ce:d9:8c:
         1c:50:b2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:02:45 2026 by rpki-client