Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
File:                     14F2AE289734C6F9223A15F482EED7503BB5C42B.mft (raw, json)
Hash identifier:          SFHnet5s/4ERwLeswuAShHXiYIFKYp3hF5eQvmBMIRQ=
Subject key identifier:   56:1D:16:59:75:83:C7:A2:94:67:F2:6F:5F:73:30:88:2A:C0:0E:C0
Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B
Certificate issuer:       /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
Certificate serial:       7D3DB3A2CE040CD366134660429F2C2CC900A927
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
Manifest number:          A9
Signing time:             Fri 24 Jul 2026 10:25:58 +0000
Manifest this update:     Fri 24 Jul 2026 10:20:58 +0000
Manifest next update:     Sat 25 Jul 2026 10:25:58 +0000
Files and hashes:         1: AS56040.roa (hash: iYGl/gNHGLrzYh+vcqbWhBRoH/rRahPy0AthZgqClSI=)
                          2: AS59089.roa (hash: FZ2amEc2jacY0MY1b77loa5TKv2CCD6wo9elT+pF2zo=)
                          3: AS23724.roa (hash: bXSOnuLFHwQ6WEShOo71xL2UuGOMqnSeoYRb0VKmFcM=)
                          4: AS140717.roa (hash: F4vKDqd+oRuW+dD54h6Z5jvEABTrqdWIPSBZ4SXxlOc=)
                          5: AS4808.roa (hash: z2TYzvlcywDhL0dWprMULk+6uLpj22l1z9RTTmZtv9E=)
                          6: AS4837.roa (hash: kaEOXHZ7gIhA8ZFL/Oz9k85AhlXsPEgPXsDitwFjc2s=)
                          7: AS56046.roa (hash: wQaqBuQrNgi2Ezg6k6Tc0z3rRSK0zo5E90jO2sXzVVE=)
                          8: AS58466.roa (hash: LM9JbG7lyreiz1D+ixqDOBz5SUXAnqgEmr0CR4xkMW4=)
                          9: 14F2AE289734C6F9223A15F482EED7503BB5C42B.crl (hash: Ox7WtAH8hSYBFz8KlYbtE5jmkykmX9IZvyVmWHh/A4M=)
                          10: AS140292.roa (hash: wtC9Q7BhiYUo1Gn7JyysCgjfucI9tOaarVKcHpoqhxw=)
                          11: AS9808.roa (hash: iZ56dlkspGmh1ahvcPF/GFXsutuOvohlkxlEb5OgMA8=)
                          12: AS136958.roa (hash: 1lLdYSrnIRbEu4dxKFeTEI02kvxqoyt4CS47V2g0UBk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3d:b3:a2:ce:04:0c:d3:66:13:46:60:42:9f:2c:2c:c9:00:a9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
        Validity
            Not Before: Jul 24 10:20:58 2026 GMT
            Not After : Jul 25 10:25:58 2026 GMT
        Subject: CN=561D16597583C7A29467F26F5F7330882AC00EC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:31:c2:3f:08:42:8f:34:97:fc:67:46:15:78:
                    26:15:f6:37:6b:18:02:16:3e:0a:68:3f:d9:43:f2:
                    13:67:59:b1:1e:ca:74:b0:4b:16:9c:cf:c9:a1:d2:
                    27:02:b1:7f:ac:0d:29:36:51:9b:db:1c:87:82:11:
                    94:16:97:ad:40:a6:f0:7f:7e:60:46:b4:62:44:59:
                    6e:80:37:f4:e9:94:08:1e:52:03:15:16:2b:37:a9:
                    61:f5:81:eb:d0:1f:16:dc:8b:67:57:99:8a:a3:53:
                    2b:82:bf:79:1e:7e:59:e5:7e:34:e7:5e:25:da:a7:
                    85:d0:92:38:e8:94:50:44:04:d9:8d:ee:99:6d:85:
                    8f:68:91:1f:08:41:b4:06:fe:a6:3e:b6:fb:36:bb:
                    b7:6d:7f:67:fd:33:f5:3c:25:c2:d3:ab:06:d4:97:
                    6f:52:6f:b9:ea:3a:30:e4:7e:eb:e1:c1:24:cc:cf:
                    21:d8:34:0b:5d:f9:f9:a8:f5:c0:9e:1d:85:bf:4a:
                    d7:8a:6b:fe:32:8b:ba:eb:de:c1:ca:22:d4:46:62:
                    29:dc:35:1b:7a:cc:08:bb:9e:e2:d3:52:02:59:85:
                    e7:43:dc:c7:d0:51:41:81:1e:a6:c5:9d:b8:de:61:
                    67:05:ab:cb:80:5a:4e:aa:5f:3b:48:ca:0e:38:3e:
                    5b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1D:16:59:75:83:C7:A2:94:67:F2:6F:5F:73:30:88:2A:C0:0E:C0
            X509v3 Authority Key Identifier:
                keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d2:fe:32:fc:f8:7a:50:ed:43:62:1b:e9:0a:d9:80:82:66:
         5c:a7:03:c0:6d:3a:d6:d3:bd:21:06:57:30:2c:d9:31:aa:40:
         a7:6f:0b:92:79:b9:13:d3:77:a1:17:19:34:3e:c7:c2:4f:40:
         f2:e4:75:31:bb:bf:04:05:8c:28:10:2b:5a:3b:a3:bc:41:e7:
         22:f8:ca:0a:0b:d5:9f:ee:09:ea:8a:f0:66:de:39:7a:ea:65:
         df:19:47:9f:f6:bc:ed:df:4e:d4:38:61:be:c5:d2:df:2c:26:
         6f:89:56:5c:c8:3d:a7:a4:e2:60:ed:65:7c:8e:f5:3e:3c:19:
         02:42:47:95:81:bc:13:be:2f:7f:20:46:a5:4d:4e:a3:c2:89:
         17:a8:c1:7d:44:bb:16:b4:f0:ae:39:67:e5:a3:19:15:1a:2c:
         3e:71:7f:e3:fc:6c:fc:ee:73:cf:e2:f6:c6:b7:63:04:27:02:
         c6:25:be:c2:12:41:35:c1:1c:d7:dc:ec:78:25:f6:a9:c6:d6:
         3a:65:0b:02:82:b8:b0:f8:1c:31:28:0e:7b:04:64:8b:bf:b7:
         00:72:df:16:8a:a9:2a:87:90:8f:2e:30:4b:4f:4f:7c:b9:3e:
         49:08:15:57:e3:1c:de:f6:17:9b:d6:26:4f:94:d4:63:77:b5:
         7a:2e:99:37
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUfT2zos4EDNNmE0ZgQp8sLMkAqScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAz
QkI1QzQyQjAeFw0yNjA3MjQxMDIwNThaFw0yNjA3MjUxMDI1NThaMDMxMTAvBgNV
BAMTKDU2MUQxNjU5NzU4M0M3QTI5NDY3RjI2RjVGNzMzMDg4MkFDMDBFQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLMcI/CEKPNJf8Z0YVeCYV9jdr
GAIWPgpoP9lD8hNnWbEeynSwSxacz8mh0icCsX+sDSk2UZvbHIeCEZQWl61ApvB/
fmBGtGJEWW6AN/TplAgeUgMVFis3qWH1gevQHxbci2dXmYqjUyuCv3keflnlfjTn
XiXap4XQkjjolFBEBNmN7plthY9okR8IQbQG/qY+tvs2u7dtf2f9M/U8JcLTqwbU
l29Sb7nqOjDkfuvhwSTMzyHYNAtd+fmo9cCeHYW/SteKa/4yi7rr3sHKItRGYinc
NRt6zAi7nuLTUgJZhedD3MfQUUGBHqbFnbjeYWcFq8uAWk6qXztIyg44PltlAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUVh0WWXWDx6KUZ/JvX3MwiCrADsAwHwYDVR0j
BBgwFoAUFPKuKJc0xvkiOhX0gu7XUDu1xCswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTM2NDkyODMyMzU4NDAwMS8wLzE0RjJBRTI4OTczNEM2RjkyMjNBMTVGNDgyRUVE
NzUwM0JCNUM0MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTRGMkFFMjg5NzM0QzZGOTIyM0ExNUY0ODJFRUQ3NTAzQkI1QzQyQi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTkzNjQ5MjgzMjM1ODQwMDEvMC8xNEYyQUUyODk3MzRD
NkY5MjIzQTE1RjQ4MkVFRDc1MDNCQjVDNDJCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtL+Mvz4elDt
Q2Ib6QrZgIJmXKcDwG061tO9IQZXMCzZMapAp28Lknm5E9N3oRcZND7Hwk9A8uR1
Mbu/BAWMKBArWjujvEHnIvjKCgvVn+4J6orwZt45eupl3xlHn/a87d9O1DhhvsXS
3ywmb4lWXMg9p6TiYO1lfI71PjwZAkJHlYG8E74vfyBGpU1Oo8KJF6jBfUS7FrTw
rjln5aMZFRosPnF/4/xs/O5zz+L2xrdjBCcCxiW+whJBNcEc19zseCX2qcbWOmUL
AoK4sPgcMSgOewRki7+3AHLfFoqpKoeQjy4wS09PfLk+SQgVV+Mc3vYXm9YmT5TU
Y3e1ei6ZNw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:38:06 2026 by rpki-client