Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
File:                     9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft (raw, json)
Hash identifier:          VW9E3VBbP8GWQIk8i4o/sqjOSANtqvTkr3MCHenWkGM=
Subject key identifier:   AD:E0:53:E4:B3:76:72:89:C7:A3:F1:5D:F9:16:93:3D:E6:4F:FA:96
Authority key identifier: 9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A
Certificate issuer:       /CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
Certificate serial:       2C860798F3D38F1C903D1669908C4144D8E1F6C0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
Manifest number:          73
Signing time:             Fri 25 Sep 2026 08:32:32 +0000
Manifest this update:     Fri 25 Sep 2026 08:27:32 +0000
Manifest next update:     Mon 28 Sep 2026 19:29:32 +0000
Files and hashes:         1: 3130332e37362e3232322e302f32332d3233203d3e2034383038.roa (hash: hvHbFL+mk63mg9G7EHAKDLKYkUIUHd1ngpu3mdvWYho=)
                          2: 3130332e37372e32382e302f32322d3232203d3e2034383437.roa (hash: vKwURYO29V/idSwbJGJlUZZ+tWxs6as8Y7t32HvFqRM=)
                          3: 323430373a373738303a3a2f33322d3332203d3e2030.roa (hash: gzEc3CXXGcQWOxotohoedVP4pF9FVlgNODLpwKx8fUc=)
                          4: 3130332e37362e3232302e302f32322d3232203d3e2034383437.roa (hash: bVqfzO+arD4Um5tS69MlIDABilnX2cRx9SBb5y88I2A=)
                          5: 9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl (hash: uJWd0iq8Y6Az/L/41YlOfOH+JuzZVjmEHqi+kapQ1dk=)
                          6: 323430363a3838303a3a2f33322d3332203d3e2030.roa (hash: zLQafVdFQlmu+N0ToNivjL+0KsdsUwTBCbVeEqvITFw=)
                          7: 3130332e3233362e3234342e302f32322d3232203d3e2034383437.roa (hash: Y5trOlbR/plNg3QWBKYijC8voHHhxrp8lORe45SD0+M=)
                          8: 3130332e37362e3232342e302f32322d3232203d3e2034383437.roa (hash: /7dkC0KCXVakh473Sdc/GvCBLnVg8PslCmydwVIeiDg=)
                          9: 323430373a383838303a3a2f33322d3332203d3e2030.roa (hash: xQENf1adNMYSG70l6LP4CsgYjWDbEv8Mt7TMAnvJgDQ=)
                          10: 3130332e37362e3232302e302f32322d3232203d3e2034383038.roa (hash: qFzMYF5TRk3uV/gHYGorbe73VYUDEY4eRdheDspwrIk=)
                          11: 3130332e37372e32382e302f32322d3232203d3e2034383038.roa (hash: Jlx/wNWNgrDfC/9kYEd+x916pqVJYgsFM7pPmFGjYfk=)
                          12: 34352e3132362e3131322e302f32322d3232203d3e2034383437.roa (hash: FalWQte9mnWrzLhbGi0PVklPjT0Bn3VWP8JzYdGRCIo=)
                          13: 323430373a373838303a3a2f33322d3332203d3e2030.roa (hash: QxnPT1CIMAlqQ663ZFA8jDyFlWdXGbjN3pr40XZAsmQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 19:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:86:07:98:f3:d3:8f:1c:90:3d:16:69:90:8c:41:44:d8:e1:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
        Validity
            Not Before: Sep 25 08:27:32 2026 GMT
            Not After : Sep 28 19:29:32 2026 GMT
        Subject: CN=ADE053E4B3767289C7A3F15DF916933DE64FFA96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b1:c3:d2:2f:ce:99:37:a8:ce:27:be:11:13:
                    6f:9d:59:60:ba:9d:c9:fe:0f:fb:58:4d:bf:bc:4b:
                    40:f2:69:68:8b:a7:4d:a9:54:99:14:3d:cb:87:20:
                    fb:a1:30:e2:ac:38:de:34:3b:0f:db:7f:66:0d:cb:
                    38:9a:89:c6:a3:09:80:83:6c:aa:bd:5c:f5:a3:29:
                    0d:bd:a9:9e:4f:af:2c:0a:eb:2f:48:33:48:c3:8a:
                    e5:ca:f3:54:e7:f5:af:c3:34:ff:a0:8c:bd:4a:ad:
                    1d:e8:de:6f:cf:ed:7a:44:d1:e4:44:92:2d:36:1c:
                    22:e7:69:bb:d6:26:ef:fb:80:f4:cf:27:10:26:b0:
                    66:76:1f:25:9b:6a:18:72:11:c2:1a:97:d5:ac:3e:
                    4e:a9:12:5c:a3:80:30:64:0c:d4:76:c8:3c:16:7c:
                    b3:4a:38:e8:d4:0d:53:bd:d4:76:f0:e8:9a:3f:66:
                    4a:dd:87:0a:b6:db:bf:32:91:58:87:ec:35:52:ec:
                    b4:b1:1b:49:e3:c3:12:4e:a0:b5:09:65:ff:a5:85:
                    08:43:7f:a9:15:44:ac:6c:74:60:f3:4c:60:27:e6:
                    db:d2:e5:1d:13:62:59:54:fc:05:9b:eb:fe:8b:ad:
                    80:76:53:1a:a5:d8:36:3b:29:a0:ca:15:10:89:f5:
                    b0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E0:53:E4:B3:76:72:89:C7:A3:F1:5D:F9:16:93:3D:E6:4F:FA:96
            X509v3 Authority Key Identifier:
                keyid:9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:70:de:a1:64:3a:6a:03:23:09:6d:6e:af:d5:ed:cf:91:31:
         03:2f:6a:5a:ee:31:04:fb:ff:60:ab:72:c6:aa:4a:00:bc:29:
         b8:37:c3:b8:4e:6d:4c:85:d4:a4:bf:16:65:81:8c:09:2e:53:
         de:dc:fd:88:86:36:f9:dc:45:41:09:5c:00:36:e4:b3:26:5d:
         20:0e:c5:46:73:35:3a:b8:c1:2d:92:5b:d4:95:38:8b:f3:f6:
         1f:9c:db:a0:1e:99:b7:57:d6:dd:4e:64:0e:07:51:8d:6c:6d:
         93:ce:12:87:4d:5e:00:31:55:14:91:fa:51:01:92:22:c0:6d:
         97:2e:bc:1c:3e:e4:f4:17:14:ea:78:e1:52:54:8a:e4:f8:b4:
         1a:ff:1e:b2:bc:0c:7f:79:3f:0e:b2:73:19:32:6b:aa:d7:45:
         28:ec:06:2d:b9:5d:e9:9e:67:09:d6:a2:f3:86:04:70:9f:eb:
         5e:7b:ba:e3:e4:34:38:b4:a1:46:1b:3b:89:8b:ed:3d:fe:58:
         9b:75:18:7f:ae:cf:02:f1:5f:64:6c:6e:fb:eb:9f:ab:c6:24:
         a8:b0:d2:21:33:58:61:41:46:58:7c:ba:63:2e:86:1a:fc:59:
         61:b1:05:42:98:79:44:92:54:72:f5:0b:a9:bd:4b:3d:45:2f:
         16:b4:38:ac
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIULIYHmPPTjxyQPRZpkIxBRNjh9sAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURGQTVENDRDRjUwRURGNTZFOTNCQjdGQUY4NjNFQjYw
QjYwRDA0QTAeFw0yNjA5MjUwODI3MzJaFw0yNjA5MjgxOTI5MzJaMDMxMTAvBgNV
BAMTKEFERTA1M0U0QjM3NjcyODlDN0EzRjE1REY5MTY5MzNERTY0RkZBOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJscPSL86ZN6jOJ74RE2+dWWC6
ncn+D/tYTb+8S0DyaWiLp02pVJkUPcuHIPuhMOKsON40Ow/bf2YNyziaicajCYCD
bKq9XPWjKQ29qZ5PrywK6y9IM0jDiuXK81Tn9a/DNP+gjL1KrR3o3m/P7XpE0eRE
ki02HCLnabvWJu/7gPTPJxAmsGZ2HyWbahhyEcIal9WsPk6pElyjgDBkDNR2yDwW
fLNKOOjUDVO91Hbw6Jo/Zkrdhwq2278ykViH7DVS7LSxG0njwxJOoLUJZf+lhQhD
f6kVRKxsdGDzTGAn5tvS5R0TYllU/AWb6/6LrYB2Uxql2DY7KaDKFRCJ9bDbAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUreBT5LN2conHo/Fd+RaTPeZP+pYwHwYDVR0j
BBgwFoAUnfpdRM9Q7fVuk7t/r4Y+tgtg0EowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
ODcyODcyMDI2NjM2MjkwNy8wLzlERkE1RDQ0Q0Y1MEVERjU2RTkzQkI3RkFGODYz
RUI2MEI2MEQwNEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOURGQTVENDRDRjUwRURGNTZFOTNCQjdGQUY4NjNFQjYwQjYwRDA0QS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTg3Mjg3MjAyNjYzNjI5MDcvMC85REZBNUQ0NENGNTBF
REY1NkU5M0JCN0ZBRjg2M0VCNjBCNjBEMDRBLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHDeoWQ6agMj
CW1ur9Xtz5ExAy9qWu4xBPv/YKtyxqpKALwpuDfDuE5tTIXUpL8WZYGMCS5T3tz9
iIY2+dxFQQlcADbksyZdIA7FRnM1OrjBLZJb1JU4i/P2H5zboB6Zt1fW3U5kDgdR
jWxtk84Sh01eADFVFJH6UQGSIsBtly68HD7k9BcU6njhUlSK5Pi0Gv8esrwMf3k/
DrJzGTJrqtdFKOwGLbld6Z5nCdai84YEcJ/rXnu64+Q0OLShRhs7iYvtPf5Ym3UY
f67PAvFfZGxu++ufq8YkqLDSITNYYUFGWHy6Yy6GGvxZYbEFQph5RJJUcvULqb1L
PUUvFrQ4rA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:42:07 2026 by rpki-client