Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
File:                     909D556251A0BE5F9234514028EBD37CE8E1280A.mft (raw, json)
Hash identifier:          kXRj8xCoKyj8FpfMjA/mBnLoqyXjAP/81QrQu+U2V9I=
Subject key identifier:   3A:0C:6C:F1:77:53:30:E5:21:5E:DA:B8:CB:48:41:CB:4D:2B:F5:26
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Certificate issuer:       /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial:       5A4F0F6AB92EE8DC10958C8FEBE2DF22521111FE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
Manifest number:          79
Signing time:             Fri 17 Apr 2026 14:44:43 +0000
Manifest this update:     Fri 17 Apr 2026 14:39:43 +0000
Manifest next update:     Sat 18 Apr 2026 17:18:43 +0000
Files and hashes:         1: 3132332e34392e3234372e302f32342d3234203d3e2034353135.roa (hash: kAVWZq0A9zD+vWiTRlhRcXBRkWNI+ZpkNQpWt0I2T2w=)
                          2: 3132332e34392e3139352e302f32342d3234203d3e203338383134.roa (hash: 93s3UiCF+Wd5njWRY2drOvKnsHZLCFd+goqTtneNrXk=)
                          3: 3132332e34392e3234312e302f32342d3234203d3e203633363431.roa (hash: oJWDFgNP10dQZ/IsB56YuUh2YzqysBIN0PTRtohD/D0=)
                          4: 3132332e34392e3234322e302f32342d3234203d3e203633363431.roa (hash: 4yFeBtOnx6PJDSGqWWlfXw9GOt3LnYBEIdTySWvAfJw=)
                          5: 3132332e34392e3234372e302f32342d3234203d3e203633363431.roa (hash: p79j4YGmWW4IV+Ou8ryXl//w37lh9IuSadq/jTt/hgA=)
                          6: 3132332e34392e3139352e302f32342d3234203d3e203633363431.roa (hash: rO+l5Qlk15uuhyb0exm7lOm58oejeBgyGycLSvlGIsA=)
                          7: 909D556251A0BE5F9234514028EBD37CE8E1280A.crl (hash: 6AM1v8cP0TX3tyvzp6W8qHMuHY/x69fhvK8R3wI4REE=)
                          8: 3132332e34392e3234352e302f32342d3234203d3e203633363431.roa (hash: URY/fnRSKZtxcyZMIV2zonyjJhXZIXVlZKxZiD23qHc=)
                          9: 3132332e34392e3233372e302f32342d3234203d3e2034353135.roa (hash: jJftpG3x4g3cL1YrT7aEpgobH6HBDOkt05jsoCJTJ2Q=)
                          10: 3132332e34392e3234352e302f32342d3234203d3e203338383134.roa (hash: AV+aDx+v2jUPKJf06Aq7/Zc2xAoUeTp3ckA3OJ2cWeQ=)
                          11: 3132332e34392e3234322e302f32342d3234203d3e2034353135.roa (hash: KwDAtrxOe3gPNr0PBcclw0t4c/e2Kbrw4nqX1PJIpDY=)
                          12: 3132332e34392e3234352e302f32342d3234203d3e2034383132.roa (hash: eHtoU26S9uQP9D4qKQ0M3F2642XYQQ/3cUcRnCSD8Kw=)
                          13: 3132332e34392e3234362e302f32342d3234203d3e2034353135.roa (hash: iOY+HPVvGy3/dXGKhLG1Kw8dLVPZsso+CaY41zAgyRY=)
                          14: 3132332e34392e3139362e302f32342d3234203d3e203633363431.roa (hash: 0iTDK2jBtrXhBc+FRVAS0NVqOcMAurUMKS5nPe1dw2E=)
                          15: 3132332e34392e3139362e302f32342d3234203d3e2034353135.roa (hash: LXx/rGIx/9w6pFw56VkZ6Mqff7i1/5BgxHn6MefLK/0=)
                          16: 3132332e34392e3233372e302f32342d3234203d3e203633363431.roa (hash: 7pKQkhzkq1U210D2cZU/h7MDDRd2cNlncacV8dcNrfg=)
                          17: 3132332e34392e3234312e302f32342d3234203d3e2034353135.roa (hash: TQFKLb6QXJghjcVvTOVEQ+qkJHS6U3QD78fM7fDfLRo=)
                          18: 3132332e34392e3234362e302f32342d3234203d3e203633363431.roa (hash: ZLaSbqkhr0ckiAj1yXpXnIu2V3obfSobsdCH83ZzjdY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4f:0f:6a:b9:2e:e8:dc:10:95:8c:8f:eb:e2:df:22:52:11:11:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
        Validity
            Not Before: Apr 17 14:39:43 2026 GMT
            Not After : Apr 18 17:18:43 2026 GMT
        Subject: CN=3A0C6CF1775330E5215EDAB8CB4841CB4D2BF526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7a:bf:30:93:97:ac:2f:34:49:b5:32:39:28:
                    03:1a:3e:e8:58:00:5b:d4:d5:ce:5a:4c:07:93:24:
                    e9:2e:87:04:e9:93:c9:b2:2d:a4:f4:13:bf:85:67:
                    f7:27:bc:29:b0:e4:06:26:bd:23:9a:35:d5:be:78:
                    b9:17:2f:a0:46:63:50:c7:d7:f9:3e:d0:8b:f6:c3:
                    33:0d:48:66:a1:f6:5a:f4:4f:04:f4:cf:97:f2:53:
                    a5:81:8c:f5:fe:f5:16:9b:58:f0:7c:7f:39:84:ae:
                    ce:38:9b:62:39:11:af:fa:69:8c:6c:83:4d:1d:87:
                    e2:cc:3f:26:35:1c:13:a7:39:e4:c0:50:58:3b:79:
                    ab:ed:37:ec:2e:d3:d9:0a:a5:a4:16:51:40:71:12:
                    d7:ca:d3:d2:b4:7e:c7:f3:c0:f2:35:7c:e6:7c:b7:
                    0a:6d:53:4d:fa:99:5c:74:cb:c5:5f:a4:03:34:28:
                    aa:c4:a0:18:42:d6:c9:b9:66:b0:34:f1:b7:25:62:
                    bd:80:af:6b:3a:de:ac:5f:95:43:b4:44:57:4d:6b:
                    67:2f:e2:3a:78:36:6d:ff:cc:1f:ee:99:5e:b4:30:
                    6a:b8:94:f5:78:71:98:8f:9b:61:ee:7e:8f:c3:ed:
                    98:f3:79:23:bd:6a:d8:fa:66:09:a9:42:b2:77:cd:
                    87:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0C:6C:F1:77:53:30:E5:21:5E:DA:B8:CB:48:41:CB:4D:2B:F5:26
            X509v3 Authority Key Identifier:
                keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e3:45:3e:70:0b:4e:b9:e8:7a:1a:9c:68:78:0c:a0:d8:11:
         e6:56:07:c3:02:11:aa:b4:04:60:73:48:05:d3:1a:6b:7a:56:
         4a:99:20:81:83:35:8f:3e:1a:6f:9d:44:2b:7a:71:1c:24:d6:
         08:3a:7b:76:5d:82:44:d9:88:5d:0c:21:05:8f:7b:b6:f9:4d:
         af:87:02:2d:d1:a0:d8:e3:3c:d6:a4:3f:79:75:ec:17:1d:3a:
         6d:c7:e0:6c:d6:c0:00:c2:c9:2f:60:0b:71:a1:c9:f6:da:4d:
         61:7b:b8:8f:12:ff:eb:72:02:61:51:c5:ff:6c:94:1e:f5:b5:
         b2:f7:63:10:e1:f2:82:7f:26:6e:80:d6:f0:ec:d7:f2:a9:ea:
         95:ce:dd:cb:22:8b:89:f6:8b:67:87:db:54:bc:c9:4c:34:22:
         3d:36:e4:89:65:6a:ff:10:31:33:c5:3a:19:04:90:21:64:0d:
         d9:f3:63:3b:49:bb:1c:8f:c4:e5:f9:e9:c5:d6:86:09:99:bd:
         ce:d7:94:f3:d6:c0:e2:ee:c8:73:06:89:8a:ac:94:f5:d7:29:
         77:c5:6a:f7:27:a7:2b:b5:73:64:4a:7f:58:cc:42:80:c7:20:
         87:10:e8:f1:75:5c:a0:df:55:0a:fb:93:4b:86:71:6e:83:77:
         d9:1a:8a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:28:57 2026 by rpki-client