Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
File:                     D9EB5C6DC17682949F5243587DA38740C3EEA953.mft (raw, json)
Hash identifier:          +mP+rKZkNMkEyPYlspERCMY9S5hhNQmTOmT1/YLCTic=
Subject key identifier:   6B:81:5E:56:8F:BC:D4:3E:58:B7:A4:2C:68:8D:55:3A:C5:1C:40:8C
Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
Certificate issuer:       /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Certificate serial:       6B4A4DBD2454514BA4F2F4217DD86DAC0BE24556
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
Manifest number:          81
Signing time:             Thu 16 Apr 2026 09:55:51 +0000
Manifest this update:     Thu 16 Apr 2026 09:50:51 +0000
Manifest next update:     Fri 17 Apr 2026 13:03:51 +0000
Files and hashes:         1: 3131392e3136312e3133382e302f32342d3234203d3e203633363331.roa (hash: lHQp/Div7ulKm97od1SQswQ3yI5J9U71XxLou9kga38=)
                          2: 3131392e3136312e3133372e302f32342d3234203d3e203633363331.roa (hash: uYXy1ZNlr/DDnhA91fdp96VTjAGbBGrKxJ/nJwBFE4c=)
                          3: 3131392e3136312e3134392e302f32342d3234203d3e203633363331.roa (hash: N5OiNy6gpNAI122IfWvxLK3QW0HsLsxWhpB7bPfA+x8=)
                          4: 3131392e3136312e3134322e302f32342d3234203d3e203633363331.roa (hash: GCzj2v7L5bU/5xAICc7Mo0IWDU6IPyXLJDYDlG2dtII=)
                          5: 3131392e3136312e3135382e302f32342d3234203d3e203633363331.roa (hash: LQZaiQ/Qd/M/fCrq9bHgdqWNP7ugk6V735y0mDkj9fA=)
                          6: 3131392e3136312e3135352e302f32342d3234203d3e203633363331.roa (hash: x+ksNF78CQTw/L4V1wT8nZZBF8Nz+W+s1SYOjKA6wdo=)
                          7: 3131392e3136312e3135332e302f32342d3234203d3e203633363331.roa (hash: /bES/Bm3e3I6uwLynFP1nPItfsrn7ti5dzc/15vqHrg=)
                          8: 3131392e3136312e3135342e302f32342d3234203d3e203633363331.roa (hash: Ci42JOqMjSAJ3WJUTwnlTLR8G5pTY1EIpg2hwNySDug=)
                          9: 3131392e3136312e3136302e302f32312d3231203d3e2030.roa (hash: cPpjqUpV6F29loCVOOwbyveyBY/0tKDAJE22QRL0osg=)
                          10: 3131392e3136312e3134302e302f32342d3234203d3e203633363331.roa (hash: eing/mIPhXhe93XLvq3RC5YRPf8OivgAJSu54LJSd48=)
                          11: 3130332e37372e37332e302f32342d3234203d3e203633363331.roa (hash: qzRlWsrI6PetcGa/KoRszsGPl8m2KxKVGBHbcN8k8R8=)
                          12: 3130332e37372e38382e302f32322d3232203d3e2030.roa (hash: fR4BJhyIgU9EzBWn21D2hiiwP5vaUp6WzpNrB0SQRaY=)
                          13: 3130332e37372e37342e302f32342d3234203d3e203633363331.roa (hash: +SACmmpAElpqmXII63Jhjhb5xmU61Ubzx0s1wYb2aAg=)
                          14: 3131302e3137322e3232342e302f32322d3232203d3e2030.roa (hash: vfSoXvfxdoOO8Tcwj9aUwTPHooLMqelVtrGaoAhknTQ=)
                          15: 3130332e37372e37322e302f32342d3234203d3e203633363331.roa (hash: x17cHSRYcX/Kt66624cs2XAt5w4hzS22OUj6QmZWVd8=)
                          16: 3131392e3136312e3133392e302f32342d3234203d3e203633363331.roa (hash: nydKiRyHm3PHN6iWfg7icv7RBMzkwjFy+ct03JbKQdw=)
                          17: 3131392e3136312e3135322e302f32342d3234203d3e203633363331.roa (hash: 0O6HwC17CULgpOdtwyeoQhjd7sYNr0qRKV4vgoZ3uFs=)
                          18: 3131392e3136312e3134312e302f32342d3234203d3e203633363331.roa (hash: f4vNZ08uUNtuyklw4goVqXSaWbpQ5fYDLqZ5SHP2/5g=)
                          19: 3131392e3136312e3134352e302f32342d3234203d3e203633363331.roa (hash: pUhjYD0PQ8rwZ1DafU0Rvby54ZCdFvTYF7jxsVBaHpI=)
                          20: 3131392e3136312e3135372e302f32342d3234203d3e203633363331.roa (hash: tUiIUTqcTNvN/U4B9L5lCpdQw6TwFJaaWBbk34dQlvI=)
                          21: 3131392e3136312e3134382e302f32342d3234203d3e203633363331.roa (hash: 5KmbHs67IA/wY5tBVDS22+6mTsCdZcqAE09P4TvLmS4=)
                          22: 3131392e3136312e3135312e302f32342d3234203d3e203633363331.roa (hash: 34DEjgc+uFzAvaJR2gQqwSseBX9CZsTiDQ1qcyMCy+A=)
                          23: D9EB5C6DC17682949F5243587DA38740C3EEA953.crl (hash: UzQXIgiDZbRP30ecA/7N9E7IySHSJ13xczShQT4ZzP4=)
                          24: 3131392e3136312e3135302e302f32342d3234203d3e203633363331.roa (hash: okNrHQWlAZcM0ybXfs5gjhn4SzMvRZc5F26x1wSUssw=)
                          25: 323430373a393038303a3a2f33322d3634203d3e203633363331.roa (hash: RtOoe4RmLFL3YbHfpUMA6V286a2QhifPZV7nvutl6kg=)
                          26: 3130332e37372e37352e302f32342d3234203d3e203633363331.roa (hash: a7l7+V4+dpfaquk22MoeFRXSKe1Gx6rGVmWsi2/A0CA=)
                          27: 3131392e3136312e3135362e302f32342d3234203d3e203633363331.roa (hash: 7XOgZuVkvvQZdo3gGn56dhtyiau+6lvq0uc3bf0+xMY=)
                          28: 3131392e3136312e3134362e302f32342d3234203d3e203633363331.roa (hash: OABa4cNuqzmJY4gHN33EpjQDWN7uNzrp8aMvvXUl78s=)
                          29: 3131392e3136312e3134332e302f32342d3234203d3e203633363331.roa (hash: q5UvvsX5qH7j9+5pZLRPJUdgPc2NxY5OKXVZ0NSCJAo=)
                          30: 3131392e3136312e3133362e302f32342d3234203d3e203633363331.roa (hash: NksUuzaBeVkKNYYjX7N4wyQP9lOFOqUoF5HK3727RWk=)
                          31: 3131392e3136312e3135392e302f32342d3234203d3e203633363331.roa (hash: +SiM0cwCxJkpIIpaeYtLkv/nxt4GytCuAhasO+bG19M=)
                          32: 323430373a386238303a3a2f33322d3634203d3e203633363331.roa (hash: WdIf6CkgwHhBtmwW9wC8z2X2aD7F1CPhNusCG6l7zvk=)
                          33: 3131392e3136312e3134342e302f32342d3234203d3e203633363331.roa (hash: 6ovO21OX+Y8oKycYWcOevNdq7wTJgYIGsvp+nnMw1x8=)
                          34: 3131392e3136312e3134372e302f32342d3234203d3e203633363331.roa (hash: nG5OMbfJfXjqu0EBfh5ujK0tpWUhR/z7nnDCbIOL/P0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 13:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4a:4d:bd:24:54:51:4b:a4:f2:f4:21:7d:d8:6d:ac:0b:e2:45:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
        Validity
            Not Before: Apr 16 09:50:51 2026 GMT
            Not After : Apr 17 13:03:51 2026 GMT
        Subject: CN=6B815E568FBCD43E58B7A42C688D553AC51C408C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1b:34:7e:83:92:48:1a:59:cf:e8:2a:a4:20:
                    94:24:b8:f3:43:a4:4c:62:b5:2e:a5:7e:60:2d:3a:
                    9c:55:71:93:86:0b:e9:2a:e5:0a:16:fa:70:ca:b9:
                    ef:fb:6e:22:25:eb:2a:e2:a5:d2:f6:75:b4:c0:ee:
                    0c:d9:b3:de:94:a6:bb:d7:05:9c:8c:b1:37:9c:96:
                    6b:86:e4:1c:8a:21:09:cf:ec:d3:91:22:90:16:72:
                    50:83:59:56:34:55:15:7c:96:e1:0b:55:29:e0:08:
                    f4:fc:38:55:73:cb:74:29:63:4e:a6:d6:53:b2:c2:
                    00:20:18:02:62:07:a7:24:4e:91:33:1b:6d:87:da:
                    39:dc:70:ee:4f:8e:d5:ff:f0:38:d7:21:0a:2d:e5:
                    6a:74:27:43:6b:ac:40:31:eb:ed:54:63:b5:00:7f:
                    f8:8d:25:5a:f6:a4:bc:0c:5e:d3:17:fc:f1:81:16:
                    55:e9:ff:99:c8:2b:75:a9:8c:ad:7e:ad:72:14:83:
                    94:7d:51:0d:1e:c3:a0:43:ae:9a:88:86:9c:9a:b7:
                    42:36:86:78:54:c3:d0:94:eb:92:d7:27:bd:3f:0f:
                    f2:e9:84:ad:28:cf:3f:88:58:78:8e:63:bf:4b:fa:
                    1a:aa:48:02:64:3e:27:83:28:9a:46:39:78:c9:97:
                    e1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:81:5E:56:8F:BC:D4:3E:58:B7:A4:2C:68:8D:55:3A:C5:1C:40:8C
            X509v3 Authority Key Identifier:
                keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:bd:2b:9c:11:70:55:ef:60:45:c2:99:43:73:f9:fd:c2:a0:
         53:2d:4c:4f:b8:1e:90:6f:5e:fd:a7:36:9f:d1:11:70:c7:46:
         94:d9:28:33:70:9d:4e:65:84:54:31:28:6e:65:92:a2:84:69:
         77:6b:db:b5:44:c2:71:40:c6:08:d5:88:bd:79:4a:5b:7d:b6:
         cd:6e:ec:36:ac:38:18:7f:49:80:5b:32:40:48:34:9d:f8:ec:
         02:c6:b1:ba:b7:6b:90:ae:35:89:90:40:98:d0:82:f5:97:ba:
         48:04:f0:6c:d2:af:1e:c7:2c:b3:5b:61:a8:3f:36:83:f5:50:
         e4:fe:19:ef:3c:b1:29:00:48:23:a8:fb:13:e8:67:84:9e:44:
         e4:c5:ae:fa:b2:e9:1b:4f:a4:2b:82:17:c6:2a:e0:ad:d2:91:
         21:b1:90:2e:0a:0e:34:d5:e1:07:49:58:dc:3f:6e:6b:d3:72:
         ce:65:a5:7c:90:51:9c:12:95:fb:d8:b3:74:ac:45:b3:2d:f7:
         ca:c3:f3:4a:d4:cf:ba:11:4d:d2:8a:71:79:2e:5a:44:0c:7e:
         8e:1a:63:71:f8:ad:76:7a:e2:34:49:25:57:ba:88:8f:ac:3a:
         a9:78:7a:35:22:4f:91:ce:ee:86:4d:28:a3:9a:de:18:b1:48:
         64:6e:cf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:55:50 2026 by rpki-client