Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
File:                     098D421CB46F292F13CE71DF3D685D5E82893289.mft (raw, json)
Hash identifier:          UCwSx7H3lOjZhWuqOfQMSOgrh0ayTp1Z7UAzkoRshn4=
Subject key identifier:   76:62:F8:B6:EE:35:36:6A:56:CB:D1:A8:85:DD:8C:39:48:A6:9E:33
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Certificate issuer:       /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial:       7A147CAC3EDA3F8B39E6FEDA77CAD68A58A37720
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
Manifest number:          0109
Signing time:             Tue 28 Jul 2026 16:42:16 +0000
Manifest this update:     Tue 28 Jul 2026 16:37:16 +0000
Manifest next update:     Wed 29 Jul 2026 16:55:16 +0000
Files and hashes:         1: 3131382e3139342e33322e302f32312d3231203d3e2034383038.roa (hash: w2gS6YzrPmxBS3U09oI9HMSpNUd5vKBmQTETDvb5uLE=)
                          2: 3132322e31312e34382e302f32312d3231203d3e203233373234.roa (hash: keY2EFny2N50oH6sPmEcnlgutDB4fpw2kzVuddOqR00=)
                          3: 323430333a346338303a3a2f34382d3438203d3e203233373234.roa (hash: sjXPx2W8FA2lwA4lPp9dbO6vjQOZbUVExJ17HnTJgb0=)
                          4: 323430333a346338303a3a2f34382d3438203d3e203536303438.roa (hash: 7/ltQtz2n5DqjAYwYbdRZYTje+izuD33MFyhCzobykM=)
                          5: 3131382e3139342e34382e302f32312d3231203d3e2034383038.roa (hash: Wlv1ILc08DXaAYSI+HkiftdI5PHLcW7mnRqo6voD11w=)
                          6: 3132322e31312e33322e302f32312d3231203d3e203536303438.roa (hash: 6YIv4SPnbt5J5t2pGyzsqmetgf6QOv/ADQllyX0zV+Q=)
                          7: 3132322e31312e33322e302f32312d3231203d3e2034383038.roa (hash: wKnPfEKTLOcoPxcoU4igzvQtVEKsTlIE9YwzFVgOuGs=)
                          8: 3132322e31312e34302e302f32312d3231203d3e2034383038.roa (hash: XDT9ktasaOET17rRRzYq/yK1DlnIymI/BRvWecxJGWQ=)
                          9: 3131382e3139342e34382e302f32312d3231203d3e203536303438.roa (hash: jJHfhdH55SAnLJjrfpHzF3IQbWlzuqxr70ysIHv2Qx4=)
                          10: 3132322e31312e34382e302f32312d3231203d3e2034383038.roa (hash: 0c/j1Gp0iCOrUSwBYehtFLY4kagoam0ofJWT9krdbRw=)
                          11: 323430333a346338303a3a2f34382d3438203d3e2034383038.roa (hash: IvoN5KOxvoNe59IDfb24FFL6qpg8UBoTE/nVJ45csPk=)
                          12: 3131382e3139342e35362e302f32312d3231203d3e2034383038.roa (hash: kPLgk6dYiF/WX5Rq65tlfXz+gdLaxsqZIwF0A7Ufkqo=)
                          13: 3131382e3139342e33322e302f32312d3231203d3e203233373234.roa (hash: nSWPu8aN6WamKVW4d0E8KInxi+UijHCRr0xuUppfJVc=)
                          14: 3132322e31312e35362e302f32312d3231203d3e2034383038.roa (hash: UIrLFpYiMVKyR3ZM/CIcfXzkOEOcfkPa2kE4Gw/lutg=)
                          15: 3131382e3139342e35362e302f32312d3231203d3e203536303438.roa (hash: 3h+1mGvW/F1q6aPyrG2uRJfP0NCyMy+g8d9cHabmE9I=)
                          16: 3131382e3139342e34302e302f32312d3231203d3e2034383038.roa (hash: uTqtT2+Z+32pQg4cwaqs2sAF3NdBZFcby8wCkB8VGjE=)
                          17: 3132322e31312e34302e302f32312d3231203d3e203536303438.roa (hash: v4pzzGzUWs9sXfkWnaRsBIwheBnCfSO28nUsWmEeSrY=)
                          18: 3131382e3139342e34302e302f32312d3231203d3e203536303438.roa (hash: n4IPcR0vuUnwdrml1UZMOWsHcrDZi76Za6KE8Vlcgjo=)
                          19: 3132322e31312e35362e302f32312d3231203d3e203536303438.roa (hash: OlqVUzQBn8tcFE4niny8RcvphQVQAF2g7rjIrsr8Fhc=)
                          20: 098D421CB46F292F13CE71DF3D685D5E82893289.crl (hash: BO/wuIyMiIMnpbBksTe2Mx2T/8DLWUgF1zTPzTsgMbQ=)
                          21: 3131382e3139342e34302e302f32312d3231203d3e203233373234.roa (hash: wj7o0kMSNOyiUst8OjYtPK1TlZz/PgITlU4P+dX7JtE=)
                          22: 3132322e31312e35362e302f32312d3231203d3e203233373234.roa (hash: n4C7l2A4rvlhW4atbSQqHzhdugqhLlv/LQhObAnFTSY=)
                          23: 3131382e3139342e34382e302f32312d3231203d3e203233373234.roa (hash: 5aYFYC3sz9pdXlA4MZsC3Gzn3v3fHAYEvc5Hr3Osouw=)
                          24: 3131382e3139342e35362e302f32312d3231203d3e203233373234.roa (hash: ltZtkAqvZJofnyKNAI5X/W6jfZZwufYjJun0Ygp1JBc=)
                          25: 3132322e31312e34382e302f32312d3231203d3e203536303438.roa (hash: OeABueeL5bVOfgm0ioMscNw6JnIbVThJEuNaqIcxCnc=)
                          26: 3131382e3139342e33322e302f32312d3231203d3e203536303438.roa (hash: 66bgFsuwP5YR6jczc1wT5regWMhuco+8bvtJ9aQPcFU=)
                          27: 3132322e31312e34302e302f32312d3231203d3e203233373234.roa (hash: ai772q1EoRxuBDbBexQPnZXL/jCbU0YH2VB2woJTRp8=)
                          28: 3132322e31312e33322e302f32312d3231203d3e203233373234.roa (hash: h0Xaj72XHmJeYZGrLxwTo88nHBDFLZq98uJjTObVwD4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:14:7c:ac:3e:da:3f:8b:39:e6:fe:da:77:ca:d6:8a:58:a3:77:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
        Validity
            Not Before: Jul 28 16:37:16 2026 GMT
            Not After : Jul 29 16:55:16 2026 GMT
        Subject: CN=7662F8B6EE35366A56CBD1A885DD8C3948A69E33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2a:b4:8a:ef:f4:d6:9a:92:56:bc:1e:2f:74:
                    83:1a:fa:b7:44:cb:be:6f:2d:58:db:10:f9:87:01:
                    40:7e:9a:21:56:bb:ea:ce:3d:0f:42:bb:92:9e:b0:
                    17:74:b2:7d:ea:b5:52:3a:0c:c0:27:2f:93:03:16:
                    f3:58:9f:9b:d5:3b:72:8a:89:6e:33:69:3a:5d:0b:
                    68:3c:ab:4e:9b:55:c5:a1:02:a2:b7:db:e7:09:43:
                    42:e2:99:27:01:22:3b:3d:0f:1b:7c:11:b8:67:91:
                    03:72:eb:63:32:d6:03:80:ed:37:cb:93:d9:0c:0b:
                    fd:cb:bd:dd:2c:fe:cd:76:fb:87:d7:7c:bf:69:39:
                    d2:09:de:2d:12:44:41:e8:0b:51:23:39:4c:f3:a9:
                    67:31:43:a7:f8:cf:55:71:43:59:7e:2e:9b:35:7a:
                    59:fc:ea:53:1f:5b:d1:5c:99:d5:fe:3b:37:d1:ad:
                    41:5c:02:a2:10:90:be:f7:a7:49:fb:36:d6:ea:e0:
                    8a:c5:e6:c0:a5:71:1c:c6:06:45:2b:d4:28:35:e6:
                    2e:7c:c0:ac:67:3a:07:a1:74:0f:99:5f:94:91:ab:
                    7e:36:f9:d0:49:df:b8:c9:eb:b6:38:53:50:f5:1a:
                    73:9d:20:c5:57:68:0e:ba:ad:2e:c1:8f:40:81:97:
                    3f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:62:F8:B6:EE:35:36:6A:56:CB:D1:A8:85:DD:8C:39:48:A6:9E:33
            X509v3 Authority Key Identifier:
                keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:ad:39:1f:9b:7c:70:0f:70:b4:03:31:4f:e1:70:aa:7e:87:
         a3:c3:85:0f:02:c3:7f:23:c7:81:1d:a7:a4:d6:99:e5:5d:45:
         a2:34:dc:d8:fa:3c:93:5e:7b:ea:73:f8:86:3c:08:c8:a2:6c:
         86:ff:10:3d:17:58:2c:c2:05:d3:91:86:da:b4:97:ff:e9:30:
         08:5f:72:0c:b2:b2:e0:55:92:82:00:63:bd:ac:d0:c3:74:5f:
         2e:0b:61:25:23:58:14:de:73:51:e0:15:95:4e:86:f8:44:e9:
         9b:84:61:de:c1:8b:12:9a:b7:2e:39:44:39:d2:32:1f:82:84:
         21:bd:58:a1:fc:9d:7a:5b:53:bc:37:d0:41:e8:88:3a:df:57:
         93:cd:d9:11:ca:32:a2:68:ef:cf:a8:df:be:ff:7f:cf:78:14:
         db:d4:4b:54:c7:cc:77:df:da:0d:8b:16:a3:8c:86:6f:94:0c:
         d6:02:4c:6e:cf:0c:4b:20:d1:78:ec:18:c6:33:ba:d9:0f:aa:
         99:b4:c0:b2:18:4e:56:21:48:af:f5:4d:a8:f5:7e:73:25:48:
         d2:9e:a8:0c:56:69:2f:be:61:f6:96:28:9d:96:ba:92:ff:fe:
         ed:ce:01:02:15:53:47:19:20:77:e6:af:ed:d2:90:29:61:38:
         62:55:7d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:02:46 2026 by rpki-client