Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
File:                     9E09269F04335C992685B10E8709F2C95DC5E8DE.mft (raw, json)
Hash identifier:          Qzr7un9+VATjDo7IN2WGLeFnyAjqxtVyQOqah2jpJLE=
Subject key identifier:   62:99:ED:D3:1C:5D:B0:50:B7:8B:3A:40:B8:BE:BC:FB:08:B6:4A:A0
Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
Certificate issuer:       /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Certificate serial:       7CB1F0989BD9218690F830501AC0150F55F2BD1C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
Manifest number:          7D
Signing time:             Sat 18 Apr 2026 00:49:50 +0000
Manifest this update:     Sat 18 Apr 2026 00:44:50 +0000
Manifest next update:     Sun 19 Apr 2026 04:40:50 +0000
Files and hashes:         1: AS136907.roa (hash: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68=)
                          2: AS55990.roa (hash: 9wGj7BjgLP9F7+mMYuTn2O80+dlOilz9/m+hUYGA3yI=)
                          3: 9E09269F04335C992685B10E8709F2C95DC5E8DE.crl (hash: KaPpyTNpCARvmsHGsrUDvVuGorFLyJOiuusSQ5pE2KA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b1:f0:98:9b:d9:21:86:90:f8:30:50:1a:c0:15:0f:55:f2:bd:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
        Validity
            Not Before: Apr 18 00:44:50 2026 GMT
            Not After : Apr 19 04:40:50 2026 GMT
        Subject: CN=6299EDD31C5DB050B78B3A40B8BEBCFB08B64AA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1f:a9:13:ce:c2:cf:28:be:46:0c:61:14:8a:
                    81:ca:f2:0a:80:9a:64:64:34:57:7d:d1:3c:3c:ad:
                    a6:e3:2c:89:08:73:a0:e8:4c:23:fb:06:4a:57:14:
                    bf:a0:8e:14:5b:6d:77:2d:29:73:59:a1:08:87:71:
                    c5:a2:9f:a6:3b:88:4d:67:6e:7d:e9:8f:4f:5d:91:
                    49:cc:a4:23:e0:49:cd:d2:f5:70:2c:14:c4:73:4a:
                    07:e0:3b:f0:eb:ab:27:88:ce:e2:02:d9:04:a2:37:
                    d3:a9:cc:c6:71:68:2f:42:09:27:be:32:b5:7b:af:
                    4a:4f:a9:57:f4:37:a1:75:17:cf:f5:06:3a:fb:78:
                    43:cc:f0:cf:f4:83:75:8e:75:48:e1:15:ee:e6:cd:
                    44:40:09:38:7d:2c:a8:2a:20:fd:2c:32:9d:1a:17:
                    42:c7:a1:5d:db:d2:06:08:be:ae:49:82:1e:da:d7:
                    4e:09:20:44:8a:47:ae:c0:cd:70:6a:d0:3c:fd:a0:
                    40:2d:ea:f5:37:fc:d5:d4:38:88:62:21:16:eb:74:
                    2b:ea:77:73:f9:0f:be:ef:a1:98:15:0d:56:6a:a8:
                    25:1d:bf:5b:d2:36:41:07:60:40:de:6b:aa:8f:09:
                    ee:c0:43:5a:65:4d:11:3c:aa:af:b0:69:75:4f:65:
                    ce:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:99:ED:D3:1C:5D:B0:50:B7:8B:3A:40:B8:BE:BC:FB:08:B6:4A:A0
            X509v3 Authority Key Identifier:
                keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:10:30:90:5b:01:1c:49:b9:e1:62:7d:9a:10:f9:8f:14:2d:
         8f:4d:a7:c4:99:c3:bd:83:ad:8f:58:ed:43:be:5e:b8:8b:58:
         1a:3b:c0:e0:a5:92:6e:86:bc:ef:81:69:ba:df:a2:e2:62:b4:
         35:cf:79:d2:a9:8d:80:32:77:29:8f:a3:34:0a:8e:ff:c9:07:
         fb:1d:a1:a0:5a:d3:f7:59:17:9d:a8:68:78:1f:05:d4:50:8e:
         83:69:4d:d8:51:6b:bf:33:9f:a0:c1:d0:63:d3:19:bb:cf:82:
         0f:7a:b1:a6:13:b4:ff:61:46:5a:5a:e5:0c:2c:ef:4c:df:43:
         8d:08:25:b0:15:91:2e:8f:84:fe:b6:69:0d:e6:3e:c9:34:9c:
         1c:f2:fd:8f:12:39:63:34:15:53:1b:42:56:3b:41:ac:ae:67:
         c6:dc:e9:ce:0a:e0:01:bd:1f:96:48:9d:b9:22:1e:54:27:c4:
         7e:38:7e:ba:64:1b:70:90:a6:8e:2a:31:55:f8:e6:72:29:e7:
         5e:25:99:0d:ac:55:24:a4:1e:a9:c5:c5:38:a0:e0:0d:f1:8b:
         c6:ca:59:56:9a:2e:27:35:be:5c:25:df:63:e0:fd:9a:ba:85:
         ac:85:ce:12:51:87:02:bf:62:2a:f7:33:82:0c:6c:91:8c:c2:
         a9:4d:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:42:14 2026 by rpki-client