Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
File:                     9E09269F04335C992685B10E8709F2C95DC5E8DE.mft (raw, json)
Hash identifier:          C6wqbLmnh2JCc1Xjz3AXvUXMTz1eq+Q0b6hHxb4S0gA=
Subject key identifier:   36:BA:56:4D:B4:F0:72:A9:CD:02:6E:35:63:E7:F8:97:E7:92:1C:EA
Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
Certificate issuer:       /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Certificate serial:       201481C9D6617A636DC9AE7AA57FA432E408FE8B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
Manifest number:          015D
Signing time:             Tue 28 Jul 2026 16:22:15 +0000
Manifest this update:     Tue 28 Jul 2026 16:17:15 +0000
Manifest next update:     Wed 29 Jul 2026 19:44:15 +0000
Files and hashes:         1: AS23724.roa (hash: CzmPoIYMru4oXHqB4t2rulVkZQKF94H9wWqSo1OnqY0=)
                          2: AS4812.roa (hash: vzUhrujA1c5E8/rZaOH7xpYP8zWCf2GYXeGOsmKkwI4=)
                          3: 9E09269F04335C992685B10E8709F2C95DC5E8DE.crl (hash: 01WQgfL4q1ja6RSQVAbSZkc43sxPBtUaAkENCsuPufM=)
                          4: AS55990.roa (hash: VETxGjzDnvmtl8fFSjpW4gwgxU6mcQpJJQjm8DANbGI=)
                          5: AS136958.roa (hash: 13bG9UhsujvYU7asFCTfasm2RqpUmwUuWVi21c8pb4g=)
                          6: AS134542.roa (hash: ZnbJ0YP4qJMu+eCXVjo7uSCrI+OfIj5RJi+Yrof0D/E=)
                          7: AS138407.roa (hash: 9pI59+wkO8K1TbvAaS+xQRsm37cPG1Z7yaDk9DwqL7M=)
                          8: AS58519.roa (hash: eb2ThEg1K6SyttUCFraxaDXvdAniDXiuEUcBK1/gT9M=)
                          9: AS138421.roa (hash: bLd+4o911pilo/4tPPkRFn8P+mVGRb1EM/LhafQUCps=)
                          10: AS4811.roa (hash: y1JqGY0fG/a531KhGDAB1LksUq/V23u2Dcboa32J6qo=)
                          11: AS58466.roa (hash: I9Z3n9fJE23dB997pVSGu5JQG1MVQ7R0raaeyApmgCY=)
                          12: AS4808.roa (hash: hAApWxFXyo8C+Qq7n2XzlAMApFNZhGk1PzWZJa1xqPA=)
                          13: AS63727.roa (hash: /ITTIiU/HAJCnzScT//JNbcEwe4PkflqDeBXV4HXgxM=)
                          14: AS136907.roa (hash: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:44:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:14:81:c9:d6:61:7a:63:6d:c9:ae:7a:a5:7f:a4:32:e4:08:fe:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
        Validity
            Not Before: Jul 28 16:17:15 2026 GMT
            Not After : Jul 29 19:44:15 2026 GMT
        Subject: CN=36BA564DB4F072A9CD026E3563E7F897E7921CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:b1:84:08:d8:36:a7:53:60:29:a7:a8:f3:
                    6b:ee:d0:39:13:d5:6c:ae:5d:af:49:2a:2b:d2:1f:
                    22:06:b2:3f:c2:d1:72:d9:8a:4a:a5:0a:fc:3c:53:
                    42:e6:99:9a:45:0a:3a:44:7f:28:28:34:29:c7:4c:
                    b6:01:96:68:1c:80:55:23:86:ac:17:c7:58:a1:17:
                    6c:ee:f1:cb:b4:e6:5f:37:7c:07:4d:c1:c5:6c:81:
                    21:2a:df:c9:1f:53:0a:98:83:b8:69:c6:b2:69:12:
                    0f:b7:6d:22:1d:ee:ac:39:d9:9d:5e:8c:81:19:29:
                    5e:81:d0:53:34:45:e0:3d:af:4d:ed:bc:75:ed:da:
                    c9:a2:2a:41:63:d5:38:72:33:91:6f:da:99:8c:88:
                    9f:8f:fc:7f:ca:6e:6d:a2:93:77:b5:e9:ce:a3:e8:
                    49:c0:8b:e6:51:3e:9e:c7:0c:e9:db:39:ed:1f:e5:
                    05:8b:fd:a6:20:ad:7b:de:9f:c3:95:dc:d1:59:e1:
                    51:73:f0:26:bf:a5:92:bb:35:87:dc:a1:93:81:d9:
                    f7:c3:48:3f:75:73:91:97:a8:04:83:9a:0a:28:4a:
                    16:ad:1a:e4:f8:09:1d:60:51:89:15:8a:03:d1:6a:
                    cd:57:e7:28:6f:0c:94:64:11:e1:5f:d1:32:6a:bb:
                    c5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BA:56:4D:B4:F0:72:A9:CD:02:6E:35:63:E7:F8:97:E7:92:1C:EA
            X509v3 Authority Key Identifier:
                keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:3e:35:6d:7b:e8:5d:0c:a3:f1:f2:bf:47:49:70:b1:cd:54:
         3a:59:7b:c8:73:7f:ff:09:65:76:3f:86:bb:02:55:5d:d1:41:
         f6:d6:44:0a:d9:22:2b:c8:00:48:d8:e8:e1:8d:4f:40:c5:f1:
         55:8d:69:2d:d6:c9:06:30:4a:d7:23:af:8e:e4:96:04:c0:e9:
         47:ec:51:4a:e1:dd:4b:e0:18:15:6b:f9:24:d8:23:3c:74:d9:
         cf:34:40:03:e3:80:aa:9c:18:da:32:57:3f:49:78:fa:86:a2:
         f9:b0:8b:90:ba:1a:f6:ee:7c:a7:61:d5:65:e3:52:3a:01:24:
         01:fc:8f:fd:21:57:e6:5c:00:45:10:54:29:a0:74:d8:e9:1e:
         e0:99:b9:df:09:72:5c:b2:db:88:3d:76:46:e2:da:fd:8e:f1:
         7a:06:f0:0c:51:2c:87:ae:84:f8:fe:59:6d:af:1f:e1:25:ad:
         c3:a0:a4:f0:1d:5d:99:4a:7b:bc:0b:e0:ad:5b:81:75:62:69:
         72:d7:e2:6a:71:a3:f9:74:9a:2c:8f:30:d0:02:e9:bc:8a:01:
         78:7f:a4:1a:1b:be:45:0c:2f:f1:b7:a1:d2:ad:16:b5:6a:7c:
         ca:51:bb:e1:4b:d1:79:e1:95:2b:a5:1f:d1:d2:55:f7:bc:ad:
         51:fa:8b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:24:47 2026 by rpki-client