Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
File:                     DE4AF5E551F820212884173F2ABBB1665D92F03C.mft (raw, json)
Hash identifier:          cUjRKJOms4yOREud8I4yRgAsJAc349QAsFQ+9ZMy96Q=
Subject key identifier:   CA:91:BB:98:B2:20:9C:76:71:B9:03:7C:BD:F8:1B:E6:02:7A:01:49
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Certificate issuer:       /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial:       11034199F690011672E5E449445D47831738D9E3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
Manifest number:          FF
Signing time:             Wed 29 Jul 2026 01:03:02 +0000
Manifest this update:     Wed 29 Jul 2026 00:58:02 +0000
Manifest next update:     Thu 30 Jul 2026 03:21:02 +0000
Files and hashes:         1: 3131302e34302e35372e302f32342d3234203d3e20313531323730.roa (hash: 4RmDRzcMhBN2hJIGrEmHQdAQCG7fzvdw/LrNzFu0YEY=)
                          2: 3131302e34302e36382e302f32342d3234203d3e20313531323730.roa (hash: 7TmrFwmcYNL49K4gOSLIxjUkfZXrWxzzZTnA3dbY7/8=)
                          3: 3131302e34302e38332e302f32342d3234203d3e20313531323730.roa (hash: T8tBr1P9wYEwA9OqWA8eZUx4DxztUK7kGgBbsT61dM0=)
                          4: 3131302e34302e38302e302f32342d3234203d3e20313531323730.roa (hash: VqiUeFiKFnRa4ejTgotm4YJk3KYGlqMPzcSMkd44z18=)
                          5: 3131302e34302e38342e302f32342d3234203d3e20313531323730.roa (hash: l60H/jjer0CZfPuQlb03Hvv6l+sefDqCAEquqDxlxA8=)
                          6: 3131302e34302e36322e302f32342d3234203d3e20313531323730.roa (hash: jSWAQgbf0KijXEu9Yt0YUEqi72gFzsTGKYt066xNhVw=)
                          7: 3131302e34302e33382e302f32342d3234203d3e20313531323730.roa (hash: hoWQgbP2IUKbj7YROUZcdo0tKaqMg12VXcaQKeo2mXk=)
                          8: 3131302e34302e35322e302f32342d3234203d3e20313531323730.roa (hash: SmRU4scI1d5ItLZtbLsixK6Xp7BL82WGWExiBRup4Rg=)
                          9: 3131302e34302e36342e302f32342d3234203d3e20313531323730.roa (hash: B91RwXkHBa5snBRZr6fQti0TecYlXvAWuEv5+XVtDqs=)
                          10: 3131302e34302e34382e302f32342d3234203d3e20313531323730.roa (hash: z6RinG9S+jJTeKo8Rvw+92evtahMOYNZQUsHETh33lg=)
                          11: 3131302e34302e37382e302f32342d3234203d3e20313531323730.roa (hash: zfNZniNA/0IgphqeSgGWizashNXjLUcNyFpjXVeyfXk=)
                          12: 3131302e34302e36302e302f32342d3234203d3e20313531323730.roa (hash: IeS/IQiiUsKjGCa3/NrYJnMrWFwyVhMNRnw15oiva1w=)
                          13: 3131302e34302e32302e302f32342d3234203d3e20313531323730.roa (hash: ImRRVtB0oFAe/o9QR/JWsPg+8dQpeAu+2h50TZkGRjg=)
                          14: 3131302e34302e33372e302f32342d3234203d3e20313531323730.roa (hash: WmeZnSDb6+hiFY0NO9rPwYkF//eSWxE2g8pulG2ljX8=)
                          15: DE4AF5E551F820212884173F2ABBB1665D92F03C.crl (hash: PZ1Ovzzgxhdd+fcWySZPKPxE+rM69d79Ty5Zptuft/g=)
                          16: 3131302e34302e33352e302f32342d3234203d3e20313531323730.roa (hash: 6miPXUNyuuVj8a0Li5t4nsaCfG1qtqdIuKdDwZAh57M=)
                          17: 3131302e34302e36332e302f32342d3234203d3e20313531323730.roa (hash: t+bXkrGtVNf4oWwJ9og4qJxpD3GRE27efaBcUhCI/L4=)
                          18: 3131302e34302e33362e302f32342d3234203d3e20313531323730.roa (hash: dlvSYo6TmGOPRp6RbTF0oe3KNFmy9oOySt2NIAJi03Q=)
                          19: 3131302e34302e35302e302f32342d3234203d3e20313531323730.roa (hash: 4JLg/82qzAnBdqp31YBOIVaUQ/HsZIQm/+zzBWuOoc0=)
                          20: 3131302e34302e33342e302f32342d3234203d3e20313531323730.roa (hash: CEZPTV/KNjCSkq+hfdUYsMToO2Kvr4FX5BnLlvZT80U=)
                          21: 3131302e34302e36362e302f32342d3234203d3e20313531323730.roa (hash: u51qC16Tqv5obUpwrYrc91/8bkJyh39ZAAvI33eh3EQ=)
                          22: 3131302e34302e34372e302f32342d3234203d3e20313531323730.roa (hash: cGjwhGJPiEzlcPj3scUnXA7T6Wkzdm0RByyhebVcpxQ=)
                          23: 3131302e34302e35392e302f32342d3234203d3e20313531323730.roa (hash: A8v4yHSCDZM7KMJ5vjdxIHI73ykbpwQPv3248ev+Ggs=)
                          24: 3131302e34302e34352e302f32342d3234203d3e20313531323730.roa (hash: Df+EAx9Bx+GEeFQFGoHCEPEa5rPWhyq4mo9XDPQUj+8=)
                          25: 3131302e34302e34322e302f32342d3234203d3e20313531323730.roa (hash: Uyj8KokDFD1uU80elHzt9gvbRCtgXkYNmcp5Rp1DFkM=)
                          26: 3131302e34302e36352e302f32342d3234203d3e20313531323730.roa (hash: CqOZ1GEEVGspVVDPDgGXrZGFlwNDnRAuaKj+LDrrdFo=)
                          27: 3131302e34302e34392e302f32342d3234203d3e20313531323730.roa (hash: KQHEpEtvgud6uYnjATnaVVS3GyOLMnjkOafl8oHFNdo=)
                          28: 3131302e34302e35312e302f32342d3234203d3e20313531323730.roa (hash: lTgU8qlQlP77fJ/XuVRh9FeVPrvJeUdWVBAXXEd3XkE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:03:41:99:f6:90:01:16:72:e5:e4:49:44:5d:47:83:17:38:d9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
        Validity
            Not Before: Jul 29 00:58:02 2026 GMT
            Not After : Jul 30 03:21:02 2026 GMT
        Subject: CN=CA91BB98B2209C7671B9037CBDF81BE6027A0149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:60:ec:07:cf:73:5f:e9:8b:36:7b:f9:9a:
                    5c:35:ac:96:b1:09:7e:54:d1:96:42:4f:95:4f:bf:
                    21:6f:3e:72:93:e0:0b:31:a5:26:4a:20:8e:b0:e8:
                    d3:b3:49:f7:37:32:af:5a:76:3b:3e:65:e9:cd:aa:
                    c5:52:a9:db:6f:ec:3b:57:a7:09:50:ab:97:c8:2d:
                    36:8b:e1:7e:5e:08:82:82:99:1b:00:1d:cf:fb:76:
                    35:f3:c5:5c:c6:85:9b:f3:9c:ae:57:19:38:b6:98:
                    db:a4:53:08:50:1e:34:eb:c5:db:90:45:1f:2a:83:
                    eb:3a:6b:8f:c5:73:f6:ff:35:aa:9f:56:41:bc:4f:
                    93:e4:da:88:2b:0f:1f:af:d4:81:cc:91:86:02:0f:
                    cf:a9:f7:57:f4:44:55:70:86:58:69:9d:f6:44:42:
                    1d:51:4d:42:e3:70:ea:2d:b1:2a:9f:dd:c4:b5:af:
                    20:22:8c:2b:bb:f2:21:b1:af:c6:73:34:02:c0:8c:
                    6b:e1:67:63:48:a8:c6:8b:4b:41:dc:93:4c:2a:de:
                    f7:54:dc:10:40:b2:5e:af:9f:22:41:5f:ba:1d:48:
                    58:47:d5:8b:7a:b3:ae:d1:a6:4e:d2:45:9f:0b:0e:
                    83:28:27:0d:59:89:dd:bb:a2:39:df:f9:18:44:0d:
                    c5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:91:BB:98:B2:20:9C:76:71:B9:03:7C:BD:F8:1B:E6:02:7A:01:49
            X509v3 Authority Key Identifier:
                keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c0:3a:bb:1c:1e:be:80:8b:17:a7:1e:e4:3c:d8:73:9f:c8:
         fa:8d:07:f8:bb:d8:f0:04:b7:2a:95:27:df:0e:4f:63:da:81:
         a8:e5:70:d3:17:a6:12:dc:ea:73:00:e2:79:57:62:0a:33:58:
         ea:84:4c:e6:4a:fe:3a:25:fc:a3:f4:c6:8d:e7:80:eb:60:0a:
         48:a6:2b:6f:59:3e:50:d9:75:ed:ee:4b:a8:ce:dc:d1:f5:25:
         30:9d:10:e2:a7:cc:f8:be:9d:7a:02:30:53:db:5f:7c:f1:c4:
         bd:ac:d7:01:9d:50:71:e5:c1:c0:1d:0d:ee:3c:b4:d6:c8:6b:
         16:cc:69:1b:2e:c9:d2:8b:b1:78:69:04:63:97:c8:09:73:91:
         24:f5:3a:73:f9:fa:a7:ba:97:df:21:0d:b9:67:57:ac:d3:d4:
         a8:07:d5:79:2b:ba:c1:06:7c:36:73:70:01:cd:b3:c4:31:fd:
         53:e6:43:0d:8e:96:53:70:88:23:6a:79:09:6e:a0:90:aa:c9:
         ce:b8:cc:5a:da:78:45:59:ad:b0:79:74:ce:c4:da:c0:21:b4:
         c1:25:a6:d4:a9:52:90:df:c2:23:52:14:50:ba:b3:44:03:a1:
         d3:2c:7e:74:a1:13:91:a4:48:b6:b4:f7:2c:03:f5:92:44:32:
         b3:35:45:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:00:01 2026 by rpki-client