Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
File:                     134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft (raw, json)
Hash identifier:          U7tHunspu2r21p7+hcNzCkeOpijG+SwoaAOXJXXqZ30=
Subject key identifier:   81:A4:73:56:E9:CE:85:4A:8D:F5:27:8E:EC:DF:CD:EF:22:1D:97:AB
Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Certificate issuer:       /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Certificate serial:       5FAA2F08E36084B3D0B351E390D17A19E700049A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
Manifest number:          FF
Signing time:             Wed 29 Jul 2026 12:44:22 +0000
Manifest this update:     Wed 29 Jul 2026 12:39:22 +0000
Manifest next update:     Thu 30 Jul 2026 16:40:22 +0000
Files and hashes:         1: 3230332e3230312e3138312e302f32342d3234203d3e20313531323531.roa (hash: yJ3jHnPWhAaAMRxei37IPvzElQ724dxo+7tcpvoO8fw=)
                          2: 3230332e3137342e362e302f32342d3234203d3e20313531323531.roa (hash: q9iWdKLAdHbfEGWeTQTJnj5rz99RfjAIuFKzrZu0in8=)
                          3: 134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl (hash: TXDh3mSoLTwS0c3eAy3dBC+1oAxOjdnpZ1coM8o8874=)
                          4: 3230322e3135382e3234322e302f32342d3234203d3e20313531323531.roa (hash: gGkuc6EmqWxF5c3YAslxD/isaTWNxlZKyRi45M7xUFY=)
                          5: 3230322e3137312e3233322e302f32342d3234203d3e20313531323531.roa (hash: 37J4UChBWQno0PS67CISco/dgUXgy2QBAlmPmhCNaN0=)
                          6: 3230322e3135332e372e302f32342d3234203d3e20313531323531.roa (hash: tfjUhuAMRoHw+XmcNvK63TdXVM18RqXuY24SvpDXfT8=)
                          7: 3230332e3139312e322e302f32342d3234203d3e20313531323531.roa (hash: e6+G3ic+FYJSXMDF4S5renCxEofbarg+TsDpBpy5bJM=)
                          8: 3230332e3130302e36302e302f32342d3234203d3e20313531323531.roa (hash: lBCGwmuKofwgcufx94VrX8pzt30gxmwgJFLQKbe8WeA=)
                          9: 3230332e3139312e372e302f32342d3234203d3e20313531323531.roa (hash: zSnSXFOuavokFDJ0LSAvvl1QDzFRGSxODkOT+pQTD7k=)
                          10: 3230332e31362e36332e302f32342d3234203d3e20313531323531.roa (hash: vFdNFHiN3TMOKZPfat+9ys9S2MH2DGTTS/y9t11B0o8=)
                          11: 3230332e3134322e3231392e302f32342d3234203d3e20313531323531.roa (hash: BhfTobQuLUUFCm40O0UhVTcZ0Jym4fymlhVRNpS3frw=)
                          12: 3230322e3137332e362e302f32342d3234203d3e20313531323531.roa (hash: CWFmQv65CxvUZcuHEzxOtvNzP1xhd2hPja2Ei26zyso=)
                          13: 3230332e31392e312e302f32342d3234203d3e20313531323531.roa (hash: /40aDXtlZCEP2hquD991/eX5+Ztiga8tf5eQrwVIQIQ=)
                          14: 3230332e31372e3234392e302f32342d3234203d3e20313531323531.roa (hash: 8fNA7/e7ezAblkvOUimvp93vFc/b3lK5w+sKMxA5ybc=)
                          15: 3230322e3137322e372e302f32342d3234203d3e20313531323531.roa (hash: XU32qEfDo85EorqSryLTBLXpsTPsVSeLnNoBf3B27Fc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:aa:2f:08:e3:60:84:b3:d0:b3:51:e3:90:d1:7a:19:e7:00:04:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
        Validity
            Not Before: Jul 29 12:39:22 2026 GMT
            Not After : Jul 30 16:40:22 2026 GMT
        Subject: CN=81A47356E9CE854A8DF5278EECDFCDEF221D97AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:78:96:79:89:52:3c:2e:6e:29:89:bc:82:
                    8c:b6:49:23:82:46:59:c4:83:ef:29:68:2b:44:10:
                    d0:46:99:8f:f6:d2:33:c6:a5:f7:2a:d1:a2:18:a4:
                    2f:ab:63:2c:ce:c5:4c:d3:54:45:1a:6a:2f:28:04:
                    f2:66:e5:c5:99:3a:c4:c8:89:b5:1a:d5:4c:09:32:
                    64:df:fe:19:b6:05:b9:08:2b:47:fa:9e:2d:14:d8:
                    fc:e2:13:e3:b3:f6:c3:5e:2b:79:ac:b2:40:04:46:
                    b3:84:29:06:0d:f5:4e:4f:45:ab:46:16:a3:78:77:
                    71:3f:a4:f2:d2:9c:82:24:a8:f2:dc:da:94:54:8e:
                    fb:7b:52:41:b9:e9:80:a0:7e:6a:16:b8:26:3c:c2:
                    27:53:8e:4c:f7:bc:d8:81:5e:a7:0c:5e:66:08:e8:
                    90:54:ce:bd:56:f3:6e:2e:12:d4:b4:19:9f:5b:d3:
                    a9:10:51:c5:24:ca:ca:11:4b:36:a6:27:e6:89:4a:
                    92:76:b5:1b:6f:bd:66:5b:1f:4a:38:a9:9d:c3:34:
                    1b:16:1a:14:a6:e1:ed:9e:cc:aa:c3:47:3f:2f:b6:
                    b2:4c:23:05:d2:28:4c:fb:94:f1:56:a8:92:78:1d:
                    a2:13:47:55:00:a2:cf:fa:10:58:52:3d:8a:9d:59:
                    ac:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A4:73:56:E9:CE:85:4A:8D:F5:27:8E:EC:DF:CD:EF:22:1D:97:AB
            X509v3 Authority Key Identifier:
                keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:c0:69:1e:2a:dd:ad:0c:b4:d6:5d:54:e9:c2:e3:9c:86:db:
         25:da:15:26:bf:ef:4d:4d:04:7c:80:a3:ce:fb:26:ca:3d:c2:
         ba:05:3a:93:ef:5d:29:ff:eb:d7:04:2e:a0:ae:69:03:8b:56:
         eb:4d:ad:8e:d9:7f:18:9c:41:ab:ba:c1:6f:a3:a5:a1:aa:d6:
         18:d9:b1:8f:8f:2b:3d:21:72:b7:b1:88:77:72:dd:af:b3:8d:
         8e:84:18:4e:0d:6f:fd:58:0e:ee:4e:23:0d:a0:a6:12:cd:e8:
         4a:a5:af:c1:05:55:18:18:7f:9e:61:c8:7d:47:31:ad:af:72:
         3e:8e:c1:ad:51:4e:2c:31:2e:d7:c8:ed:dc:b4:46:6c:09:a4:
         84:6d:82:73:83:c0:3e:c8:bd:04:31:4d:35:13:47:a6:86:fe:
         ed:a2:35:18:53:65:0f:17:37:61:a6:a6:ec:e7:14:ec:26:b1:
         f5:45:b9:97:49:f0:79:10:69:1b:91:e1:f8:87:97:db:b5:7c:
         8c:63:e4:99:15:cb:74:ca:a6:c5:76:a9:17:ba:db:20:63:da:
         30:4d:30:5b:b0:29:f6:63:eb:6d:57:84:7c:46:35:95:f7:12:
         32:4e:1d:a0:85:da:f4:7d:97:e3:f5:29:60:3f:64:1b:19:b3:
         5e:a8:9c:b3
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUX6ovCONghLPQs1HjkNF6GecABJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4
RDM3QzUxRTAeFw0yNjA3MjkxMjM5MjJaFw0yNjA3MzAxNjQwMjJaMDMxMTAvBgNV
BAMTKDgxQTQ3MzU2RTlDRTg1NEE4REY1Mjc4RUVDREZDREVGMjIxRDk3QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEr3iWeYlSPC5uKYm8goy2SSOC
RlnEg+8paCtEENBGmY/20jPGpfcq0aIYpC+rYyzOxUzTVEUaai8oBPJm5cWZOsTI
ibUa1UwJMmTf/hm2BbkIK0f6ni0U2PziE+Oz9sNeK3msskAERrOEKQYN9U5PRatG
FqN4d3E/pPLSnIIkqPLc2pRUjvt7UkG56YCgfmoWuCY8widTjkz3vNiBXqcMXmYI
6JBUzr1W824uEtS0GZ9b06kQUcUkysoRSzamJ+aJSpJ2tRtvvWZbH0o4qZ3DNBsW
GhSm4e2ezKrDRz8vtrJMIwXSKEz7lPFWqJJ4HaITR1UAos/6EFhSPYqdWaztAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUgaRzVunOhUqN9SeO7N/N7yIdl6swHwYDVR0j
BBgwFoAUE0rDZ00FxN3rP77l6WuT6o03xR4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTM5NDE3OS8wLzEzNEFDMzY3NEQwNUM0RERFQjNGQkVFNUU5NkI5
M0VBOEQzN0M1MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4RDM3QzUxRS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMC8xMzRBQzM2NzREMDVD
NERERUIzRkJFRTVFOTZCOTNFQThEMzdDNTFFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8BpHirdrQy0
1l1U6cLjnIbbJdoVJr/vTU0EfICjzvsmyj3CugU6k+9dKf/r1wQuoK5pA4tW602t
jtl/GJxBq7rBb6OloarWGNmxj48rPSFyt7GId3Ldr7ONjoQYTg1v/VgO7k4jDaCm
Es3oSqWvwQVVGBh/nmHIfUcxra9yPo7BrVFOLDEu18jt3LRGbAmkhG2Cc4PAPsi9
BDFNNRNHpob+7aI1GFNlDxc3Yaam7OcU7Cax9UW5l0nweRBpG5Hh+IeX27V8jGPk
mRXLdMqmxXapF7rbIGPaME0wW7Ap9mPrbVeEfEY1lfcSMk4doIXa9H2X4/UpYD9k
GxmzXqicsw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:29:10 2026 by rpki-client