Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
File:                     E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft (raw, json)
Hash identifier:          uCcsR+9kIyp7DaEhBrWfptU+SQwa4815tgGa7mnrZQY=
Subject key identifier:   F7:BE:44:52:68:5E:52:34:AD:99:35:17:02:6F:D6:D5:DA:1D:96:27
Authority key identifier: E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
Certificate issuer:       /CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
Certificate serial:       4B65DA12302788989C26586636F3BF9FABEA7126
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
Manifest number:          96
Signing time:             Tue 28 Jul 2026 07:06:12 +0000
Manifest this update:     Tue 28 Jul 2026 07:01:12 +0000
Manifest next update:     Wed 29 Jul 2026 10:45:12 +0000
Files and hashes:         1: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl (hash: 8hvxblftF453kpwlqwtFRXSs/rnx51QW1l0FilsXb8Q=)
                          2: 3134342e37392e342e302f32332d3233203d3e2030.roa (hash: M8n/GFHsH32a0OY3vILdVtqD1jQGc9Vzjf0kfgZ0TxQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 10:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:65:da:12:30:27:88:98:9c:26:58:66:36:f3:bf:9f:ab:ea:71:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
        Validity
            Not Before: Jul 28 07:01:12 2026 GMT
            Not After : Jul 29 10:45:12 2026 GMT
        Subject: CN=F7BE4452685E5234AD993517026FD6D5DA1D9627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:23:d0:79:66:bf:f4:7c:95:27:68:ed:05:
                    fd:16:8f:34:c6:b6:6a:a9:e2:4b:da:7a:ec:fe:04:
                    df:04:f4:5c:27:77:cf:87:e1:0c:78:0f:c2:9c:0e:
                    f7:ff:f7:60:02:d2:4e:7b:c4:34:03:18:08:96:de:
                    8c:0b:ae:d1:cf:00:c2:52:28:30:ed:42:20:aa:56:
                    d5:c7:d3:7b:e3:d8:1f:44:40:4e:8d:e8:1e:49:17:
                    2e:d1:42:a9:b7:e5:72:0b:f7:61:a0:a0:26:a5:67:
                    f6:69:86:70:63:c3:49:b3:4f:5b:86:52:9d:5a:ac:
                    b8:c1:bc:43:b7:41:2f:c4:b8:f6:89:a6:47:d9:63:
                    a0:0c:66:18:15:a2:16:75:f8:23:6b:de:5a:34:f2:
                    59:88:c4:e6:d5:95:db:54:9b:0e:9a:0b:9e:53:60:
                    51:fb:34:4b:9c:b5:98:ce:66:75:63:a0:ca:92:79:
                    66:9d:c7:42:8c:a9:10:3e:44:de:64:ca:51:62:a6:
                    b4:b4:05:cf:60:9a:fb:76:af:a8:52:6d:8a:98:f6:
                    44:32:71:4d:d2:2b:97:98:aa:1c:3e:07:7a:7e:a6:
                    e6:98:50:0f:40:0b:4f:bb:97:9b:d5:47:bc:b1:5a:
                    0b:4d:57:34:18:b6:df:c8:c5:e0:f6:ce:a6:a3:75:
                    0d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BE:44:52:68:5E:52:34:AD:99:35:17:02:6F:D6:D5:DA:1D:96:27
            X509v3 Authority Key Identifier:
                keyid:E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c1:26:85:0d:ad:47:fe:f7:db:be:44:98:87:02:d5:3d:2c:
         c9:7c:50:a4:d8:8b:15:31:65:13:e1:f4:cc:cc:72:95:b5:96:
         45:19:10:b2:60:21:91:4f:5d:07:98:19:cd:31:59:a3:a3:90:
         c6:48:ab:68:fa:19:7d:f4:d4:c1:d6:3f:80:43:7e:12:f6:a7:
         bb:2a:e1:23:34:3b:c1:f9:9e:99:56:a4:65:ad:b4:d1:08:b3:
         b9:e2:a5:57:25:55:4a:c3:54:05:dd:85:df:a0:64:dc:9f:44:
         ce:56:b1:1d:95:c9:6a:c3:c1:d0:ff:27:b1:2d:c1:83:76:a5:
         03:03:cb:1e:9d:41:55:90:ff:0a:7e:ff:eb:ed:5c:60:94:7f:
         88:39:ea:50:39:23:f4:94:9f:1b:96:6e:74:c9:ea:4c:f4:7e:
         e2:a4:c2:9f:c0:4f:66:c3:1d:9d:28:4e:44:fa:24:f3:23:7e:
         e5:f2:4a:b8:0c:85:b5:8d:32:37:d0:a5:59:fa:64:c5:f4:a8:
         9a:3a:ed:e5:cb:5c:97:70:de:b7:d2:5b:52:66:7a:13:e0:02:
         a7:b5:35:09:78:cb:ed:d3:8e:59:2d:04:a9:4f:c5:09:79:8a:
         36:32:b2:f5:a1:46:e5:25:08:d5:c2:fc:37:a3:c1:65:81:25:
         40:b5:7f:31
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUS2XaEjAniJicJlhmNvO/n6vqcSYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlFRDhBOUJFODQ1MzEyOEJDREEzRkRBMkEyRjk4ODQz
ODQ3QkMyRjAeFw0yNjA3MjgwNzAxMTJaFw0yNjA3MjkxMDQ1MTJaMDMxMTAvBgNV
BAMTKEY3QkU0NDUyNjg1RTUyMzRBRDk5MzUxNzAyNkZENkQ1REExRDk2MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDELiPQeWa/9HyVJ2jtBf0WjzTG
tmqp4kvaeuz+BN8E9Fwnd8+H4Qx4D8KcDvf/92AC0k57xDQDGAiW3owLrtHPAMJS
KDDtQiCqVtXH03vj2B9EQE6N6B5JFy7RQqm35XIL92GgoCalZ/ZphnBjw0mzT1uG
Up1arLjBvEO3QS/EuPaJpkfZY6AMZhgVohZ1+CNr3lo08lmIxObVldtUmw6aC55T
YFH7NEuctZjOZnVjoMqSeWadx0KMqRA+RN5kylFiprS0Bc9gmvt2r6hSbYqY9kQy
cU3SK5eYqhw+B3p+puaYUA9AC0+7l5vVR7yxWgtNVzQYtt/IxeD2zqajdQ0JAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU975EUmheUjStmTUXAm/W1dodlicwHwYDVR0j
BBgwFoAU6e2Km+hFMSi82j/aKi+YhDhHvC8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDQ4ODg3NDk4NzU1Mjc2OS8wL0U5RUQ4QTlCRTg0NTMxMjhCQ0RBM0ZEQTJBMkY5
ODg0Mzg0N0JDMkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRTlFRDhBOUJFODQ1MzEyOEJDREEzRkRBMkEyRjk4ODQzODQ3QkMyRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ0ODg4NzQ5ODc1NTI3NjkvMC9FOUVEOEE5QkU4NDUz
MTI4QkNEQTNGREEyQTJGOTg4NDM4NDdCQzJGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8EmhQ2tR/73
275EmIcC1T0syXxQpNiLFTFlE+H0zMxylbWWRRkQsmAhkU9dB5gZzTFZo6OQxkir
aPoZffTUwdY/gEN+EvanuyrhIzQ7wfmemVakZa200QizueKlVyVVSsNUBd2F36Bk
3J9EzlaxHZXJasPB0P8nsS3Bg3alAwPLHp1BVZD/Cn7/6+1cYJR/iDnqUDkj9JSf
G5ZudMnqTPR+4qTCn8BPZsMdnShORPok8yN+5fJKuAyFtY0yN9ClWfpkxfSomjrt
5ctcl3Det9JbUmZ6E+ACp7U1CXjL7dOOWS0EqU/FCXmKNjKy9aFG5SUI1cL8N6PB
ZYElQLV/MQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:56:08 2026 by rpki-client