Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
File:                     DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft (raw, json)
Hash identifier:          AJyjFNK3G4fXGu7kGCe1kkeZMY0D7ZAYQqJ8DkEPeEY=
Subject key identifier:   80:97:36:A1:20:8E:BB:B1:1B:05:48:BB:05:E9:99:CC:A0:55:0D:BC
Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Certificate issuer:       /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Certificate serial:       111156DA804E3FFA65E61133A6932F6410322231
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
Manifest number:          066D
Signing time:             Wed 29 Jul 2026 03:30:19 +0000
Manifest this update:     Wed 29 Jul 2026 03:25:19 +0000
Manifest next update:     Thu 30 Jul 2026 05:14:19 +0000
Files and hashes:         1: AS132510.roa (hash: nW/Xu5rFcjc6MZ1OWK+RDXCb9OeXARjibpfGArwLV0Q=)
                          2: AS56044.roa (hash: fySgsNdI0VaQG5w+0a74pK5zuMORl7lQYZqkRHUEzWI=)
                          3: AS139080.roa (hash: pW0L+G1KXVHEfGEJUDhd8Sjnk8JGdVqgT34t4eVafog=)
                          4: AS132525.roa (hash: FsrT1t9pgi+852oHSdSFKKToxIBNmTh3ow4IIvZA+4Y=)
                          5: AS23841.roa (hash: wEUvCNR/rKJWyrTLZUbTTDGl4gJBMRJxFsOhTzXHPL0=)
                          6: AS140105.roa (hash: cbLY07/0cjAui3nt1HvHxL/XetLIxK/ZZzrxslSceck=)
                          7: AS56042.roa (hash: J5VAKVY6zfnVotFnkofOzqczmOLPSR/3+IWm1siuCC0=)
                          8: AS56046.roa (hash: sS9A+DvaPhMoHDv5IDg5K4Onn66yA+z+EmOs1kRUoA8=)
                          9: AS24445.roa (hash: U9aeKpr4+FBX/ykXl69Aspuv8cTZtMPrdlcmOJXV4TQ=)
                          10: AS134810.roa (hash: uCuc09kuT519jIA089mWGybf0KXQ2DLpvazGC1o2/oo=)
                          11: AS56047.roa (hash: qbLdZvaiEWDGY5ZcuA1+dh4C14jTML73MGPxNx0rRvM=)
                          12: AS56045.roa (hash: JvCxAKjG86lRDOwFUy1JoWNJrWk/CVmpwlxSz7n/mBw=)
                          13: AS56040.roa (hash: O8MlUO/2bMJ0Qxr/SQlpRMSOFMpasYyHRppDnHoQrkk=)
                          14: AS141425.roa (hash: JIOqNrntGHAd8+iQ6oFeH8vj+w3+1mPDPGOuDZGfboY=)
                          15: AS135054.roa (hash: potv43MxFxLckeV83NSTRcSW7QiMa9bKPAG8rf/anoM=)
                          16: AS56041.roa (hash: yc1OSu5zWbP8CIRGHrHYZzhFK7GFbhP6V7KtocjDlEE=)
                          17: AS24444.roa (hash: mQy+6X8hS1LqByIKQOEFrAUCdFqhvJsC3MueNhp+e38=)
                          18: AS24400.roa (hash: BiFnCkNCJdQndgzPtOs9qZ2ICg4/xMzeQqfu+OKlIRI=)
                          19: AS138407.roa (hash: 3TB7XIICfQETicAQCosTtecuvqT6okRABqxXNpHYYAA=)
                          20: AS9808.roa (hash: 7pHfMvYOv+rpmjJsXGjVim007SNSYiWlv32AussDDAs=)
                          21: AS38019.roa (hash: r6uLW9EjcEAnDqpJJTVuFF7cWjJc322lZqe8eoe4t9M=)
                          22: AS24547.roa (hash: EbWX0tfF5aSxUGsiNw/C10msmqZ1bAZGt7hIreH+jSE=)
                          23: AS56048.roa (hash: nXdN51orFCr5+YF0lfSF0V2OfnJLpwjEvvx8YqsVSsM=)
                          24: DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl (hash: Dpo74xRv/sj8gcVIFklPWHB3eGfk7vRmDecBz8DK06g=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:11:56:da:80:4e:3f:fa:65:e6:11:33:a6:93:2f:64:10:32:22:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
        Validity
            Not Before: Jul 29 03:25:19 2026 GMT
            Not After : Jul 30 05:14:19 2026 GMT
        Subject: CN=809736A1208EBBB11B0548BB05E999CCA0550DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:ac:a5:cc:ba:9b:61:39:8f:32:1c:ae:aa:
                    f6:13:de:b9:97:20:b6:e0:2e:48:99:11:51:b5:43:
                    2d:cc:70:53:b9:49:d5:5b:2a:5f:f3:b1:1c:7b:ee:
                    da:80:76:7b:e4:17:f2:ba:f0:10:35:c7:da:72:9f:
                    24:a8:0d:16:16:ce:d7:b3:1f:91:85:b3:73:a5:00:
                    fe:e4:ef:3f:e3:13:c9:e4:13:1a:8a:8d:47:68:a6:
                    5a:1b:38:9f:73:40:15:86:c7:6c:2b:d6:9c:ec:e8:
                    56:9f:31:04:58:57:53:1c:17:8e:58:d1:80:a3:ee:
                    91:4c:4a:51:c5:6f:8a:fb:a9:f9:3d:4a:a1:cd:14:
                    b9:cf:ce:bc:0c:53:f1:1e:93:c8:63:76:6e:f5:e8:
                    d9:0b:d9:29:94:e1:30:3a:a8:6b:b8:a6:59:78:32:
                    ea:70:44:b3:ff:31:41:fd:3f:a0:db:a8:16:2b:b7:
                    74:ee:42:a1:b1:85:77:97:0e:a1:e4:39:10:c4:97:
                    00:1f:4c:fe:64:60:dc:fb:3d:66:cc:5e:a7:42:97:
                    d0:9c:01:f3:73:77:f9:52:c9:59:4d:18:4f:97:04:
                    40:d6:eb:f5:b8:55:b2:4c:74:1a:b5:82:df:c9:79:
                    c4:a1:00:1f:98:c5:eb:cb:0f:a5:ef:98:1f:07:a2:
                    d2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:97:36:A1:20:8E:BB:B1:1B:05:48:BB:05:E9:99:CC:A0:55:0D:BC
            X509v3 Authority Key Identifier:
                keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:a0:60:4a:54:95:bf:75:6c:0c:15:84:ab:19:87:05:20:b7:
         27:f2:e9:43:27:cf:04:f0:66:68:67:3b:a9:b8:24:68:12:1c:
         b3:47:66:d1:e0:ce:ef:fa:8b:ab:91:c6:bb:6e:cf:92:19:16:
         4b:f8:0f:89:12:6c:f7:ad:96:e5:c4:00:14:94:40:09:1c:48:
         1c:4c:35:9d:64:69:74:d6:b3:4f:27:df:e1:1e:98:84:48:57:
         c3:9f:c0:6f:b8:34:4f:e8:5f:ef:ce:29:06:fa:fc:db:5a:c7:
         d9:b8:31:36:c6:31:20:89:db:63:58:9e:53:2b:bd:ff:4a:2d:
         67:69:54:12:ba:5f:f5:66:e7:8c:a7:ba:03:b8:de:0f:31:46:
         7e:17:cc:bb:0e:4f:2c:07:50:0a:4c:d7:4c:42:d6:8b:f6:60:
         11:ef:49:a6:43:49:d3:77:52:a5:5f:1e:98:38:f9:3e:fd:94:
         7f:f6:9a:d9:81:45:f6:e7:ce:9c:6d:59:74:c5:ca:a0:79:e3:
         af:94:0b:61:ef:10:fe:b4:e4:78:bf:2d:5a:24:f0:51:aa:c1:
         66:04:a3:d2:b9:7e:6c:bf:33:6f:20:90:80:f8:16:a2:8a:e9:
         ff:6f:71:58:21:2e:ed:99:fd:9e:58:2f:05:9c:28:0f:e6:b3:
         dd:3f:09:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:57:44 2026 by rpki-client