Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
File:                     BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft (raw, json)
Hash identifier:          PuqxjybsYFHtjSxPRn1yoCMknSB1hgE4JBNOcTcs58k=
Subject key identifier:   DB:CA:4D:FB:CD:4E:36:2F:D3:FD:04:35:A7:35:77:94:8D:1B:B0:BB
Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
Certificate issuer:       /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Certificate serial:       223FC147F109E80846742F90770F3F8F41250406
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
Manifest number:          EF
Signing time:             Sun 27 Sep 2026 11:49:52 +0000
Manifest this update:     Sun 27 Sep 2026 11:44:52 +0000
Manifest next update:     Wed 30 Sep 2026 23:32:52 +0000
Files and hashes:         1: 323430303a393630303a3a2f33322d3332203d3e2030.roa (hash: qYpetUirBdZkWClubflhJXT8wvgjzSRaXKzICEAC+VE=)
                          2: 3131392e31352e3133362e302f32312d3231203d3e2030.roa (hash: MqgqdLkRcEcvofxTsK+/JIWiyCzdozy0h5Q+QPR0tCo=)
                          3: 32372e3131332e3132382e302f31382d3138203d3e2030.roa (hash: KK1RzKFiNcTfRxJmVFKufBBeLgH5EWmCWHV585IznMo=)
                          4: 3230322e3133362e3231322e302f32322d3232203d3e2034383132.roa (hash: 0XWbWX26rruXa4apWMj3I3fHxpgDOl2SGcq4AhkL8tU=)
                          5: 3231302e352e3134342e302f32312d3231203d3e203234313431.roa (hash: +lv73T9O9q5n81quuhvlQDnpqcRdKWzD0TRd2MlglfA=)
                          6: 3230322e3133362e3231362e302f32332d3233203d3e2034383132.roa (hash: 5nY2Qwd6G9qtAhzlBDk/6R/77a/5eMpOO710Otrer40=)
                          7: 3231302e352e3135322e302f32312d3231203d3e2034383132.roa (hash: +ZHNbMnaFGN/uSkWabSmE75mffioRCBu0BsefK4v1lY=)
                          8: 3131392e31352e3133362e302f32332d3233203d3e2034383132.roa (hash: iyslGkiLEqEVdSW+oe1E81pt4IuqOMx8h6+odH4uEqQ=)
                          9: 3230322e3133362e3230382e302f32322d3232203d3e2034383132.roa (hash: OmiSIjODLWcoDnY4QUVBhclHnKvfmJsqsRP35eLApYo=)
                          10: 3230332e3137362e3137302e302f32342d3234203d3e203234313431.roa (hash: dLZCqmYnbpIP4WgY5kD3pZF1/DxQRaLbx47WEz5mzfQ=)
                          11: 3230332e3137362e3136382e302f32312d3231203d3e2030.roa (hash: ktYlnhepu1386GTakqSOMD/xAMbEFqEMJ4uaT/SuP0A=)
                          12: 3231302e352e3135302e302f32342d3234203d3e203234313431.roa (hash: y6kqJ1YDTpOPqPKWU+Y/iiteI55ARuprTHApGMr7IZA=)
                          13: 3131392e31352e3134312e302f32342d3234203d3e2034383132.roa (hash: iiZs9oCDJ3ydR1g9N7+3kpsirBvuQMlUfkeknyeUI0Y=)
                          14: 3230322e3133362e3230382e302f32322d3232203d3e203137363231.roa (hash: Z9J0afLCLJZwi8MldJRUz1J6biRfJ6fEP/d2kNLGKC4=)
                          15: 323430303a393630303a383830303a3a2f34382d3438203d3e2034383132.roa (hash: 6yt1vZTM0OmhcugzzBuMuaCYULNg8Jv+YWa4pkue5ss=)
                          16: 3230322e3133362e3231392e302f32342d3234203d3e2030.roa (hash: eb+lsP1zS4a52kp7rQjQfcngt6O8DL6ngxHMW6QjVVI=)
                          17: 3230332e3137362e3136382e302f32342d3234203d3e203234313431.roa (hash: N3T0xG4+OaQjiFYOMeZy4UHEZPVVz8y2/BHszGOiCDM=)
                          18: 3131372e37342e3132382e302f32312d3231203d3e2034383132.roa (hash: 7u1P3VkjpxSppg+34NH/Zm1EsjCmHFLZUKt9OAhN12I=)
                          19: 3230322e3133362e3232322e302f32332d3233203d3e203137363231.roa (hash: F0Ayq3cjkuvxzFYX3SHZlSLuhDvOKIvqp12/bsu/n/4=)
                          20: 3230322e3133362e3231322e302f32322d3232203d3e203137363231.roa (hash: HS2oviokuHzJsSm9+Rr59oYhpd+2iiBE6DvBEyPQZ/8=)
                          21: 3231302e352e3134342e302f32312d3231203d3e2034383132.roa (hash: MtpPUBiQt8TPtxsCGqf8Ze8tDRRRKP8x2cQp71EJDDk=)
                          22: 3230322e3133362e3232302e302f32342d3234203d3e203137363231.roa (hash: AWmE9yewJh0fhz6Pfas9ClXLsdjyofQ7PMvv9lZQdis=)
                          23: 3230322e3133362e3232312e302f32342d3234203d3e2030.roa (hash: jw6K4jbxX8BotBAL0cYgDRlD+uP6PPaf5dlMjJNsaZo=)
                          24: 3131372e37342e3133362e302f32322d3232203d3e2034383132.roa (hash: A3jgln8L7FCj6nrGICiP8rRiROVpbxAhiphG6oEQwXY=)
                          25: BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl (hash: l3SEsikyG2O/wazudE9FSB7gUy3/slZYb+8TEwiO3F4=)
                          26: 3131392e31352e3134302e302f32342d3234203d3e2034383132.roa (hash: HnuA7sY67JCdIKygqMB5pRKk8VyJBnV37OTStjv4ilI=)
                          27: 3131372e37342e3132382e302f31372d3137203d3e2030.roa (hash: 5MlJOu/q0Q3Mts15LBalJ1sepbxwUb+VkGap3rDiJX0=)
                          28: 3230322e3133362e3231382e302f32342d3234203d3e203137363231.roa (hash: S3k9nkhW8JiHW7HA1P7oI4rU1lVF7/FTM2rJjszLFy8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:3f:c1:47:f1:09:e8:08:46:74:2f:90:77:0f:3f:8f:41:25:04:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
        Validity
            Not Before: Sep 27 11:44:52 2026 GMT
            Not After : Sep 30 23:32:52 2026 GMT
        Subject: CN=DBCA4DFBCD4E362FD3FD0435A73577948D1BB0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:64:8f:fb:2c:fe:01:d4:2a:c4:b7:32:60:9c:
                    46:3a:62:53:7f:8d:b3:dc:b9:30:86:bf:67:bb:a4:
                    3f:67:38:a3:5f:67:9b:60:96:25:f9:a3:9f:33:a5:
                    17:e5:ab:86:b7:20:20:aa:10:cc:3e:ce:e9:38:26:
                    1d:ff:78:da:39:aa:fa:c1:e9:db:62:e0:d3:4b:33:
                    73:de:fd:cb:1b:c3:a4:49:d3:ed:80:9e:f2:d0:f4:
                    16:21:77:57:62:01:a9:a4:64:8a:5f:b0:b7:72:63:
                    ef:53:6a:3b:ee:4d:b3:be:11:1a:9f:e2:e1:40:6c:
                    45:e3:d5:a3:7e:35:23:ab:c5:80:1f:8b:68:bc:80:
                    b6:dd:70:af:97:a8:e5:cf:0f:f8:c6:aa:4d:de:17:
                    54:8f:38:eb:af:25:b1:ef:35:af:23:62:6a:12:39:
                    2c:76:4a:18:76:f5:02:78:3e:e6:d2:79:84:d3:5b:
                    a7:8a:e8:12:3f:2b:07:d7:c6:1d:b1:38:3e:78:51:
                    ec:d3:11:14:1a:7c:d2:0e:82:97:a9:8e:2f:25:af:
                    8a:f7:92:89:39:79:f0:48:cc:9b:f1:9a:b8:2e:e5:
                    b5:d4:31:33:23:cc:db:76:d7:9a:eb:28:64:44:ec:
                    27:00:20:9b:bc:d4:34:25:65:73:a5:68:24:2c:b1:
                    27:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CA:4D:FB:CD:4E:36:2F:D3:FD:04:35:A7:35:77:94:8D:1B:B0:BB
            X509v3 Authority Key Identifier:
                keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f1:04:4a:44:f5:62:18:18:bd:0a:d7:f8:2d:be:a8:5d:3e:
         b1:87:33:45:44:6a:4e:24:e9:0e:65:28:a0:5c:d8:5f:9f:a6:
         9c:a7:76:47:43:6f:33:2f:ac:bd:8f:74:f9:ba:e2:58:30:75:
         6c:40:67:78:1c:26:2e:86:f0:63:23:ee:60:0b:35:f1:7b:24:
         e3:ec:19:51:a0:3f:7e:55:06:7c:6a:f0:4a:42:23:0a:b4:bb:
         8d:6f:82:9d:4d:3c:d6:1f:b9:6b:13:c8:4f:49:a9:3d:13:3a:
         4b:39:f9:40:0b:9a:12:3c:12:a9:04:c4:01:56:83:4a:f4:08:
         ee:d2:98:89:a8:49:a6:39:c4:ae:5f:fe:98:07:49:00:16:1a:
         22:44:ce:e7:3b:5b:7e:6f:9b:d1:a4:32:a0:26:1a:2d:1b:dc:
         0f:1c:fa:a3:c1:0b:f7:ad:5f:e3:09:f2:59:c2:e7:e7:a9:77:
         35:67:27:58:07:5f:db:76:7f:60:47:da:c0:cb:a7:6c:50:14:
         17:88:76:6c:62:b6:3c:fa:61:99:f3:00:11:39:b0:67:8e:e6:
         f4:c8:5a:04:1f:6a:5f:51:ba:2d:a5:01:5f:11:cd:55:a4:0d:
         06:16:26:1d:1a:78:1c:6e:5f:a2:4e:e4:dc:8e:3b:35:f5:55:
         3b:44:11:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 03:25:30 2026 by rpki-client