Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
File:                     22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft (raw, json)
Hash identifier:          2RTtw0y2ir/IggrfO+b2UQZQQ1C2NcDaNtG3JHupIWs=
Subject key identifier:   E9:74:98:52:57:F7:F1:74:8A:49:3A:CD:6C:BA:BE:BF:BE:4D:C2:83
Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
Certificate issuer:       /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Certificate serial:       4C3FB4772387064D03CB12F49E81DE597F315884
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
Manifest number:          CF
Signing time:             Wed 29 Jul 2026 05:43:36 +0000
Manifest this update:     Wed 29 Jul 2026 05:38:36 +0000
Manifest next update:     Thu 30 Jul 2026 08:51:36 +0000
Files and hashes:         1: 3231302e37382e3132382e302f32322d3232203d3e2039383033.roa (hash: g9d3B9hoJrTm52j8B539dJ9HDnLv7lTCn1c0qWVA0Dc=)
                          2: 3231312e3130302e37322e302f32342d3234203d3e203233373234.roa (hash: SecKXvNuh0Fsq9JdTecOZLzm1VTOb/94Z648V5IO+DI=)
                          3: 3130332e37332e3230382e302f32322d3232203d3e2039383033.roa (hash: XVSUK5eRG5UoKF6vo6V6ln8vvFKzxdIbxy8TV6MFmbo=)
                          4: 3231312e3135302e36342e302f31392d3139203d3e203233373234.roa (hash: 4RghX/MxjGxNYt3iuL9Mxdh4Io2D3U5e37dKXANiKB0=)
                          5: 3231312e3135372e3234302e302f32302d3230203d3e203233373234.roa (hash: gydNdI0Li4afslJy0wyrDnUFBOBJBUoko3onPetP7ro=)
                          6: 3231312e3130302e36362e302f32342d3234203d3e203233373234.roa (hash: 6sfldsJiJl/wp77yBQ0u4qj4DV6FiX2vcT2hKVsFe3o=)
                          7: 3231312e3135302e3130302e302f32332d3233203d3e203233373234.roa (hash: 03QuETdXbGvEvqzMXchBhFMKUmxEFeQ/gtsLajwrX1s=)
                          8: 3131392e36312e302e302f31372d3137203d3e203233373234.roa (hash: k9oYKjGIXZaSuzUmQ2AAGCKqO0tvJoefFtfoI0N/fyo=)
                          9: 3231312e3135302e3132382e302f32342d3234203d3e2039383033.roa (hash: S7Hcu6QVVzcYJZ+TIhGWLG0GW1wRjr2gL5ORninwvZQ=)
                          10: 3231312e3130302e36342e302f31392d3139203d3e203233373234.roa (hash: gPtJjP9+di7GKh8vu1YDLm/PtPnxTpfuc3EHNBfjqYg=)
                          11: 3231312e3135302e3132322e302f32342d3234203d3e2039383033.roa (hash: jeaTrOgdMebawys/6XnnQCO78gyxE7KX43eZsOidPFM=)
                          12: 3231312e3135372e3232382e302f32332d3234203d3e203233373234.roa (hash: nX1kVZajt7R6n+n7AcrtE48zts8+uLXvQJ2dsnVZ75M=)
                          13: 3231312e3135302e3130302e302f32342d3234203d3e2039383033.roa (hash: ulsWHD2PqHg5ixQDELnSrRRPPqdYu9uZVrCb73YgWGQ=)
                          14: 3231312e3135372e3232372e302f32342d3234203d3e203233373234.roa (hash: 1QaZwfBCqfvHN54sX/bej2ZJXj1WVip/KSr91tGlqIg=)
                          15: 3231312e3135302e302e302f31382d3138203d3e203233373234.roa (hash: O+AFP3LztmQknlXORk2THYCllaXkupnfWf00JCkvURk=)
                          16: 3231312e3135372e3134322e302f32332d3234203d3e203233373234.roa (hash: WST2czKsVB/ewvcOeWL+JdFdYr1zVF2oFq9fGdTDQ8s=)
                          17: 3231312e3135302e3131342e302f32332d3233203d3e203233373234.roa (hash: WJkP0W15rAl9+roSJlFkJJU2uJEAC90HgnWnFNu7xEQ=)
                          18: 3231312e3135372e3233322e302f32312d3231203d3e203233373234.roa (hash: Mnad/Y1S3127qUStkj6/ae6IpUyrLetwKWDxhz310Tc=)
                          19: 3231312e3130302e36382e302f32332d3233203d3e203233373234.roa (hash: VE+W5cAJWZHQZFaO6dxpe/v1H6DwQ7Pjd3iJdOLXsNw=)
                          20: 3231312e3135302e38302e302f32302d3230203d3e203233373234.roa (hash: 10TCtF8APFuMCUSbElN3rH/asDRjrTjYEzpEFraWYXU=)
                          21: 3231312e39392e3232342e302f31392d3139203d3e2039383033.roa (hash: M8yX9JIGKoJQxQCCYhZcFEPQjI82xJyedvbvJQsf97Y=)
                          22: 3231312e3135372e3139322e302f32302d3230203d3e203233373234.roa (hash: g7NQxqPIo2ezw+OBoAAEIKfoyKL904Ydaym44JJkCQc=)
                          23: 3231312e3135302e302e302f31372d3137203d3e2039383033.roa (hash: AXXRnjUqEURYElm3WaGN7OOXEzIGcz5XFQR6ldopvJc=)
                          24: 3231302e37382e3132382e302f32342d3234203d3e203233373234.roa (hash: Hj0VBjEG1A/Vy5CfFa3SODbtJ9ifdSazK6JMSWZX3f4=)
                          25: 3231312e3135372e3232352e302f32342d3234203d3e203233373234.roa (hash: duppbLzESzwcPhrDvmhz6qAUsN5VpGNvb5VQZcQu5Io=)
                          26: 3231312e3135302e39382e302f32342d3234203d3e2039383033.roa (hash: nN7sg8ZrxgBmgmAOtQzkRhBQ5w8spWBZgpshEw2bK94=)
                          27: 3231312e3130302e37362e302f32342d3234203d3e203233373234.roa (hash: bXU0GEiRMQlqJiUyGYYppOzk/EUcRuGTtnjtH8K8WwU=)
                          28: 3231312e3135372e3132382e302f31392d3139203d3e203233373234.roa (hash: sl7qhUm7RxG5b+OGwzvCXDL0+hR40yg+L5bjzzlV0aU=)
                          29: 3231312e3135372e3136302e302f31392d3139203d3e203233373234.roa (hash: t58PvWUroeia0P5TL6X1Bz4D3AUlx6o+sfFf/IteIdI=)
                          30: 3131392e36312e33322e302f31392d3139203d3e203233373234.roa (hash: IeOir/13vFrTa9hbeyjvtXntQyqmWY0jkXl8kwqfY3w=)
                          31: 3231312e3130302e36362e302f32332d3233203d3e203233373234.roa (hash: RQ99QtSP/7GkGYfaamKRVzphPok1okmE3hdXkUarkAY=)
                          32: 3231312e3135302e3132382e302f31382d3234203d3e2039383033.roa (hash: Iy7pJUKS62O213YpRT3Nh6MR3eqtNr5cQw4Mojyr6XM=)
                          33: 3231312e3135372e3132382e302f31382d3138203d3e203233373234.roa (hash: 9DsUsc7xqSEgA76x3QVEUXlO+lwxmzsItElrdqQxlu8=)
                          34: 3231312e3135372e3232342e302f32342d3234203d3e203233373234.roa (hash: K7WwzUb7hIRkI35jNdL0ZzawEOqxsqxxhb5E3doscew=)
                          35: 3131392e36312e302e302f31392d3139203d3e203233373234.roa (hash: K3LP5dwQaXcx4MuNYyKZrH4G4kDDCKExunXmrKN3ytE=)
                          36: 3231312e3135302e3132342e302f32332d3234203d3e2039383033.roa (hash: 0i23c59Yk1Pcej/NF+Ghnc/xXyH5hIz75ae7eLtgQUw=)
                          37: 22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl (hash: fuFAQYs+N6g43/sGIHUb8l1SGNg+RgerkpnE/1RQvJw=)
                          38: 3231312e3135302e36342e302f32302d3230203d3e203233373234.roa (hash: 8Mipqd5VSCLIE7ckbJlkKsFvCvNdrD/MGNTiQIqJBa8=)
                          39: 3231312e3135372e3232342e302f31392d3139203d3e203233373234.roa (hash: mXdeRxX9NNx5ZnpMgxouFbHE5Nv9XoEo7yaCgv3A0pw=)
                          40: 3231312e3135372e3232362e302f32342d3234203d3e203233373234.roa (hash: rjo7jrhrMRVuR0JfRg7FPv4u+eyoOM/AtQUL2V3uCs8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3f:b4:77:23:87:06:4d:03:cb:12:f4:9e:81:de:59:7f:31:58:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
        Validity
            Not Before: Jul 29 05:38:36 2026 GMT
            Not After : Jul 30 08:51:36 2026 GMT
        Subject: CN=E974985257F7F1748A493ACD6CBABEBFBE4DC283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f9:29:39:55:a4:4d:e1:73:a9:bb:62:c8:6b:
                    ce:3e:39:ee:08:6b:77:a3:c3:f0:a1:7f:56:80:67:
                    f2:ac:4d:eb:39:22:11:d4:e3:c0:21:8c:cf:60:28:
                    d7:29:ef:62:f2:78:39:85:a9:c6:0b:16:0a:01:c5:
                    91:86:6a:a6:ad:ca:b9:c8:13:3e:ff:94:78:15:8d:
                    f5:b6:19:e7:a2:a7:17:58:d8:b6:1f:28:40:12:eb:
                    2c:e9:aa:fa:0b:6d:77:86:ac:00:2c:16:22:42:6b:
                    c0:a8:0d:18:f8:94:d0:8a:ab:9a:71:3b:9a:9e:b3:
                    91:46:3f:f9:72:0c:a6:30:c0:82:4d:e0:63:90:4e:
                    95:fb:68:55:d4:d4:95:76:7d:7b:81:47:7d:6f:4a:
                    c4:22:e4:04:6f:0a:d9:8c:27:97:5b:69:6c:38:5b:
                    8b:bc:fb:17:55:5c:6d:f1:f1:2c:ab:c8:71:59:d3:
                    e8:93:ac:2f:5d:3f:c7:4f:8a:43:55:50:83:a0:9c:
                    25:64:2b:af:02:53:ac:66:62:ad:4b:48:d1:8a:74:
                    2e:b2:e5:be:71:23:5c:db:cd:4f:ff:58:55:ba:4d:
                    d3:41:82:80:66:8c:20:ff:41:81:af:03:e7:33:f7:
                    a7:00:38:9e:31:ce:5e:d9:ef:1f:69:f6:7f:47:d7:
                    51:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:74:98:52:57:F7:F1:74:8A:49:3A:CD:6C:BA:BE:BF:BE:4D:C2:83
            X509v3 Authority Key Identifier:
                keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:84:7b:58:c0:70:09:22:23:b2:4b:5f:07:45:c4:5d:65:92:
         87:73:21:0a:6a:05:db:37:10:1e:7a:c4:82:0c:9e:74:85:eb:
         f3:5b:0d:73:a4:9f:6c:b7:07:c2:6b:0f:66:cd:d8:d2:00:30:
         d8:20:22:c8:0b:e0:42:c0:9b:a8:05:41:cc:e7:3c:cc:25:22:
         19:31:00:70:65:0e:1c:a1:b6:e5:f7:65:72:c1:c8:ad:98:9f:
         04:1b:d1:71:65:67:ab:c9:25:0e:e2:f8:2c:23:b8:5d:42:0a:
         bc:cc:77:61:f2:17:96:e8:55:ae:34:90:e7:c9:d1:cf:a7:3f:
         07:5e:e4:99:cb:3c:35:18:3f:55:ae:fb:d0:94:3a:ca:e2:c4:
         dc:b2:85:c8:90:d6:72:48:e5:d8:2c:4c:c4:9a:52:0b:93:ed:
         ea:12:89:bb:7e:7f:0a:c4:df:74:67:40:f9:5b:56:0f:d3:58:
         79:c4:e7:d8:cc:f0:18:78:49:f0:6f:7c:dd:8f:7c:bc:df:02:
         36:a9:d1:57:c6:fd:5c:e9:f2:da:0c:43:0b:dc:72:7b:5e:e0:
         03:f8:70:1d:1e:f1:f6:e2:a0:44:6c:ee:24:35:be:c8:04:28:
         3b:88:42:ac:32:9b:0f:50:89:de:0a:6d:ad:ef:3f:6c:46:72:
         d6:31:c5:f9
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUTD+0dyOHBk0DyxL0noHeWX8xWIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYy
NDM1NTNDQzAeFw0yNjA3MjkwNTM4MzZaFw0yNjA3MzAwODUxMzZaMDMxMTAvBgNV
BAMTKEU5NzQ5ODUyNTdGN0YxNzQ4QTQ5M0FDRDZDQkFCRUJGQkU0REMyODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ+Sk5VaRN4XOpu2LIa84+Oe4I
a3ejw/Chf1aAZ/KsTes5IhHU48AhjM9gKNcp72LyeDmFqcYLFgoBxZGGaqatyrnI
Ez7/lHgVjfW2GeeipxdY2LYfKEAS6yzpqvoLbXeGrAAsFiJCa8CoDRj4lNCKq5px
O5qes5FGP/lyDKYwwIJN4GOQTpX7aFXU1JV2fXuBR31vSsQi5ARvCtmMJ5dbaWw4
W4u8+xdVXG3x8SyryHFZ0+iTrC9dP8dPikNVUIOgnCVkK68CU6xmYq1LSNGKdC6y
5b5xI1zbzU//WFW6TdNBgoBmjCD/QYGvA+cz96cAOJ4xzl7Z7x9p9n9H11GVAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU6XSYUlf38XSKSTrNbLq+v75NwoMwHwYDVR0j
BBgwFoAUIhAvfqs3yB6Hu16yFWC/piQ1U8wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTkyMDAwNjk1NDIyMTU2OS8xLzIyMTAyRjdFQUIzN0M4MUU4N0JCNUVCMjE1NjBC
RkE2MjQzNTUzQ0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYyNDM1NTNDQy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTU5MjAwMDY5NTQyMjE1NjkvMS8yMjEwMkY3RUFCMzdD
ODFFODdCQjVFQjIxNTYwQkZBNjI0MzU1M0NDLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4R7WMBwCSIj
sktfB0XEXWWSh3MhCmoF2zcQHnrEggyedIXr81sNc6SfbLcHwmsPZs3Y0gAw2CAi
yAvgQsCbqAVBzOc8zCUiGTEAcGUOHKG25fdlcsHIrZifBBvRcWVnq8klDuL4LCO4
XUIKvMx3YfIXluhVrjSQ58nRz6c/B17kmcs8NRg/Va770JQ6yuLE3LKFyJDWckjl
2CxMxJpSC5Pt6hKJu35/CsTfdGdA+VtWD9NYecTn2MzwGHhJ8G983Y98vN8CNqnR
V8b9XOny2gxDC9xye17gA/hwHR7x9uKgRGzuJDW+yAQoO4hCrDKbD1CJ3gptre8/
bEZy1jHF+Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:34:06 2026 by rpki-client