Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft
File:                     709E5125176627846677AF908E76CAE21FB95460.mft (raw, json)
Hash identifier:          VhhrmSaSzC8ljP0E0jCz2kPNhDc1wgXh/hK7Z8JvflI=
Subject key identifier:   E9:5F:C4:EE:53:AF:62:58:E0:A4:D1:85:37:18:E3:B2:9E:3E:21:19
Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60
Certificate issuer:       /CN=709E5125176627846677AF908E76CAE21FB95460
Certificate serial:       4E9BA1259807B847DDABA51DC09997661743481E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft
Manifest number:          0D
Signing time:             Fri 17 Apr 2026 16:19:43 +0000
Manifest this update:     Fri 17 Apr 2026 16:14:43 +0000
Manifest next update:     Sat 18 Apr 2026 17:53:43 +0000
Files and hashes:         1: 3230332e3133352e3130392e302f32342d3234203d3e203536303436.roa (hash: bAuEotOBWkfK+l0XMBi4UbaQgMPZlvEWFIj/aCt7iIk=)
                          2: 3132332e39392e3139322e302f32342d3234203d3e203536303436.roa (hash: xVw3215ouhyRfkrBawXAhYsYuaPozBqOB5JMIF6KvcI=)
                          3: 709E5125176627846677AF908E76CAE21FB95460.crl (hash: UqeGR+0C6y0eaX6w7CGoZn/6NXaL7zv25xZICNEDHCU=)
                          4: 3132332e39392e3230322e302f32342d3234203d3e203536303436.roa (hash: FWytSVV3bw6r2i/f+FObRmRvnU9Kn3xZRXkNxwxIrm0=)
                          5: 3230332e3133352e3131312e302f32342d3234203d3e203536303436.roa (hash: +34kw5HV2z2eHoWYV+KhRIwd91Ghwjh0gUsrg/w4kQs=)
                          6: 3131362e37302e36342e302f31382d3138203d3e203538343631.roa (hash: 4tTQbayWaJ94/APqMkPvrudpPMWZfUh2eRbBIVAxExo=)
                          7: 3132332e39392e3139342e302f32342d3234203d3e203536303436.roa (hash: /LyhXxadlJVq5IFaPmqd8NuURpfRzUDXKVkraXRzuKI=)
                          8: 3132332e39392e3139392e302f32342d3234203d3e203536303436.roa (hash: z0CNegRcRsFkdUgwpwxZ9nN/Iy9HCXGKT0y4nw1eom4=)
                          9: 3230332e3133352e3130342e302f32312d3231203d3e203538343631.roa (hash: fM1A18suRK8WzD9z99Lh+YXreBGdtCI+wFi/OQZ2QYY=)
                          10: 3132332e39392e3230372e302f32342d3234203d3e203536303436.roa (hash: BMff2BnjPO6TURSDqwS2MmpOFH3VB1OPH2fMelWJ37w=)
                          11: 3230332e3133352e3130382e302f32342d3234203d3e203536303436.roa (hash: 38TgIBqQHAA96dS2lwsMRBNdMfnRErFfNMHETSVGQx4=)
                          12: 3132332e39392e3139352e302f32342d3234203d3e203536303436.roa (hash: p34BhMVqzACE3HYHCwUwUpaatMkPt30PeQFJ7o50hLU=)
                          13: 3132332e39392e3139332e302f32342d3234203d3e203536303436.roa (hash: mcFdFJaMC4lzHa5DQkzQU384MSLRc9nd1xbM4A6s66U=)
                          14: 3230332e3133352e3130362e302f32342d3234203d3e203536303436.roa (hash: n9hcF/+Tr2NlYM1oUk+MToyoZXtLGqNqAzWKTnB77ZM=)
                          15: 3132332e39392e3139372e302f32342d3234203d3e203536303436.roa (hash: giB60RXOqPiHw+WpYG8hkzWkeY9zlK473PnH6rncvNU=)
                          16: 3230332e3133352e3130352e302f32342d3234203d3e203536303436.roa (hash: TBO7Oh9i58dQeUdge/BLgLnPJuK+BHqgb8xkTX7by9A=)
                          17: 3230332e3133352e39362e302f32312d3231203d3e203538343631.roa (hash: oqeccvPR3+IpAwygIF/oeBAJSb31FyNOolE97M8bnZM=)
                          18: 3132332e39392e3230342e302f32342d3234203d3e203536303436.roa (hash: qr06oZrQzwpbsNbGvmFz9wUQ4h6tMWVPF4zIxK71ZvY=)
                          19: 3132332e39392e3230352e302f32342d3234203d3e203536303436.roa (hash: A+JYZYaX7pfDnwPKiZwgf7VueKfY89J+t/cO6gXEw1A=)
                          20: 3130332e3132302e37322e302f32342d3234203d3e203538343631.roa (hash: LhgzEloXM1//B37y4gExKVofK8riLORDS4SNhrFc0gw=)
                          21: 3132332e39392e3139382e302f32342d3234203d3e203536303436.roa (hash: eLlkl6s2oq5YaE+V/mrCZDzlPmss69CoPgY65UKenV8=)
                          22: 3132342e3234382e36342e302f31382d3138203d3e203538343631.roa (hash: 6Kh3kADdLzEQKYiGqBHcfED9YAZb77roeahrAkbO94E=)
                          23: 3230332e3133352e3132302e302f32312d3231203d3e203538343631.roa (hash: RGywVuvY0/L3+wg4ACHqETGFImk1flLfvL0SNc861ew=)
                          24: 3132332e39392e3139322e302f31382d3138203d3e203538343631.roa (hash: eCLJQ6hVMH0Y1HWI+4+FPraClXX4hypXVvkpKYboMtE=)
                          25: 3230332e3133352e39362e302f32312d3231203d3e203536303436.roa (hash: ngkUFhfKIFc0bNmMAHJtN3/FFcR4TkGzTWuBHXq/6mo=)
                          26: 3130332e3132302e37332e302f32342d3234203d3e203538343631.roa (hash: 0VGwIZybtL6yUvgEvn9GF6XQoKjhTE1ct0cJpkcJzuo=)
                          27: 3130332e3132302e37342e302f32342d3234203d3e203538343631.roa (hash: Pr5NBsNQ4w+2UPeMbxevcNKzNN5WoXYQCMaS/P/zOtg=)
                          28: 3230332e3133352e3131302e302f32342d3234203d3e203536303436.roa (hash: fh9fS78iKTHn8OIFflYokzcy8pnDMzkevRXN0nwYXwc=)
                          29: 3132332e39392e3230302e302f32342d3234203d3e203536303436.roa (hash: ad/fG94fMIfMdL3XbD+RZEpVQd9HnnPMGe3MotwlNTU=)
                          30: 3230332e3133352e3131322e302f32312d3231203d3e203538343631.roa (hash: NUO1nMO021I1S5c1sJbtenOhmN0TKvnC956i0tIBsG4=)
                          31: 3230332e3133352e3130372e302f32342d3234203d3e203536303436.roa (hash: V/wj4NINZBkYbI6ksTEXDQ4vhVi7K1iFwrB6sRiPXCE=)
                          32: 3132332e39392e3139362e302f32342d3234203d3e203536303436.roa (hash: ++Z23h1aqKofV3olaP1zbMjegB3rHSL2+1CwVEKqE5E=)
                          33: 3130332e3132302e37352e302f32342d3234203d3e203538343631.roa (hash: DeVvSC0gkXY2pkQtHB+9HU0J0vod+7bYff/EV4+DAFU=)
                          34: 3132332e39392e3230312e302f32342d3234203d3e203536303436.roa (hash: nfBppX/QixBneQV6vk7opgxEhjYTUksoqsdc8OUHvCc=)
                          35: 3132332e39392e3230332e302f32342d3234203d3e203536303436.roa (hash: gfAT/QYxqrwRCsOjFxjfR5qS+KNxxqUXfE58ipVOHiA=)
                          36: 3132332e39392e3230362e302f32342d3234203d3e203536303436.roa (hash: rLlTB8afuqz0Jj8a1c3LdLyNwLfwlf2Z8mFieiDedNA=)
                          37: 3230332e3133352e3130342e302f32342d3234203d3e203536303436.roa (hash: GZliXQ1/MKT4kSXUQTbCC3oZd0ZgyhX/v4L01AAk4ZY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9b:a1:25:98:07:b8:47:dd:ab:a5:1d:c0:99:97:66:17:43:48:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=709E5125176627846677AF908E76CAE21FB95460
        Validity
            Not Before: Apr 17 16:14:43 2026 GMT
            Not After : Apr 18 17:53:43 2026 GMT
        Subject: CN=E95FC4EE53AF6258E0A4D1853718E3B29E3E2119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:e2:a8:1d:df:13:bb:dd:6d:50:d4:ff:2d:
                    dc:eb:1e:40:7d:8e:5c:dd:f6:2f:17:22:f9:23:f3:
                    5e:5e:b7:48:d2:58:39:f1:37:b9:39:11:27:fe:93:
                    06:1b:47:ca:70:a6:bb:65:05:5a:5b:ee:e8:05:cb:
                    ba:d8:cb:22:2e:bc:5f:3f:04:5d:e2:86:8a:01:6d:
                    92:27:a3:32:ee:db:b7:1b:4a:aa:45:e0:1c:3d:64:
                    cb:1d:b9:b0:ee:26:53:8d:da:18:91:5f:9b:22:16:
                    7a:46:fd:a5:07:9e:aa:c2:80:e5:8c:4a:6d:2f:25:
                    9c:76:2a:ee:7b:fe:3a:6a:1b:46:04:e5:10:4d:78:
                    ac:72:32:93:6c:5c:8f:dd:3f:2c:bf:e4:77:68:c5:
                    be:ab:b1:3f:76:94:40:86:1c:4b:77:62:35:8b:9f:
                    1b:aa:ea:a0:1d:ca:4d:55:76:87:e6:d3:df:d2:07:
                    4c:34:f5:b7:c4:cf:0d:ef:7e:17:96:c9:35:b9:03:
                    0f:4a:ac:4b:21:ab:fa:3c:8f:aa:df:de:a6:40:58:
                    2d:55:6c:bd:78:8a:00:fd:ce:97:73:76:84:be:ad:
                    e6:db:45:ba:30:ce:6d:1b:3b:ea:e8:dd:54:5f:17:
                    56:5d:a4:f1:88:b0:d4:80:2a:eb:08:9e:00:03:a0:
                    7f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5F:C4:EE:53:AF:62:58:E0:A4:D1:85:37:18:E3:B2:9E:3E:21:19
            X509v3 Authority Key Identifier:
                keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:05:a8:a3:cc:2d:da:65:d3:ac:80:e7:db:92:62:61:e4:e3:
         c9:2a:46:18:58:5d:6a:31:33:84:9d:01:6b:ea:09:c3:be:29:
         08:c4:d2:53:16:4f:78:76:bf:68:dd:0c:65:7f:61:b3:a5:75:
         c2:4c:98:fe:c8:77:8b:24:6d:57:d2:54:0b:d9:9d:a7:27:d3:
         e2:32:98:ec:ef:da:a9:e2:b3:c4:c7:d5:d1:b0:5c:da:51:d2:
         a9:02:3b:a9:ff:36:0c:2f:62:28:0f:45:c2:22:30:89:0a:22:
         8d:72:20:b9:84:46:ae:4b:9d:44:22:97:fc:c5:52:cf:bb:20:
         8f:5f:73:0a:66:ac:77:d3:b6:69:c5:e1:2c:af:ad:54:c1:8f:
         ac:17:f5:20:d5:14:eb:73:4b:29:c6:d9:42:a9:6b:64:48:8f:
         c9:15:ab:72:a7:cd:90:55:34:14:30:5c:b0:b5:ed:8e:69:05:
         91:d0:b2:aa:b8:ed:78:c3:e4:00:6b:4c:85:21:dd:b6:c2:c3:
         cf:56:3f:a2:e3:0d:7d:5b:ca:e4:64:db:35:c5:14:44:b2:ab:
         09:8e:4d:d5:66:6b:80:07:29:80:62:0a:b3:39:0a:9b:37:1c:
         eb:68:5c:13:af:cc:03:b4:9a:2a:b2:9d:92:6b:be:14:58:23:
         56:15:74:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:26:13 2026 by rpki-client