Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
File:                     D569CE49ED940955318F718AEACD6D410BFF66B3.mft (raw, json)
Hash identifier:          4OahQkmjXzUJobywwxnXM6uOQmtSR1fnxDetCJ8bESA=
Subject key identifier:   F2:17:85:78:B3:FC:61:F3:7F:53:44:DF:40:18:8D:8E:FC:8B:8A:B3
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Certificate issuer:       /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial:       745F743F114F1B30C55B1E888F62E8002CE46FD0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
Manifest number:          A2
Signing time:             Tue 28 Jul 2026 17:27:21 +0000
Manifest this update:     Tue 28 Jul 2026 17:22:21 +0000
Manifest next update:     Wed 29 Jul 2026 17:53:21 +0000
Files and hashes:         1: 34332e3234332e3133382e302f32332d3233203d3e2034383038.roa (hash: UFc1MA45ujfU5YItyaYkZq1sEQBdwiNu5jfwq/iSPDU=)
                          2: 3130332e33382e3232342e302f32332d3233203d3e2034383038.roa (hash: 7dPSFCDj0PIzP6El/y+lacMv5iRRwMATYARYTzcJCTg=)
                          3: 3130332e39332e3230342e302f32322d3232203d3e2034383437.roa (hash: c3GeuIs4VkQfLWWRwfzcWcUnDjF1Zl2LhsyNxr5DM1U=)
                          4: 3130332e33372e3137322e302f32322d3232203d3e2034383437.roa (hash: ZLSAj91TCNLWpmJqAuFupd75mGM7DIEK9ACn9QOoMRU=)
                          5: 3130332e34332e3138362e302f32332d3233203d3e2034383038.roa (hash: +/hzGXAPdjUFZN2ItUhpXUD6o25OXmDnYup+aveZY+s=)
                          6: 3130332e34332e3138342e302f32332d3233203d3e2034383038.roa (hash: 58sAFUQcffD9Ee3VUeCuDzcGIFTa8oRrzCJsEFONdi4=)
                          7: 3130332e34372e34382e302f32332d3233203d3e2034383038.roa (hash: EGFeWmWIyr+USyiqXj6ibb0EHfeKnqu7Opu/tId22Yk=)
                          8: 35392e3135332e36342e302f32322d3232203d3e2030.roa (hash: gYggE55VWRSwMIbG1Cq3gSFhE0CBxFxT1X9h0NKFL8I=)
                          9: 34332e3234312e3234302e302f32332d3233203d3e2034383038.roa (hash: Lydf+HeHIzjAwoZErdFDn5KtbiIWOENNEr7cVYyLFk0=)
                          10: 3130332e3139382e36302e302f32332d3233203d3e2034383038.roa (hash: MBq3OH/vne3tS8JtiUeLcCuvfUCea9w4ciYPqhPXhsQ=)
                          11: 34332e3234312e3234322e302f32332d3233203d3e2034383038.roa (hash: sVydZ+GvGDFoPNuzhCTpLN5HOyW0wDG576NjGm+vN2Y=)
                          12: D569CE49ED940955318F718AEACD6D410BFF66B3.crl (hash: hWHhkByeR4R62KsILtq2liYScOZdOTfHatPL0UBAOEY=)
                          13: 34332e3232372e3235322e302f32332d3233203d3e2034383038.roa (hash: kqBTKXZuUTFu7ozAEqtreqOTWSE2PVCXlgb+48hQccY=)
                          14: 34332e3232372e3235342e302f32332d3233203d3e2034383038.roa (hash: cdPx20syskwekFlfeG9W3LsffSVTsSoPcPp0Zkm0kCM=)
                          15: 3130332e3139382e36322e302f32332d3233203d3e2034383038.roa (hash: tozC0Xn5DxnoxIpvuHYtie3w0rP28y+UfkhwTkZQI30=)
                          16: 3130332e34372e35302e302f32332d3233203d3e2034383038.roa (hash: 5oyY01hEuqvle1ETlN/iZfm3VvugkwkDCcQO5FZtFZk=)
                          17: 3130332e33382e3232362e302f32332d3233203d3e2034383038.roa (hash: bXClGDPYbjWgMEq8SA5ZPYKAYZZCbMQZiJ3UF69ee60=)
                          18: 34332e3232382e33362e302f32332d3233203d3e2034383038.roa (hash: Xa5AXQxRxhiNUn0Q383X3+I1dkYG4/UzCR3ox8vQoXk=)
                          19: 34332e3232382e33382e302f32332d3233203d3e2034383038.roa (hash: mpbAsvFDLG/ZIcdpHFPiePOhuggrNP073Yxd6/YcbSE=)
                          20: 3130332e34372e34382e302f32322d3232203d3e2034383038.roa (hash: tQrGvA+ovIhb2o+IGqUAyjVnC1YGmGLo20op2NAtTds=)
                          21: 34332e3234332e3133362e302f32332d3233203d3e2034383038.roa (hash: MeegwRZIHce0h2CLLPnHVq97GiQa/EeEGjxY12mLK40=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5f:74:3f:11:4f:1b:30:c5:5b:1e:88:8f:62:e8:00:2c:e4:6f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
        Validity
            Not Before: Jul 28 17:22:21 2026 GMT
            Not After : Jul 29 17:53:21 2026 GMT
        Subject: CN=F2178578B3FC61F37F5344DF40188D8EFC8B8AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d1:4c:30:16:8b:34:2d:e0:97:02:1b:31:c7:
                    61:f6:5e:63:b4:a1:64:a3:de:ef:bf:ec:be:d4:b3:
                    a5:75:98:a9:cd:9f:79:53:02:16:01:54:26:bb:5a:
                    7c:08:1e:7a:32:05:2d:7e:e6:e0:b3:66:fc:cc:5d:
                    dc:0c:88:cf:46:4e:c0:d3:4e:15:71:74:11:fc:fe:
                    26:ca:5b:8a:88:dc:b4:a0:92:2e:2f:02:57:07:30:
                    4a:00:a8:79:5d:79:7a:6a:60:77:a5:34:4a:f3:d5:
                    51:78:04:2e:13:f5:e3:aa:be:bf:4a:28:fe:ad:a0:
                    65:0a:c4:92:b6:5c:30:c1:81:4b:5a:6a:a0:8b:dc:
                    36:1b:43:e7:81:e0:52:f0:29:d8:1a:51:91:2a:f6:
                    ed:70:ac:ac:ca:f9:04:66:b8:18:bc:9b:0a:d5:00:
                    99:c8:f1:b5:2e:a2:b1:54:f2:5c:ea:c7:03:6f:5f:
                    ca:0d:ec:7e:19:dc:64:5e:0a:68:79:d5:54:6a:b9:
                    16:9f:3e:a8:dd:d0:8b:8f:fb:cc:d4:99:a4:12:e2:
                    83:90:1a:ee:e9:9c:ba:df:b7:0b:42:fc:d5:16:55:
                    11:e0:89:6e:30:ee:24:0f:3b:bb:45:92:5f:ef:4e:
                    2f:d9:66:dd:bc:a6:0c:a1:e4:80:bd:76:18:2f:a1:
                    f9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:17:85:78:B3:FC:61:F3:7F:53:44:DF:40:18:8D:8E:FC:8B:8A:B3
            X509v3 Authority Key Identifier:
                keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:8c:fb:45:eb:6c:c3:fb:bb:16:9e:cd:d7:b4:51:e5:89:3f:
         b7:e6:79:2d:72:46:5d:15:67:32:c7:2f:16:4e:67:d4:94:19:
         0e:13:c4:dc:fe:c0:9f:e5:2a:a5:c7:2c:57:98:d6:22:a4:1a:
         39:6a:44:48:89:be:16:2f:1e:a2:99:99:f3:31:60:34:22:8c:
         b9:98:11:fc:e9:e0:05:46:80:04:36:1d:cd:a7:46:5a:96:59:
         53:65:61:b2:e3:c3:de:be:e9:cd:98:71:cc:53:ab:dc:de:cc:
         d6:a8:f8:c7:a2:e2:e4:e5:c7:10:37:ae:a9:85:a1:12:c6:70:
         99:f8:39:20:fe:90:69:6a:2c:17:48:1e:47:a3:c6:40:a8:5d:
         99:46:df:9b:27:bc:e9:cb:04:b1:46:72:9a:8f:59:53:4d:d7:
         12:d3:56:af:70:00:c9:3d:ab:24:b9:ff:60:3c:24:3a:5f:17:
         6b:17:62:d2:f0:70:cb:1e:4f:4f:55:17:bc:e6:f2:16:9a:30:
         85:e7:1e:92:a5:0f:7f:b9:90:65:35:56:dc:3f:9b:c1:58:9a:
         b6:59:da:47:c1:a0:bc:fd:ef:c7:ba:59:79:c6:69:20:77:44:
         32:4e:4e:96:a0:e8:e2:df:f4:1d:8d:8e:89:b2:31:dc:ac:c3:
         ab:e7:8d:b0
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUdF90PxFPGzDFWx6Ij2LoACzkb9AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEw
QkZGNjZCMzAeFw0yNjA3MjgxNzIyMjFaFw0yNjA3MjkxNzUzMjFaMDMxMTAvBgNV
BAMTKEYyMTc4NTc4QjNGQzYxRjM3RjUzNDRERjQwMTg4RDhFRkM4QjhBQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN0UwwFos0LeCXAhsxx2H2XmO0
oWSj3u+/7L7Us6V1mKnNn3lTAhYBVCa7WnwIHnoyBS1+5uCzZvzMXdwMiM9GTsDT
ThVxdBH8/ibKW4qI3LSgki4vAlcHMEoAqHldeXpqYHelNErz1VF4BC4T9eOqvr9K
KP6toGUKxJK2XDDBgUtaaqCL3DYbQ+eB4FLwKdgaUZEq9u1wrKzK+QRmuBi8mwrV
AJnI8bUuorFU8lzqxwNvX8oN7H4Z3GReCmh51VRquRafPqjd0IuP+8zUmaQS4oOQ
Gu7pnLrftwtC/NUWVRHgiW4w7iQPO7tFkl/vTi/ZZt28pgyh5IC9dhgvoflvAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU8heFeLP8YfN/U0TfQBiNjvyLirMwHwYDVR0j
BBgwFoAU1WnOSe2UCVUxj3GK6s1tQQv/ZrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMzMDg1OTA5MjUwODY3My8wL0Q1NjlDRTQ5RUQ5NDA5NTUzMThGNzE4QUVBQ0Q2
RDQxMEJGRjY2QjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEwQkZGNjZCMy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTI1MDg2NzMvMC9ENTY5Q0U0OUVEOTQw
OTU1MzE4RjcxOEFFQUNENkQ0MTBCRkY2NkIzLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmoz7Retsw/u7
Fp7N17RR5Yk/t+Z5LXJGXRVnMscvFk5n1JQZDhPE3P7An+UqpccsV5jWIqQaOWpE
SIm+Fi8eopmZ8zFgNCKMuZgR/OngBUaABDYdzadGWpZZU2VhsuPD3r7pzZhxzFOr
3N7M1qj4x6Li5OXHEDeuqYWhEsZwmfg5IP6QaWosF0geR6PGQKhdmUbfmye86csE
sUZymo9ZU03XEtNWr3AAyT2rJLn/YDwkOl8Xaxdi0vBwyx5PT1UXvObyFpowhece
kqUPf7mQZTVW3D+bwViatlnaR8GgvP3vx7pZecZpIHdEMk5OlqDo4t/0HY2OibIx
3KzDq+eNsA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:05:05 2026 by rpki-client