Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
File:                     D569CE49ED940955318F718AEACD6D410BFF66B3.mft (raw, json)
Hash identifier:          yUnfZCSuXwlvKvyq9FTxxuWd6pu5e4w3xdv5uDHIJlU=
Subject key identifier:   3B:AB:75:3B:AA:66:6C:A8:E4:03:70:0E:E0:1D:B5:26:21:3C:33:E0
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Certificate issuer:       /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial:       1CE632B641C12221FB9CE10C65AEA8B73446A971
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
Manifest number:          DF
Signing time:             Mon 12 Oct 2026 10:51:52 +0000
Manifest this update:     Mon 12 Oct 2026 10:46:52 +0000
Manifest next update:     Thu 15 Oct 2026 13:50:52 +0000
Files and hashes:         1: 34332e3234312e3234322e302f32332d3233203d3e2034383038.roa (hash: sVydZ+GvGDFoPNuzhCTpLN5HOyW0wDG576NjGm+vN2Y=)
                          2: 34332e3232382e33382e302f32332d3233203d3e2034383038.roa (hash: mpbAsvFDLG/ZIcdpHFPiePOhuggrNP073Yxd6/YcbSE=)
                          3: 34332e3234332e3133362e302f32332d3233203d3e2034383038.roa (hash: MeegwRZIHce0h2CLLPnHVq97GiQa/EeEGjxY12mLK40=)
                          4: 35392e3135332e36342e302f32322d3232203d3e2030.roa (hash: gYggE55VWRSwMIbG1Cq3gSFhE0CBxFxT1X9h0NKFL8I=)
                          5: 34332e3234312e3234302e302f32332d3233203d3e2034383038.roa (hash: Lydf+HeHIzjAwoZErdFDn5KtbiIWOENNEr7cVYyLFk0=)
                          6: 3130332e34332e3138342e302f32332d3233203d3e2034383038.roa (hash: 58sAFUQcffD9Ee3VUeCuDzcGIFTa8oRrzCJsEFONdi4=)
                          7: 3130332e34372e35302e302f32332d3233203d3e2034383038.roa (hash: 5oyY01hEuqvle1ETlN/iZfm3VvugkwkDCcQO5FZtFZk=)
                          8: D569CE49ED940955318F718AEACD6D410BFF66B3.crl (hash: MP/LLMpMaiG7nTk3zgmI8IV7xZ+2sbG/k7b3p3pvWgs=)
                          9: 3130332e34372e34382e302f32332d3233203d3e2034383038.roa (hash: EGFeWmWIyr+USyiqXj6ibb0EHfeKnqu7Opu/tId22Yk=)
                          10: 34332e3232372e3235322e302f32332d3233203d3e2034383038.roa (hash: kqBTKXZuUTFu7ozAEqtreqOTWSE2PVCXlgb+48hQccY=)
                          11: 3130332e34372e34382e302f32322d3232203d3e2034383038.roa (hash: tQrGvA+ovIhb2o+IGqUAyjVnC1YGmGLo20op2NAtTds=)
                          12: 3130332e3139382e36322e302f32332d3233203d3e2034383038.roa (hash: tozC0Xn5DxnoxIpvuHYtie3w0rP28y+UfkhwTkZQI30=)
                          13: 3130332e3139382e36302e302f32332d3233203d3e2034383038.roa (hash: MBq3OH/vne3tS8JtiUeLcCuvfUCea9w4ciYPqhPXhsQ=)
                          14: 3130332e33382e3232362e302f32332d3233203d3e2034383038.roa (hash: bXClGDPYbjWgMEq8SA5ZPYKAYZZCbMQZiJ3UF69ee60=)
                          15: 3130332e33372e3137322e302f32322d3232203d3e2034383437.roa (hash: ZLSAj91TCNLWpmJqAuFupd75mGM7DIEK9ACn9QOoMRU=)
                          16: 34332e3234332e3133382e302f32332d3233203d3e2034383038.roa (hash: UFc1MA45ujfU5YItyaYkZq1sEQBdwiNu5jfwq/iSPDU=)
                          17: 34332e3232372e3235342e302f32332d3233203d3e2034383038.roa (hash: cdPx20syskwekFlfeG9W3LsffSVTsSoPcPp0Zkm0kCM=)
                          18: 3130332e33382e3232342e302f32332d3233203d3e2034383038.roa (hash: 7dPSFCDj0PIzP6El/y+lacMv5iRRwMATYARYTzcJCTg=)
                          19: 3130332e39332e3230342e302f32322d3232203d3e2034383437.roa (hash: c3GeuIs4VkQfLWWRwfzcWcUnDjF1Zl2LhsyNxr5DM1U=)
                          20: 3130332e34332e3138362e302f32332d3233203d3e2034383038.roa (hash: +/hzGXAPdjUFZN2ItUhpXUD6o25OXmDnYup+aveZY+s=)
                          21: 34332e3232382e33362e302f32332d3233203d3e2034383038.roa (hash: Xa5AXQxRxhiNUn0Q383X3+I1dkYG4/UzCR3ox8vQoXk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 01:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e6:32:b6:41:c1:22:21:fb:9c:e1:0c:65:ae:a8:b7:34:46:a9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
        Validity
            Not Before: Oct 12 10:46:52 2026 GMT
            Not After : Oct 15 13:50:52 2026 GMT
        Subject: CN=3BAB753BAA666CA8E403700EE01DB526213C33E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:15:a5:d5:6a:da:0a:53:bf:dd:0a:83:57:1c:
                    47:a1:7f:a2:8d:f6:61:34:92:af:d8:47:56:16:7c:
                    0c:c4:57:cd:73:a2:9e:e4:cd:02:46:10:5d:1d:39:
                    85:bd:eb:1d:c0:8b:d1:a0:9d:6b:74:53:9f:84:a4:
                    d1:42:5a:d1:58:05:89:f8:4b:80:dc:ed:e2:51:f7:
                    61:e0:5e:f0:20:ed:16:bd:14:80:33:90:84:7c:2e:
                    31:8f:4c:6b:d5:3c:83:93:b3:d4:b3:63:c7:56:35:
                    fb:b3:c3:48:88:37:81:17:bb:03:3a:c1:80:a5:9c:
                    1a:14:32:70:5c:a1:be:ed:41:f6:39:2f:c9:4c:c2:
                    f8:00:bd:7a:99:49:db:f8:6e:a3:78:2b:47:16:10:
                    60:71:e7:ae:05:85:a0:77:17:69:c6:95:d7:e1:52:
                    51:bf:3c:d6:87:04:5b:30:13:42:9a:04:e7:32:d9:
                    4c:5d:2a:d1:6a:75:04:9c:41:56:e2:b3:69:44:0d:
                    21:fa:4d:4b:5c:a6:9d:6e:a4:5e:41:0c:17:8e:df:
                    9d:69:e2:70:35:dc:bb:5b:cd:02:6c:84:86:d3:ab:
                    49:fb:1a:b4:91:21:d2:c0:84:b6:dc:80:b3:4b:4f:
                    a9:bc:6f:a6:23:f6:9d:b8:50:ec:67:31:7e:78:bb:
                    1d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AB:75:3B:AA:66:6C:A8:E4:03:70:0E:E0:1D:B5:26:21:3C:33:E0
            X509v3 Authority Key Identifier:
                keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:50:7b:5f:7b:21:b3:f6:22:06:83:17:88:92:93:5a:b0:52:
         52:79:1f:fb:fc:91:c6:0a:f9:8d:63:20:0a:ca:20:12:60:2d:
         02:be:45:84:42:b6:37:93:40:71:c4:65:5f:23:f7:d4:5c:a1:
         ac:7a:06:78:a1:76:b0:16:b0:fb:5b:73:0c:6f:9e:f4:bf:d9:
         af:94:5c:e4:aa:ba:52:56:cf:bc:c5:84:c6:91:ea:14:e6:de:
         a1:f5:cc:22:0a:4b:30:74:0b:b2:7c:f4:99:23:cc:d2:ba:cf:
         85:78:90:eb:b9:7d:86:13:79:09:6f:d9:a8:75:cd:62:51:52:
         a6:8a:dd:2f:90:b9:17:50:1a:62:82:28:18:96:23:f0:61:10:
         c9:e8:59:68:41:4e:37:95:6e:59:78:c7:f6:be:ae:d4:b7:ee:
         29:d9:00:0b:1c:f5:0d:5e:c7:f2:40:77:e0:84:e7:4c:95:b6:
         6c:67:ce:80:d1:7d:43:06:c6:18:af:a5:a6:7f:11:1f:0c:5f:
         fa:6e:ee:8b:86:df:da:d8:20:cd:3a:6f:34:f1:3b:9e:ea:5e:
         ab:c1:b1:7b:c2:d5:ab:6d:e6:ed:5a:1f:ef:28:8b:26:cf:20:
         24:ea:7b:de:47:8d:1d:c5:69:27:27:3b:62:87:28:3e:ef:b0:
         27:dc:d3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:21:55 2026 by rpki-client