Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
File:                     F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft (raw, json)
Hash identifier:          6yh5RaDkZyWpc2Pm998QFVcsOMsczOhFCVz5zRe9ETg=
Subject key identifier:   F4:24:41:50:1D:43:01:1A:02:30:5B:9F:BF:27:C0:9B:F7:2F:4E:40
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Certificate issuer:       /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial:       2E47FDC92EDA84BEEDFBFBCF9E1A670D0D7DC37C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
Manifest number:          AA
Signing time:             Tue 28 Jul 2026 16:47:16 +0000
Manifest this update:     Tue 28 Jul 2026 16:42:16 +0000
Manifest next update:     Wed 29 Jul 2026 18:21:16 +0000
Files and hashes:         1: 323430343a333730303a3a2f33322d3634203d3e203536303436.roa (hash: pOPse9BV3gn6djAX7ecHkFVIUgN70stV1LcDDmPTYl8=)
                          2: 3131342e3131342e36342e302f31392d3234203d3e203231383539.roa (hash: /UPLNtJyBw1bgK76/hFyIRStLrGQRkZjpwXFOle6bEA=)
                          3: 3131342e3131342e3131322e302f32302d3234203d3e203231383539.roa (hash: HRMXKfc+EpXqjefGAqI2D0frnesKyXTLaWckWOelSRU=)
                          4: 3131342e3131342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7mISZsZ4HIxbAs3JkW8PttavON7sghcgz5ug1T/w3Jk=)
                          5: 3131342e3131342e3131322e302f32302d3234203d3e2034383337.roa (hash: FuAefi2k+MxwWEA1e6EeFXVUaieSOTb8VmLKkzGo0uU=)
                          6: 323430343a333730303a3a2f33322d3634203d3e203231383539.roa (hash: Sn+tT3R7FUIVQa1TjOf+NsbHTswr92j/YhOMUuFNzYg=)
                          7: 3131342e3131342e3131322e302f32302d3234203d3e20313337373032.roa (hash: PkCwWnw3PHTq+vYK1KUV313Oht0v/DXlfYx5SoIP84M=)
                          8: 3131342e3131342e36342e302f31392d3234203d3e20313337373032.roa (hash: pEKwX9Ft0ck+emjCFmodH06AapcEO9wPvQT5NdDyWVI=)
                          9: 3131342e3131342e302e302f31382d3234203d3e20313337373032.roa (hash: nLm7pgJsZIIGPL2vx/lrEFek1uPCaLKs4C53MBfr6vs=)
                          10: 3131342e3131342e3132382e302f31372d3234203d3e203536303436.roa (hash: FWWMCAx1W0KCQG5LZnRL2X3DIQBk/s6lX410aw4wRiM=)
                          11: 3131342e3131342e39362e302f32302d3234203d3e203231383539.roa (hash: Ah1hAptQgQx/TDu32iuzbvTZnvkTCVkVVLy9/9WPaaU=)
                          12: 3131342e3131342e302e302f31382d3234203d3e203231383539.roa (hash: pIt4b7xnDcf/2bsqo3Gx9aNls8ZbD3maIVn+Eh0MmrM=)
                          13: 3131342e3131342e36342e302f31392d3234203d3e203536303436.roa (hash: aF3GG9ClQmKfqqoms2b8ZBWCHJr//2BMFFxxL7swPtg=)
                          14: 3131342e3131342e39362e302f32302d3234203d3e2034383337.roa (hash: eZtOjO7I2MepkQbn85egh1Lnu1i+4JgpVaoIbcoDMcY=)
                          15: 3131342e3131342e302e302f31382d3234203d3e2034383337.roa (hash: zQmY5XoxEgFfEocFlMn7zYUhUWjw1W1jR7h66vVfXRg=)
                          16: 323430343a333730303a3a2f33322d3634203d3e2034383337.roa (hash: zuCmu28tlc/6Dxb5FY/JmG6mSgbcxgNnqnOntLlSdwo=)
                          17: 3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa (hash: SfeGMuqHWzoAv9iGacYRYzdpfa3BDEWC2CuQowRuJd4=)
                          18: 3131342e3131342e3132382e302f31372d3234203d3e203231383539.roa (hash: TvprcYp8fQ7VaasMW02+bn5WNN6zIFcA0VFszax2RFE=)
                          19: 323430343a333730303a3a2f33322d3634203d3e20313337373032.roa (hash: qs2qxnTmOlEyVS6Qau2xA7nlczXR/QB+A2OlVAzfu34=)
                          20: 3131342e3131342e302e302f31382d3234203d3e203536303436.roa (hash: wyOP2OkcK0RyKhtQQ5BY1J2XPn5SwDwaHoFghxO5Lgo=)
                          21: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl (hash: 70BYYUNWbEu5yGc74XGRXh25nzsuGbFt+qDAmw6ERBM=)
                          22: 3131342e3131342e36342e302f31392d3234203d3e2034383337.roa (hash: uZR3/1/4YF72OuVTrOxRu4XvI1rHNO9/mv3P+UxzZfs=)
                          23: 3131342e3131342e3131322e302f32302d3234203d3e203536303436.roa (hash: UyvVI1qV2GuzweCMNqtEtPn8qvUYEiO6ioVdsraU5O8=)
                          24: 3131342e3131342e39362e302f32302d3234203d3e20313337373032.roa (hash: muvu6CQMqTuNlfNzK3PNDYlQpfEfxnnrgjlIM12wZFs=)
                          25: 3131342e3131342e39362e302f32302d3234203d3e203536303436.roa (hash: ezCUIC9VcjeRK2+GTssm4PV96+Ina4oiGh1Ju4wnOtE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:47:fd:c9:2e:da:84:be:ed:fb:fb:cf:9e:1a:67:0d:0d:7d:c3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
        Validity
            Not Before: Jul 28 16:42:16 2026 GMT
            Not After : Jul 29 18:21:16 2026 GMT
        Subject: CN=F42441501D43011A02305B9FBF27C09BF72F4E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:41:51:f4:0f:b9:5d:ae:a7:5d:01:40:68:1a:
                    ca:bf:b0:4c:9e:6f:74:71:f3:4e:73:e9:0f:ef:e3:
                    86:f8:a1:7b:29:6c:b3:35:b1:b7:cf:2e:28:08:41:
                    5e:c4:38:6d:ff:e9:25:3f:51:6d:8c:6f:c6:fe:65:
                    13:35:df:8a:fe:fa:c6:d0:09:9d:5f:65:f9:93:1f:
                    bd:9a:36:ac:d0:0f:74:ec:06:6d:0e:03:61:67:47:
                    69:a0:70:75:57:76:d4:ba:85:f2:b5:c5:79:3f:9c:
                    24:db:71:ee:2f:71:cc:47:9a:da:59:2d:66:83:ef:
                    f9:d1:f9:d2:79:4e:11:e5:0b:35:c7:30:95:77:ff:
                    8f:11:6d:74:e6:a6:d7:52:14:3b:06:da:02:73:89:
                    cb:4e:49:93:21:c2:48:2d:a4:b0:f3:94:d6:1a:d8:
                    81:96:4a:17:e8:57:1e:65:cd:39:dc:1f:30:7f:1e:
                    f9:73:b0:95:30:05:c5:36:ce:65:9a:57:f4:a6:74:
                    3a:c5:9c:80:58:14:2a:95:df:45:da:b1:51:20:58:
                    d8:74:d6:a5:5f:7b:54:3b:9b:1f:3b:d4:a7:5c:a0:
                    29:27:84:e9:74:fb:ba:0c:86:4f:b1:16:38:f1:16:
                    fe:aa:72:36:7c:15:8a:2d:3f:76:dd:36:9f:67:bf:
                    ff:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:24:41:50:1D:43:01:1A:02:30:5B:9F:BF:27:C0:9B:F7:2F:4E:40
            X509v3 Authority Key Identifier:
                keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:2c:f4:3d:38:7c:cf:3d:10:de:b1:91:25:63:b3:c6:48:7b:
         00:03:41:24:55:3d:05:cc:68:53:69:c6:e8:0d:a6:21:8d:f1:
         77:c8:1d:e2:4c:1c:c6:0b:3f:2a:4f:14:62:df:73:7e:55:f0:
         27:f2:f0:33:a4:d2:e8:50:43:0f:6a:5d:58:7c:43:2e:c3:96:
         95:01:a9:31:eb:70:8c:60:6a:c7:f1:f9:4b:5a:c0:06:77:74:
         cc:7c:e6:4e:d7:8c:65:38:6f:13:59:a1:d0:0d:49:33:a8:01:
         e8:d9:5e:46:42:c4:9e:74:1a:e0:dd:7d:40:43:ef:fe:c1:05:
         b0:ee:9d:45:5e:7e:9b:b5:6b:c1:79:46:a6:b0:2c:cf:31:cd:
         33:d3:95:98:02:97:31:f8:7d:52:bb:ee:64:c5:08:fa:41:53:
         85:38:07:4f:c7:77:cb:70:43:2f:fc:f9:77:19:bd:12:01:41:
         2f:39:4c:7a:b8:5b:cf:af:bb:09:2f:d3:91:12:ed:a0:6c:4e:
         b6:7f:4b:02:03:9e:69:0e:db:88:3b:3e:e3:5f:fe:de:13:2d:
         20:9b:b6:21:14:48:1e:f3:fa:b4:e5:c9:95:43:66:4a:97:5c:
         06:44:4f:77:98:c6:f5:11:d6:9e:20:ee:28:5f:0e:b8:dd:54:
         9f:52:a4:2d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIULkf9yS7ahL7t+/vPnhpnDQ19w3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUy
MjZFRjhBODAeFw0yNjA3MjgxNjQyMTZaFw0yNjA3MjkxODIxMTZaMDMxMTAvBgNV
BAMTKEY0MjQ0MTUwMUQ0MzAxMUEwMjMwNUI5RkJGMjdDMDlCRjcyRjRFNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNQVH0D7ldrqddAUBoGsq/sEye
b3Rx805z6Q/v44b4oXspbLM1sbfPLigIQV7EOG3/6SU/UW2Mb8b+ZRM134r++sbQ
CZ1fZfmTH72aNqzQD3TsBm0OA2FnR2mgcHVXdtS6hfK1xXk/nCTbce4vccxHmtpZ
LWaD7/nR+dJ5ThHlCzXHMJV3/48RbXTmptdSFDsG2gJzictOSZMhwkgtpLDzlNYa
2IGWShfoVx5lzTncHzB/HvlzsJUwBcU2zmWaV/SmdDrFnIBYFCqV30XasVEgWNh0
1qVfe1Q7mx871KdcoCknhOl0+7oMhk+xFjjxFv6qcjZ8FYotP3bdNp9nv//ZAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU9CRBUB1DARoCMFufvyfAm/cvTkAwHwYDVR0j
BBgwFoAU+LT8Kf7yCt+vskptr19EFSJu+KgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjU4Njc2NDAxNDg0NTk1NS8wL0Y4QjRGQzI5RkVGMjBBREZBRkIyNEE2REFGNUY0
NDE1MjI2RUY4QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUyMjZFRjhBOC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTY1ODY3NjQwMTQ4NDU5NTUvMC9GOEI0RkMyOUZFRjIw
QURGQUZCMjRBNkRBRjVGNDQxNTIyNkVGOEE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyyz0PTh8zz0Q
3rGRJWOzxkh7AANBJFU9BcxoU2nG6A2mIY3xd8gd4kwcxgs/Kk8UYt9zflXwJ/Lw
M6TS6FBDD2pdWHxDLsOWlQGpMetwjGBqx/H5S1rABnd0zHzmTteMZThvE1mh0A1J
M6gB6NleRkLEnnQa4N19QEPv/sEFsO6dRV5+m7VrwXlGprAszzHNM9OVmAKXMfh9
UrvuZMUI+kFThTgHT8d3y3BDL/z5dxm9EgFBLzlMerhbz6+7CS/TkRLtoGxOtn9L
AgOeaQ7biDs+41/+3hMtIJu2IRRIHvP6tOXJlUNmSpdcBkRPd5jG9RHWniDuKF8O
uN1Un1KkLQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:35:09 2026 by rpki-client