Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
File:                     4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft (raw, json)
Hash identifier:          blX0/hwzO2R9BJfBLsQYVQtVGUAcqU/+iadH0IiRzt0=
Subject key identifier:   3D:02:39:13:5F:52:88:C5:76:E6:3B:D4:6C:79:8E:F2:99:76:4E:F5
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Certificate issuer:       /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial:       1A529BAF3172829F6501FF75BDEFF599844816AA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
Manifest number:          9B
Signing time:             Wed 29 Jul 2026 04:23:24 +0000
Manifest this update:     Wed 29 Jul 2026 04:18:24 +0000
Manifest next update:     Thu 30 Jul 2026 05:06:24 +0000
Files and hashes:         1: 3130332e38392e3131352e302f32342d3234203d3e203633353939.roa (hash: B4R2Xn+gXDVx1b+C8xHqcnF6Dc+KqwoBc8mdRqmz84g=)
                          2: 34352e3235312e35322e302f32342d3234203d3e203633353939.roa (hash: J5ttVDSRteWIi4hwKsChc1z51WL7/hz22Kunm15KqPk=)
                          3: 3130332e3231352e34362e302f32342d3234203d3e203633353939.roa (hash: lCKeTzCngwtaI2otW+3pf3dT4E8FfBmqb7nBEm4iEO0=)
                          4: 3130332e38342e31392e302f32342d3234203d3e203633353939.roa (hash: G7UdhBTuk//TBOjHKhN/OeEw0aA18CQ1k+SEI8xy8bc=)
                          5: 3130332e38342e31362e302f32342d3234203d3e203633353939.roa (hash: b4swGTnagQiiHyws9QCt7f/EiuwxqkWDoYa89SJ+Pro=)
                          6: 3130332e3232322e3137372e302f32342d3234203d3e203538343636.roa (hash: sH7OowcFHJCcPwvZJv25D4lUlZf+T7s/iYMS2TGzZjc=)
                          7: 3130332e3232322e3137382e302f32342d3234203d3e203538343636.roa (hash: F41StT+x2rlWXOQVNKcm+wNnMgPZjhcz7G5e31rQ98c=)
                          8: 3130332e3232322e3137362e302f32342d3234203d3e203538343636.roa (hash: XB81JUcmyZM4a4Aj4m+xpC4HUoBeeoNN9kOjOp5xSlU=)
                          9: 3130332e3231352e34372e302f32342d3234203d3e203633353939.roa (hash: u/vlygKRp4uqaQ1eQKS9c4Kf1g9VgGjmp1fspJX/cVs=)
                          10: 3130332e3232322e3137362e302f32322d3232203d3e203538343636.roa (hash: UpPEAYdcHSdgSDgWM1Xgq+oFeYVQGymiRyGhcR0Lp6Y=)
                          11: 3130332e3231352e34352e302f32342d3234203d3e203538343636.roa (hash: XkU0YtFgShSzOo20rJdwEEfkrJVTk7yy7dqNfbR4/fo=)
                          12: 3130332e38392e3131342e302f32342d3234203d3e203633353939.roa (hash: HWzCIK0J3kj61jM4RJKLtXp5PntrD5IoFA2l+KWrNdg=)
                          13: 3130332e3232322e3138302e302f32322d3232203d3e203538343636.roa (hash: KJ8ndn4BgQmtgW+vFewhPUiCUx0OF8yJqc/FF4/GVvA=)
                          14: 3130332e3231352e34352e302f32342d3234203d3e203633353939.roa (hash: 8mVkqtHAsXXoQdq7QTFwXAv0F2qADSnLhXnxk2xo7+M=)
                          15: 4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl (hash: A0Qe8vwvY+jONhNaekX8YGa8KZbWAuU5afbU97fJq/8=)
                          16: 3130332e38342e31372e302f32342d3234203d3e203633353939.roa (hash: 08vQYNuWTP9OAw5cshG0cE68oQpzGq6+3rF8HhD3PJY=)
                          17: 34352e3235312e35332e302f32342d3234203d3e203633353939.roa (hash: gpdB2M4QzC5+FVSJ96SLxf+q0nMlU6vsNa1+V19UGpU=)
                          18: 34352e3235312e35342e302f32342d3234203d3e203633353939.roa (hash: cTOAofuVrZB6PvajehxRqJi1HOjgKdwuykVDBV6ic3Y=)
                          19: 3130332e3231352e34342e302f32342d3234203d3e203538343636.roa (hash: aTIutstV7nnOrlPVa9rL0oVDFBjtwfzvlvl2eoyD1/8=)
                          20: 3130332e38392e3131332e302f32342d3234203d3e203633353939.roa (hash: hQKB7wKD7sK/SrxmBN5jMLs19OSDy2v58Jdv0HOGrB4=)
                          21: 3130332e3232322e3138322e302f32342d3234203d3e203538343636.roa (hash: HWtDjdcXqq3zhzr+mpXlFH5pOBwY2xagFmHw0HxdMcA=)
                          22: 3130332e3232322e3137392e302f32342d3234203d3e203538343636.roa (hash: G/oPdJHLin19eoCFgMmdJT+rkoQwoDBkC0Q90Pre/iY=)
                          23: 3130332e3232322e3138312e302f32342d3234203d3e203538343636.roa (hash: uKysvU2wPaXdqx5np2DX47AZPrvFjLAnDA6TLyNZjPM=)
                          24: 34352e3235312e35352e302f32342d3234203d3e203633353939.roa (hash: Jeg+X5mimydK7xcUiFtmKKbOa2PTH3bkxmXeoztyTKI=)
                          25: 3130332e3232322e3138332e302f32342d3234203d3e203538343636.roa (hash: trWDmxj/bNtvLXn0EQ5qDElMfvX977EfQlgVuGKjWOk=)
                          26: 3130332e3232322e3138302e302f32342d3234203d3e203538343636.roa (hash: 0JGuJhToHH0L5OQLMRNBtLB9WwPftj52WrM4HHFq/M8=)
                          27: 3130332e38342e31382e302f32342d3234203d3e203633353939.roa (hash: 3DmQOstdoBvJ2hoZgDbRJT6QPLY4tMgVKWUBkWPRlxo=)
                          28: 3130332e38392e3131322e302f32342d3234203d3e203633353939.roa (hash: qeNecZYzzDOdHNQ7OI1FGeTPwXb6OHSlmtGAyhOcfnc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:52:9b:af:31:72:82:9f:65:01:ff:75:bd:ef:f5:99:84:48:16:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
        Validity
            Not Before: Jul 29 04:18:24 2026 GMT
            Not After : Jul 30 05:06:24 2026 GMT
        Subject: CN=3D0239135F5288C576E63BD46C798EF299764EF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:65:a9:b8:bb:e2:d1:96:4a:ea:1f:35:94:4a:
                    4d:cf:2a:fc:1e:4b:db:64:7a:8d:da:06:ca:94:9b:
                    5d:5c:c4:ad:89:e9:6c:ee:11:e0:e6:7f:70:05:da:
                    68:c8:0a:72:bb:02:15:ad:01:cc:61:e9:5f:b3:d8:
                    ec:6e:ba:a6:ae:48:09:22:b3:ad:b1:a5:48:08:96:
                    11:9c:9a:72:93:62:7c:a2:6d:f6:7f:e8:64:d5:c6:
                    44:57:9e:50:3d:09:a3:00:f2:ef:7c:1a:9a:d7:c4:
                    d9:b5:60:1f:6c:0a:8b:7b:8f:53:6f:39:76:6f:a2:
                    6d:9e:a8:d4:f9:d1:ef:7f:59:18:fa:4b:9a:22:2b:
                    71:c0:2a:58:3d:6b:3c:af:05:42:03:6e:80:07:76:
                    30:52:cd:23:5f:81:4e:70:2f:4e:c6:7b:b9:7d:ab:
                    54:d3:1a:b6:53:e7:e1:82:c5:d6:05:01:82:8f:d2:
                    18:bd:a2:ff:60:33:ea:9e:e9:b1:0c:82:40:ca:1b:
                    8b:fc:c2:36:34:90:30:b9:b1:99:cc:ee:20:b6:fe:
                    09:38:a7:75:ab:7e:e0:00:a4:4d:f3:c3:7f:64:e5:
                    ec:f4:fa:0e:d3:6f:c2:9e:b1:20:a0:5c:fd:65:8c:
                    a3:62:31:db:15:91:2d:1b:7a:17:86:95:3c:f6:3a:
                    40:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:02:39:13:5F:52:88:C5:76:E6:3B:D4:6C:79:8E:F2:99:76:4E:F5
            X509v3 Authority Key Identifier:
                keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c3:be:72:a3:1f:f6:99:41:e6:bb:2b:17:23:6a:35:eb:df:
         88:46:1d:98:bb:fb:da:43:b0:b6:19:d5:7d:36:e2:00:0e:ad:
         90:0c:d3:df:27:51:7d:a3:de:7d:25:96:e2:3d:10:c6:48:5b:
         c6:41:47:a2:46:74:b1:6d:2a:e2:ba:80:cb:03:ab:22:2d:00:
         6b:29:21:e8:1f:e1:cc:43:14:38:9b:b7:60:3f:94:7a:01:66:
         65:4f:2d:f6:48:ac:a6:0e:96:d2:43:43:3a:9b:2f:29:65:37:
         fc:12:89:f5:4f:1d:c0:07:de:8c:36:61:b3:38:fb:1b:31:ee:
         6a:d7:71:f4:e5:3c:2a:40:a7:f2:4f:74:a4:ad:ef:5b:fe:fe:
         ae:3f:b0:fb:ff:69:53:41:d5:fe:a0:2c:10:9d:ef:cb:bf:1c:
         6f:1d:83:49:ca:22:9f:89:b3:f9:be:e5:e6:8b:f8:10:75:f5:
         89:f1:61:86:50:0a:50:06:7a:0d:47:32:a4:9c:03:86:1f:1e:
         c3:54:36:51:db:4d:0b:b4:b9:39:41:c5:9d:21:96:da:1a:b7:
         10:1e:91:8a:40:0e:6e:36:0b:28:b3:44:eb:60:ad:de:4a:f6:
         86:dd:16:ce:f2:d1:a1:01:f2:0f:71:a0:2e:bb:b5:28:f8:ba:
         64:8d:79:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:54:29 2026 by rpki-client