Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
File:                     9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft (raw, json)
Hash identifier:          +Qr21WBjS51negfyktppDSg3WVhFd6pcrqKXl+WCDBI=
Subject key identifier:   81:9E:89:B8:13:B2:D0:8F:EF:2B:FE:D4:0C:D9:21:D6:73:58:21:F3
Authority key identifier: 9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A
Certificate issuer:       /CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
Certificate serial:       723D870FCA736D7E81ED7A5B62308E89177A716E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
Manifest number:          76
Signing time:             Fri 02 Oct 2026 10:05:21 +0000
Manifest this update:     Fri 02 Oct 2026 10:00:21 +0000
Manifest next update:     Mon 05 Oct 2026 13:14:21 +0000
Files and hashes:         1: 323430363a3838303a3a2f33322d3332203d3e2030.roa (hash: zLQafVdFQlmu+N0ToNivjL+0KsdsUwTBCbVeEqvITFw=)
                          2: 34352e3132362e3131322e302f32322d3232203d3e2034383437.roa (hash: FalWQte9mnWrzLhbGi0PVklPjT0Bn3VWP8JzYdGRCIo=)
                          3: 3130332e37372e32382e302f32322d3232203d3e2034383038.roa (hash: Jlx/wNWNgrDfC/9kYEd+x916pqVJYgsFM7pPmFGjYfk=)
                          4: 323430373a373738303a3a2f33322d3332203d3e2030.roa (hash: gzEc3CXXGcQWOxotohoedVP4pF9FVlgNODLpwKx8fUc=)
                          5: 3130332e37362e3232302e302f32322d3232203d3e2034383038.roa (hash: qFzMYF5TRk3uV/gHYGorbe73VYUDEY4eRdheDspwrIk=)
                          6: 9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl (hash: +a0D/kTH8o0WhrpBzKeMkG6YBM/Obq/XofvoAlOAWBw=)
                          7: 3130332e3233362e3234342e302f32322d3232203d3e2034383437.roa (hash: Y5trOlbR/plNg3QWBKYijC8voHHhxrp8lORe45SD0+M=)
                          8: 3130332e37372e32382e302f32322d3232203d3e2034383437.roa (hash: vKwURYO29V/idSwbJGJlUZZ+tWxs6as8Y7t32HvFqRM=)
                          9: 3130332e37362e3232302e302f32322d3232203d3e2034383437.roa (hash: bVqfzO+arD4Um5tS69MlIDABilnX2cRx9SBb5y88I2A=)
                          10: 323430373a383838303a3a2f33322d3332203d3e2030.roa (hash: xQENf1adNMYSG70l6LP4CsgYjWDbEv8Mt7TMAnvJgDQ=)
                          11: 323430373a373838303a3a2f33322d3332203d3e2030.roa (hash: QxnPT1CIMAlqQ663ZFA8jDyFlWdXGbjN3pr40XZAsmQ=)
                          12: 3130332e37362e3232322e302f32332d3233203d3e2034383038.roa (hash: hvHbFL+mk63mg9G7EHAKDLKYkUIUHd1ngpu3mdvWYho=)
                          13: 3130332e37362e3232342e302f32322d3232203d3e2034383437.roa (hash: /7dkC0KCXVakh473Sdc/GvCBLnVg8PslCmydwVIeiDg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 09:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:3d:87:0f:ca:73:6d:7e:81:ed:7a:5b:62:30:8e:89:17:7a:71:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
        Validity
            Not Before: Oct  2 10:00:21 2026 GMT
            Not After : Oct  5 13:14:21 2026 GMT
        Subject: CN=819E89B813B2D08FEF2BFED40CD921D6735821F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:a8:04:c1:cc:2d:ba:e7:21:23:ce:97:8c:
                    89:d7:3c:4c:d3:17:7e:88:79:ac:57:be:cb:73:1e:
                    e7:20:23:66:c0:0d:19:13:8f:9a:6c:e5:10:6a:e4:
                    4d:48:16:4f:30:71:82:63:73:e7:2f:85:55:77:ec:
                    32:9c:7c:6a:95:2e:8d:c1:55:06:6f:78:06:7b:7e:
                    07:ff:43:18:20:47:a1:fb:ab:b7:2a:83:85:79:c2:
                    03:cf:c0:a1:3e:3b:11:7b:c3:23:fe:33:05:3d:eb:
                    5e:62:ed:c3:9b:3e:6b:4c:f2:56:37:9b:07:ba:d6:
                    e2:3c:6f:f8:f9:a9:e7:ba:2b:2c:07:39:86:25:15:
                    d9:da:3e:1f:bf:ba:d3:bb:ca:d9:2c:5f:c1:d1:7e:
                    f5:8a:d7:35:0c:dc:6b:7e:40:46:f1:ca:53:94:91:
                    aa:82:ed:13:81:09:dd:1f:6e:18:5f:9f:ed:78:cf:
                    2d:01:52:e9:e2:70:f1:67:20:a3:4c:0b:26:87:97:
                    70:98:5a:15:6c:a5:2c:64:76:5f:75:8c:4b:09:9f:
                    e6:94:96:77:f8:05:7a:aa:62:9c:6f:23:da:fb:eb:
                    ae:95:a8:81:b2:4b:b5:3b:c3:69:4f:6d:fe:12:2f:
                    97:ad:d5:22:23:74:b0:1a:45:1c:8f:d3:b3:47:02:
                    5c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9E:89:B8:13:B2:D0:8F:EF:2B:FE:D4:0C:D9:21:D6:73:58:21:F3
            X509v3 Authority Key Identifier:
                keyid:9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:7a:55:e4:04:8d:68:b5:49:a7:3a:3c:4e:f6:9e:02:11:51:
         67:03:76:5e:51:cc:be:9e:97:85:7c:11:93:b9:34:07:cc:39:
         d5:42:c3:0d:10:fe:71:d2:d7:f4:43:29:92:1a:cd:99:a0:d4:
         c8:e6:8c:72:eb:d9:77:9c:fd:31:86:bc:e7:e1:cb:c5:3c:96:
         3e:2e:84:66:0e:cd:70:68:ad:94:dd:73:0d:bf:57:1e:06:43:
         ed:38:77:d9:f5:40:2f:8d:9a:09:26:4f:26:86:db:bd:85:a9:
         2a:3d:77:2f:57:40:61:d9:51:8f:ae:0d:88:8c:6f:69:c3:67:
         79:d0:46:f3:af:18:fb:de:2b:4b:93:5b:50:5d:22:07:92:97:
         8f:50:4c:6a:98:71:2d:ab:1e:c3:5d:86:b4:29:55:6e:fe:27:
         8a:01:56:e2:d2:90:88:61:f8:20:ef:40:ec:9d:0c:b7:85:78:
         76:c7:e1:1a:3c:c0:ea:57:16:11:31:8d:16:46:d2:6d:75:74:
         35:9c:02:7b:70:4f:93:07:72:35:36:16:8e:fc:1f:db:25:c4:
         0f:b0:d8:b3:5a:9e:74:0a:24:62:c5:f2:a6:34:9c:f9:4f:b4:
         dc:e2:88:46:ad:f5:2e:1c:8d:77:a6:43:e7:17:24:8b:a7:da:
         4e:3a:d1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:23:17 2026 by rpki-client