Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft
File:                     57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft (raw, json)
Hash identifier:          FIuekYjAn/7CPuRTOfi0pZ0UYemDBQUzoPpsOCf1+os=
Subject key identifier:   20:14:77:13:E3:9B:57:C2:0E:5E:92:08:E2:79:E2:75:2F:20:DD:1C
Authority key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0
Certificate issuer:       /CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0
Certificate serial:       68E22AB5AE11F9E2AFD6BCEF52F546E4D5EA06B4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft
Manifest number:          0140
Signing time:             Fri 16 Oct 2026 18:13:00 +0000
Manifest this update:     Fri 16 Oct 2026 18:08:00 +0000
Manifest next update:     Tue 20 Oct 2026 03:23:00 +0000
Files and hashes:         1: 323430313a376530303a3a2f33322d3332203d3e203338333535.roa (hash: ehMU3S2JCPT5vg3hKKo4ROHo5igNX1sYoyqjVpMh6WA=)
                          2: 323430313a376530303a3a2f33362d3336203d3e203338333535.roa (hash: aKmhFp9xXN13SrJmpZLgk6u8O9Vm0OBVE6ERJGr76Bc=)
                          3: 3231382e3234342e302e302f31392d3234203d3e203137393639.roa (hash: qIBIXAx+bxCxVuXrC5KPDpWcIbbQfaWsos9qY8Hyohk=)
                          4: 32372e3134342e302e302f31362d3234203d3e203137393639.roa (hash: SYPXnxeRtZ7noFu43LGfNAwPQXoAc39ePYXU17knFQc=)
                          5: 3131372e35392e302e302f31362d3234203d3e203137393639.roa (hash: jqEdbt3MhK6Z7J07psMZQBv74go8mG34DhxeSdGowbk=)
                          6: 34322e3132332e3132382e302f31372d3234203d3e203137393639.roa (hash: HJAEw0em6DXYtKjOb8eOjxjOleqPkWguwakB00hU4DQ=)
                          7: 3230332e3136312e3139322e302f31392d3234203d3e203137393639.roa (hash: 5Tg0FQdSDq/Zu86whup67Wa88hxIMsyCZY10zhpGkNQ=)
                          8: 3132352e36322e34392e302f32342d3234203d3e20313436373838.roa (hash: LNEhmHCp10qCUFCDAGMIVGvXtcIDgvLqYw5r6nwi1B0=)
                          9: 323430313a376530303a3a2f33322d3634203d3e203137393639.roa (hash: EdGOODlWG3ONCUozOTYrfpFlATRW8oodZdYBqM1SnNY=)
                          10: 323430313a376530303a666666663a3a2f34382d3438203d3e203338333535.roa (hash: B4BJlhUus8tyirjIaFKqqMplYcSijSoV1lH0TWBWjNw=)
                          11: 57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl (hash: WBb/8ukfKeu3Mk+/8uy5HceI22bjLbWmjEL1iL51lsk=)
                          12: 34322e35302e302e302f31362d3234203d3e203137393639.roa (hash: BU7824LM2GcqISfl9RQuaQpqoVPVFfmsdHGml4Pg4E8=)
                          13: 3132352e36322e302e302f31382d3234203d3e203137393639.roa (hash: HUI+HHCfEB2nbQeHqwwB6/Ms2ZiM/pUUCnk/LE3eDjc=)
                          14: 323430313a376530303a666666383a3a2f34352d3435203d3e203338333535.roa (hash: ZVOiXJmXMUUoqcqPt09Dq1VOfAp9Wv0un73gutc12gs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 11:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e2:2a:b5:ae:11:f9:e2:af:d6:bc:ef:52:f5:46:e4:d5:ea:06:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0
        Validity
            Not Before: Oct 16 18:08:00 2026 GMT
            Not After : Oct 20 03:23:00 2026 GMT
        Subject: CN=20147713E39B57C20E5E9208E279E2752F20DD1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b4:24:4a:ef:a6:e4:f7:e3:36:21:4b:0e:50:
                    b5:ad:92:1d:cd:36:ee:6f:66:aa:1e:32:bb:bb:16:
                    2d:14:02:47:c3:49:bf:6d:09:dd:40:7b:3e:a1:3b:
                    f9:10:07:37:f7:4d:b3:9e:60:11:dc:8b:39:5a:76:
                    a2:6a:c3:ca:ed:ef:79:6f:00:fc:4c:09:00:df:7e:
                    9d:85:df:12:2c:99:0e:f7:f0:eb:9b:fb:2f:84:63:
                    42:3e:d0:9f:e6:e6:2e:06:c2:bb:07:15:46:4b:b4:
                    ca:22:54:98:01:9b:2f:06:6f:28:02:c6:b5:fe:a5:
                    81:c7:e0:0f:c3:e0:99:ca:46:97:79:fc:ea:7f:6d:
                    f0:c4:1c:44:bf:ab:78:5c:43:8c:8b:31:d3:96:d5:
                    bc:29:72:49:28:25:b6:75:66:06:2c:87:7c:c8:a0:
                    f1:ec:5d:a1:a1:e1:b7:d4:b7:66:86:8b:1f:8c:6d:
                    77:8a:fc:b5:89:c6:cb:a5:f2:b8:0a:45:12:7b:1f:
                    10:01:bc:fb:d3:b0:7d:c0:ad:55:ad:ee:15:c1:37:
                    62:70:a7:10:dc:bf:14:7f:6d:4a:75:1e:8f:39:25:
                    60:6e:a1:2a:e5:01:bc:64:4b:1a:5e:62:01:3c:36:
                    71:f5:e9:01:fa:57:df:7b:7d:f5:5e:36:a4:53:e1:
                    e8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:14:77:13:E3:9B:57:C2:0E:5E:92:08:E2:79:E2:75:2F:20:DD:1C
            X509v3 Authority Key Identifier:
                keyid:57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:52:7e:72:27:15:1c:a9:3a:36:b5:02:d5:23:39:5f:92:ff:
         23:72:fc:60:cf:01:68:70:e6:4b:54:64:c5:02:89:7d:11:72:
         c9:7f:02:81:61:ac:51:c6:d2:64:e3:b5:fc:8e:53:f4:67:14:
         50:05:c3:27:e7:88:1b:4f:5d:91:01:e4:c0:28:c1:80:39:62:
         b8:fb:b3:bc:33:bc:58:95:0e:c9:f8:12:ac:e0:dd:b0:c6:06:
         07:b5:07:95:7d:11:58:9f:7e:4b:7f:2c:ca:bc:74:d0:c5:c1:
         9a:44:8f:00:2d:5d:a4:25:db:e6:27:00:f7:72:12:e4:64:8f:
         38:ad:0c:aa:12:40:1e:1a:52:ae:90:d0:e8:2a:30:9b:8b:13:
         ff:35:bc:74:bc:d1:c2:6b:0e:48:ac:71:d2:03:7f:d4:0c:3e:
         2b:8d:31:69:7e:39:f9:c3:92:e6:1f:a3:f3:4a:88:4e:08:9c:
         46:ed:ab:35:b1:ca:aa:d8:15:10:9a:16:97:ca:86:34:4e:33:
         ba:54:ed:6b:ea:d2:30:0e:6d:50:81:6c:b8:33:0a:fa:f3:dc:
         c9:b6:00:f1:4a:c1:71:f8:f9:a1:1b:1d:f1:e0:4d:dc:7e:d2:
         20:8b:8a:54:dc:a8:9b:0d:41:29:94:1f:9f:18:12:d3:5a:45:
         8d:e3:f8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 21:20:10 2026 by rpki-client