Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
File:                     2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft (raw, json)
Hash identifier:          afOCoFmBVRh9Kiqv/sPIMH4RcThQZaRxGW53CLaikzU=
Subject key identifier:   AB:DA:CC:47:5B:D8:07:35:30:AC:3D:9D:56:B6:81:24:E6:34:42:16
Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
Certificate issuer:       /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Certificate serial:       56BC9C7E53309209E0511BA591DA58435B6E2BF1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
Manifest number:          0153
Signing time:             Thu 15 Oct 2026 11:51:47 +0000
Manifest this update:     Thu 15 Oct 2026 11:46:47 +0000
Manifest next update:     Sun 18 Oct 2026 19:11:47 +0000
Files and hashes:         1: 3131392e3233352e3133382e302f32342d3234203d3e203234343237.roa (hash: 7lq4F+kN4dfPPhClDRlyHjLRkbdsAPEeIZnDaZUPfho=)
                          2: 3131392e3233352e3133362e302f32342d3234203d3e203234343237.roa (hash: P3jXS0lLFc4DM3hVmFyaQ5NRZvxXxC81SrFQZS9hz8Y=)
                          3: 3230322e3137302e3232312e302f32342d3234203d3e203234343237.roa (hash: eLf51BLu0K8JOwlH6IFc5jAcFpHJFCctgrNJUcADl74=)
                          4: 3230322e3137302e3231362e302f32342d3234203d3e203234343237.roa (hash: VAhlOybzXKl74DjpAZWqA5wWuw72zIg3z2/LDN7OZHU=)
                          5: 3131392e3233352e3136372e302f32342d3234203d3e203234343237.roa (hash: EcBAZ9E6nz/Jb75uEjGHvAGmLGTaXjfuFeKbWfc4enE=)
                          6: 3230322e3137302e3231392e302f32342d3234203d3e203234343237.roa (hash: 2XKwc+tclrWbdl8kq+8mfw+izHBOIwST00sm/13O4fc=)
                          7: 3131392e3233352e3134352e302f32342d3234203d3e203234343237.roa (hash: cRHV7X3G/PQJ92A12wotA3DpyVsL+d9PuLjA/A0Nb9c=)
                          8: 3230322e3137302e3232332e302f32342d3234203d3e203234343237.roa (hash: XwAGEo52R3/295sfFWGTsHRJeXRAQPtlmlUvnH8SLCk=)
                          9: 3230322e3137302e3232302e302f32342d3234203d3e203234343237.roa (hash: HId4vrNLiK+ND0zQR5D2ItU9HGeVy1wXldT93pOdLOc=)
                          10: 3131392e3233352e3138352e302f32342d3234203d3e203234343237.roa (hash: y+0yz/Orh5jDhKBtMq/BWVyUvkwfKPK9TJ2TBjSxOBc=)
                          11: 3131392e3233352e3134342e302f32342d3234203d3e203234343237.roa (hash: ZIpXfUCxWXx/Yh12y5PNrm1YJbqJK3Qj4q0RnCjYmRk=)
                          12: 3230322e3137302e3231382e302f32342d3234203d3e203234343237.roa (hash: JSYukomI+EXQlc3XoizcwTgOHfV+PE8qH5q8KtFf0xQ=)
                          13: 3230322e3137302e3232322e302f32342d3234203d3e203234343237.roa (hash: pCqCdfeTBDZ1ufXIAdXFKHOH0guOfd8eNNLcRHIYyf8=)
                          14: 3131392e3233352e3135312e302f32342d3234203d3e203234343237.roa (hash: hYt2A/jghiSr+S1LZEbd4lSZNEEFRojqYjsnEer5F04=)
                          15: 3230322e3137302e3231372e302f32342d3234203d3e203234343237.roa (hash: EXQ+5nHfL2CSocP6gK127ORzb92cBqRvxJuWAIUrj3c=)
                          16: 3131392e3233352e3134332e302f32342d3234203d3e203234343237.roa (hash: Ol89eMrUaCaAzxFLMX+QHnOCMpZp0gTaHt7lzoiplTc=)
                          17: 3131392e3233352e3133302e302f32342d3234203d3e203234343237.roa (hash: HoRk+vOtUZtbIjrp6u/EWfXW2czPAr3G6Df5irzJNwk=)
                          18: 3131392e3233352e3136302e302f32342d3234203d3e203234343237.roa (hash: 0V8lM1Bn5F+GN6qFR/iyuC3X56n7vTa4N4BWsHp44As=)
                          19: 2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl (hash: LcYSDfF0rYyglANx8QGj9s3Biyy6FppnV0iqYZQ8qic=)
                          20: 3131392e3233352e3132382e302f32342d3234203d3e203234343237.roa (hash: gKGf9ncPC0mDmhttmgm4Nc+M5A6UymruGAO1ADoEIsY=)
                          21: 3131392e3233352e3136312e302f32342d3234203d3e203234343237.roa (hash: lv53noT2X5eaiI1tnOSXvfADsas3LsuXeApSZgepJgg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 17:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:bc:9c:7e:53:30:92:09:e0:51:1b:a5:91:da:58:43:5b:6e:2b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
        Validity
            Not Before: Oct 15 11:46:47 2026 GMT
            Not After : Oct 18 19:11:47 2026 GMT
        Subject: CN=ABDACC475BD8073530AC3D9D56B68124E6344216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f6:2d:3a:92:39:d7:24:4e:cc:3c:77:a6:fd:
                    ad:9f:64:3b:32:dc:2e:23:f7:c9:3c:eb:a2:13:80:
                    62:cb:5b:7f:90:44:54:3d:03:12:06:14:f1:1e:df:
                    ba:52:99:76:f6:1c:84:20:f5:a9:66:f8:2e:1e:de:
                    9d:9c:1e:9c:65:68:5e:2a:6b:90:95:b8:ea:54:d5:
                    dc:8c:99:7a:d8:41:43:cb:62:54:7b:a6:55:d6:68:
                    e9:77:51:f7:da:38:cd:33:46:8d:1d:48:ac:86:1f:
                    ce:9c:99:ee:7b:b1:98:a1:41:d3:4b:23:89:0b:70:
                    d2:10:be:80:25:0e:a1:2b:47:fe:fe:91:04:58:24:
                    d4:bc:7c:cc:17:ce:ec:8b:5a:eb:5c:e7:52:af:bf:
                    ff:e1:0a:65:fb:47:fe:de:ce:8e:63:c1:e4:39:c1:
                    f8:dc:f5:0c:af:2c:0c:f6:44:78:32:cd:87:f6:bd:
                    bd:c0:48:1e:71:84:0c:53:03:cc:9e:99:45:79:13:
                    84:da:2b:27:4c:1f:20:2d:ba:c2:51:f8:53:20:3b:
                    e0:97:b6:ad:05:1f:06:7b:76:ed:9a:64:52:5a:82:
                    60:03:7c:9c:70:42:17:c5:94:08:fe:6c:b1:18:81:
                    83:2e:c0:df:41:1b:0f:4d:af:f0:54:3d:99:03:72:
                    1f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DA:CC:47:5B:D8:07:35:30:AC:3D:9D:56:B6:81:24:E6:34:42:16
            X509v3 Authority Key Identifier:
                keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:42:98:7f:f3:54:b7:ed:4b:90:93:a2:cf:2f:5d:90:d3:c8:
         3c:36:d7:f6:2f:b7:80:c4:f8:27:7d:5f:45:53:ea:c0:01:e6:
         41:67:8e:3e:26:d0:70:ea:80:87:b9:fc:f5:26:63:39:17:9f:
         1d:75:2a:b3:dc:5a:25:e9:59:af:fa:fc:80:ee:9f:09:d7:ed:
         43:cd:fa:02:82:f9:bb:7c:a5:99:26:a9:d1:0c:e3:be:69:56:
         24:81:53:c3:03:b6:50:98:d1:05:9b:99:18:98:bc:51:21:a3:
         6c:e4:a9:d4:c6:11:69:9b:8c:4a:1e:aa:78:1e:2d:c3:24:d2:
         5c:b2:22:a2:12:31:c8:ca:77:c0:27:5c:bb:cb:cc:3c:5d:a6:
         ce:ec:ce:3e:70:b8:71:c6:2e:46:a8:23:44:b1:00:40:88:a0:
         49:2b:fb:b1:65:53:e5:71:67:2b:6c:ea:19:1e:e3:e4:13:7b:
         ae:d5:63:a0:c6:05:24:b3:db:a9:cc:16:63:dc:a1:b4:e2:4e:
         e3:10:56:57:c7:9d:9d:47:88:71:80:41:1b:94:89:59:17:15:
         f2:c5:63:2f:7c:b7:32:d4:aa:78:80:32:91:57:52:ad:cb:74:
         26:8a:fe:fb:62:4d:62:96:41:ba:d5:af:86:ea:7d:a7:92:6e:
         25:d2:5c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 03:13:07 2026 by rpki-client