Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
File:                     1FFF263C64163BC58514B539C10375CCB553D75E.mft (raw, json)
Hash identifier:          Ae4KuF/qeEvxTi0Ao6H1JKcF09jjpkipOb9UXQF/kLo=
Subject key identifier:   DA:28:A9:FD:7A:EE:6B:FE:91:15:79:A3:80:81:E8:FB:0C:F9:51:F6
Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
Certificate issuer:       /CN=1FFF263C64163BC58514B539C10375CCB553D75E
Certificate serial:       5535BEC1D70C3CFCCC7879E05364CD5652C475E1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
Manifest number:          0227
Signing time:             Fri 09 Oct 2026 22:53:57 +0000
Manifest this update:     Fri 09 Oct 2026 22:48:57 +0000
Manifest next update:     Tue 13 Oct 2026 03:14:57 +0000
Files and hashes:         1: 1FFF263C64163BC58514B539C10375CCB553D75E.crl (hash: ib6LKmgoAA9S2+cVuiYa1HBmzSQaEQk/jYd44au2QJQ=)
                          2: AS138527.roa (hash: ONSMAuOvbH7RfIxQwPsXri8s6XRjzCo6/RpUxAMRBBM=)
                          3: AS21859.roa (hash: PyEJ9jiI4zJ41G/B0QCB9AEFiPf7Sjty7tslKA90CEA=)
                          4: AS25743.roa (hash: 62wm3hjrKSTAMQ4s0HfcJZmR7Dw8rHd9Oq7Gl2Vg8Dw=)
                          5: AS17621.roa (hash: utLpHPKZ8BfirAvR9YdDOE/1HRyEhTf6sPLR5pv/8bw=)
                          6: AS24373.roa (hash: lHZo1qqYvvZtMBDB0UDEySpVRejGte3tz9NgBR7e3to=)
                          7: AS4812.roa (hash: NTAmF1RldOWReH9okvRjh5nXMl4AHTRJFL08ZZTv2ls=)
                          8: AS13444.roa (hash: +X0olCc0xu0SyWwtuBjNMSx1pfUPwP7AiRpJF4RbydU=)
                          9: AS59803.roa (hash: LGUAblMvIhm2ls/u6OEE9pJVQIfQbyGlRz2jjgz8j4M=)
                          10: AS394881.roa (hash: uNlkd6JnCXliDu3t+qzOd5BwmcVsibO2dilTIlXUcXQ=)
                          11: AS139259.roa (hash: xYaDcFVM2Y/8RZa9QIohRwpFU7DW5BfYeUk92/go1D4=)
                          12: AS0.roa (hash: MGE1I5nLgi2EXKW8NuMkkJLFt6UGuB4YuKT8zQml0/c=)
                          13: AS59083.roa (hash: ushzmwAFhwiThXurSwtrTCCFmgn+xSBruO4ZTRuItX0=)
                          14: AS50983.roa (hash: 3xNnaG5XELIMcsyrOO9nWj0CAomHLhAMM1tNXRDhKfo=)
                          15: AS4515.roa (hash: ZaYffZhkzBHitK6L4Gql685Dxz+15/s2YPjwtddG4aE=)
                          16: AS139076.roa (hash: 4hb5Gao9BASgg0FHiSjmmXy58KRA0R7rDGX4EJ/JsLI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 03:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:35:be:c1:d7:0c:3c:fc:cc:78:79:e0:53:64:cd:56:52:c4:75:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E
        Validity
            Not Before: Oct  9 22:48:57 2026 GMT
            Not After : Oct 13 03:14:57 2026 GMT
        Subject: CN=DA28A9FD7AEE6BFE911579A38081E8FB0CF951F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ec:3a:f7:8d:2c:c9:e8:bb:ae:07:2f:9c:23:
                    9c:e0:ef:18:0c:cb:78:12:75:01:59:d8:82:0e:46:
                    3e:c1:bf:be:ba:e1:f1:e6:82:a6:b7:a3:bc:d5:6d:
                    14:8e:b9:13:4d:10:6d:0d:34:fd:63:43:3a:14:c3:
                    a3:5c:c2:97:47:3a:3b:21:b6:bc:04:53:52:ef:6c:
                    f8:da:90:c0:a5:5f:36:4e:c2:3a:54:8d:55:09:70:
                    bc:ae:41:25:46:f1:83:cc:77:9c:81:4a:ea:aa:ce:
                    c6:34:23:88:f1:53:ba:de:6b:2f:7b:c6:eb:9f:e5:
                    4a:93:5e:43:77:09:4a:60:ca:eb:c1:70:4e:18:6c:
                    a3:1d:13:a3:c1:5d:d6:b4:96:f1:19:e1:55:44:4b:
                    e6:7a:30:a4:89:14:b2:5f:e8:23:33:cb:3b:ab:b2:
                    ba:94:8b:9f:ec:7d:ee:29:78:98:61:3e:f9:4c:50:
                    87:9b:cc:ca:d2:c6:e6:4d:0e:08:50:ba:43:2d:07:
                    09:2b:cb:f0:b6:99:0f:b0:62:e2:7d:dd:4a:10:bd:
                    11:12:2b:c7:e8:5d:c0:90:66:90:7c:45:17:75:0d:
                    f0:d6:f7:34:3b:d1:5b:ef:f6:fe:3e:ad:eb:f8:05:
                    03:1e:b6:58:00:73:86:76:a6:49:c8:18:12:bd:97:
                    48:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:28:A9:FD:7A:EE:6B:FE:91:15:79:A3:80:81:E8:FB:0C:F9:51:F6
            X509v3 Authority Key Identifier:
                keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c8:ae:b2:be:69:59:b0:48:d8:75:b9:e8:b3:75:2e:85:08:
         27:0c:53:9b:63:24:92:d5:9f:f6:67:86:a3:fb:e4:8e:6c:cd:
         23:8b:2e:e3:a1:f6:ec:78:20:51:23:f9:cd:66:5b:38:63:57:
         7b:fb:47:c8:95:69:2d:45:51:17:2b:24:8f:69:9c:70:fc:79:
         75:99:bf:0f:70:ee:11:cb:4a:c1:b9:ed:e4:75:7d:ab:83:1c:
         e6:c9:29:ab:71:c7:af:1f:70:47:df:36:76:0a:2c:1b:1f:a3:
         28:16:4c:27:d4:0f:ac:18:6f:33:5f:88:9d:05:26:6f:e0:11:
         a6:31:d2:ef:5e:41:61:2d:c8:cc:6a:43:cf:33:75:9d:a5:fc:
         4c:8e:cb:1b:27:9e:57:47:64:aa:16:7d:d4:c6:f0:ae:bf:c5:
         ba:29:c0:76:48:96:79:ca:be:a4:b2:46:ac:a8:1b:4f:77:82:
         2e:ab:aa:ca:44:39:0e:fe:1a:85:b6:6c:c7:b8:14:6d:cf:29:
         b8:61:b0:b0:38:10:7e:de:9d:1e:b4:73:e1:fa:09:54:15:b3:
         03:3e:a9:a5:ca:a0:0e:ea:46:aa:6f:a8:fa:cc:c5:d7:e1:3b:
         e2:ae:9f:de:88:13:72:d6:f1:cd:10:58:6f:4f:b0:df:0f:ee:
         fb:3d:64:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 18:00:56 2026 by rpki-client