Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
File:                     509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft (raw, json)
Hash identifier:          inywR5w3etWSpBLr9lj0qLUnihxoanRC7hS+u19bSkc=
Subject key identifier:   F7:54:37:07:18:74:37:D7:C7:C2:2E:12:AC:A1:B2:0B:38:18:E5:6D
Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57
Certificate issuer:       /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
Certificate serial:       100BDC52EBB06D669ADF8C133E9D7DB5E61A064E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
Manifest number:          0140
Signing time:             Mon 12 Oct 2026 10:06:50 +0000
Manifest this update:     Mon 12 Oct 2026 10:01:50 +0000
Manifest next update:     Thu 15 Oct 2026 20:30:50 +0000
Files and hashes:         1: 34352e3131362e3230382e302f32322d3234203d3e203633373031.roa (hash: U7pMxSAG3hJgdZF9MfZ18nxXUA9nKKA1bO/qYqQYHtk=)
                          2: 3231382e3234362e34382e302f32322d3234203d3e203633373031.roa (hash: WcmfvhVSIdNuNti1E8ax2jBrWyZNrlupmGu8emD1ulA=)
                          3: 3130332e3135322e3230382e302f32332d3234203d3e203633373031.roa (hash: AY1Rkv8eWCaCc1IqIqb/hR6fEF7YAcghCDJ1PXekeR4=)
                          4: 323430373a343938303a3a2f33322d3438203d3e203633373031.roa (hash: 2xrWqcYAWv5uaJ+UEIXDS5NCV5aUjwlhbOSNrGQlqmA=)
                          5: 3130332e38382e39362e302f32322d3234203d3e203633373031.roa (hash: U8zN/uKQkuQOmx94aIzQZAVo1yFMKEWW8+KWrA4wMEU=)
                          6: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl (hash: fm2PXfHxm2SdvmWBRioVV+OzeVMCmLnwykOkEExQYf4=)
                          7: 3130332e3132352e3233362e302f32322d3234203d3e203633373031.roa (hash: Yea68duwFifPXnruxUiyJ9UTHYU8mFtMaIPky0bpVBY=)
                          8: 3130332e35372e31322e302f32322d3234203d3e203633373031.roa (hash: 8UtfI7LTrXwbIubSnHUAr4P3UqzZ1JNFE+rdAk5G7eE=)
                          9: 34352e3132332e3132382e302f32322d3234203d3e203633373031.roa (hash: D0DZcEu6aIrrlnKA0LePQ3snnhwXT075mcvbXRTNoSM=)
                          10: 323430323a396138303a3a2f33322d3438203d3e20313334383130.roa (hash: neAH0hkwEVNAasatgS8ORO4dbxpU7nc7wayFUL20f+M=)
                          11: 3130332e37352e3130342e302f32322d3234203d3e203633373031.roa (hash: +KXcWOztyLv/Ynmm+FEsOtCGJApsRxgda15t6ILwOjc=)
                          12: 3130332e36332e3234342e302f32322d3234203d3e203633373031.roa (hash: +6y/ZqD3ndBq58wqjIQAYJB+hGKh54Rr52DvmGnGOc0=)
                          13: 323430373a333763303a3a2f33322d3438203d3e20313334383130.roa (hash: YB0M9nKNMoHBywOJDf6bSjW4vSlUBOGyW8ueImFl0Ok=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 01:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0b:dc:52:eb:b0:6d:66:9a:df:8c:13:3e:9d:7d:b5:e6:1a:06:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
        Validity
            Not Before: Oct 12 10:01:50 2026 GMT
            Not After : Oct 15 20:30:50 2026 GMT
        Subject: CN=F7543707187437D7C7C22E12ACA1B20B3818E56D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:65:2e:b4:63:14:18:60:a9:5f:08:25:88:1f:
                    95:f3:17:a7:c3:9a:fe:65:16:76:41:ca:7e:84:82:
                    fb:4d:d4:d9:98:4c:16:cd:f8:9b:57:1b:02:5b:47:
                    18:f7:e1:fa:33:b8:ef:62:4c:10:30:ee:74:be:1d:
                    d1:b1:76:ef:ee:17:c4:bb:9a:84:e3:63:96:0a:13:
                    28:16:f7:64:db:ea:f4:2e:1f:98:3d:63:85:61:82:
                    29:8a:13:1d:a4:a9:b5:7f:af:24:fa:c4:32:61:f6:
                    0c:cf:3c:07:8c:ee:22:ba:6a:ca:89:5e:e8:1d:87:
                    99:d7:94:e1:13:f1:07:41:c7:16:b9:df:2c:76:e0:
                    bb:0e:c6:fd:29:40:7f:d1:32:48:ff:e9:0f:ef:ad:
                    c5:61:8b:66:4e:0a:b7:d6:7b:35:af:d3:b8:d4:8c:
                    d5:79:04:87:6d:c5:8d:3b:e7:57:4f:43:28:8c:d5:
                    af:ac:c1:ac:c8:6c:a4:45:b2:c8:fb:18:ef:5f:9e:
                    b0:35:3e:2e:e7:85:59:bf:ef:85:d9:6f:4e:21:b7:
                    74:32:84:de:3d:0b:c7:ef:20:aa:c7:62:c1:27:5d:
                    50:73:ad:75:50:e8:bc:47:16:b2:60:92:1a:75:09:
                    d6:a5:ff:1e:f7:5a:63:ef:cd:37:e5:17:eb:60:ae:
                    e0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:54:37:07:18:74:37:D7:C7:C2:2E:12:AC:A1:B2:0B:38:18:E5:6D
            X509v3 Authority Key Identifier:
                keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4d:fa:eb:65:d4:7d:13:4f:26:24:f3:ed:36:73:b6:15:0b:
         97:0b:54:7d:c3:30:d0:81:c6:ff:18:16:07:49:ce:27:bc:76:
         37:85:eb:3d:15:64:e0:f8:60:86:70:f1:6b:1c:74:e9:51:bf:
         34:1f:75:dc:72:0f:0d:3e:1e:ac:ea:47:38:e8:ab:d7:cf:44:
         dc:c8:29:04:07:9a:c9:c4:ce:48:92:c7:c0:48:88:3f:97:98:
         0c:a3:ab:75:f2:74:82:f5:b0:36:44:76:72:dd:56:80:3f:bb:
         1d:7b:9a:73:36:7d:b7:19:b7:7d:4f:59:65:4f:70:96:a3:fe:
         ba:09:84:f6:82:ef:cf:fc:01:57:e0:e3:62:67:04:b3:bb:d1:
         33:24:b6:ab:f4:ab:f5:61:78:8f:69:91:77:27:ca:0d:31:c0:
         00:27:7e:66:1c:cf:b1:05:5a:25:89:d3:0e:82:5b:90:2d:7f:
         03:32:b4:9b:78:9c:36:08:a2:af:f1:c3:6d:3c:65:99:10:1d:
         da:83:5c:67:ef:5d:3d:88:69:3d:bf:e3:b2:a8:a1:54:a8:2c:
         18:a6:af:43:30:04:e5:9d:4d:cf:b5:f2:a1:fb:22:b6:34:24:
         94:88:05:1e:23:ce:1c:9a:cf:f0:f3:b9:20:a5:3d:56:70:27:
         87:9b:ae:25
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUEAvcUuuwbWaa34wTPp19teYaBk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZE
Q0I5NjM1NzAeFw0yNjEwMTIxMDAxNTBaFw0yNjEwMTUyMDMwNTBaMDMxMTAvBgNV
BAMTKEY3NTQzNzA3MTg3NDM3RDdDN0MyMkUxMkFDQTFCMjBCMzgxOEU1NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMZS60YxQYYKlfCCWIH5XzF6fD
mv5lFnZByn6EgvtN1NmYTBbN+JtXGwJbRxj34fozuO9iTBAw7nS+HdGxdu/uF8S7
moTjY5YKEygW92Tb6vQuH5g9Y4VhgimKEx2kqbV/ryT6xDJh9gzPPAeM7iK6asqJ
Xugdh5nXlOET8QdBxxa53yx24LsOxv0pQH/RMkj/6Q/vrcVhi2ZOCrfWezWv07jU
jNV5BIdtxY0751dPQyiM1a+swazIbKRFssj7GO9fnrA1Pi7nhVm/74XZb04ht3Qy
hN49C8fvIKrHYsEnXVBzrXVQ6LxHFrJgkhp1Cdal/x73WmPvzTflF+tgruAzAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU91Q3Bxh0N9fHwi4SrKGyCzgY5W0wHwYDVR0j
BBgwFoAUUJvJ515E20DWkSvD91lxz9y5Y1cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDY4NDQxNy8wLzUwOUJDOUU3NUU0NERCNDBENjkxMkJDM0Y3NTk3
MUNGRENCOTYzNTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZEQ0I5NjM1Ny5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ2ODQ0MTcvMC81MDlCQzlFNzVFNDRE
QjQwRDY5MTJCQzNGNzU5NzFDRkRDQjk2MzU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAek3662XUfRNP
JiTz7TZzthULlwtUfcMw0IHG/xgWB0nOJ7x2N4XrPRVk4PhghnDxaxx06VG/NB91
3HIPDT4erOpHOOir189E3MgpBAeaycTOSJLHwEiIP5eYDKOrdfJ0gvWwNkR2ct1W
gD+7HXuaczZ9txm3fU9ZZU9wlqP+ugmE9oLvz/wBV+DjYmcEs7vRMyS2q/Sr9WF4
j2mRdyfKDTHAACd+ZhzPsQVaJYnTDoJbkC1/AzK0m3icNgiir/HDbTxlmRAd2oNc
Z+9dPYhpPb/jsqihVKgsGKavQzAE5Z1Nz7XyofsitjQklIgFHiPOHJrP8PO5IKU9
VnAnh5uuJQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 14:03:31 2026 by rpki-client