Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
File:                     B8C15036932176BBE4E7217ED5772ACA3DB00427.mft (raw, json)
Hash identifier:          94C/+r0o+9GASiHy1nd6o7I0xOev9sf1gGM/XYmQS+M=
Subject key identifier:   40:B2:31:2B:4F:E8:7F:06:72:36:FB:88:7D:26:20:C4:F1:18:37:56
Authority key identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27
Certificate issuer:       /CN=B8C15036932176BBE4E7217ED5772ACA3DB00427
Certificate serial:       0BEA1555229737147D35E7E637159D4E1BAE5610
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
Manifest number:          013F
Signing time:             Sun 11 Oct 2026 18:20:49 +0000
Manifest this update:     Sun 11 Oct 2026 18:15:49 +0000
Manifest next update:     Wed 14 Oct 2026 20:23:49 +0000
Files and hashes:         1: 3130332e3233342e3133312e302f32342d3234203d3e203137363231.roa (hash: RMNTQapEhHCiy0mYS+fxG4lDIlhhdGLWHWapAq2ssyk=)
                          2: 323430333a336438303a3a2f33322d3332203d3e203138343634.roa (hash: jmZoJtvNeF3nRBqm9mCIeeNh40ogUOoqJVCfZUbJjSw=)
                          3: 3130332e34332e3234302e302f32342d3234203d3e2034383038.roa (hash: /6V8/lHSdyOZ/qsg/Eu2PZkif0ZtiWnLcFDDZfE9+dU=)
                          4: 3130332e34332e3234312e302f32342d3234203d3e2034383038.roa (hash: GzguvVAUN/QsRFgpZbpng5ljs24N7/shA4iD6/un6DY=)
                          5: 3130332e3233342e3132392e302f32342d3234203d3e2034383131.roa (hash: mw8bGddUMh0smhnu0EDySI9xXIF1U085FD7r5icQb20=)
                          6: 34332e3234372e3130302e302f32342d3234203d3e2034383132.roa (hash: dHGyU7geUikrWUH4+V6rrwLj/7DuM2eS0YArF7qmFec=)
                          7: 3131392e33382e3232342e302f32342d3234203d3e2034383337.roa (hash: qp/xe4dbx92bg7b1OJL31k1LFy6tICSbK/7RkEnbYz4=)
                          8: B8C15036932176BBE4E7217ED5772ACA3DB00427.crl (hash: iuKKecc84PlH1d6m8vX+JidMX1/KkbJTmIoVhjcix+U=)
                          9: 3130332e3233342e3132382e302f32342d3234203d3e203137363231.roa (hash: atudpMhY9fm9b2EjCblsA85B+GiQUrV8/Po0z7vcUAY=)
                          10: 34332e3234372e3130332e302f32342d3234203d3e2034383132.roa (hash: mcRm4nNS2pGUBNGwxEjJhwYd95LI8enACj0yJGkk/8Y=)
                          11: 3130332e3233342e3132392e302f32342d3234203d3e203137363231.roa (hash: hjZZWuzPbHVXr03JjZNZ9eEAXooHh0hek1gV2iAOLKs=)
                          12: 34332e3234372e3130322e302f32342d3234203d3e2034383132.roa (hash: cyElE1Bhw1k8N2KlQApQW6apuaMTDy/PfxxWg4X95gQ=)
                          13: 34332e3232342e3234302e302f32342d3234203d3e2034383038.roa (hash: VZdouybWTmMR/dD6/6+ICJKr/ZGHu6EZhyfCeNZnSRA=)
                          14: 34332e3234372e3130312e302f32342d3234203d3e2034383132.roa (hash: mvUECDvLodFp/11AD5O24Evd5dSLDBKZTKf3mHCuAvc=)
                          15: 3130332e3233342e3132382e302f32342d3234203d3e2034383131.roa (hash: 4e85YMIIgo3G1mvyUkSGL3GPadM0LCSpbYBEPrbGu54=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 20:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ea:15:55:22:97:37:14:7d:35:e7:e6:37:15:9d:4e:1b:ae:56:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8C15036932176BBE4E7217ED5772ACA3DB00427
        Validity
            Not Before: Oct 11 18:15:49 2026 GMT
            Not After : Oct 14 20:23:49 2026 GMT
        Subject: CN=40B2312B4FE87F067236FB887D2620C4F1183756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0d:82:6e:e2:e8:14:41:c6:bd:30:6d:98:fd:
                    d0:43:73:87:78:ff:6a:a2:df:ba:0e:c7:95:2a:cd:
                    b5:65:a6:41:50:36:78:36:0b:ee:fd:81:eb:98:80:
                    59:e4:dd:13:5d:db:df:8a:8a:37:06:85:c6:b9:70:
                    81:60:23:f2:b7:3f:ef:9e:39:ca:26:e8:f7:85:a3:
                    73:ec:7a:e8:f9:d1:b5:1e:21:72:32:f7:46:6d:1b:
                    ca:4a:a3:00:94:bf:33:f4:07:53:df:90:d4:fc:c0:
                    b2:a1:b3:71:f6:eb:e4:78:b1:a8:d8:9e:fc:df:dd:
                    ee:14:d1:2c:f2:05:0b:24:d8:b2:b9:25:60:14:13:
                    af:81:18:ef:7b:c9:df:f1:01:4e:7e:42:58:56:0f:
                    fa:0d:8b:63:a0:88:99:6b:70:2a:7d:27:fb:f4:1f:
                    07:9a:aa:78:d1:81:35:ac:2a:d4:6b:c0:0e:af:ef:
                    38:d7:ac:d1:60:81:e7:65:6d:79:32:ad:d3:a3:3e:
                    c0:81:9d:05:cd:7d:06:2b:9f:c1:6d:ab:5d:e0:1c:
                    80:7e:48:d7:52:21:2b:2d:0c:da:fd:d6:b3:90:c4:
                    57:1d:cc:49:ed:f4:14:c3:db:42:71:8a:12:89:f7:
                    67:0b:70:16:18:89:fe:26:6d:97:4e:97:df:03:46:
                    9f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B2:31:2B:4F:E8:7F:06:72:36:FB:88:7D:26:20:C4:F1:18:37:56
            X509v3 Authority Key Identifier:
                keyid:B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:52:4c:19:ed:a1:b1:4c:ba:00:80:c8:a7:75:39:26:7f:2f:
         42:fd:a7:63:5e:16:be:28:0d:be:b7:28:6f:01:d0:ee:4a:58:
         12:ab:78:d6:dc:41:d7:0a:f9:0f:37:dd:fb:6f:92:f3:7c:79:
         51:d3:11:ad:54:b1:81:49:bc:5a:52:f9:8c:25:bd:c2:33:7c:
         cd:84:8a:ec:64:eb:fb:d3:17:4c:8f:ba:ee:b1:39:f2:47:c9:
         ac:35:0b:5f:ba:c1:e8:67:88:dc:79:62:d7:dc:33:69:41:71:
         12:c1:ea:02:6d:88:ad:62:0a:cc:2d:0e:25:19:b7:c2:35:3a:
         d4:c0:26:8b:c6:6c:ad:5e:57:16:04:ad:53:46:48:39:51:e7:
         66:3d:c8:30:38:b3:04:82:77:75:ef:64:37:fe:37:e1:80:77:
         fd:9c:fd:c7:9d:07:9f:ae:21:80:ce:4c:6e:f0:ca:82:b9:8d:
         fa:f9:87:04:25:61:27:ee:30:6a:bd:40:b2:53:0c:05:bd:2d:
         ae:84:0b:e9:9b:2b:5d:87:a1:83:27:17:f0:71:24:c9:64:ea:
         66:46:28:8e:84:96:bb:4f:7b:25:82:22:af:dd:69:bf:83:27:
         2f:dc:61:a2:a8:5c:50:5b:c8:e9:6c:d0:12:8f:b8:27:0b:c4:
         ee:49:79:dc
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUC+oVVSKXNxR9NefmNxWdThuuVhAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0Ez
REIwMDQyNzAeFw0yNjEwMTExODE1NDlaFw0yNjEwMTQyMDIzNDlaMDMxMTAvBgNV
BAMTKDQwQjIzMTJCNEZFODdGMDY3MjM2RkI4ODdEMjYyMEM0RjExODM3NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlDYJu4ugUQca9MG2Y/dBDc4d4
/2qi37oOx5UqzbVlpkFQNng2C+79geuYgFnk3RNd29+KijcGhca5cIFgI/K3P++e
Ocom6PeFo3Pseuj50bUeIXIy90ZtG8pKowCUvzP0B1PfkNT8wLKhs3H26+R4sajY
nvzf3e4U0SzyBQsk2LK5JWAUE6+BGO97yd/xAU5+QlhWD/oNi2OgiJlrcCp9J/v0
HweaqnjRgTWsKtRrwA6v7zjXrNFggedlbXkyrdOjPsCBnQXNfQYrn8Ftq13gHIB+
SNdSISstDNr91rOQxFcdzEnt9BTD20JxihKJ92cLcBYYif4mbZdOl98DRp8LAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUQLIxK0/ofwZyNvuIfSYgxPEYN1YwHwYDVR0j
BBgwFoAUuMFQNpMhdrvk5yF+1Xcqyj2wBCcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTY5MDYyNi8wL0I4QzE1MDM2OTMyMTc2QkJFNEU3MjE3RUQ1Nzcy
QUNBM0RCMDA0MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0EzREIwMDQyNy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2OTA2MjYvMC9COEMxNTAzNjkzMjE3
NkJCRTRFNzIxN0VENTc3MkFDQTNEQjAwNDI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFJMGe2hsUy6
AIDIp3U5Jn8vQv2nY14WvigNvrcobwHQ7kpYEqt41txB1wr5Dzfd+2+S83x5UdMR
rVSxgUm8WlL5jCW9wjN8zYSK7GTr+9MXTI+67rE58kfJrDULX7rB6GeI3Hli19wz
aUFxEsHqAm2IrWIKzC0OJRm3wjU61MAmi8ZsrV5XFgStU0ZIOVHnZj3IMDizBIJ3
de9kN/434YB3/Zz9x50Hn64hgM5MbvDKgrmN+vmHBCVhJ+4war1AslMMBb0troQL
6ZsrXYehgycX8HEkyWTqZkYojoSWu097JYIir91pv4MnL9xhoqhcUFvI6WzQEo+4
JwvE7kl53A==
-----END CERTIFICATE-----
Generated at Mon Oct 12 04:37:45 2026 by rpki-client