Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
File:                     A162689F28161D4D4C3DF339D95097D5EF647370.mft (raw, json)
Hash identifier:          CbBC+h2DuaS3pG2G9mt2ef4/rKuSNwAcg9p7/5HRN70=
Subject key identifier:   EC:BB:E2:97:4A:8E:CB:AB:C3:2B:61:65:9A:7D:8D:A4:98:20:E9:E6
Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Certificate issuer:       /CN=A162689F28161D4D4C3DF339D95097D5EF647370
Certificate serial:       7767AA9FCE4FECDBAD0FE6C3264A6C4B9FFE9782
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
Manifest number:          0148
Signing time:             Fri 23 Oct 2026 23:10:43 +0000
Manifest this update:     Fri 23 Oct 2026 23:05:43 +0000
Manifest next update:     Tue 27 Oct 2026 01:43:43 +0000
Files and hashes:         1: 3231312e3136312e3230392e302f32342d3234203d3e20313331353336.roa (hash: kWEzW9z+CT5ay6VmfWRWgY42vBwmJBNnIKHq7lgm+i8=)
                          2: 3132342e31342e382e302f32342d3234203d3e20313331353336.roa (hash: U6qXyW4djQVEWnom2YIf6YERnqKKkEMbFBwGjVK9L8w=)
                          3: 3132342e31342e352e302f32342d3234203d3e20313331353336.roa (hash: qCkf31qW56+BwVujsRBMC3+NyNTTMjYUeteTmbYcAZs=)
                          4: 3132342e31342e31332e302f32342d3234203d3e20313331353336.roa (hash: QC/RNF6fthoqyk0s4+w9CA9/N4e5bgB49YzS6M+25kM=)
                          5: 3231312e3136312e3139322e302f32322d3234203d3e20313331353336.roa (hash: v1k7FDQ/V16wN/n+YT+CgoPJnJorrs3kzHZsHjz4jHU=)
                          6: 3231312e3136312e3230332e302f32342d3234203d3e20313331353336.roa (hash: EUY+yW80diYWVuOiJtIlBhTG+YWMpD67vHScGqyUTZg=)
                          7: 3231312e3136312e3139322e302f32332d3233203d3e20313331353336.roa (hash: c5LlQRjDMIDPFYAA46Xq9/sJL6HBaBIS4V8SaP+8ikQ=)
                          8: 3231312e3136312e3130322e302f32332d3234203d3e20313331353336.roa (hash: Q8W+bSL4F/OrSPCAAw8jepeEoblyyZzumcKkNHNfksc=)
                          9: 3132342e31342e31322e302f32322d3234203d3e20313331353336.roa (hash: w67cbBWIps2lqPx9Dge6FJRm6CLOFI7zMSFt0Sxs0Ro=)
                          10: 3231312e3136312e3130312e302f32342d3234203d3e20313331353336.roa (hash: ii3JZMAtftwEr9yCKrIhjf4ILpgRV/V4U1+/dSss/xU=)
                          11: 3231312e3136312e3139342e302f32332d3233203d3e20313331353336.roa (hash: WriACry53SHuZAqaOHUmQZQBLKUHAPX8KbmqCW+xxjY=)
                          12: 3132342e31342e312e302f32342d3234203d3e20313331353336.roa (hash: gqfAZi5D9eRLNFfiI6sUq/JBgetsWJmrTB3FKlauctU=)
                          13: 3132342e31342e31362e302f32312d3234203d3e20313331353336.roa (hash: r6yu3Jn4CZw5sx0P3bx9jJxyvhFz8i1HoZ9GkNk6u3w=)
                          14: A162689F28161D4D4C3DF339D95097D5EF647370.crl (hash: FWO4h/dm49Ced/aYj3Mr+ByDrp7MbNTH69MgSJgm8MA=)
                          15: 3231312e3136312e3232312e302f32342d3234203d3e20313331353336.roa (hash: HJttaNOAYXD3fpbBJQqAMDoPxtoi8sq6TnfqmNGwbbI=)
                          16: 3132342e31342e31302e302f32342d3234203d3e20313331353336.roa (hash: bspg306c0D2jxX1n5EIMk8aNVY1DeCMk2D8krhmDj0M=)
                          17: 3132342e31342e372e302f32342d3234203d3e20313331353336.roa (hash: CsiJAib13bjqRBlimbK3uTYoMIBIKwMNewp2EygK87w=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 17:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:67:aa:9f:ce:4f:ec:db:ad:0f:e6:c3:26:4a:6c:4b:9f:fe:97:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370
        Validity
            Not Before: Oct 23 23:05:43 2026 GMT
            Not After : Oct 27 01:43:43 2026 GMT
        Subject: CN=ECBBE2974A8ECBABC32B61659A7D8DA49820E9E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d7:f7:e5:33:ca:82:04:7f:1a:25:84:92:87:
                    b0:c2:7e:bd:b0:49:d8:bc:ba:c8:a0:08:d7:8b:ee:
                    95:38:d2:36:80:7d:74:3c:20:11:38:75:e6:55:1c:
                    d9:1a:6a:30:e1:9f:18:3d:8a:cb:e2:2f:56:8b:d5:
                    1a:c2:b5:96:c7:1e:8b:a7:c2:1c:06:a0:6e:05:40:
                    5b:19:93:71:8f:5a:00:39:83:48:9a:08:5e:1c:db:
                    fd:62:53:c9:5f:99:53:67:4f:6f:e7:a6:41:b5:74:
                    38:ce:e5:71:38:9b:96:8c:e8:dd:bf:79:0f:95:09:
                    e9:20:a0:05:bf:09:14:6d:92:00:3b:4e:41:93:10:
                    51:22:aa:60:09:89:ed:80:d7:fa:51:a7:43:07:18:
                    89:7e:9d:df:83:02:18:cd:71:4e:34:2c:d0:a7:a1:
                    b1:90:54:fb:45:0c:88:3a:4c:4a:4f:89:ee:58:82:
                    3d:54:c4:10:79:ad:95:36:a5:ae:ef:28:19:b5:8e:
                    4b:ca:70:92:f4:88:4b:80:d5:19:ae:37:63:31:b7:
                    2b:39:2d:a0:2c:25:92:bb:3e:49:31:1d:11:0a:40:
                    df:c5:16:b9:68:56:5a:2f:26:2e:0c:be:b2:5d:0d:
                    7d:6e:90:62:34:1a:30:53:ca:21:b0:83:28:b4:e7:
                    3c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BB:E2:97:4A:8E:CB:AB:C3:2B:61:65:9A:7D:8D:A4:98:20:E9:E6
            X509v3 Authority Key Identifier:
                keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:55:97:7c:ec:53:f6:ce:82:66:24:2f:22:7e:16:3f:62:2a:
         64:d9:23:7f:32:ac:67:b0:79:7b:56:ed:4b:ef:67:e3:db:1f:
         8a:e0:52:77:8c:4a:6b:d5:82:a8:48:9f:44:61:59:80:42:3c:
         12:c1:f6:83:b0:df:48:82:ff:91:70:35:dc:af:08:d1:92:8a:
         61:47:a3:23:12:f9:9b:93:ec:02:ea:79:ca:73:db:ce:3c:76:
         9b:0c:d1:5c:a2:66:2d:a7:5b:5c:35:be:4d:a9:f8:41:3c:a8:
         14:c5:31:bb:ee:9d:cc:7f:ba:0a:f5:bb:5f:3d:2e:c7:70:65:
         1a:38:ad:a4:36:dd:77:13:54:d3:5d:aa:e9:57:e7:b2:31:18:
         70:68:30:40:3a:e1:9c:b0:1e:0a:81:e3:cd:81:31:a5:2c:f1:
         1b:bf:ec:c7:3d:e8:b1:ee:06:4e:4d:1c:db:f5:ce:95:75:6e:
         b9:a0:aa:b8:af:05:26:2b:dd:a6:6c:3a:78:ce:db:c5:4d:38:
         7e:47:0f:de:d3:c0:ce:6b:67:d2:b8:9c:a1:62:75:1d:66:b9:
         ce:66:ac:a7:6f:50:e0:f3:cf:fd:1f:cf:03:c9:b8:1b:a0:b2:
         81:3a:68:89:1e:04:df:99:1e:4a:b5:fa:1e:c7:b0:e9:ba:a4:
         5b:2f:0d:b6
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUd2eqn85P7NutD+bDJkpsS5/+l4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE2MjY4OUYyODE2MUQ0RDRDM0RGMzM5RDk1MDk3RDVF
RjY0NzM3MDAeFw0yNjEwMjMyMzA1NDNaFw0yNjEwMjcwMTQzNDNaMDMxMTAvBgNV
BAMTKEVDQkJFMjk3NEE4RUNCQUJDMzJCNjE2NTlBN0Q4REE0OTgyMEU5RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz1/flM8qCBH8aJYSSh7DCfr2w
Sdi8usigCNeL7pU40jaAfXQ8IBE4deZVHNkaajDhnxg9isviL1aL1RrCtZbHHoun
whwGoG4FQFsZk3GPWgA5g0iaCF4c2/1iU8lfmVNnT2/npkG1dDjO5XE4m5aM6N2/
eQ+VCekgoAW/CRRtkgA7TkGTEFEiqmAJie2A1/pRp0MHGIl+nd+DAhjNcU40LNCn
obGQVPtFDIg6TEpPie5Ygj1UxBB5rZU2pa7vKBm1jkvKcJL0iEuA1RmuN2Mxtys5
LaAsJZK7PkkxHREKQN/FFrloVlovJi4MvrJdDX1ukGI0GjBTyiGwgyi05zzdAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU7Lvil0qOy6vDK2Flmn2NpJgg6eYwHwYDVR0j
BBgwFoAUoWJonygWHU1MPfM52VCX1e9kc3AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0NjkzMDE3Ny8wL0ExNjI2ODlGMjgxNjFENEQ0QzNERjMzOUQ5NTA5
N0Q1RUY2NDczNzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTE2MjY4OUYyODE2MUQ0RDRDM0RGMzM5RDk1MDk3RDVFRjY0NzM3MC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY5MzAxNzcvMC9BMTYyNjg5RjI4MTYx
RDRENEMzREYzMzlEOTUwOTdENUVGNjQ3MzcwLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblWXfOxT9s6C
ZiQvIn4WP2IqZNkjfzKsZ7B5e1btS+9n49sfiuBSd4xKa9WCqEifRGFZgEI8EsH2
g7DfSIL/kXA13K8I0ZKKYUejIxL5m5PsAup5ynPbzjx2mwzRXKJmLadbXDW+Tan4
QTyoFMUxu+6dzH+6CvW7Xz0ux3BlGjitpDbddxNU012q6VfnsjEYcGgwQDrhnLAe
CoHjzYExpSzxG7/sxz3ose4GTk0c2/XOlXVuuaCquK8FJivdpmw6eM7bxU04fkcP
3tPAzmtn0ricoWJ1HWa5zmasp29Q4PPP/R/PA8m4G6CygTpoiR4E35keSrX6Hsew
6bqkWy8Ntg==
-----END CERTIFICATE-----
Generated at Sun Oct 25 04:05:38 2026 by rpki-client