Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
File:                     191E76D74421148B42FA2A7F663270AE7FAD25F9.mft (raw, json)
Hash identifier:          t/CC/Utt0/GWg+vt5Rg1lOKeBvfvZXCRERNmy9TAKgY=
Subject key identifier:   69:73:E0:7D:23:D6:75:80:2C:10:BE:03:D5:31:9B:10:43:D9:AF:44
Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
Certificate issuer:       /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Certificate serial:       4F1E6ED6C4DE1C2B03A3FC9E068FB5682B60FD93
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
Manifest number:          013D
Signing time:             Sun 11 Oct 2026 04:45:15 +0000
Manifest this update:     Sun 11 Oct 2026 04:40:15 +0000
Manifest next update:     Wed 14 Oct 2026 14:07:15 +0000
Files and hashes:         1: 191E76D74421148B42FA2A7F663270AE7FAD25F9.crl (hash: pv8o4hPcCx/OMK5xm3WEhVGhPpUlG1CB6K+vw9YT194=)
                          2: 3130332e3131362e3132312e302f32342d3234203d3e203633363534.roa (hash: vpD7NEE8qzM+eWphvno3vCArBIi9VdE9XjhBRn48b6k=)
                          3: 3130332e3131362e3132302e302f32342d3234203d3e203633363534.roa (hash: sjhYlFRils7TGbe4yrQB1MXoq74ExmSHsG4znfKuu7I=)
                          4: 3130332e3131362e3132332e302f32342d3234203d3e203633363534.roa (hash: 6OtEuNz2GVGLvEPnp1uI15Y+vgwMkKwikkqR/oRSa24=)
                          5: 3130332e3131362e3132312e302f32342d3234203d3e2034383437.roa (hash: bybvQVpDA62zpyPwHa1XWTYZhk2FjGjkQojOKPAlIPY=)
                          6: 3130332e3131362e3132332e302f32342d3234203d3e2034383437.roa (hash: iusd/geGAkaqNqYv0woWsgccBNM+keeMZWKm1FAoOOM=)
                          7: 3130332e3131362e3132302e302f32342d3234203d3e2034383437.roa (hash: zB7FMCFhHyOWYUyT241bOpU68Hl2jbAwsIx3PIajOso=)
                          8: 323430323a663963303a3a2f34382d3438203d3e20313337373937.roa (hash: Xa71V3zlzwJxLxJVMnOGWGmp2Wl6+BqPl/c74CX5nDA=)
                          9: 3130332e3131362e3132302e302f32322d3232203d3e203633363534.roa (hash: fLgddK5a5pen10EIOArIO5eS1Bvv0lSS9vSM6d0T0bw=)
                          10: 3130332e3131362e3132302e302f32332d3233203d3e203633363534.roa (hash: ayiRQLB0vCQOVj4IcpJdzMo4ohtXvgd7waElFg36mCA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 14:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1e:6e:d6:c4:de:1c:2b:03:a3:fc:9e:06:8f:b5:68:2b:60:fd:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
        Validity
            Not Before: Oct 11 04:40:15 2026 GMT
            Not After : Oct 14 14:07:15 2026 GMT
        Subject: CN=6973E07D23D675802C10BE03D5319B1043D9AF44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c7:23:a4:84:01:12:37:9e:b1:cb:cd:8e:2c:
                    b8:43:a6:81:41:74:ff:ed:68:73:82:8c:f4:4f:10:
                    94:2e:43:b3:34:8d:ff:01:ed:1b:b8:1a:4f:77:9e:
                    a7:72:65:ce:2e:ce:94:ce:53:6b:c1:bb:94:5e:8c:
                    fb:a9:f7:ae:16:2a:aa:c3:18:a5:7a:eb:d0:8c:36:
                    af:64:85:01:37:e9:38:8a:9d:dd:dc:9d:96:85:1c:
                    32:54:3a:e1:e7:5c:4a:02:69:70:ce:0f:ca:ae:ad:
                    ef:8f:e2:5f:ec:df:49:8f:e2:9f:bf:2c:48:02:7b:
                    7b:24:c0:51:06:d2:69:dd:6f:19:f9:9b:1e:3e:ad:
                    5c:f2:10:99:f4:b2:b4:39:0e:1a:f2:54:93:f3:2e:
                    94:83:ac:d0:2b:d8:0f:50:dc:69:0a:2b:67:1a:b2:
                    c4:60:9f:88:6c:bc:d4:50:b0:67:12:10:72:7c:8c:
                    7e:8e:92:05:94:d8:7a:3d:eb:71:e4:20:3b:e7:4c:
                    63:24:3c:04:0c:f5:33:08:96:65:ed:6b:23:fb:e5:
                    b9:ea:8c:c1:92:8b:48:f8:25:67:f5:91:6d:f1:f4:
                    06:34:12:86:59:51:17:58:3d:7d:73:ec:f9:1f:4a:
                    8e:e9:51:86:20:23:6b:56:7a:86:61:96:2b:26:fb:
                    7d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:73:E0:7D:23:D6:75:80:2C:10:BE:03:D5:31:9B:10:43:D9:AF:44
            X509v3 Authority Key Identifier:
                keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:80:97:65:8c:ce:58:6d:61:3d:d6:19:77:6e:b0:e7:fa:24:
         b0:4b:6e:60:b0:a3:c4:97:09:97:11:ac:a1:ff:aa:4b:72:94:
         88:49:17:45:fc:fc:7e:a4:d8:87:5b:d0:39:d6:bd:ae:59:d1:
         6e:9a:e2:f8:2f:34:4e:b9:d9:c3:11:60:f8:13:54:ad:2c:78:
         fc:a4:49:64:d9:68:49:22:ba:6b:31:de:82:6f:d5:00:3d:c4:
         82:ca:53:c8:ba:b8:77:b8:80:27:ec:a6:ca:e1:cb:3c:46:55:
         ca:38:99:51:07:23:ce:da:cf:13:9a:4b:05:62:ea:2b:ba:08:
         81:1e:69:e2:ed:da:b9:82:14:b5:56:f1:73:dd:58:d3:cd:b2:
         cb:60:47:11:3d:16:4e:0f:8b:4a:a1:76:7b:0c:22:e7:7e:38:
         84:d8:a4:1b:9f:cc:7e:d3:58:6e:97:83:64:36:86:08:48:43:
         1e:e8:6e:f4:69:00:46:80:18:56:8f:27:e6:a8:c0:92:63:07:
         3c:bf:f8:19:41:f4:4c:f2:ae:b1:4e:d0:9a:ca:5b:fc:0c:56:
         58:d7:17:ba:85:64:b8:45:04:e4:f6:ec:8a:9a:25:84:18:07:
         ae:72:57:dc:78:84:11:6c:78:0a:65:c4:ef:c5:22:73:95:a6:
         10:03:22:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 11:38:53 2026 by rpki-client