Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft
File:                     95AFB4515D628A1186D20869CFEAF47D559D5337.mft (raw, json)
Hash identifier:          BmsdClczXTAGgCqk6h2uVbJIa6h8+CIDg7FiMRzyCPc=
Subject key identifier:   69:7A:12:AE:01:04:ED:A2:28:0C:00:A5:C4:3A:D7:18:7D:84:5A:C1
Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37
Certificate issuer:       /CN=95AFB4515D628A1186D20869CFEAF47D559D5337
Certificate serial:       2D6AFA0ED3C88388C3DF901AD2AA8B9B671A24A5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft
Manifest number:          013A
Signing time:             Wed 30 Sep 2026 23:23:39 +0000
Manifest this update:     Wed 30 Sep 2026 23:18:39 +0000
Manifest next update:     Sun 04 Oct 2026 11:14:39 +0000
Files and hashes:         1: 3231312e3136312e3232372e302f32342d3234203d3e20323035353438.roa (hash: Ln2h1DObADPae64oImYFdKQ5uHj+DhkSUyON4jZ4kMU=)
                          2: 3130332e3233362e35362e302f32322d3234203d3e2034383136.roa (hash: nU9td8FSbjkxq8qr2OaWckCpycvpgcxXULdnzQhot1w=)
                          3: 3130332e3233362e36302e302f32322d3234203d3e2034383136.roa (hash: p2Lh6mSEt8F+Pz43e7M48ZQE8zJIT8aede1FEWphpKg=)
                          4: 3130332e3130392e32302e302f32322d3234203d3e2034383136.roa (hash: Ir54i6mCJphe0tTKRNEplWXjiN5Eyqy0jZSjS9oxoak=)
                          5: 3231312e3136312e3232342e302f32302d3234203d3e2034383136.roa (hash: 7ESkoMdtrmm8SQWjAiVoIXlCHKhBj+bnSHyVsBLhiTg=)
                          6: 3130332e3233362e35322e302f32322d3234203d3e2034383136.roa (hash: L/Cnxt0IMPqrkk567v66pELmHjh0mHTQ9LGRguxjotg=)
                          7: 3130332e3233362e36342e302f32322d3234203d3e2034383136.roa (hash: 9KFTHxz/y51ykUofxUnbpegbRUp/wwAex2kCfyHmCB0=)
                          8: 95AFB4515D628A1186D20869CFEAF47D559D5337.crl (hash: cLBfOwNewQrf4Yq2Vu2q97r+vwDhkw6fh2lBg5+HaKc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 05:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6a:fa:0e:d3:c8:83:88:c3:df:90:1a:d2:aa:8b:9b:67:1a:24:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337
        Validity
            Not Before: Sep 30 23:18:39 2026 GMT
            Not After : Oct  4 11:14:39 2026 GMT
        Subject: CN=697A12AE0104EDA2280C00A5C43AD7187D845AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:11:01:50:10:02:83:34:1b:1f:ac:73:a4:
                    2c:ad:14:d2:03:fe:7a:33:62:cd:44:e2:38:86:4a:
                    a1:88:0d:14:a8:c3:86:27:4d:c1:44:1b:34:5e:ef:
                    6e:c5:34:e7:be:1b:d4:88:7b:af:30:b7:69:cb:20:
                    5c:6c:40:41:ad:55:7a:89:fd:3c:7b:91:a6:3b:6e:
                    4a:4b:76:2a:2e:46:b8:b2:26:7f:27:ae:ad:16:5e:
                    f7:20:79:21:3c:bb:8b:8f:91:48:6d:13:5f:f4:6f:
                    86:15:ac:92:be:2e:84:5e:c0:31:0d:2a:19:b0:e2:
                    c4:31:f6:0a:7d:2d:68:49:50:44:16:ae:f1:2f:9a:
                    d5:2c:c0:0b:6a:69:bf:d5:01:16:fc:48:1b:50:11:
                    00:29:d3:86:e6:37:13:5a:c6:bd:a1:f5:6b:26:f3:
                    18:06:f3:08:ca:0e:ed:b1:70:b6:e8:44:23:dc:3b:
                    c0:e8:e0:cc:3b:2c:dc:5d:93:cf:82:ff:25:90:42:
                    4b:b0:63:cc:79:6f:dc:a2:63:fe:09:13:9c:77:64:
                    af:b3:c5:35:b2:21:bb:21:91:59:b3:b0:ef:2e:48:
                    0d:b7:eb:d6:21:33:46:cb:73:fd:d3:16:a9:f1:a2:
                    fe:91:22:7e:d5:a7:03:82:c6:6c:ec:6f:f7:60:1c:
                    74:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7A:12:AE:01:04:ED:A2:28:0C:00:A5:C4:3A:D7:18:7D:84:5A:C1
            X509v3 Authority Key Identifier:
                keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:6c:80:a0:47:8d:26:77:4f:79:c2:de:e3:27:a1:b3:ae:6a:
         70:c2:0e:e2:d6:71:fc:8f:89:ca:5f:05:3f:db:06:32:b8:c4:
         5e:c3:8d:2c:21:98:b3:54:34:7d:67:53:3b:1f:50:9f:05:d3:
         17:71:c5:e1:c3:89:7e:f6:4f:41:12:6b:f6:be:ec:cb:1d:42:
         d8:1b:ad:03:84:28:45:45:6f:11:5b:c4:5e:86:f8:3f:d2:46:
         1d:c9:d1:ab:7e:4e:d0:60:41:6c:e5:2d:1e:c3:11:4c:4b:c6:
         33:90:90:91:d0:44:9f:e4:24:a2:60:e9:2d:8e:1f:9c:16:1a:
         24:13:ef:5a:b1:f4:c8:1b:66:a9:1e:be:fd:69:2d:04:22:ec:
         10:8e:8e:9c:e0:6b:73:dc:70:b0:5d:6b:73:a1:46:d8:0e:3f:
         82:4c:d0:0d:59:a4:c2:7d:8b:d5:ba:97:86:ea:ad:d2:15:78:
         06:67:48:4f:c9:74:e9:20:07:33:87:a8:05:cc:37:0f:dd:8b:
         9f:f7:23:7e:13:f3:43:7b:87:de:96:cc:15:19:de:59:c4:c9:
         4f:55:8b:f4:1b:9d:e7:08:80:b5:49:56:74:f9:b2:61:19:23:
         a4:13:5c:64:ff:ed:7d:de:bd:63:77:28:66:24:5e:cb:42:e0:
         17:33:73:53
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIULWr6DtPIg4jD35Aa0qqLm2caJKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1
NTlENTMzNzAeFw0yNjA5MzAyMzE4MzlaFw0yNjEwMDQxMTE0MzlaMDMxMTAvBgNV
BAMTKDY5N0ExMkFFMDEwNEVEQTIyODBDMDBBNUM0M0FENzE4N0Q4NDVBQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2SBEBUBACgzQbH6xzpCytFNID
/nozYs1E4jiGSqGIDRSow4YnTcFEGzRe727FNOe+G9SIe68wt2nLIFxsQEGtVXqJ
/Tx7kaY7bkpLdiouRriyJn8nrq0WXvcgeSE8u4uPkUhtE1/0b4YVrJK+LoRewDEN
Khmw4sQx9gp9LWhJUEQWrvEvmtUswAtqab/VARb8SBtQEQAp04bmNxNaxr2h9Wsm
8xgG8wjKDu2xcLboRCPcO8Do4Mw7LNxdk8+C/yWQQkuwY8x5b9yiY/4JE5x3ZK+z
xTWyIbshkVmzsO8uSA2369YhM0bLc/3TFqnxov6RIn7VpwOCxmzsb/dgHHSTAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUaXoSrgEE7aIoDAClxDrXGH2EWsEwHwYDVR0j
BBgwFoAUla+0UV1iihGG0ghpz+r0fVWdUzcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzUyMDY0My8wLzk1QUZCNDUxNUQ2MjhBMTE4NkQyMDg2OUNGRUFG
NDdENTU5RDUzMzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1MjA2NDMvMC85NUFGQjQ1MTVENjI4
QTExODZEMjA4NjlDRkVBRjQ3RDU1OUQ1MzM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmyAoEeNJndP
ecLe4yehs65qcMIO4tZx/I+Jyl8FP9sGMrjEXsONLCGYs1Q0fWdTOx9QnwXTF3HF
4cOJfvZPQRJr9r7syx1C2ButA4QoRUVvEVvEXob4P9JGHcnRq35O0GBBbOUtHsMR
TEvGM5CQkdBEn+QkomDpLY4fnBYaJBPvWrH0yBtmqR6+/WktBCLsEI6OnOBrc9xw
sF1rc6FG2A4/gkzQDVmkwn2L1bqXhuqt0hV4BmdIT8l06SAHM4eoBcw3D92Ln/cj
fhPzQ3uH3pbMFRneWcTJT1WL9Bud5wiAtUlWdPmyYRkjpBNcZP/tfd69Y3coZiRe
y0LgFzNzUw==
-----END CERTIFICATE-----
Generated at Thu Oct 1 07:33:34 2026 by rpki-client