Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
File:                     B043593F306D7500D228434C9973B1B9635461AB.mft (raw, json)
Hash identifier:          4ZqkPQIRZMutaMzThNFSqH8TFHtRQzi4MKqML1TWwS4=
Subject key identifier:   22:C7:A7:88:E3:AC:2F:51:13:D7:9B:03:90:9A:AF:81:A9:4C:C7:4A
Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
Certificate issuer:       /CN=B043593F306D7500D228434C9973B1B9635461AB
Certificate serial:       2FBE94AEFEC332CE4FB06E7B89B54C6BD40841D0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
Manifest number:          014F
Signing time:             Tue 13 Oct 2026 09:12:53 +0000
Manifest this update:     Tue 13 Oct 2026 09:07:53 +0000
Manifest next update:     Fri 16 Oct 2026 14:21:53 +0000
Files and hashes:         1: 3130332e39372e35362e302f32322d3234203d3e20313534333231.roa (hash: QqJ3R5W2How+7uP9agPUraemtQFHCGucq2fyLlrsIQs=)
                          2: B043593F306D7500D228434C9973B1B9635461AB.crl (hash: MV5ZD3KQRT+1xJ5HK+gKq/DnQczHyOm4Y7J/XWsnT0I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 01:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:be:94:ae:fe:c3:32:ce:4f:b0:6e:7b:89:b5:4c:6b:d4:08:41:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB
        Validity
            Not Before: Oct 13 09:07:53 2026 GMT
            Not After : Oct 16 14:21:53 2026 GMT
        Subject: CN=22C7A788E3AC2F5113D79B03909AAF81A94CC74A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:e5:96:0e:57:64:31:fb:83:d0:3c:51:01:
                    04:13:56:99:29:0d:73:16:c9:7b:61:81:74:b6:39:
                    74:36:cd:aa:66:00:21:1d:82:9e:bc:5a:79:2b:23:
                    5d:b0:db:3e:49:84:2a:97:71:b6:d6:1a:9a:92:05:
                    76:58:9b:12:71:86:2d:1a:11:16:cd:e1:1a:41:85:
                    43:3d:5d:67:9c:c0:21:62:0f:e7:95:7b:94:f5:d1:
                    f8:6c:4c:f4:3f:cf:45:c9:fe:1d:3f:f6:23:e7:6d:
                    de:32:6f:e3:d0:df:e5:0b:b8:6b:6b:16:0e:cb:7c:
                    92:a6:eb:d3:e7:41:7d:d5:09:7c:b2:ca:a0:63:52:
                    54:97:47:fc:2b:5e:06:6b:be:cf:7b:7e:e9:66:79:
                    18:7d:85:21:95:9e:8c:f3:cb:79:18:1c:2e:e3:86:
                    0a:b2:ca:0e:29:13:3d:71:62:c3:55:9e:09:84:1a:
                    08:00:aa:fd:d6:68:a1:f4:42:8a:7a:9a:a8:1c:df:
                    2f:f8:16:a1:b4:3e:88:00:98:b2:0f:6f:32:eb:b0:
                    17:a2:84:f5:c6:fe:c4:33:a3:a1:d4:8f:31:8f:2e:
                    e2:4d:44:82:86:6f:8a:8a:c2:64:b1:c7:a7:10:b7:
                    1c:f6:41:0e:88:9b:ee:b5:53:9d:a2:bf:3b:d1:a1:
                    fb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C7:A7:88:E3:AC:2F:51:13:D7:9B:03:90:9A:AF:81:A9:4C:C7:4A
            X509v3 Authority Key Identifier:
                keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:a4:a5:f8:0e:9b:13:9f:ef:fb:18:b1:8f:48:e0:81:8a:03:
         3e:18:5b:e0:ae:a0:41:c6:0c:3c:a9:0f:0c:58:52:24:6a:1e:
         ed:7f:17:86:65:3f:5a:35:34:33:7d:d8:89:5f:ed:6c:5d:07:
         0c:bc:ef:14:4f:99:c1:bb:e7:d5:5f:e0:62:a4:a1:91:3a:a9:
         d9:1e:99:52:11:cd:03:dd:d3:3e:20:8a:e8:b5:a9:6d:bd:f7:
         dc:ed:dc:a4:72:21:91:d5:5a:45:e8:74:ed:81:a3:59:ca:e9:
         98:ac:e0:8c:ee:32:d6:62:6e:0e:08:2f:ad:62:f0:c4:14:52:
         ff:fb:07:b6:55:e2:2e:12:9b:b0:3b:cc:68:14:0d:87:44:0a:
         81:51:d5:f0:c0:8d:26:a9:7f:a4:7b:65:14:b0:e2:d2:3e:a1:
         47:d6:e3:88:98:f5:90:ad:66:8f:b4:5d:10:d1:59:bb:d0:6d:
         74:cb:20:09:14:7a:5c:dc:04:37:cc:97:12:1b:a3:c5:0d:36:
         1d:b6:3c:43:23:d4:32:76:da:24:0f:45:cd:1f:08:d5:ae:f0:
         06:21:80:01:bb:18:e4:42:5c:82:c4:3a:32:ff:bb:64:8e:da:
         fb:bb:91:ee:4f:f6:3f:b3:20:27:f7:49:af:43:2f:96:84:32:
         9a:38:21:4f
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUL76Urv7DMs5PsG57ibVMa9QIQdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2
MzU0NjFBQjAeFw0yNjEwMTMwOTA3NTNaFw0yNjEwMTYxNDIxNTNaMDMxMTAvBgNV
BAMTKDIyQzdBNzg4RTNBQzJGNTExM0Q3OUIwMzkwOUFBRjgxQTk0Q0M3NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9kOWWDldkMfuD0DxRAQQTVpkp
DXMWyXthgXS2OXQ2zapmACEdgp68WnkrI12w2z5JhCqXcbbWGpqSBXZYmxJxhi0a
ERbN4RpBhUM9XWecwCFiD+eVe5T10fhsTPQ/z0XJ/h0/9iPnbd4yb+PQ3+ULuGtr
Fg7LfJKm69PnQX3VCXyyyqBjUlSXR/wrXgZrvs97fulmeRh9hSGVnozzy3kYHC7j
hgqyyg4pEz1xYsNVngmEGggAqv3WaKH0Qop6mqgc3y/4FqG0PogAmLIPbzLrsBei
hPXG/sQzo6HUjzGPLuJNRIKGb4qKwmSxx6cQtxz2QQ6Im+61U52ivzvRofs/AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUIseniOOsL1ET15sDkJqvgalMx0owHwYDVR0j
BBgwFoAUsENZPzBtdQDSKENMmXOxuWNUYaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODMzNTUyNTE2NzEwNS8wL0IwNDM1OTNGMzA2RDc1MDBEMjI4NDM0Qzk5NzNC
MUI5NjM1NDYxQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2MzU0NjFBQi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUxNjcxMDUvMC9CMDQzNTkzRjMwNkQ3
NTAwRDIyODQzNEM5OTczQjFCOTYzNTQ2MUFCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKSl+A6bE5/v
+xixj0jggYoDPhhb4K6gQcYMPKkPDFhSJGoe7X8XhmU/WjU0M33YiV/tbF0HDLzv
FE+Zwbvn1V/gYqShkTqp2R6ZUhHNA93TPiCK6LWpbb333O3cpHIhkdVaReh07YGj
WcrpmKzgjO4y1mJuDggvrWLwxBRS//sHtlXiLhKbsDvMaBQNh0QKgVHV8MCNJql/
pHtlFLDi0j6hR9bjiJj1kK1mj7RdENFZu9BtdMsgCRR6XNwEN8yXEhujxQ02HbY8
QyPUMnbaJA9FzR8I1a7wBiGAAbsY5EJcgsQ6Mv+7ZI7a+7uR7k/2P7MgJ/dJr0Mv
loQymjghTw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 21:13:31 2026 by rpki-client