Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
File:                     19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft (raw, json)
Hash identifier:          piSPNeZ/H7J3aINlzGZHYpSxgWicDWqIFq07iGh9Kys=
Subject key identifier:   87:0B:0E:98:32:8C:AF:A0:CD:FA:33:CD:F1:ED:C9:2E:BF:4F:EB:4D
Authority key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD
Certificate issuer:       /CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
Certificate serial:       533A35D4261534A27BD6FD30B65CC77A6969763C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
Manifest number:          013C
Signing time:             Wed 14 Oct 2026 13:44:12 +0000
Manifest this update:     Wed 14 Oct 2026 13:39:12 +0000
Manifest next update:     Sat 17 Oct 2026 17:22:12 +0000
Files and hashes:         1: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl (hash: /AiJOBlhpnkyS20E1Byg1chClarj/MO5ACZI5FvZJNA=)
                          2: 3134342e37392e31302e302f32332d3234203d3e20313531323531.roa (hash: WjMCSVc2nZ6LHlmIFS3fh2fKf0RsOi1ahfbmP+aZL0U=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 14:29:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3a:35:d4:26:15:34:a2:7b:d6:fd:30:b6:5c:c7:7a:69:69:76:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
        Validity
            Not Before: Oct 14 13:39:12 2026 GMT
            Not After : Oct 17 17:22:12 2026 GMT
        Subject: CN=870B0E98328CAFA0CDFA33CDF1EDC92EBF4FEB4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9e:cb:26:43:07:a1:a3:d9:20:36:49:6f:ea:
                    a4:10:78:63:df:c0:c5:53:2d:cc:2f:7f:c5:91:53:
                    16:2a:c5:28:17:cf:0e:cf:c9:09:0a:7a:2f:6e:93:
                    c6:01:70:98:db:df:e8:e2:e1:fc:e4:52:6f:10:aa:
                    bb:79:7c:ee:8f:a5:77:61:79:1f:18:28:22:bb:97:
                    d5:b4:84:d0:36:50:71:c2:44:6c:c5:49:3e:45:a7:
                    db:4f:97:2e:34:82:34:bc:9f:b4:8c:bd:81:2a:ed:
                    ce:b9:1b:0d:40:53:66:61:57:b9:50:8a:f1:08:2b:
                    a4:ff:c1:bc:50:71:b5:9f:f0:20:c6:84:1b:66:e7:
                    68:18:b7:b9:90:9c:8c:cb:4f:28:53:a0:95:a8:7e:
                    7e:4b:08:9b:1f:6a:d8:3e:06:8f:8d:dc:26:ab:19:
                    be:af:da:40:6b:2b:e7:e3:ab:aa:54:0b:72:03:4b:
                    c7:4d:42:aa:74:20:da:8e:ee:83:0a:aa:96:d7:a7:
                    3e:51:e8:68:04:47:56:e0:4c:08:3a:3a:33:e3:78:
                    04:f8:67:60:ff:8e:72:45:29:c4:81:8f:9b:c5:0a:
                    62:89:44:71:d5:72:74:f9:ea:99:60:fa:03:a1:0d:
                    47:e3:6c:84:e8:d9:e1:29:d7:7e:ca:95:a5:e6:3f:
                    48:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0B:0E:98:32:8C:AF:A0:CD:FA:33:CD:F1:ED:C9:2E:BF:4F:EB:4D
            X509v3 Authority Key Identifier:
                keyid:19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:69:2f:7c:c1:17:63:fa:2b:2c:6d:26:ea:f8:f1:69:c6:d1:
         e1:26:35:fc:d4:6c:ad:9b:6b:95:25:e8:ab:57:5b:03:95:25:
         29:08:40:16:a6:cd:b2:d0:b3:96:d0:62:b6:79:10:3d:6c:fe:
         94:1a:6e:e8:2e:f6:ab:89:4d:8c:e8:91:8f:26:ad:70:b7:0e:
         b1:bb:74:29:79:c8:76:f5:7e:15:63:08:17:b7:28:ef:f1:14:
         78:7e:53:51:f9:fc:35:99:22:4b:77:a8:fe:79:f3:e0:47:07:
         dc:9f:e9:34:3a:08:02:24:ff:ef:1f:1a:fc:de:76:10:90:5b:
         20:a5:43:96:6d:da:10:ca:a6:68:a5:2b:7f:1e:02:24:3e:80:
         fc:95:8c:d9:ec:34:09:30:17:88:6c:96:26:37:41:e7:81:cc:
         ca:94:98:38:95:00:96:c3:89:b6:93:28:c0:bd:e4:83:86:1f:
         66:a7:fb:f4:79:c7:73:72:f4:ee:29:75:ea:f2:6d:de:6c:36:
         ba:df:87:c7:bb:45:3d:c3:0b:ca:aa:56:50:65:f4:b7:b0:1d:
         f6:2f:a2:98:e5:e3:33:fc:f6:fb:46:74:a2:2a:d7:89:c2:3c:
         ac:dd:a3:8f:76:df:75:67:bb:ca:6e:2c:dd:2d:5c:f8:aa:97:
         9a:85:ac:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:30:16 2026 by rpki-client