Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
File:                     845BB307E2A1100E89FA0C939A9389686796F0F6.mft (raw, json)
Hash identifier:          lmKW0Ke7/qa60/SovLQOVk36+Rs8yzgLytuKsKA7728=
Subject key identifier:   2C:DE:29:9A:90:CE:9E:09:33:C5:C7:37:4C:2D:C2:14:AD:91:2F:CE
Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
Certificate issuer:       /CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Certificate serial:       10E9EEDFF1383103DB5EB88A189E192CFBCFC624
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
Manifest number:          0181
Signing time:             Sat 10 Oct 2026 06:04:21 +0000
Manifest this update:     Sat 10 Oct 2026 05:59:21 +0000
Manifest next update:     Tue 13 Oct 2026 10:17:21 +0000
Files and hashes:         1: AS38019.roa (hash: hSgYc8SlaFX6kU7qTh3IVn7SMvIUlxXB0vHo6MreoQU=)
                          2: AS23841.roa (hash: N3aPTwRv4oQ0jbeynPtTYUEcIvfsR9IeChMOO26Rmvc=)
                          3: AS146788.roa (hash: rVdRouxB5F2Bn88ZAEgt2PXhDEy2teygSVIxZd3/qt0=)
                          4: AS56047.roa (hash: gmqTZb2TqWCzDosogMfpPrVKyXw5NW2KOuPfbKMrxW4=)
                          5: AS56046.roa (hash: zW0iUbqlQ8uN9FYsso15mrFxcS5kb0AsmPWmXaSopDk=)
                          6: AS63621.roa (hash: kM/frUaMP1Tr3VyGU05ugFm4RA+5/q4Tfg29dOKr5Qk=)
                          7: AS56045.roa (hash: JhWIRgXmD/AAVpMY2itiLtwWBujQgPFnNfmralXfMzA=)
                          8: AS24423.roa (hash: /mGGTOyUKupdvXhHE7fZt5S0WBXZV1kFB0/ZuYXQQZc=)
                          9: AS17429.roa (hash: HN0dXbgZGSc9qnYjM1vDXhmsEXJFkHuKRf+Pfjocylk=)
                          10: AS134810.roa (hash: BGEXpEzwxeWMAoo8PozXmaSGYXVdMwou0IIAHhyKcVA=)
                          11: AS56040.roa (hash: lDlA8jvzb9VWKhxfKZykpCygX9ao6jxfTGriyR1nFTc=)
                          12: AS146838.roa (hash: MTCngMPNWmRnisx5hTizNPX+K8oCQs2lVT5mdlPUUpI=)
                          13: AS24445.roa (hash: 0V2TUk/phvgrWuzOENxfwPOK0acolB7D1baasQPhxWM=)
                          14: AS56041.roa (hash: cDJp82e4lKQT1ZQ0rKqPRItsjQKi5e97NaFO/XVYk5Y=)
                          15: AS56044.roa (hash: ju6hnW87+VxPZM0qz4L9gxI7v0Xt5hi5gCeAoAFVbuo=)
                          16: AS63540.roa (hash: A0fnLqo2aGScojf6EkdOg+7NgfJcql2OLZayOMQN4s0=)
                          17: 845BB307E2A1100E89FA0C939A9389686796F0F6.crl (hash: PTop7w5Vc5d671XnbhGiAavPfxCWpYuCOocuHi9SjpY=)
                          18: AS9808.roa (hash: zZfe/+qTYM62wyezIOZ8FVo94hNdVSlDvwJ8QBWElwA=)
                          19: AS56042.roa (hash: rfwfi/XCe7vmj/k8jgyQS6LeFmBcMItRekfElE+p7wc=)
                          20: AS56048.roa (hash: m5tp62yjwOzFChjQXqAFvM1PUtbqWVquyfStLbUXsFg=)
                          21: AS132525.roa (hash: +ZRxiwxXJxBFLETR69+vP/2wOS/8a67geZIh3B0WSMw=)
                          22: AS24400.roa (hash: 0+o85fkYpiIFCFMQljowAFtrY9bNhD+dDhNiB6TrxOw=)
                          23: AS24547.roa (hash: Xen7wwX9Xzx4GN3flNjS7P2Ugc4hiNYweJQlKQIi62g=)
                          24: AS24444.roa (hash: 4xfdUDbhWlqN6/ZuXJSIFl6uTalXsaIc5cKmnA9Xhuo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 09:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e9:ee:df:f1:38:31:03:db:5e:b8:8a:18:9e:19:2c:fb:cf:c6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6
        Validity
            Not Before: Oct 10 05:59:21 2026 GMT
            Not After : Oct 13 10:17:21 2026 GMT
        Subject: CN=2CDE299A90CE9E0933C5C7374C2DC214AD912FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6b:03:d0:9a:c7:6f:fb:8b:7e:70:e1:80:c1:
                    53:38:ae:75:bf:ac:81:c8:e7:21:3a:0a:17:16:2b:
                    a7:88:55:05:e6:32:fa:78:c6:19:ce:6e:18:08:45:
                    9f:fb:6f:28:6d:05:78:8d:b2:1c:28:c0:28:15:1a:
                    28:3b:45:b4:68:14:8e:95:b7:8c:49:e1:cf:5a:94:
                    dd:2f:0f:aa:8b:36:6e:00:6f:27:e7:bd:06:60:f7:
                    00:0b:07:b3:dd:b4:49:d0:dd:97:d7:d7:92:5f:50:
                    86:a0:55:46:7d:25:45:68:83:9e:08:3f:10:3a:68:
                    c4:6e:03:e8:49:22:cd:32:6a:bb:70:b7:7a:67:ea:
                    83:06:11:7d:08:35:c4:87:40:64:02:a6:bb:a3:71:
                    73:c0:31:36:9c:18:a5:b7:2a:ba:09:49:b5:ad:a2:
                    cb:be:b6:04:b5:51:30:fd:fe:9d:22:c3:f9:8f:3e:
                    ed:32:c7:bc:94:8d:40:99:d8:cb:c9:4c:3b:09:dd:
                    b7:0b:de:0d:2c:1f:e2:dc:58:14:fa:9d:ee:68:f2:
                    75:37:af:55:4c:72:8d:a4:60:7e:26:ec:c4:17:03:
                    a6:56:81:b1:b0:dc:96:3a:80:72:bf:07:fd:e0:0d:
                    8e:96:fc:8d:b0:51:dc:e4:a8:9f:65:2a:ae:6f:16:
                    2a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DE:29:9A:90:CE:9E:09:33:C5:C7:37:4C:2D:C2:14:AD:91:2F:CE
            X509v3 Authority Key Identifier:
                keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:63:4f:68:2d:bf:03:32:5f:92:e4:07:fb:e2:86:18:9a:2a:
         ad:5a:54:3a:d7:b9:2f:99:a2:00:23:99:61:45:91:a4:a8:5f:
         9c:7d:29:b4:4d:d5:2c:e8:89:7a:d4:84:fa:1b:b7:3a:e6:1d:
         57:40:09:06:9f:b6:18:29:65:93:4c:fc:89:71:69:14:1d:65:
         65:9d:0f:79:33:94:bc:25:ce:e5:e8:e9:95:1c:56:bc:85:c8:
         b1:f5:66:be:de:5d:5c:7e:2f:ff:a9:c2:8b:03:aa:23:da:46:
         7a:b9:cc:d0:e9:5a:8e:72:e5:ef:8d:80:33:b7:08:db:d5:40:
         77:35:04:0e:e4:2a:43:f4:06:00:69:05:a7:37:f0:92:e5:5c:
         69:db:b3:14:e3:92:25:e8:17:64:4f:dc:60:b8:cc:21:0c:a7:
         ed:f6:0c:a5:50:87:de:b8:b0:03:95:47:0a:d1:77:f3:ab:1a:
         9a:b1:8b:57:db:d9:11:6e:6d:f3:85:12:db:cd:99:5f:e9:7e:
         d2:fa:aa:2a:ac:8f:34:16:66:2a:ca:13:bc:bd:3d:9f:16:2d:
         73:f1:9e:a1:44:9f:2a:bd:3c:d2:42:a1:2f:67:38:f7:9d:a6:
         f0:27:d8:c3:37:ae:c1:f1:27:07:2f:bc:7f:03:47:e1:29:b4:
         9d:5d:02:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:49:08 2026 by rpki-client