Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
File:                     A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft (raw, json)
Hash identifier:          K1cA1/brk3zeH8MTHjXbDszn9ZCKLdfbZNSOBVhDoXM=
Subject key identifier:   47:F1:C4:0A:15:95:64:64:60:78:7A:48:FF:B7:E2:AC:66:F8:60:F4
Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29
Certificate issuer:       /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
Certificate serial:       3B3F168100FF0965D87ABF894E3413926031B859
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
Manifest number:          0162
Signing time:             Thu 08 Oct 2026 02:22:06 +0000
Manifest this update:     Thu 08 Oct 2026 02:17:06 +0000
Manifest next update:     Sun 11 Oct 2026 05:36:06 +0000
Files and hashes:         1: 34372e3131322e302e302f31362d3234203d3e203337393633.roa (hash: 9TzYa3+Sl+tIX8tXSaj70/Us2wMIqXbVo3JClonsi1M=)
                          2: 34372e39362e302e302f31352d3234203d3e203337393633.roa (hash: qCOeajORd8EdADqBCDEKYOaZ9qR0x8mo50AIxKKf2kk=)
                          3: 34372e39382e302e302f31352d3234203d3e203337393633.roa (hash: iwjVE24waqNRMxAnsWWloR6ZemTe2jtU1nDhdHBmFDE=)
                          4: 34372e39322e302e302f31342d3234203d3e203337393633.roa (hash: d0QnujeLIiBwhkySIvzmuDq1uWWqMCzgEV4dGlw/0i4=)
                          5: 34372e3131332e302e302f31362d3234203d3e203337393633.roa (hash: Sc9B64EYbOlhHpRQn2hDIXOE8wTsYGOAnrQ1OGOsB2U=)
                          6: A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl (hash: PTmpVYviCO4/qVidzBwaNcST91yShpt8PhroJZ7+C2Y=)
                          7: 34372e3131322e302e302f31322d3234203d3e203337393633.roa (hash: XnzoRBbJbU4JSck0zmxm+ruNtxcM8ugi+pAaXFexVd8=)
                          8: 34372e3131322e302e302f31352d3135203d3e203337393633.roa (hash: oc0h7t2xyM1D/ueNRTcOjQuhsadrMwiGPusBtoLIrSY=)
                          9: 3133392e3232342e302e302f31362d3234203d3e203337393633.roa (hash: nfA+B4HJUdTdXpxBunZTC0Mmi3ww7Q0Bo7aWuz3zYNE=)
                          10: 34372e3130342e302e302f31332d3234203d3e203337393633.roa (hash: rwAzS9Eef9SzzpYNpqYqgoG+OJgKFf8Bv5eIn0vr0Fs=)
                          11: 34372e3130302e302e302f31342d3234203d3e203337393633.roa (hash: ppj+TlXCIrAcPf1eMhGWrhP2Ij9TixTm3BfPz4IPvbI=)
                          12: 3133392e3132392e302e302f31362d3234203d3e203337393633.roa (hash: lmfFy/NByxflwbukOBqf2t5cvYb0y1mEUQilr1j5wEw=)
                          13: 3133392e3139362e302e302f31362d3234203d3e203337393633.roa (hash: 19ycWnE82ngKdpq5CfFKBBUaYUxLiUYMUdelOP4EkI8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 05:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3f:16:81:00:ff:09:65:d8:7a:bf:89:4e:34:13:92:60:31:b8:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
        Validity
            Not Before: Oct  8 02:17:06 2026 GMT
            Not After : Oct 11 05:36:06 2026 GMT
        Subject: CN=47F1C40A1595646460787A48FFB7E2AC66F860F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:36:8a:a3:4e:94:46:b3:b4:b6:37:65:eb:70:
                    7d:e8:29:8a:65:41:94:f1:49:f8:69:4a:e3:0f:ae:
                    d9:91:ab:36:da:aa:f5:48:db:7c:fb:9d:c9:07:b0:
                    c4:d9:4b:0a:c8:6d:0b:3f:14:e4:06:89:9f:eb:87:
                    35:fa:77:d7:e6:cb:d2:37:bd:bb:d7:50:a5:5a:4a:
                    b2:a2:04:c2:99:ee:f7:07:62:c0:5c:f3:00:37:dd:
                    51:e3:8e:7e:b4:a9:7b:62:cd:1a:aa:7c:d2:6e:73:
                    9d:83:12:b3:a3:bd:cc:e5:86:34:d4:90:74:e8:ba:
                    7f:6a:6e:f2:e3:8a:59:48:61:b5:de:f3:eb:56:74:
                    e7:67:36:6f:56:a4:1d:6d:6b:17:31:fe:50:43:c3:
                    08:a1:44:48:d4:a0:a7:7a:6b:13:38:30:6e:be:cf:
                    ad:e9:d1:7d:81:15:c2:47:73:9d:a4:fa:fd:bf:21:
                    2a:5b:7c:42:a0:c2:8b:3b:83:0e:d0:3a:1f:e8:0d:
                    01:b8:00:aa:e2:3e:05:82:4d:a2:92:cc:6b:29:d4:
                    88:4a:c4:b5:cd:c7:3e:61:83:1c:cf:d5:49:29:11:
                    fd:90:64:69:3a:b4:d5:0e:a6:53:0f:5a:ea:db:06:
                    f7:17:bd:91:32:08:28:e8:cb:13:dd:7f:38:97:f6:
                    53:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F1:C4:0A:15:95:64:64:60:78:7A:48:FF:B7:E2:AC:66:F8:60:F4
            X509v3 Authority Key Identifier:
                keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:39:8f:d5:51:92:28:e7:1f:01:8b:0f:bc:88:d9:bf:01:64:
         3c:73:eb:db:c9:8b:82:27:67:0b:be:8c:05:cc:ee:78:1c:b4:
         37:0d:6f:90:2e:f6:5d:12:8f:e5:fb:f2:71:e0:2d:67:48:2b:
         b3:49:67:41:74:bf:45:c0:d8:60:15:91:b6:5c:b7:7c:ba:b9:
         58:5c:77:70:8c:71:a6:53:7c:5e:4a:6c:a5:40:70:37:5a:40:
         5f:81:8b:5f:50:ed:e5:bb:36:21:ed:cc:b4:0d:08:96:e4:68:
         5b:97:34:1f:fe:06:7c:03:10:e4:9b:fa:e0:12:a1:fd:46:eb:
         24:10:32:41:97:e5:65:43:1c:17:0d:08:9e:52:ea:24:b6:22:
         95:d4:a3:44:18:77:13:4e:f0:ad:a3:1e:5e:5b:99:7c:89:ee:
         5d:77:a0:56:d3:7c:74:67:1a:11:04:96:01:03:d2:24:3a:79:
         2b:7f:50:56:fb:2c:13:10:eb:7d:9d:8b:94:aa:ad:39:0c:46:
         94:42:cd:66:66:cd:0a:8e:f5:a7:c1:11:dd:22:91:57:38:4b:
         2d:43:d8:7f:71:ba:3c:56:4f:0c:a6:83:6e:83:4c:4a:8e:9f:
         db:b9:b4:6b:63:66:8f:ec:99:09:bd:af:de:59:04:3f:de:a1:
         62:e9:95:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:40:52 2026 by rpki-client