Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
File:                     D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft (raw, json)
Hash identifier:          MRuJBAYtIADY8L453vkTKReDSUPCJRPxtiTpktxMNAY=
Subject key identifier:   74:28:2E:5E:EC:FF:B4:0C:2B:B6:A2:44:05:FC:64:76:92:15:60:1E
Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
Certificate issuer:       /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Certificate serial:       761E16A9A8016D397BEE12BE9A42ECB0557808C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
Manifest number:          0188
Signing time:             Fri 09 Oct 2026 09:13:16 +0000
Manifest this update:     Fri 09 Oct 2026 09:08:16 +0000
Manifest next update:     Mon 12 Oct 2026 19:37:16 +0000
Files and hashes:         1: AS137753.roa (hash: 4+RHeerb+nMVnV6wUIKmstQv6v3WIzsDcvJF0B7glsg=)
                          2: AS23724.roa (hash: 8krRNne+KRTBey0q0TJzCVIFcEgDHE+LzZ9++xzsw7Q=)
                          3: AS16509.roa (hash: ZMwXvE4dHyIcjXmR+aleISP8m7PnxVmHxH9TxqYuPjw=)
                          4: AS618.roa (hash: R+C8Vc8lMDFPCjUBt8RrWNDpfiQzOxRJZjPH8n6RrH8=)
                          5: AS4811.roa (hash: 7/9rXmm3PTJE28aFP6e8Mej2tpluIiRvbq9OgQ78+fE=)
                          6: AS138421.roa (hash: 2wlstcl5tFV+5E8jvfptqjBcmgeaje3X7oXtiJyA3WY=)
                          7: AS4837.roa (hash: fhYEL03qpRt46XUMS7A41XahZN88wXQKA1YPtuoTlhw=)
                          8: AS141679.roa (hash: QsBxvlTVUwKrMZj2U6EcyVvBhZjwk3O6PdTggf+BNR0=)
                          9: AS9808.roa (hash: nIrH1Plwi2PhCTPH5t4ZrR1yXUO+K6EewsCL9PEsI3s=)
                          10: AS137699.roa (hash: D0pnZlgzIum966fqLaKQBVafP4tAhNdkkWQtNVZ7QXg=)
                          11: D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl (hash: tmFhmXSeKtQ4gxjfGbg0kOQODd9mywe3JLFsIoJpuGs=)
                          12: AS136958.roa (hash: XwAwuw4m2OENSikj/rtTtQsqWwas7qpS239Aq1SA7eE=)
                          13: AS58466.roa (hash: kSF22yBAy8SUSPPV8/o7H9vyPUoVyme9wGOZprZ2rcM=)
                          14: AS131486.roa (hash: hv3NrWI7qndb9pwRQZGa9lhEKMv487gLxwAMSFSJIMw=)
                          15: AS134761.roa (hash: w5YmgeeaRW3UFo5vKDEeCdFJ0RO0OpTyeDGF2J35ZUk=)
                          16: AS4808.roa (hash: //nKQNAjooI9erX4CO+1oGcixsTIJNw6HHMIvfL9IMQ=)
                          17: AS14618.roa (hash: +Wv/2HA8AVUSNnadO5hz5VeeFjAexzBSpavN7fMFXGc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 16:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1e:16:a9:a8:01:6d:39:7b:ee:12:be:9a:42:ec:b0:55:78:08:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
        Validity
            Not Before: Oct  9 09:08:16 2026 GMT
            Not After : Oct 12 19:37:16 2026 GMT
        Subject: CN=74282E5EECFFB40C2BB6A24405FC64769215601E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:02:f9:69:13:cf:55:1e:0f:e5:b1:29:1f:04:
                    55:96:72:5b:99:3e:fa:1c:54:fb:6a:24:57:e1:fc:
                    21:91:dc:77:69:23:a5:5b:25:e1:ac:d4:84:83:59:
                    13:6c:50:33:48:83:26:0b:40:f4:3a:b9:80:ab:81:
                    b6:4b:7d:b8:45:fe:1a:ad:7b:f1:fd:94:db:2f:8f:
                    32:6e:c3:25:61:76:fb:e3:2f:35:55:fb:77:1e:d8:
                    19:b4:6d:47:f0:83:fa:c6:7f:f9:2c:43:f8:f3:a6:
                    d4:f9:8a:42:23:ba:85:69:f4:4c:0e:0f:67:ad:c4:
                    3a:bc:f0:b5:f2:0f:30:f5:ac:81:e3:67:2f:18:54:
                    08:ab:c7:8b:61:53:b5:4f:25:5b:a5:5d:82:34:9b:
                    cc:7a:bc:d2:bd:bc:56:7b:d6:e8:92:18:e5:9f:de:
                    9f:ce:f5:b5:60:0d:99:88:e1:69:56:e2:5c:24:a9:
                    c3:a4:dd:ae:38:3b:f7:91:15:74:16:b8:cf:a4:05:
                    84:0b:6b:5a:a3:b8:31:d3:ca:3f:86:ca:4c:00:86:
                    98:90:62:71:05:4a:77:62:22:93:7d:d8:03:dd:62:
                    ef:6f:90:7b:34:20:e3:d5:8f:14:0b:29:c9:b4:a6:
                    f1:06:82:4a:04:b2:75:3a:f7:77:2a:63:b8:22:70:
                    02:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:28:2E:5E:EC:FF:B4:0C:2B:B6:A2:44:05:FC:64:76:92:15:60:1E
            X509v3 Authority Key Identifier:
                keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:da:ef:bd:13:c6:04:62:7e:07:ed:3b:06:b5:01:4f:58:2c:
         9f:e1:12:02:7c:a3:6e:f0:ad:3b:89:57:6d:58:d4:69:dd:09:
         0c:39:d2:84:f4:57:aa:bd:80:c6:d4:af:7a:58:c4:28:6d:62:
         ae:0f:28:b0:42:ed:8e:2c:b7:22:39:61:38:db:da:b1:28:71:
         88:5a:9d:f6:fc:49:f4:75:e0:1f:c1:ac:a8:f6:c9:9d:7a:a4:
         2c:f7:06:e4:2b:92:f9:5e:78:02:ec:d5:a0:f4:28:d7:f5:a6:
         18:5a:17:a0:03:c9:c0:39:a4:f8:f4:f5:2c:56:3c:0f:86:a7:
         ce:92:b1:06:59:5d:6e:42:89:5d:96:4c:5f:da:50:4f:38:5c:
         5f:26:8e:16:06:0e:9d:df:68:8e:a2:f6:16:e9:df:a7:32:06:
         c0:a8:16:f0:c2:c3:69:f6:8e:3c:81:95:7f:8a:16:83:1f:a3:
         d8:7a:03:fc:1e:f5:79:e7:05:ec:e6:7e:55:26:3a:b5:7c:c9:
         1f:f2:fb:52:6d:69:57:7b:34:12:33:42:68:ae:bd:9b:59:3e:
         f2:3b:b5:ae:de:89:ab:71:c8:0e:12:ec:45:8b:db:e1:36:06:
         99:e4:3b:34:7d:92:58:6e:fd:83:aa:f5:b7:49:10:32:84:96:
         ba:f9:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:18:18 2026 by rpki-client