Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
File:                     D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft (raw, json)
Hash identifier:          L5wuigJ6i/GFgiGnMcEuZcxnvPzDyVdyRTwbTwgWSpU=
Subject key identifier:   CB:74:7B:0A:14:81:67:EA:F9:E3:9D:31:F9:A3:74:C4:E5:DB:35:B0
Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D
Certificate issuer:       /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
Certificate serial:       2D4DC56A60A726933FAD1A43C47BB60F6EA8AF84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
Manifest number:          CB
Signing time:             Tue 06 Oct 2026 06:19:56 +0000
Manifest this update:     Tue 06 Oct 2026 06:14:56 +0000
Manifest next update:     Fri 09 Oct 2026 10:14:56 +0000
Files and hashes:         1: 3130332e3231352e33382e302f32342d3234203d3e203536303436.roa (hash: Lv4hC/NesYzJIGGXIiM1AVp8YRdjcsAhRz5NyV3gjzw=)
                          2: D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl (hash: HLKMDPFPn9eBv6WEJfClb3JLQUPSC8F90Hrvtk0zzUo=)
                          3: 3134342e34382e3231322e302f32342d3234203d3e203536303436.roa (hash: vMa/k2SkE13kwIrYtUhiwDEePOtjyHoHk4K6TQSSm1E=)
                          4: 3130332e3231352e33392e302f32342d3234203d3e203536303436.roa (hash: p6FgftTcMGm810mxMbm4vOq8OBqCWSWi01lBsK+/mO0=)
                          5: 3130332e3231352e33362e302f32342d3234203d3e203536303436.roa (hash: ogDWhnBIhkB09M/TQsA8FF20Jhv6hE4UaPKuvM/ONSE=)
                          6: 3134342e34382e3231332e302f32342d3234203d3e203536303436.roa (hash: 9rruxfBtc3Po2Kcfh6A2jkuFy4C64mi5rqrB9y/j9lg=)
                          7: 34332e3233302e3232342e302f32322d3234203d3e203233363530.roa (hash: x/rpYTrOUqlRihlgHRziWxbnhpFl1TN8oW8tI5bdxqg=)
                          8: 34332e3233302e3233362e302f32322d3234203d3e203233363530.roa (hash: ky0oESQeYnsxj2GWXbC4MoD0tQpWhDFt/hoReLhOr5M=)
                          9: 34332e3233302e3233322e302f32322d3234203d3e203233363530.roa (hash: 0TfLvOPV3PFb51ksxIyyS/hJKVjtx7BMptSRRpxN1uY=)
                          10: 3130332e3231352e33372e302f32342d3234203d3e203536303436.roa (hash: Lhyaq+8kPJ3DhpaP9dDOkRV3Hx7/hgYp232NNc/+3UU=)
                          11: 3134342e34382e3231352e302f32342d3234203d3e203536303436.roa (hash: X/rH+wR1KcaMHhlzNkauvL5xmiAl3VL+zPN+vf8IkYo=)
                          12: 34332e3233312e3133362e302f32322d3234203d3e203233363530.roa (hash: ICViG4/qkZPs9MGuW+IKw2mNlpug7dWBW5MBGS4d/gk=)
                          13: 3130332e3231352e33362e302f32342d3234203d3e2034383337.roa (hash: c1ZiU3CFAufcaGeE4yTwhPx9/vjp4a0eTfR+1DYiZ6M=)
                          14: 3134342e34382e3231342e302f32342d3234203d3e203536303436.roa (hash: qqSa27Im/BSJVv9w3a7RHt0Tvuf7XVazU0hOt1H7Row=)
                          15: 3134342e34382e3231322e302f32322d3232203d3e203233363530.roa (hash: zCXXgzv9w90xVpAbClwVGa48tUtj8yKEbbd6PAiUBCA=)
                          16: 34332e3233302e3232382e302f32322d3234203d3e203233363530.roa (hash: S/o6RSJ8nIQQPznnCXCCSySWQrs3lHogPsaa2JKXfQc=)
                          17: 323430313a623561303a3a2f33322d3536203d3e203233363530.roa (hash: I+IKkE3lfTy91n7rHTDB9dRMtROn12nnhGec+l8/5eE=)
                          18: 3130332e3231352e33362e302f32322d3232203d3e203233363530.roa (hash: Z7qfxupQ6TOi75qeAxQIukqaySG+uH05FoMhY9vC090=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 10:14:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4d:c5:6a:60:a7:26:93:3f:ad:1a:43:c4:7b:b6:0f:6e:a8:af:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
        Validity
            Not Before: Oct  6 06:14:56 2026 GMT
            Not After : Oct  9 10:14:56 2026 GMT
        Subject: CN=CB747B0A148167EAF9E39D31F9A374C4E5DB35B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0f:c5:ea:66:d2:dd:c1:58:0e:cc:7b:8f:74:
                    99:10:07:57:45:ce:a7:47:a9:de:4f:8c:2a:b7:5c:
                    65:5c:00:bc:58:ff:f7:d4:3c:39:01:e8:75:5f:d5:
                    5f:b6:9c:88:ef:cd:a2:1b:7d:8e:bf:ec:6a:c5:40:
                    5f:71:a6:ae:8c:9d:1a:14:63:09:06:aa:39:d4:3f:
                    23:6f:0a:b8:18:c8:a2:58:53:73:61:f0:75:58:88:
                    6e:2a:4b:8e:65:3c:45:7a:ee:c3:08:2d:df:75:65:
                    ba:1a:ec:65:f8:6d:9f:6c:1c:62:f6:07:7b:ce:ff:
                    4e:17:2b:b9:93:93:72:db:47:8e:0d:c3:eb:e1:9f:
                    0c:19:a4:83:f7:cf:0c:3a:db:fa:ee:b2:cd:3c:08:
                    ec:90:f8:a2:ae:7c:b9:d6:46:5e:a4:c3:ed:fe:07:
                    11:10:d5:cd:8a:8e:2b:17:2a:08:86:97:de:e0:97:
                    64:2b:87:17:a5:19:b2:fc:d4:96:dd:48:04:24:3b:
                    b9:8a:31:74:7f:e7:30:83:0d:6b:33:c7:86:05:79:
                    27:f3:99:2b:93:58:12:7e:25:49:f4:71:1a:e7:00:
                    4a:77:db:2f:ed:12:ee:fd:bc:af:ba:41:15:b8:56:
                    87:83:a0:41:9b:80:26:3f:3a:24:39:d5:2e:ea:a0:
                    d9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:74:7B:0A:14:81:67:EA:F9:E3:9D:31:F9:A3:74:C4:E5:DB:35:B0
            X509v3 Authority Key Identifier:
                keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:fe:8d:bb:4b:95:55:18:97:2e:aa:77:7f:fb:0d:f4:f9:e9:
         57:be:43:92:bc:e2:c7:1c:84:94:09:67:10:cf:13:65:6d:9f:
         69:d0:6b:1f:72:55:c4:b0:2f:bb:42:2c:3a:2d:2b:44:77:01:
         35:fa:39:b4:d8:72:48:ee:1e:8a:d9:b7:c1:b1:87:e4:79:81:
         a4:7a:eb:a8:be:04:bf:ba:07:3f:03:22:40:b9:6c:11:98:27:
         6f:99:dd:f2:34:43:2b:35:bc:93:35:98:cd:b6:89:99:72:2e:
         21:13:bc:c3:14:ff:b0:c7:93:fd:bc:c5:5e:67:84:a3:88:8d:
         a6:f6:88:3f:08:8c:4a:7f:81:ea:ad:d1:89:21:5a:45:ab:f5:
         70:b5:8a:1b:1c:07:58:7e:ac:cf:db:55:07:91:bd:fa:cc:b4:
         22:42:99:02:ed:c3:f6:6e:93:60:ce:72:f5:6e:bc:52:16:9c:
         31:36:aa:5d:41:7c:74:e5:a6:7a:1d:f3:23:9c:1a:6c:f8:cb:
         80:e5:84:b0:1d:ce:43:e3:24:25:59:d2:f5:2e:cf:93:68:6e:
         a1:a8:e0:31:59:44:3d:de:ac:17:d4:4f:74:b5:e5:1a:df:38:
         59:31:e3:a2:56:4d:31:d5:f2:e1:e8:d7:ab:cf:ee:fa:f3:66:
         4d:99:91:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:10:06 2026 by rpki-client