Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
File:                     4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft (raw, json)
Hash identifier:          0wVs2CItXu+Qb1ePlC4b0boKwSgkl7BtHN+etIJihAo=
Subject key identifier:   74:5A:61:E1:3E:F9:FC:F2:74:08:74:8E:E0:0D:60:17:0C:2D:D5:AD
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Certificate issuer:       /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial:       68BAFB6CD4C8AFB512F29D73184F6C4610D22AA3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
Manifest number:          D9
Signing time:             Tue 13 Oct 2026 12:33:00 +0000
Manifest this update:     Tue 13 Oct 2026 12:28:00 +0000
Manifest next update:     Fri 16 Oct 2026 13:59:00 +0000
Files and hashes:         1: 3130332e3231352e34352e302f32342d3234203d3e203538343636.roa (hash: XkU0YtFgShSzOo20rJdwEEfkrJVTk7yy7dqNfbR4/fo=)
                          2: 3130332e3231352e34362e302f32342d3234203d3e203633353939.roa (hash: lCKeTzCngwtaI2otW+3pf3dT4E8FfBmqb7nBEm4iEO0=)
                          3: 3130332e38392e3131342e302f32342d3234203d3e203633353939.roa (hash: HWzCIK0J3kj61jM4RJKLtXp5PntrD5IoFA2l+KWrNdg=)
                          4: 34352e3235312e35342e302f32342d3234203d3e203633353939.roa (hash: cTOAofuVrZB6PvajehxRqJi1HOjgKdwuykVDBV6ic3Y=)
                          5: 3130332e3232322e3138312e302f32342d3234203d3e203538343636.roa (hash: uKysvU2wPaXdqx5np2DX47AZPrvFjLAnDA6TLyNZjPM=)
                          6: 3130332e3232322e3137362e302f32322d3232203d3e203538343636.roa (hash: UpPEAYdcHSdgSDgWM1Xgq+oFeYVQGymiRyGhcR0Lp6Y=)
                          7: 34352e3235312e35322e302f32342d3234203d3e203633353939.roa (hash: J5ttVDSRteWIi4hwKsChc1z51WL7/hz22Kunm15KqPk=)
                          8: 3130332e3231352e34372e302f32342d3234203d3e203633353939.roa (hash: u/vlygKRp4uqaQ1eQKS9c4Kf1g9VgGjmp1fspJX/cVs=)
                          9: 3130332e3232322e3137372e302f32342d3234203d3e203538343636.roa (hash: sH7OowcFHJCcPwvZJv25D4lUlZf+T7s/iYMS2TGzZjc=)
                          10: 3130332e3232322e3138322e302f32342d3234203d3e203538343636.roa (hash: HWtDjdcXqq3zhzr+mpXlFH5pOBwY2xagFmHw0HxdMcA=)
                          11: 3130332e3231352e34342e302f32342d3234203d3e203538343636.roa (hash: aTIutstV7nnOrlPVa9rL0oVDFBjtwfzvlvl2eoyD1/8=)
                          12: 3130332e38342e31382e302f32342d3234203d3e203633353939.roa (hash: 3DmQOstdoBvJ2hoZgDbRJT6QPLY4tMgVKWUBkWPRlxo=)
                          13: 4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl (hash: rFUoete2aFKwrcJYcSTWBZuQXcvCXJ6/Gh/GqNu6FwE=)
                          14: 3130332e38342e31392e302f32342d3234203d3e203633353939.roa (hash: G7UdhBTuk//TBOjHKhN/OeEw0aA18CQ1k+SEI8xy8bc=)
                          15: 3130332e3232322e3138302e302f32342d3234203d3e203538343636.roa (hash: 0JGuJhToHH0L5OQLMRNBtLB9WwPftj52WrM4HHFq/M8=)
                          16: 34352e3235312e35352e302f32342d3234203d3e203633353939.roa (hash: Jeg+X5mimydK7xcUiFtmKKbOa2PTH3bkxmXeoztyTKI=)
                          17: 3130332e38342e31372e302f32342d3234203d3e203633353939.roa (hash: 08vQYNuWTP9OAw5cshG0cE68oQpzGq6+3rF8HhD3PJY=)
                          18: 3130332e38392e3131322e302f32342d3234203d3e203633353939.roa (hash: qeNecZYzzDOdHNQ7OI1FGeTPwXb6OHSlmtGAyhOcfnc=)
                          19: 3130332e3232322e3137392e302f32342d3234203d3e203538343636.roa (hash: G/oPdJHLin19eoCFgMmdJT+rkoQwoDBkC0Q90Pre/iY=)
                          20: 3130332e38392e3131352e302f32342d3234203d3e203633353939.roa (hash: B4R2Xn+gXDVx1b+C8xHqcnF6Dc+KqwoBc8mdRqmz84g=)
                          21: 3130332e3232322e3137362e302f32342d3234203d3e203538343636.roa (hash: XB81JUcmyZM4a4Aj4m+xpC4HUoBeeoNN9kOjOp5xSlU=)
                          22: 3130332e38392e3131332e302f32342d3234203d3e203633353939.roa (hash: hQKB7wKD7sK/SrxmBN5jMLs19OSDy2v58Jdv0HOGrB4=)
                          23: 3130332e3232322e3138302e302f32322d3232203d3e203538343636.roa (hash: KJ8ndn4BgQmtgW+vFewhPUiCUx0OF8yJqc/FF4/GVvA=)
                          24: 3130332e3231352e34352e302f32342d3234203d3e203633353939.roa (hash: 8mVkqtHAsXXoQdq7QTFwXAv0F2qADSnLhXnxk2xo7+M=)
                          25: 34352e3235312e35332e302f32342d3234203d3e203633353939.roa (hash: gpdB2M4QzC5+FVSJ96SLxf+q0nMlU6vsNa1+V19UGpU=)
                          26: 3130332e3232322e3137382e302f32342d3234203d3e203538343636.roa (hash: F41StT+x2rlWXOQVNKcm+wNnMgPZjhcz7G5e31rQ98c=)
                          27: 3130332e3232322e3138332e302f32342d3234203d3e203538343636.roa (hash: trWDmxj/bNtvLXn0EQ5qDElMfvX977EfQlgVuGKjWOk=)
                          28: 3130332e38342e31362e302f32342d3234203d3e203633353939.roa (hash: b4swGTnagQiiHyws9QCt7f/EiuwxqkWDoYa89SJ+Pro=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 01:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ba:fb:6c:d4:c8:af:b5:12:f2:9d:73:18:4f:6c:46:10:d2:2a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
        Validity
            Not Before: Oct 13 12:28:00 2026 GMT
            Not After : Oct 16 13:59:00 2026 GMT
        Subject: CN=745A61E13EF9FCF27408748EE00D60170C2DD5AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:78:8f:b4:44:10:8b:1c:6c:97:a4:f0:36:6d:
                    da:6e:24:99:63:08:52:6e:3e:88:b9:d1:a2:96:46:
                    67:25:39:69:8a:0e:04:d9:87:da:9e:bc:cf:b1:11:
                    e9:1a:4a:ab:cd:5d:49:6f:ba:09:25:17:0f:05:79:
                    d8:8c:0c:e8:9c:bb:42:50:2f:f3:31:ba:56:90:04:
                    9f:9b:f9:39:20:71:5b:ce:16:af:70:30:c2:9b:26:
                    e5:d4:7c:44:5f:2f:fc:f5:a6:98:12:c2:ee:54:81:
                    e8:3c:9b:44:6f:82:96:84:90:4c:ea:48:25:7b:eb:
                    13:64:ae:1f:cf:f0:a3:0f:90:77:76:f1:28:3d:4f:
                    b4:eb:94:7c:bb:52:14:aa:49:7e:f8:49:04:cf:b0:
                    0c:d9:33:5f:07:fe:39:03:88:81:dd:6b:73:fe:b9:
                    72:5d:8a:8e:c9:32:0d:a1:91:44:4f:0a:a0:9f:8d:
                    80:14:72:ce:30:90:fc:15:74:f6:3e:8e:6f:6b:5a:
                    f8:f9:2b:a6:84:30:af:7d:1c:fc:d6:42:28:2a:a0:
                    1a:df:d6:95:9c:95:65:65:3a:1b:49:f6:43:bb:5d:
                    75:e9:a1:10:5b:07:c3:11:2f:8d:bf:22:92:76:e7:
                    cf:d8:74:b7:d1:14:e2:99:f8:d8:b7:0f:20:d5:93:
                    aa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5A:61:E1:3E:F9:FC:F2:74:08:74:8E:E0:0D:60:17:0C:2D:D5:AD
            X509v3 Authority Key Identifier:
                keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:be:54:d6:86:a8:d8:75:ae:d6:1c:ec:eb:59:98:0d:68:a5:
         90:f0:37:24:6a:07:7c:d8:c4:75:bf:c0:9e:d3:2c:34:5f:4d:
         8f:81:92:87:9e:bc:b2:99:54:d2:2f:73:f3:1e:ca:f8:01:39:
         c7:1c:f9:e1:f1:16:95:9a:bd:39:fd:f8:50:21:56:7e:06:9d:
         39:e1:7e:9f:24:1d:24:05:86:5d:b7:11:6a:b2:f9:f8:02:8a:
         8a:a4:8a:b0:fc:57:57:53:28:14:58:74:2b:19:2f:d4:ff:e1:
         98:7b:8e:cf:e5:09:4d:56:e4:68:d5:6a:10:98:9d:28:af:88:
         e9:58:e2:ce:2e:57:29:5a:48:09:14:0c:2d:ed:a4:d8:97:16:
         86:a4:24:27:23:2c:43:39:9c:a2:8f:52:51:03:d2:ce:cf:54:
         da:ab:a6:ad:9d:da:6f:0d:08:24:54:ac:86:c1:54:38:00:07:
         e2:8b:c9:7c:bc:8b:d8:3e:02:00:6a:3d:77:44:dc:9f:af:ab:
         60:0b:27:77:a1:7d:43:1c:ba:00:34:27:cd:18:f3:f1:5b:d2:
         eb:e6:a1:46:33:66:6b:75:91:78:e3:8b:fe:a1:5f:55:d5:f9:
         f9:d7:fa:24:3f:d9:e6:44:b0:86:65:62:03:dd:16:26:4b:9a:
         7f:a8:2e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:00:09 2026 by rpki-client