Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft
File:                     62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft (raw, json)
Hash identifier:          6JnEBlmxBZRlwL5SSArqf5Sr2BJIgyb1AoqdmcsqcDk=
Subject key identifier:   8B:EA:BC:1B:4C:D1:06:6B:D1:12:A5:7C:1E:7F:0F:55:A4:58:52:C5
Authority key identifier: 62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63
Certificate issuer:       /CN=62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163
Certificate serial:       424793EC5915BE02B29ABA6E09272495B419620C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft
Manifest number:          CD
Signing time:             Thu 08 Oct 2026 09:22:27 +0000
Manifest this update:     Thu 08 Oct 2026 09:17:27 +0000
Manifest next update:     Sun 11 Oct 2026 18:50:27 +0000
Files and hashes:         1: 3135302e3234322e3138342e302f32332d3233203d3e2034383038.roa (hash: XQXzyHnDzZIxmPYY4ZY3NAo3Bam3wXyVXD7ewPUr2U4=)
                          2: 3130332e322e3130382e302f32322d3232203d3e2034383437.roa (hash: cydCGo2ReWdja/ncvFjWfPww6BkHCh4Zp8klqX6djZo=)
                          3: 3130332e322e3130382e302f32342d3234203d3e2034383038.roa (hash: eFmDShX0SCn55LBlBRwONvghGzn+bQasOw1NybACCu0=)
                          4: 3130332e32392e31362e302f32322d3232203d3e2034383437.roa (hash: 1/QrCM91cEAp0IFHVbI4BaSZ0Rh95G/CCmE65bEMxnY=)
                          5: 3130332e322e3130382e302f32342d3234203d3e2034383437.roa (hash: UpJStsN0x9csFH+SpeM+wtkv4hreOMGlJvTo97F6t+c=)
                          6: 3130332e32392e31362e302f32342d3234203d3e2034383437.roa (hash: rTxX8Lm63872yMyTFDhE99npcKZQONNCC5ubifDKHEc=)
                          7: 3130332e32392e31362e302f32342d3234203d3e2034383038.roa (hash: NZTsCMcy1d8h2SSnmv83bYWiZ5eRtyUrHm+R9VhcHt0=)
                          8: 3130332e3230342e3233322e302f32322d3232203d3e2030.roa (hash: HqIVSqkOsbbEX3Dc1xZtrC0n0abYQxfwgJWCK7b459o=)
                          9: 3130332e37322e3137322e302f32342d3234203d3e2034383038.roa (hash: y0kAi5A0JlE2dyIdzp5K0xv84KpyLuvw+SOxgyrsAac=)
                          10: 3135302e3234322e3138342e302f32332d3233203d3e2034383437.roa (hash: VndDz1Y6QUjTwmmDnUsT1LkDL+jL6XzaDjRCKwyi4gg=)
                          11: 62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.crl (hash: l/eaQSNijlZHraX3o1u07m3Av813PPBTb+Z9uk1cqV8=)
                          12: 3230322e3138312e32382e302f32342d3234203d3e2034383038.roa (hash: OF5snOOzQ4QZvFF2ea5uLiwMV6UjymVMNgCG6edPl7g=)
                          13: 3130332e3233342e32302e302f32322d3232203d3e2034383437.roa (hash: 3Sf2cK0UGbpMwWCXP6aHaTDCxwRWV5EvpU9FnPvvEVw=)
                          14: 3135302e3234322e3138342e302f32322d3232203d3e2034383437.roa (hash: Y8N5C50FvCCLn/xyY9rcQO6AKAgbj3XIBqIXbrEnKy8=)
                          15: 3130332e3233342e32302e302f32322d3232203d3e2034383038.roa (hash: 1RwiW5PZ0dZNyR69uyotVAwJE13qo5GALu8AHBS1Pks=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 03:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:47:93:ec:59:15:be:02:b2:9a:ba:6e:09:27:24:95:b4:19:62:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163
        Validity
            Not Before: Oct  8 09:17:27 2026 GMT
            Not After : Oct 11 18:50:27 2026 GMT
        Subject: CN=8BEABC1B4CD1066BD112A57C1E7F0F55A45852C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:77:6f:90:34:57:12:84:28:39:36:e9:a5:
                    2f:da:e4:06:85:8e:76:48:36:97:dd:ed:d9:f2:11:
                    27:c9:a0:8c:ba:61:46:3c:49:a3:4a:00:71:f2:92:
                    70:03:38:19:20:20:4a:96:c4:11:ec:c3:2c:f9:5b:
                    2a:00:0a:3c:7c:fe:2e:e8:02:eb:0b:31:08:c6:ce:
                    f0:bd:9c:91:70:7f:98:b9:d7:1f:cf:41:10:f7:c3:
                    f7:db:29:95:8a:59:ee:fd:b4:a5:28:3f:d9:96:66:
                    9c:2e:ea:64:cb:0a:90:19:8e:74:41:bd:5f:9e:4f:
                    9f:d5:8d:4e:d2:c7:72:2b:6f:7e:3e:d1:60:1b:bf:
                    61:da:23:87:d5:67:8e:f1:81:96:ee:94:4e:8b:ea:
                    96:fb:3d:87:27:26:49:e4:3f:00:8b:ef:40:d3:c1:
                    e7:8f:26:0d:02:e2:99:a0:28:f4:1f:54:ef:b0:af:
                    4f:76:0d:ef:12:93:28:26:44:5d:ee:dc:cd:13:7b:
                    a6:f9:b6:fd:88:d7:20:72:75:a6:5c:c7:91:8b:cc:
                    c7:7e:9a:c3:63:83:7b:47:a4:d8:cc:94:ff:b5:6c:
                    cd:35:05:f8:10:6d:e9:45:8c:31:dd:d5:9a:20:36:
                    70:ea:7e:1b:b1:bf:d6:17:7f:51:32:3e:5a:64:9d:
                    e8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EA:BC:1B:4C:D1:06:6B:D1:12:A5:7C:1E:7F:0F:55:A4:58:52:C5
            X509v3 Authority Key Identifier:
                keyid:62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:70:86:3e:48:4a:9b:39:28:cd:71:e0:d8:8c:ad:12:56:34:
         ad:6f:57:8a:d4:69:f8:15:a4:32:15:b9:f4:08:23:bf:be:9a:
         a1:93:e8:76:09:02:68:36:9c:b5:b1:90:a9:2d:ba:f5:97:ef:
         e3:e2:41:ec:1c:3b:f7:17:c3:28:75:6a:18:18:00:69:5a:ae:
         5a:22:7b:97:96:2f:b4:e4:97:89:aa:cc:5c:55:ec:db:0f:c0:
         f8:df:71:ea:f6:70:59:70:19:07:6e:f2:58:82:a6:93:6b:be:
         8e:86:07:4e:c5:68:4f:fd:0a:f9:60:b5:c2:f9:a7:65:b9:20:
         c6:54:82:a2:39:dc:d9:e1:df:08:62:56:b9:21:dc:81:45:44:
         2f:10:4f:3c:e4:e9:22:bb:77:3f:c1:02:85:d8:f4:13:db:cc:
         b7:c5:a7:1b:6b:09:b5:9d:0f:57:5d:da:ca:5f:3d:58:b2:ad:
         6b:28:5e:a3:b0:8f:c8:18:a4:12:df:9b:0c:9c:9d:e3:78:dd:
         18:47:a1:b1:ef:e6:fc:fe:4a:e8:28:bf:d2:3d:36:34:4a:c1:
         09:fb:3c:e1:4e:3e:79:ac:f0:29:16:ca:60:5e:6d:23:bc:a0:
         c8:2d:4c:e2:c0:2b:65:8b:1f:10:a7:ad:aa:6e:c1:76:f1:11:
         b6:79:76:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:48:46 2026 by rpki-client