Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
File:                     158B95F55D548B072B42C2C2820ACE7D9908E60F.mft (raw, json)
Hash identifier:          MWm2wpRAVkNDgt+3KYEZIQW8abWFhwlWgYaUyLbrfpg=
Subject key identifier:   0A:20:6D:9F:4D:12:9F:AA:D9:DB:76:1C:E5:AD:CD:39:15:78:41:FA
Authority key identifier: 15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F
Certificate issuer:       /CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
Certificate serial:       2131FF8A8B6F0FB05C6A7EA2F06A3F668957FFB8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
Manifest number:          B9
Signing time:             Sat 26 Sep 2026 05:28:11 +0000
Manifest this update:     Sat 26 Sep 2026 05:23:11 +0000
Manifest next update:     Tue 29 Sep 2026 13:12:11 +0000
Files and hashes:         1: 3130332e32342e3137362e302f32322d3232203d3e20313335303631.roa (hash: sXBIyQqRHVSZNcPR9Xrj9U2Y6sS9BHJ6YoFqJ54U90c=)
                          2: 34332e3235342e3135362e302f32322d3232203d3e20313335303631.roa (hash: 6gCPRqIsIGqs9K+MX9psHeijf0HFSORn3xh/W/ZUVN8=)
                          3: 3130332e32342e3137362e302f32322d3232203d3e203539303732.roa (hash: T83A0nhY2rHA4sN3mO3P5tUJfQ79vOxGS+0CJKHN3qI=)
                          4: 34332e3234372e36382e302f32322d3232203d3e20313335303631.roa (hash: sZKR1aSpK2bfOPYuVGIDfBr4OmtJuXL3mW99K3THAoc=)
                          5: 34332e3235342e3135362e302f32322d3232203d3e2034383136.roa (hash: U7lk/seyK5wsmf9rpNYFQ60FADMFiDu0J8En0AwUKps=)
                          6: 3130332e3233382e3138382e302f32322d3232203d3e20313335303631.roa (hash: xJ7VcowKTFAh+WOZ79sCa/KDiTGsKX9YSHQBCzfiaTk=)
                          7: 3130332e3233382e3138382e302f32322d3232203d3e203539303732.roa (hash: MJV3liXPzb+8HJt4Ngb1akXn1l5wwQw1ddvEgcsiGwE=)
                          8: 34332e3234372e36382e302f32322d3232203d3e20313334313936.roa (hash: BOrnJuBQWWbSNEwWS9msbaKMlsq7KEpqAJujOnLFNU8=)
                          9: 34332e3234372e36382e302f32322d3232203d3e2034383136.roa (hash: RgvI0XhO3XacBu3wOvzmrHKrZIWSkSXKoEV6lCdxrrM=)
                          10: 3130332e3233382e3138382e302f32322d3232203d3e2034383136.roa (hash: IN2IWp9b73L95UufodS/94IdWqlYTDWZOnKKI30WHGM=)
                          11: 34332e3235342e3135362e302f32322d3232203d3e203539303732.roa (hash: 6gR0ZPFuNC294r5LAsw0olROZtYwrJv5AXDoSLqwLXc=)
                          12: 158B95F55D548B072B42C2C2820ACE7D9908E60F.crl (hash: QC42R2LUCCUCH68cd6SMz4JL1Vy3z88jzW3ht2dQGME=)
                          13: 34332e3234372e36382e302f32322d3232203d3e203539303732.roa (hash: HFam681MVql7io9x8AgabYOuz1bqi/F3PX9muXtUEIY=)
                          14: 3130332e32342e3137362e302f32322d3232203d3e2034383136.roa (hash: JjMQBoGwSlzFw0HyUckCXXshRc+6JJT58uH4bfroxMk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 13:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:31:ff:8a:8b:6f:0f:b0:5c:6a:7e:a2:f0:6a:3f:66:89:57:ff:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
        Validity
            Not Before: Sep 26 05:23:11 2026 GMT
            Not After : Sep 29 13:12:11 2026 GMT
        Subject: CN=0A206D9F4D129FAAD9DB761CE5ADCD39157841FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:71:7a:2f:5f:97:57:2e:d4:ef:3d:8b:40:77:
                    7c:84:79:e8:3a:80:fd:4b:80:f5:f1:d2:ff:05:51:
                    39:21:58:d0:37:d8:ec:f0:14:1f:b6:6d:82:5d:0e:
                    78:d7:d8:ee:d6:74:65:e1:44:bc:2b:3f:e1:d7:55:
                    83:a9:c6:24:e4:7b:11:9e:56:ac:7d:03:a9:18:43:
                    d8:37:2f:50:db:c6:44:b5:44:90:c8:54:63:c6:41:
                    d9:8b:de:19:05:b3:f4:d9:1c:b9:9b:1b:fd:93:40:
                    f0:63:9d:c8:d9:04:4c:ca:cd:ae:12:5e:ce:93:4d:
                    8f:3c:6a:c5:ca:0e:ae:e0:3b:64:71:4d:9c:38:a9:
                    12:15:57:83:80:b3:40:ff:93:67:93:2c:d1:97:97:
                    25:53:cf:77:2e:28:6e:0b:38:11:8b:2b:34:16:50:
                    5b:35:46:06:33:d0:f4:d1:2c:9b:8d:d9:94:8e:d4:
                    29:3a:68:dd:91:87:66:d0:0d:44:0d:d0:35:13:39:
                    da:15:20:5e:63:b0:67:7f:50:5d:a4:06:84:46:11:
                    f9:3b:18:8f:4f:46:36:c2:94:63:98:9d:7d:41:85:
                    a6:14:c1:f7:6e:5c:3f:4b:c0:35:9e:da:23:4b:3f:
                    7e:6b:83:59:35:73:07:cb:e8:d1:18:af:c7:c2:cd:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:20:6D:9F:4D:12:9F:AA:D9:DB:76:1C:E5:AD:CD:39:15:78:41:FA
            X509v3 Authority Key Identifier:
                keyid:15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:04:e4:30:c1:fa:5c:91:2a:4f:44:c2:89:8e:36:3f:80:cf:
         ee:4e:74:f7:39:99:b6:4f:2f:d9:92:3c:d7:5f:eb:09:98:c2:
         b7:60:de:96:61:39:7f:52:d1:3f:5e:f4:6f:60:d8:09:dd:03:
         a7:b7:e5:d9:53:89:f7:aa:8e:df:fe:7d:c2:b8:a5:18:fb:d1:
         d2:3a:e2:22:00:72:80:39:e4:5d:e2:e6:e3:1c:99:3a:06:53:
         f5:29:98:39:e5:3e:7a:22:f1:df:ad:95:69:a5:2b:20:2c:15:
         11:41:1a:a5:d7:9b:de:19:92:60:6a:6d:cb:19:89:68:4a:07:
         90:94:1a:21:0f:0a:2b:92:64:aa:c5:09:c5:20:81:0f:65:b6:
         39:82:fb:8d:99:f0:47:50:e5:8b:08:aa:93:24:66:37:7f:5e:
         ff:9a:b9:7d:74:30:94:d7:96:a5:4d:d8:0b:fe:13:ba:fa:f9:
         6f:43:cb:cb:ca:0a:a6:c4:c1:14:2f:8b:f0:0a:96:16:70:fe:
         24:89:60:62:50:48:6d:be:53:75:01:99:40:1d:7d:83:13:9d:
         ee:3a:eb:df:8b:63:85:56:91:62:dc:be:53:b9:5f:0c:a7:21:
         1e:f5:d9:0d:70:c8:ff:90:3a:f9:8b:f8:30:91:3b:c0:14:6a:
         2a:e6:7b:67
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUITH/iotvD7Bcan6i8Go/ZolX/7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU4Qjk1RjU1RDU0OEIwNzJCNDJDMkMyODIwQUNFN0Q5
OTA4RTYwRjAeFw0yNjA5MjYwNTIzMTFaFw0yNjA5MjkxMzEyMTFaMDMxMTAvBgNV
BAMTKDBBMjA2RDlGNEQxMjlGQUFEOURCNzYxQ0U1QURDRDM5MTU3ODQxRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxcXovX5dXLtTvPYtAd3yEeeg6
gP1LgPXx0v8FUTkhWNA32OzwFB+2bYJdDnjX2O7WdGXhRLwrP+HXVYOpxiTkexGe
Vqx9A6kYQ9g3L1DbxkS1RJDIVGPGQdmL3hkFs/TZHLmbG/2TQPBjncjZBEzKza4S
Xs6TTY88asXKDq7gO2RxTZw4qRIVV4OAs0D/k2eTLNGXlyVTz3cuKG4LOBGLKzQW
UFs1RgYz0PTRLJuN2ZSO1Ck6aN2Rh2bQDUQN0DUTOdoVIF5jsGd/UF2kBoRGEfk7
GI9PRjbClGOYnX1BhaYUwfduXD9LwDWe2iNLP35rg1k1cwfL6NEYr8fCzbb1AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUCiBtn00Sn6rZ23Yc5a3NORV4QfowHwYDVR0j
BBgwFoAUFYuV9V1UiwcrQsLCggrOfZkI5g8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTIxNjM2NjQxMTQ0ODMyMS8wLzE1OEI5NUY1NUQ1NDhCMDcyQjQyQzJDMjgyMEFD
RTdEOTkwOEU2MEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTU4Qjk1RjU1RDU0OEIwNzJCNDJDMkMyODIwQUNFN0Q5OTA4RTYwRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTkyMTYzNjY0MTE0NDgzMjEvMC8xNThCOTVGNTVENTQ4
QjA3MkI0MkMyQzI4MjBBQ0U3RDk5MDhFNjBGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwTkMMH6XJEq
T0TCiY42P4DP7k509zmZtk8v2ZI811/rCZjCt2DelmE5f1LRP170b2DYCd0Dp7fl
2VOJ96qO3/59wrilGPvR0jriIgBygDnkXeLm4xyZOgZT9SmYOeU+eiLx362VaaUr
ICwVEUEapdeb3hmSYGptyxmJaEoHkJQaIQ8KK5JkqsUJxSCBD2W2OYL7jZnwR1Dl
iwiqkyRmN39e/5q5fXQwlNeWpU3YC/4Tuvr5b0PLy8oKpsTBFC+L8AqWFnD+JIlg
YlBIbb5TdQGZQB19gxOd7jrr34tjhVaRYty+U7lfDKchHvXZDXDI/5A6+Yv4MJE7
wBRqKuZ7Zw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 05:37:49 2026 by rpki-client