Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
File:                     A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft (raw, json)
Hash identifier:          XPKErbek9l7dIMpl1otkrCU1JnDe1nyJtqyWSDsPrAI=
Subject key identifier:   BC:5B:94:42:7F:19:5C:01:A1:3B:5A:51:23:B1:38:16:0E:04:41:97
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       06A84C405E94CC7FC3175E1B4A1590508E97727B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
Manifest number:          015A
Signing time:             Fri 28 Aug 2026 06:48:24 +0000
Manifest this update:     Fri 28 Aug 2026 06:43:24 +0000
Manifest next update:     Mon 31 Aug 2026 10:57:24 +0000
Files and hashes:         1: AS58563.roa (hash: kYInOTPip8w5PslmevGG8vQjhMgGwaKWoF+4hhPIBAc=)
                          2: AS56040.roa (hash: W81Ik1UbVtj0SRWqtC3P7xyEWt3IgDbB4QjgkvOz+tY=)
                          3: AS38627.roa (hash: nFp+8yml9hkEza1wgfZStNJI0UTaVHYBZwksHuv4bH0=)
                          4: AS38365.roa (hash: GfhbepfPCiBLiW7f7C/pzcTtvnquxDHsuz1kUUcRsRU=)
                          5: AS140903.roa (hash: iyz26ug9khgPrNNhJtEuOhWmlszHQlfbJTsEIMCRpnM=)
                          6: AS55967.roa (hash: JWz91HIzRpIvCaetNDaEjl+15GD/QV9ZC2R8TKVFSiA=)
                          7: AS58540.roa (hash: ODEMxdA+rDgGXKZmPBMgK9yomv/d+1QGAeEkWm3Q6yA=)
                          8: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl (hash: 5lY/bVJ429vqyd/1rjMHnpTahDpu/LR8YHwqaGFJIX4=)
                          9: AS134756.roa (hash: R0qO1qhdZDTQtnkct1FnPpedhyffJKgR3uHLGveHyaU=)
                          10: AS58466.roa (hash: pNtrvsIxnKSPSR3qrnhNlUDUeD+0ItvWPxCmkPmSobo=)
                          11: AS4808.roa (hash: nfus4h8QwbxcdSJltah7w99JVhAwpPCoz9XlgVyX9D4=)
                          12: AS38283.roa (hash: b+LNtB8BnlfAgJOygGrMMt2yq1yQieV7mM6TBSUOHTg=)
                          13: AS23724.roa (hash: W9hq4noVS3K8oFSoam54kFzfyzZ8KLodeD0jWtdBu+E=)
                          14: AS136958.roa (hash: HEG2G2FDqpPcwg9U+B72KeFsxwTgTK4fYMDfE+rG2vc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 10:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a8:4c:40:5e:94:cc:7f:c3:17:5e:1b:4a:15:90:50:8e:97:72:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Aug 28 06:43:24 2026 GMT
            Not After : Aug 31 10:57:24 2026 GMT
        Subject: CN=BC5B94427F195C01A13B5A5123B138160E044197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:56:1d:cf:3c:85:13:43:eb:5c:40:1b:2a:c9:
                    6d:96:23:c7:41:34:12:26:72:68:7e:77:e2:79:f8:
                    04:e2:31:9a:72:77:b4:c1:3e:54:bf:8c:5f:43:4b:
                    1b:3f:e1:ce:74:3c:7d:22:5e:94:66:c8:c0:06:bd:
                    86:54:01:3d:fd:0a:8f:b1:d1:78:e4:78:aa:2c:5c:
                    2b:ed:8a:d9:44:0e:15:76:d0:cb:01:73:ee:6e:7d:
                    3c:d9:8e:49:11:b9:f3:c6:13:b2:db:e7:4a:e6:9a:
                    1d:8d:7d:36:d2:da:8d:07:cb:9d:57:8c:c2:60:d2:
                    d3:d2:b9:82:53:d7:70:7b:b3:2a:8c:3f:ef:84:f9:
                    8f:e3:72:06:da:5c:97:8d:fc:76:7c:76:ed:89:32:
                    1f:9a:c9:16:d2:ee:fb:a3:a0:40:19:a5:93:6a:f3:
                    78:c4:98:5f:d2:cc:f7:6b:be:7c:98:4c:72:8a:55:
                    60:9e:7f:f5:d2:7c:a7:9c:3e:b8:b2:3d:0a:f8:ad:
                    a5:b3:56:78:72:50:14:cb:de:44:dd:16:9b:9c:ae:
                    ec:43:89:98:00:94:06:a8:c9:55:12:2d:f4:ee:73:
                    2c:ef:1b:62:01:6b:81:31:1d:2a:94:37:af:86:c0:
                    3a:dc:f7:90:b5:7f:d6:3d:ae:2f:0b:87:a8:9d:ed:
                    85:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5B:94:42:7F:19:5C:01:A1:3B:5A:51:23:B1:38:16:0E:04:41:97
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f3:27:87:cb:96:6d:f6:33:4f:ad:91:02:cb:25:e2:c6:93:
         ea:dd:78:ea:d0:cc:04:0c:f2:a2:85:a9:db:d0:a6:64:e6:6c:
         e7:e5:37:50:e1:1e:ae:92:09:f1:02:43:6a:e4:54:d7:94:23:
         d5:3a:7c:91:94:c7:62:7f:ba:ae:0c:e6:de:3b:15:cb:af:6f:
         65:df:34:00:2d:f1:14:ce:ca:8b:9a:79:cb:3f:c6:e2:a9:24:
         bb:2b:00:53:e0:54:f7:b3:d3:98:2a:73:bd:7d:07:81:69:61:
         d0:ee:da:f2:fc:7e:cc:c6:67:3a:f8:86:ce:c0:1e:72:9d:1b:
         d2:51:a2:3e:7a:d0:0e:32:d9:51:d8:33:2c:f5:07:f6:12:43:
         a8:13:1b:cb:51:eb:25:90:d7:09:52:79:a9:fe:4b:32:7b:9d:
         67:da:16:a4:eb:19:bf:97:b2:da:09:39:c9:e0:dd:11:85:ed:
         51:a4:59:ad:e8:78:dd:3b:3e:10:06:5f:51:8f:53:1e:9e:cd:
         4b:75:7b:96:fc:36:d4:28:9b:ca:9c:5d:b1:34:53:b8:9b:17:
         02:41:de:fc:bc:3d:2f:c8:41:fb:60:43:d5:cd:53:3b:f4:27:
         75:33:e3:bc:2f:8f:59:07:b9:7a:7b:58:d1:02:b3:e1:67:06:
         1a:eb:8f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:19:50 2026 by rpki-client