Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
File:                     509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft (raw, json)
Hash identifier:          BZTLK4zht3wW7olgRjzVTjrbeAgtxi/N7GugJkQK3G4=
Subject key identifier:   71:5E:2F:2C:6A:6E:0A:24:7F:A0:4D:52:5A:AC:12:F7:A1:65:A1:72
Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57
Certificate issuer:       /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
Certificate serial:       2D8A240D104972A35C99DC83B1E3F571A956F051
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
Manifest number:          0141
Signing time:             Wed 14 Oct 2026 20:34:32 +0000
Manifest this update:     Wed 14 Oct 2026 20:29:32 +0000
Manifest next update:     Sat 17 Oct 2026 22:33:32 +0000
Files and hashes:         1: 323430373a343938303a3a2f33322d3438203d3e203633373031.roa (hash: 2xrWqcYAWv5uaJ+UEIXDS5NCV5aUjwlhbOSNrGQlqmA=)
                          2: 3130332e3135322e3230382e302f32332d3234203d3e203633373031.roa (hash: AY1Rkv8eWCaCc1IqIqb/hR6fEF7YAcghCDJ1PXekeR4=)
                          3: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl (hash: M1qwNA4av6/0qglaLBEfNRLw4+5Jrjk7NASlBFNkIig=)
                          4: 3130332e3132352e3233362e302f32322d3234203d3e203633373031.roa (hash: Yea68duwFifPXnruxUiyJ9UTHYU8mFtMaIPky0bpVBY=)
                          5: 3231382e3234362e34382e302f32322d3234203d3e203633373031.roa (hash: WcmfvhVSIdNuNti1E8ax2jBrWyZNrlupmGu8emD1ulA=)
                          6: 34352e3131362e3230382e302f32322d3234203d3e203633373031.roa (hash: U7pMxSAG3hJgdZF9MfZ18nxXUA9nKKA1bO/qYqQYHtk=)
                          7: 3130332e36332e3234342e302f32322d3234203d3e203633373031.roa (hash: +6y/ZqD3ndBq58wqjIQAYJB+hGKh54Rr52DvmGnGOc0=)
                          8: 3130332e35372e31322e302f32322d3234203d3e203633373031.roa (hash: 8UtfI7LTrXwbIubSnHUAr4P3UqzZ1JNFE+rdAk5G7eE=)
                          9: 323430323a396138303a3a2f33322d3438203d3e20313334383130.roa (hash: neAH0hkwEVNAasatgS8ORO4dbxpU7nc7wayFUL20f+M=)
                          10: 3130332e38382e39362e302f32322d3234203d3e203633373031.roa (hash: U8zN/uKQkuQOmx94aIzQZAVo1yFMKEWW8+KWrA4wMEU=)
                          11: 3130332e37352e3130342e302f32322d3234203d3e203633373031.roa (hash: +KXcWOztyLv/Ynmm+FEsOtCGJApsRxgda15t6ILwOjc=)
                          12: 34352e3132332e3132382e302f32322d3234203d3e203633373031.roa (hash: D0DZcEu6aIrrlnKA0LePQ3snnhwXT075mcvbXRTNoSM=)
                          13: 323430373a333763303a3a2f33322d3438203d3e20313334383130.roa (hash: YB0M9nKNMoHBywOJDf6bSjW4vSlUBOGyW8ueImFl0Ok=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 12:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8a:24:0d:10:49:72:a3:5c:99:dc:83:b1:e3:f5:71:a9:56:f0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
        Validity
            Not Before: Oct 14 20:29:32 2026 GMT
            Not After : Oct 17 22:33:32 2026 GMT
        Subject: CN=715E2F2C6A6E0A247FA04D525AAC12F7A165A172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:49:d6:b6:e4:63:6c:fd:a7:72:83:75:13:50:
                    75:c7:fa:3c:58:36:ae:1b:66:bc:65:b0:e6:3c:ec:
                    02:8a:f0:9d:87:ee:4f:c1:51:64:ae:84:0b:49:e2:
                    a9:35:8a:b2:5e:8d:62:dc:57:ea:c3:38:03:56:9e:
                    a3:bf:14:19:06:61:3a:c8:c2:60:bb:52:c3:56:30:
                    08:92:7f:ab:70:7e:97:06:51:fc:44:eb:ea:4b:dc:
                    e7:29:32:33:8f:5b:a5:2d:93:7e:84:b5:24:22:7e:
                    5e:62:72:d2:b5:a2:4e:d2:ea:e2:67:f8:d3:92:5e:
                    f5:ba:5e:59:e4:64:ce:cf:2c:17:99:29:b0:7b:76:
                    38:2a:3c:c8:c4:a3:5b:38:7f:3b:26:18:c3:51:08:
                    c7:97:37:ae:df:ad:2f:76:c4:cd:17:4a:a1:18:89:
                    89:05:cf:7e:01:70:0a:27:c6:b8:40:82:91:3b:58:
                    39:94:c4:e8:ef:c4:95:13:b9:d9:77:e0:aa:c2:68:
                    5e:d3:e9:3b:11:92:2c:b1:d3:18:f0:b0:bb:52:10:
                    83:82:45:6b:91:cb:6d:39:2d:6b:5c:fd:b7:b6:17:
                    1b:f3:02:87:59:13:ba:cf:53:87:f4:90:54:57:0e:
                    df:e0:a6:f0:a9:38:47:33:82:0e:67:6a:0f:26:01:
                    78:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5E:2F:2C:6A:6E:0A:24:7F:A0:4D:52:5A:AC:12:F7:A1:65:A1:72
            X509v3 Authority Key Identifier:
                keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:59:55:3a:44:d9:b5:39:81:e3:45:54:af:48:37:af:92:76:
         0b:9c:3a:ba:4b:84:79:80:cd:c6:f8:a4:d9:71:58:e9:ee:ec:
         29:75:37:cd:8e:da:99:93:e4:17:ae:70:c1:3a:80:95:66:61:
         f0:0c:e4:d8:60:7c:dc:bf:e6:dd:60:63:6d:86:e2:bc:29:43:
         64:21:09:04:e5:6d:28:70:4a:ae:65:b2:98:bb:0e:d0:48:cc:
         21:61:62:8d:a2:5c:0e:3c:f1:72:a4:ec:38:2c:38:b1:08:d7:
         29:32:89:b2:cb:3c:b5:7f:30:b6:aa:1c:d8:41:40:f5:94:3b:
         4d:ad:11:76:df:f0:a0:4e:72:43:c1:3a:1c:65:98:d5:ec:6c:
         35:8d:d5:ec:6b:62:db:d7:7d:e8:ef:2b:86:83:c8:1b:4b:28:
         82:ed:e3:24:e3:04:cb:18:8b:b7:15:cd:6c:44:cf:6d:11:61:
         05:51:50:0b:f5:31:06:a4:52:81:4d:9e:9c:73:75:92:11:53:
         ed:5a:98:e3:7a:9a:3c:07:8a:11:29:2f:38:f7:d0:54:c3:b8:
         cc:f6:d3:d2:9c:ff:71:9f:23:af:4e:4a:59:11:3e:b4:60:b6:
         23:4f:3b:07:2b:6f:5e:bf:33:eb:eb:60:3d:b1:12:6b:b8:e6:
         45:50:02:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:46:06 2026 by rpki-client