Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
File:                     9B87DFEBDCCDA813116988D4421B088404578168.mft (raw, json)
Hash identifier:          KYZ9MqMNHqrq3o1/5fo0740Ivxy/hfsC6tL7+bdOgeY=
Subject key identifier:   BC:7B:CC:DC:7F:6B:A1:CD:B5:CF:74:85:FC:89:72:6B:25:17:93:B5
Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68
Certificate issuer:       /CN=9B87DFEBDCCDA813116988D4421B088404578168
Certificate serial:       162EC526F58CF6BEAF9E8B6EE054E148F74105A4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
Manifest number:          014A
Signing time:             Wed 14 Oct 2026 00:23:21 +0000
Manifest this update:     Wed 14 Oct 2026 00:18:21 +0000
Manifest next update:     Sat 17 Oct 2026 01:12:21 +0000
Files and hashes:         1: 3130332e35362e3134302e302f32322d3232203d3e20313439363238.roa (hash: kQ4vmHhIhIdM+j0qKtexqNeRC3lB/ivTAG2HWe979bg=)
                          2: 9B87DFEBDCCDA813116988D4421B088404578168.crl (hash: 9UG14VKD7y2z4tlSVqytcdfmia6Ta1/7TLbioQddbdY=)
                          3: 3231312e3135342e3134342e302f32302d3230203d3e20313334373734.roa (hash: alpjFmWgEiBbogthwEkCRvKizOOuc9cKPE88pENyGHA=)
                          4: 34352e3131362e39362e302f32322d3232203d3e20313439363238.roa (hash: aWgeDjinqxghP2O9gm5Jstjm/o8V7VlFXar3hlRu/AE=)
                          5: 3230332e38362e31362e302f32302d3230203d3e20313334373734.roa (hash: uMLAeYE9Fso11yhVojhjYyJDAb3WPWH1BlJh/X2DOwQ=)
                          6: 3130332e32332e3136342e302f32322d3232203d3e20313439363238.roa (hash: Q5lN8y2xoBURESf9IcASxDDCPLCsNrEs2HlfjfnnNOU=)
                          7: 3230332e38362e302e302f32302d3230203d3e20313334373734.roa (hash: TAnrcV/q6VsB8YFBFhEbXjskfcTX0Mha1GN6QBn3c6Q=)
                          8: 3231312e3135342e3132382e302f32302d3230203d3e20313334373734.roa (hash: 7sBR0PD3eTNaJp5A6+iXnX/3YOszhjTGDbjYWbhqZ2o=)
                          9: 3232302e3233312e3132382e302f31382d3138203d3e20313334373734.roa (hash: Cph0YLpkDG2fLuVzSekkhP+HJ5DeU37Z2LF9M608YDg=)
                          10: 3232302e3233312e3139322e302f31382d3138203d3e20313334373734.roa (hash: Ptt4YLVWObBN2EDWF/pPVMNSng6g0RgCtq5fiDa8lWk=)
                          11: 323430303a643230303a3a2f33322d3332203d3e2030.roa (hash: iNUdmu9Gf0xgCxDEJhv4BLHbiymyu26z4nlJEpV0mo4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 01:12:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2e:c5:26:f5:8c:f6:be:af:9e:8b:6e:e0:54:e1:48:f7:41:05:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168
        Validity
            Not Before: Oct 14 00:18:21 2026 GMT
            Not After : Oct 17 01:12:21 2026 GMT
        Subject: CN=BC7BCCDC7F6BA1CDB5CF7485FC89726B251793B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:9d:98:af:53:fc:44:20:c3:dc:a9:28:e4:
                    03:48:e6:96:f1:2e:ef:71:7b:d5:ab:45:76:02:fc:
                    d8:89:c8:6a:ff:b0:e1:fe:10:32:25:85:63:15:db:
                    e7:b5:9d:be:44:1d:39:05:41:c1:c6:1c:34:56:9c:
                    75:42:3b:13:84:a3:e2:82:8f:e5:6f:99:94:28:ac:
                    ad:5f:54:37:ea:30:33:02:f6:50:3e:fc:1c:0b:dc:
                    da:5b:02:8f:d6:25:cb:a2:f5:2d:48:18:dc:da:24:
                    de:c7:7e:ed:75:10:d4:43:97:b1:5a:ad:42:82:5d:
                    17:c4:2b:b4:58:84:94:67:9e:16:b8:f3:ab:d2:8a:
                    ab:47:40:5f:60:e6:88:4b:8a:52:2d:8e:5f:a0:ed:
                    f1:b0:3e:45:bc:42:31:c9:82:3b:11:e6:50:5b:89:
                    7c:4c:47:41:1a:fc:c5:96:0d:df:dd:90:db:28:d6:
                    83:93:35:b7:28:aa:48:78:22:9b:07:80:c1:be:3d:
                    5d:8a:5e:98:d7:d4:67:fe:f5:b7:a0:86:4d:bf:12:
                    48:7d:e2:7e:15:87:a4:cd:eb:d1:39:b3:37:06:70:
                    82:f2:1a:63:49:17:87:b7:f3:48:bb:81:ea:60:9a:
                    af:58:65:57:c5:6f:8e:68:23:07:2b:3e:fd:e0:0e:
                    46:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7B:CC:DC:7F:6B:A1:CD:B5:CF:74:85:FC:89:72:6B:25:17:93:B5
            X509v3 Authority Key Identifier:
                keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f9:22:85:f7:0c:93:16:4e:9f:f1:33:5e:57:b4:93:9c:ab:
         68:b9:cd:34:26:cb:90:ab:8a:8f:7d:9f:dd:eb:fb:3a:3c:8a:
         af:4d:d0:b0:8f:bb:f1:55:bb:02:82:33:85:4a:dd:f1:09:c2:
         3f:56:b9:04:32:dd:54:60:52:a0:c0:d8:7a:93:36:6b:f7:81:
         50:1b:1a:92:dc:f8:ac:9a:f9:89:ec:3a:5f:74:62:43:00:34:
         f3:53:86:f0:eb:be:f6:fb:39:33:90:c7:0e:90:36:4e:63:2f:
         ce:0f:ec:d6:b4:e7:8f:0c:2a:16:80:82:3a:86:6c:4f:e4:b6:
         f5:24:bf:16:47:be:0d:f2:bd:ac:65:b7:c0:71:f5:68:1d:bc:
         b2:1b:12:c6:6c:95:8d:f4:83:69:30:f8:8d:41:56:4a:45:3d:
         4b:79:c9:32:35:21:bf:f3:01:e0:65:01:12:8f:1a:06:70:f6:
         de:b3:f9:4c:f2:0b:85:0f:26:27:7a:28:a3:35:48:46:46:71:
         a3:87:fd:79:85:a2:ba:23:79:17:7f:68:96:11:fc:23:e4:d5:
         a3:c4:e0:99:c2:3c:95:9b:24:68:2c:bd:38:93:f7:e8:3f:3a:
         e9:eb:02:a8:eb:50:3e:14:e7:5d:16:dd:5e:6d:af:9c:a5:d7:
         59:03:c8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:01:12 2026 by rpki-client