Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
File:                     1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft (raw, json)
Hash identifier:          LextHVhju+FRy/tqFYUSLt4zRxbzYLJ/QJB2TxypsZU=
Subject key identifier:   B4:FE:3A:FB:01:8A:04:D0:74:78:0F:97:28:7D:AD:D6:82:7C:AC:A7
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Certificate issuer:       /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial:       5C319E61348EDF2C74D88ABCA7E477DAC715F69B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
Manifest number:          0153
Signing time:             Fri 04 Sep 2026 00:14:23 +0000
Manifest this update:     Fri 04 Sep 2026 00:09:23 +0000
Manifest next update:     Mon 07 Sep 2026 06:51:23 +0000
Files and hashes:         1: 3134302e3231302e32312e302f32342d3234203d3e203536303436.roa (hash: l0hPko2ZXCOeA/311IA+OFAcQs7DgsvtABbBhm7khis=)
                          2: 3134302e3231302e32302e302f32342d3234203d3e203536303436.roa (hash: fu5OX6AN2arGw+lToKsCYM0Zyg2PehN3eBycuZTpTzA=)
                          3: 3134302e3231302e33302e302f32342d3234203d3e203536303436.roa (hash: JCib6eEHsmJfGLVHPcFSzMlPbRqgc/vpDrsCHl6GrZE=)
                          4: 3134302e3231302e32392e302f32342d3234203d3e203536303436.roa (hash: zbdC+xnhB3/Ixpwx2Mv6RIWN0NGFCnvAFUX89ZgJF5w=)
                          5: 3134302e3231302e31382e302f32342d3234203d3e203536303436.roa (hash: 4XH4NW1fbHdXD4a8DFQmHzoxsWs6cHdsn9AL3hluo2Y=)
                          6: 3134302e3231302e32342e302f32342d3234203d3e203536303436.roa (hash: 6J4cWkIKyL6J/8jYbqzVFC7+9rZoe2tTz1LY59VYxLU=)
                          7: 3134302e3231302e31372e302f32342d3234203d3e203536303436.roa (hash: iA6xW2mo9UOww43TiFwUvVclWeN47TBsNl4uB8qad2M=)
                          8: 3134302e3231302e31362e302f32342d3234203d3e203536303436.roa (hash: NAVE/Qr6QHMC4XtFqhb5OBdtmjnpHmKja8imwFdn/KQ=)
                          9: 1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl (hash: KbPq6hH21HwOfkve6kQeVHODa1Tb1MfrK/0KRwnUO0o=)
                          10: 3134302e3231302e32362e302f32342d3234203d3e203536303436.roa (hash: n3VyU42Lfcy4g/56VeaDrZAbySZjpyCmGrkFpjFCa2M=)
                          11: 3134302e3231302e32382e302f32342d3234203d3e203536303436.roa (hash: d607khQiQnigTg1F+OoOsZJIXuAoyLuGPxR5EwBZmOo=)
                          12: 3134302e3231302e32352e302f32342d3234203d3e203536303436.roa (hash: 4bSwFuNsKxLX2Mab+Wi1aimjfSTBRHXojh2stB7Opvc=)
                          13: 3134302e3231302e33312e302f32342d3234203d3e20313939373739.roa (hash: 0PHw+E3prlMBPe/thDOq+xuk87qH95Kumj7g/IEyP+k=)
                          14: 3134302e3231302e32372e302f32342d3234203d3e203536303436.roa (hash: jUYEgZH0MXYqOeVlldpQVG4JGhPFcz1ChMn8LbjcIhs=)
                          15: 3134302e3231302e32332e302f32342d3234203d3e203536303436.roa (hash: kvgoH2jMNObinEuJoA1NwJakRuHGSo6bASBGl8xlgl0=)
                          16: 3134302e3231302e31392e302f32342d3234203d3e203536303436.roa (hash: UXFk4wWTjHH3u21DSpm4bYhClt4TzwYbA8fG9WK956M=)
                          17: 3134302e3231302e32322e302f32342d3234203d3e203536303436.roa (hash: KOUMTopFTFtdMp0MzGoR1D0CR819nWmuRX1CMIfQnNE=)
                          18: 3134302e3231302e31362e302f32302d3230203d3e20313337363937.roa (hash: ucM6Jxz5/EwvTfspvH6tvbds6be5PlWP5svisIpotV0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 10:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:31:9e:61:34:8e:df:2c:74:d8:8a:bc:a7:e4:77:da:c7:15:f6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Validity
            Not Before: Sep  4 00:09:23 2026 GMT
            Not After : Sep  7 06:51:23 2026 GMT
        Subject: CN=B4FE3AFB018A04D074780F97287DADD6827CACA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5a:38:a3:e2:ec:05:d6:93:e3:50:00:df:1a:
                    a6:11:e6:b0:c1:b7:34:96:f9:17:b8:d4:86:1c:1c:
                    52:73:19:ba:35:37:96:81:3d:6f:f7:57:bc:1a:bb:
                    f7:8f:c2:a1:fe:03:0c:ad:f0:4d:18:0f:83:81:2a:
                    0c:57:6e:37:49:cf:fa:a2:d6:14:33:c0:02:a7:34:
                    01:95:e9:dc:1b:fa:88:9a:f7:b2:d3:33:3c:75:22:
                    b2:e3:43:04:a2:b6:b6:81:0c:8f:ce:f6:b0:29:68:
                    ed:4a:0b:23:99:7b:6d:e6:d9:e5:d0:4d:1a:ce:35:
                    9f:e0:8f:95:12:22:f2:19:4c:5a:27:a0:af:91:54:
                    21:44:ed:1d:b3:da:bf:d2:b8:8f:5c:07:a5:0e:83:
                    5a:78:bd:05:83:d7:a1:2f:89:67:ba:9a:b8:e4:81:
                    f4:0d:4b:9b:09:9d:14:0e:4a:d9:e1:46:f6:db:e6:
                    86:52:6f:68:3c:ce:83:67:ed:51:52:98:f0:28:f6:
                    0c:ab:fc:f6:ae:8d:57:ad:00:ec:e0:8d:ea:cd:6f:
                    d2:17:85:8b:73:b3:28:ec:52:92:67:8c:e1:d6:b1:
                    a5:2e:19:a9:c5:1c:d1:53:07:36:44:47:11:35:d1:
                    d4:1c:89:72:a3:f4:df:11:d0:bf:44:33:cc:d7:f6:
                    2a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FE:3A:FB:01:8A:04:D0:74:78:0F:97:28:7D:AD:D6:82:7C:AC:A7
            X509v3 Authority Key Identifier:
                keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:c5:0f:4c:f1:ca:c6:3b:07:48:db:94:f9:f2:36:48:9e:42:
         3b:6e:e4:5b:5e:7b:85:5c:d3:0a:02:e2:50:4f:87:8e:5c:c2:
         e7:75:81:dd:fd:7a:b8:9d:4d:91:9a:f7:28:ec:aa:04:4b:7a:
         cf:34:59:51:52:52:b4:4e:8f:6a:10:ca:9b:83:f1:94:d1:b6:
         27:30:54:77:1e:69:c7:9c:93:e0:e9:f3:c4:d7:98:ce:59:45:
         07:a9:9a:60:28:25:db:0c:67:fc:9b:d5:ee:0b:be:83:78:d8:
         b5:ab:0d:7d:e3:72:b9:40:6c:30:44:86:48:4c:17:d5:9f:b2:
         27:9d:b3:95:df:a6:44:aa:f6:bf:32:50:bd:5c:fd:d6:b7:be:
         54:7a:35:59:f8:76:1f:d4:09:b5:81:bb:cd:d4:10:d3:52:1c:
         65:94:27:79:10:53:62:37:e0:5f:67:3f:45:b1:cf:38:0b:5c:
         db:44:8c:a2:6f:d0:a9:47:0f:d4:9b:d1:cf:61:04:93:8d:9d:
         18:d7:fe:6b:a4:5d:23:24:44:c5:74:6a:0c:a8:4f:14:1e:a5:
         1d:c2:b9:93:b7:30:8b:b7:b1:a8:f3:b4:d6:99:71:8f:b4:ce:
         25:02:7b:00:cd:e5:56:14:32:92:76:bc:e6:e1:f0:e9:a3:4c:
         6b:69:60:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:56:52 2026 by rpki-client