Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
File:                     79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft (raw, json)
Hash identifier:          avtkp0Rs3Rf4+BPOfDoCHQT2JE1smfTrXVnSlM20cIA=
Subject key identifier:   F6:2C:7F:11:B3:27:06:17:8E:68:C1:27:54:1E:04:5A:92:FA:7C:29
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Certificate issuer:       /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial:       7B39D8720FD37BAFE997BB88A60FE1D301537782
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
Manifest number:          0152
Signing time:             Sun 25 Oct 2026 10:42:31 +0000
Manifest this update:     Sun 25 Oct 2026 10:37:31 +0000
Manifest next update:     Wed 28 Oct 2026 18:58:31 +0000
Files and hashes:         1: 323430363a383838303a3a2f34382d3438203d3e20313531323936.roa (hash: 2rEfRZGA1EAeckbEG0PTZGNkMZ/YcjvJUN2WIG7ZIvU=)
                          2: 3138302e3231302e3231322e302f32322d3232203d3e20313531323936.roa (hash: LcT6ji4n5le6EwNrdut4qkUvWOWYyD5Xceg1g5j20sU=)
                          3: 3130332e37312e36382e302f32322d3232203d3e20313531323936.roa (hash: r/IDS7Iz5LYv/Jd7YSBUHW70Me/1R2X9UxvKyLsfnTc=)
                          4: 3130332e37312e37302e302f32342d3234203d3e203233363530.roa (hash: ZznsMKL8WEpiTUGcpGB1ChW+1Alx4+mo8vWVh9DMguk=)
                          5: 3138302e3231302e3231322e302f32342d3234203d3e20313531323936.roa (hash: WXBy7PYl+0tZAAd5uZFc08h2pkIGftVU2VXMO2BUPZA=)
                          6: 3130332e392e32342e302f32322d3232203d3e20313531323936.roa (hash: pcCIdHW+Wr27+f4tlmgbNg3rAcusLNN5epai2nB9kY4=)
                          7: 3130332e37312e37312e302f32342d3234203d3e203233363530.roa (hash: qE+HB/jL/dZZaPj/SB367pzcLZMK04ZRnLQNWi1ZLY0=)
                          8: 3138302e3231302e3231352e302f32342d3234203d3e20313531323936.roa (hash: MzfDml4PqPQJ0/ptTbSE1GmPtQY9+lQxHmlpHCDwjlQ=)
                          9: 3130332e37312e36382e302f32342d3234203d3e20313531323936.roa (hash: dM03n1V3wFLUQUW85D+oQAH0VrRiu7aigFAwGGt0A3Q=)
                          10: 3138302e3231302e3231342e302f32342d3234203d3e20313531323936.roa (hash: G3Fj6cauJg8SJxIqxWjSGGbh00wiyR3jukfiw++d+Jg=)
                          11: 3138302e3231302e3231332e302f32342d3234203d3e203233363530.roa (hash: +d9P+V3G5sTLZcX3O027aMRCCx2RtHNSuFPtmq5GEhU=)
                          12: 3130332e37312e36392e302f32342d3234203d3e203233363530.roa (hash: /q4hZIIPN68k3lCoLu2BxKZ1dZGnAau8Tu6zQfHJhw8=)
                          13: 3130332e392e3130382e302f32322d3232203d3e20313531323936.roa (hash: BQkj9JY42h/4Ktqm5PZu183HmciBKbXBVRuupkHRF58=)
                          14: 323430363a383838303a3a2f33322d3332203d3e20313531323936.roa (hash: VM1qHITDY0vlR5ts4U5Mlsvp4cbzTSQCBviUKQgtlBQ=)
                          15: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl (hash: m7W1lu+7I7Jikzax6sNkKKYJaoIKpQjN+SDW4ICh2dg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 18:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:39:d8:72:0f:d3:7b:af:e9:97:bb:88:a6:0f:e1:d3:01:53:77:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
        Validity
            Not Before: Oct 25 10:37:31 2026 GMT
            Not After : Oct 28 18:58:31 2026 GMT
        Subject: CN=F62C7F11B32706178E68C127541E045A92FA7C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:51:e6:eb:65:d2:d6:c6:a4:ed:cf:11:64:86:
                    38:34:09:e0:b2:fa:13:48:42:dc:96:f3:da:74:47:
                    4b:66:ec:4a:ad:c0:fd:53:01:8d:a9:9c:37:2a:e0:
                    05:89:49:f5:70:97:35:10:08:94:28:6f:56:13:e8:
                    bb:b8:ab:3f:9c:eb:bc:60:9f:06:a4:24:3f:5e:db:
                    0c:7f:ae:63:d3:55:19:47:49:12:94:38:06:95:56:
                    b2:55:61:da:87:6b:ef:91:fb:44:9c:68:90:ab:71:
                    d3:d5:c5:ce:9f:17:24:41:dc:4a:aa:29:85:a9:63:
                    43:29:00:02:d1:b4:65:6a:59:99:bd:fd:c1:df:06:
                    28:ea:c5:6d:19:55:cf:02:fc:8a:1f:36:22:57:54:
                    63:de:96:83:77:09:b4:d5:a6:d8:3b:b7:ed:cc:9b:
                    b2:76:6e:da:80:2b:72:b7:90:20:9b:76:29:94:9c:
                    f8:18:0d:5e:53:b9:02:36:d6:5a:db:d8:4d:67:70:
                    ec:e2:0c:7a:51:0f:7b:77:50:fc:3b:23:6b:f1:29:
                    18:cd:b2:50:29:f4:9f:c5:80:1f:bc:85:82:02:78:
                    61:b7:86:4e:fc:4f:28:a8:3b:8a:0f:73:00:fc:bc:
                    25:d5:ad:a6:bf:46:47:31:21:80:dc:52:96:c5:cc:
                    98:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2C:7F:11:B3:27:06:17:8E:68:C1:27:54:1E:04:5A:92:FA:7C:29
            X509v3 Authority Key Identifier:
                keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b0:b4:35:b6:5a:20:fb:fe:c7:d2:0f:26:fd:b7:ad:94:89:
         9c:f2:35:3a:c2:a2:ca:87:be:fe:f4:9a:29:5d:51:19:a1:42:
         29:42:1f:e5:6b:6f:6c:46:0b:93:17:d1:a6:4c:b9:d2:f4:b7:
         9e:74:08:50:a6:07:4e:15:08:e6:bd:df:92:a1:c1:42:cd:43:
         9b:3a:31:2e:c7:25:b5:e4:22:32:8a:f9:89:9e:19:ae:ae:d9:
         7b:94:87:4f:c2:56:2b:be:73:5b:bf:9c:85:6b:a0:13:70:cb:
         29:13:e9:c1:77:8f:8a:7e:c3:29:eb:a1:90:79:49:56:ec:e5:
         7b:3e:7d:e2:b4:c4:28:ec:cb:e3:a6:c2:aa:50:e0:e1:b1:cf:
         77:17:03:b7:73:5e:51:94:df:d9:31:e0:15:8f:0e:07:18:b1:
         2e:90:4e:da:f5:63:7e:c3:78:33:9a:a7:a9:86:60:ca:e2:39:
         fc:7f:e7:22:b4:55:b4:c4:dd:9f:fd:ce:30:a6:e5:14:43:05:
         34:9c:b4:f8:cf:71:84:ba:13:b4:8b:6f:dd:5a:1f:84:86:a5:
         4e:af:58:43:4e:d4:7d:16:00:f6:03:81:f5:33:b2:50:c8:3a:
         8a:ef:42:88:97:3a:71:ba:c1:39:74:85:7c:a0:13:41:91:32:
         7a:58:f8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:54:43 2026 by rpki-client