Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
File:                     5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft (raw, json)
Hash identifier:          +goGR98cmbRDI3Kt01Lib9IUy2J9x/x6eSU+XsKjGxg=
Subject key identifier:   89:A4:55:97:01:8D:EF:45:36:93:CF:F1:58:9E:7C:7A:9E:4C:0D:91
Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
Certificate issuer:       /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Certificate serial:       330FBD1AB7C52BCEA80573A4D36932D5CF504C61
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
Manifest number:          0154
Signing time:             Sat 24 Oct 2026 12:41:42 +0000
Manifest this update:     Sat 24 Oct 2026 12:36:42 +0000
Manifest next update:     Tue 27 Oct 2026 19:42:42 +0000
Files and hashes:         1: 34332e3235352e38342e302f32322d3232203d3e20313430373136.roa (hash: zNVSRQXJVS0U6DfZqiJ39oTxdu5/+POi5g9vr+jO/0I=)
                          2: 34332e3235352e3231322e302f32322d3232203d3e20313334373634.roa (hash: nvpX3+tQBlD7o4JRzeJzJ8SBqs6nbVPAwRAZ8Hg23Rs=)
                          3: 34332e3235352e3231322e302f32322d3232203d3e20313336393538.roa (hash: mP/WzKqlnEhqwDkLhudrruXO2O7e8o0TzyuISBE0WWA=)
                          4: 3136302e31392e3230382e302f32342d3234203d3e20313334373634.roa (hash: NdCjlB6B9YgZJoZ1Uw/3JvnFwjpegaTv9nvgtsFFe1c=)
                          5: 3130332e3231302e3136302e302f32322d3232203d3e203633313939.roa (hash: B/mJbtPu0UVWmsBqfhu4FLdB1gzXkN1btMchb8wEDGA=)
                          6: 3130332e3232392e3231322e302f32332d3233203d3e203536303436.roa (hash: Kbc2X0VP7C3m3lXwC3QYmP+Anp96pYrDBmtlsHz1SDs=)
                          7: 34332e3234372e39302e302f32332d3233203d3e203536303436.roa (hash: 0nfsvYjB3JaX9r5vzMBGJyLbtsVhFG6gWlCVWg7ZQao=)
                          8: 3130332e3232392e3231322e302f32322d3232203d3e20313338393530.roa (hash: lSfXs9wrD8HpNejchDaQjZ6lq1k4aLQaWkfHnmwAoS8=)
                          9: 34352e36352e32342e302f32322d3232203d3e203536303430.roa (hash: lUaTfrntqKtFOTlCsmro3f33d6YZDxcTEMe7k7uzeNw=)
                          10: 34332e3235352e38342e302f32322d3232203d3e20313338393530.roa (hash: a2Wtq/3TcYRc+XiTZBslYW32YNerbDjwwVQMQfkNp7M=)
                          11: 3130332e3232392e3231322e302f32322d3232203d3e20313430373136.roa (hash: JWQmhFo9Q7GX9DkIQzdv1lCo+rwv5vaKzuAOcUNRjqc=)
                          12: 3130332e3232382e3136302e302f32322d3232203d3e20313336393538.roa (hash: tJs1WXKBIZzZBUHlyJRKk33jaXHUx+AZPeichCwHr88=)
                          13: 3136332e35332e3136382e302f32322d3232203d3e203536303436.roa (hash: xxuHEP+4y2g6DiygkRZjfIA8Gg4+SAnsl/smlqxWanI=)
                          14: 3130332e3232392e3231342e302f32332d3233203d3e203536303436.roa (hash: Ra10W5GtlPw/njL98UskhghZYE4ZiCdRZVy+84U5PF0=)
                          15: 34332e3235352e38342e302f32342d3234203d3e203536303436.roa (hash: IjBvU4/5nWK9WMi020XRry7GU6fm9n2kb/drNvRjQMM=)
                          16: 34332e3234372e38382e302f32322d3232203d3e20313338393530.roa (hash: DTgYD451o6qFXU+4+HDFgc5UAQ0hHjq6+Tqqrd1JDX8=)
                          17: 34332e3235352e3231322e302f32322d3232203d3e203536303430.roa (hash: VLiXiRL9m9UaxtL5IIpzNqXZ0El1YmwJlVWUpR3X+4M=)
                          18: 3136302e31392e3230392e302f32342d3234203d3e20313334373634.roa (hash: M8L8M2KEBK+CSisGT2VgUkUUn3piMNzegPrYDaPOf+U=)
                          19: 34332e3234372e38382e302f32322d3232203d3e20313430373136.roa (hash: 1Fg1SigjV7ApUPmgrNmqJzDj8V3QbsSuCaGEnn7mIBg=)
                          20: 5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl (hash: L5vwfQiBz7auvOWQ639PN03w/AX912b6AcMcqs3kyI0=)
                          21: 3136332e35332e3136382e302f32322d3232203d3e20313430373136.roa (hash: 57J5AvXfxCaO2TRiISPpN+0WbSCmUOmiweBJy3fFQqA=)
                          22: 3136332e35332e3136382e302f32322d3232203d3e20313338393530.roa (hash: YzdEkTABzVcNyM466syYoeAnp3vlyb5SxupbPL+cyzY=)
                          23: 3130332e3232382e3136302e302f32322d3232203d3e20313334373634.roa (hash: 0BuNC9Q3/V8yieWfF12GnbDvurwUZmTubRLUCSZsNIE=)
                          24: 3136302e31392e3231302e302f32342d3234203d3e20313334373634.roa (hash: aZQwk7ZLVW5VLt7vCm1Hr/9K53JDBHoNNiW/IdgeqjQ=)
                          25: 3133392e352e36302e302f32322d3232203d3e20313336393538.roa (hash: BRas9BzzPUpnkJEVzzXKEEW/WvBtkw9Jn3CyNd06ofk=)
                          26: 34332e3234372e38382e302f32332d3233203d3e203536303436.roa (hash: H+hPVi2yiyMsxaR6plDb4tFh2zb5+UC9d2feYlvrMZk=)
                          27: 3133392e352e36302e302f32322d3232203d3e20313334373634.roa (hash: n5z3Ub88nuXHHkXtqHc9Xp+LcApHRbc3zPCDmtDkCUg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 19:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0f:bd:1a:b7:c5:2b:ce:a8:05:73:a4:d3:69:32:d5:cf:50:4c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
        Validity
            Not Before: Oct 24 12:36:42 2026 GMT
            Not After : Oct 27 19:42:42 2026 GMT
        Subject: CN=89A45597018DEF453693CFF1589E7C7A9E4C0D91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:a9:bd:5f:fa:df:fc:f7:89:22:d9:f8:12:
                    a3:a5:30:1a:6f:6c:d4:08:c3:fd:6b:56:95:40:d3:
                    94:0f:aa:20:0d:80:00:9e:d8:3c:7d:f9:a1:62:85:
                    9b:11:12:a3:cd:10:5d:82:bb:aa:00:c3:59:9c:47:
                    f7:0a:d8:56:ca:c4:75:86:bd:ba:84:d2:34:19:b8:
                    2f:8f:d0:3d:41:17:91:b4:12:c7:a3:5a:82:cf:ce:
                    6e:0a:98:28:e6:12:2d:09:5c:57:a8:1f:5c:e5:75:
                    75:32:90:dd:c7:05:9e:47:ef:4a:10:95:8b:62:d3:
                    6b:9b:72:81:52:9d:4f:b1:80:fb:af:70:1b:3a:4c:
                    f5:08:11:60:80:ad:13:cc:ec:d7:4c:67:8f:6d:38:
                    72:4d:91:2e:1e:36:70:a9:99:a4:ca:61:a6:f3:bd:
                    b6:c2:29:bb:b7:d5:b9:dc:0c:32:3f:6b:6b:76:91:
                    96:fb:c1:bf:93:dd:84:62:f5:d8:9e:81:19:e8:ab:
                    72:5d:02:2a:34:44:3d:dc:10:ef:b3:80:dc:31:fa:
                    2d:37:a1:d7:77:8f:d6:ec:2e:9d:c1:ee:dc:1e:74:
                    52:e6:39:90:6c:c1:6d:88:2b:e5:cf:ad:c8:c6:8d:
                    78:d3:ee:3d:bf:56:43:04:84:d9:0d:61:0a:aa:85:
                    05:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A4:55:97:01:8D:EF:45:36:93:CF:F1:58:9E:7C:7A:9E:4C:0D:91
            X509v3 Authority Key Identifier:
                keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:26:41:6f:02:8f:ef:bb:c4:6b:60:ff:70:af:44:76:8e:73:
         c3:a6:fb:58:fb:58:a2:b8:2f:40:f1:90:70:99:74:62:db:21:
         b7:2e:fb:35:53:55:9f:a7:5a:3a:9b:ba:5b:ad:e3:80:03:a1:
         c4:20:97:d6:d2:21:81:12:5b:48:83:0e:aa:26:96:81:de:71:
         4e:9a:7d:00:e1:fa:8c:49:8e:d6:70:de:6c:5e:42:73:76:ab:
         d8:74:ee:26:2d:09:37:61:93:50:9d:d8:1a:35:a4:18:67:f3:
         4b:46:1c:39:5c:23:42:9b:4e:57:12:70:0d:89:ca:05:45:0c:
         3d:3a:e5:02:ca:da:ac:50:ac:66:04:e4:5c:ea:c3:b2:7b:2e:
         cd:ee:ad:0c:af:aa:74:68:a7:bc:5f:cc:65:98:29:01:ee:aa:
         0f:c6:7d:ae:ab:65:0c:dd:a1:d2:1b:8e:20:40:5e:ac:a4:ce:
         96:65:46:54:d0:bb:c8:0d:6f:58:f5:1d:88:01:82:06:66:92:
         3b:f0:c6:da:41:05:35:be:48:fa:ed:84:f9:79:88:e3:30:89:
         f2:eb:ca:81:66:86:21:da:40:df:e7:12:aa:57:52:c8:0a:64:
         86:de:1d:0d:87:2d:49:35:1c:4c:c6:6c:53:89:f3:27:a3:65:
         74:30:67:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:41:53 2026 by rpki-client