Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
File:                     0A37AC88E303F4BB834C180B06F250ADE69700BF.mft (raw, json)
Hash identifier:          wHezLegQR+/FK8Ly3R51/OxwfdZ92x6KzKshrphhwAs=
Subject key identifier:   97:86:0D:3C:D7:90:88:B4:4C:B6:E8:7B:9A:F0:EE:53:D6:54:A7:B4
Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
Certificate issuer:       /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Certificate serial:       7628CD43B66A979821F89E6BF2E3FD0D8743C15C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
Manifest number:          0147
Signing time:             Wed 14 Oct 2026 07:23:48 +0000
Manifest this update:     Wed 14 Oct 2026 07:18:48 +0000
Manifest next update:     Sat 17 Oct 2026 11:58:48 +0000
Files and hashes:         1: 3131302e34322e302e302f31372d3332203d3e20313336313838.roa (hash: HSqjsjspq/Gb/3SoeP1mntK6twdXjFS1SivOc9b8Cm4=)
                          2: 3130332e38382e33322e302f32322d3332203d3e203536303431.roa (hash: LZt3ftbf5G9yhtS00ZJvPGtPMnxv5PFu1Xk9iH95A4o=)
                          3: 0A37AC88E303F4BB834C180B06F250ADE69700BF.crl (hash: GMzUk8VwztxgksgXzUEknHHwtk94M5Xjeh+WRqZQsRw=)
                          4: 3131302e34322e36392e302f32342d3332203d3e20313331353339.roa (hash: N+KAvoBPFthmtPAZmA4Ct00jKsGdsu4x9NEs5BJ7SHA=)
                          5: 3131302e34322e382e302f32342d3332203d3e20313331353339.roa (hash: oXRgpffdK+lvoS7ee87lNpNBgbfDB4CtLD9rz+BzaSM=)
                          6: 3131302e34322e31342e302f32342d3332203d3e203536303431.roa (hash: I1mRTJEv7XMne15R/kYSDtJ3wwagmv0P2u9AEzdINQE=)
                          7: 3131302e34322e382e302f32322d3332203d3e203536303431.roa (hash: UGXx89SmZoXp3Ldzk4RRnnn48j51DJudYev450Vhx68=)
                          8: 3131302e34322e31372e302f32342d3332203d3e20313331353339.roa (hash: WnY9QzmAZYIlZt3r1Wd0YfN++HcMqAicx3/40p7Siro=)
                          9: 3131302e34322e322e302f32342d3332203d3e20313331353339.roa (hash: eI2Au66LMbF0S4gztMAphliyfK7erZNtw8elWCywNUw=)
                          10: 3131302e34322e372e302f32342d3332203d3e20313331353339.roa (hash: iLKBkgcdFzd8zR4cCjargfgwrNRQlcgp8WtG/Xzkct4=)
                          11: 3130332e38382e33322e302f32322d3332203d3e20313336313838.roa (hash: jQqLEWUxduW+9IQ9JLGbp8S9ysifXuIYjYCe/8hazZs=)
                          12: 3131302e34322e302e302f32312d3332203d3e203536303431.roa (hash: ucI0IpK7B4HmAFtIUsC0OJSWHwVBlJyCTJoRaFByZ9M=)
                          13: 3131302e34322e31362e302f32342d3332203d3e20313331353339.roa (hash: fqQ57O6K0NHwcs3GZjTklIWVS5IbNlHMvZDT2JT1qdU=)
                          14: 3131302e34322e31322e302f32332d3332203d3e203536303431.roa (hash: uB3eoG4LdrJAwtht3A/M7sqsPVAbGG9x4aSXJZ2+AhQ=)
                          15: 3131302e34322e3130302e302f32342d3332203d3e20313331353339.roa (hash: kkqCK06CVA5mGJs9BbAF9mVLEiPORa0PeAMWyQ6WoGk=)
                          16: 3131302e34322e31332e302f32342d3332203d3e20313331353339.roa (hash: QDeAv7tbNK0dMQGA0BU37qfi2Z4gz8gzfujfTSjvoA0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 11:58:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:28:cd:43:b6:6a:97:98:21:f8:9e:6b:f2:e3:fd:0d:87:43:c1:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
        Validity
            Not Before: Oct 14 07:18:48 2026 GMT
            Not After : Oct 17 11:58:48 2026 GMT
        Subject: CN=97860D3CD79088B44CB6E87B9AF0EE53D654A7B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b2:ee:44:03:74:94:6f:a8:93:cf:f0:36:29:
                    8c:63:52:ce:75:f2:7c:59:7e:01:d6:f9:b2:68:6b:
                    0b:0d:3e:8a:69:83:41:de:c6:6a:42:de:bd:be:e8:
                    ba:a6:7c:26:85:f2:82:5b:5d:ed:01:78:d5:db:fc:
                    16:10:bd:7d:8f:cf:1d:0b:e3:0f:a1:41:f3:d6:82:
                    99:1b:88:fa:ba:6c:db:7a:b9:6f:d8:9c:f7:8a:8e:
                    88:06:fc:c6:a7:71:0d:88:47:0d:1e:44:80:16:27:
                    5f:ab:98:df:6b:d0:00:a8:6c:43:f7:f7:6f:b6:34:
                    fa:8b:93:e9:d8:c8:3f:bb:22:1c:b3:a2:bf:4c:9b:
                    6f:79:e0:78:b4:30:6c:80:77:d8:fb:81:59:29:3c:
                    c6:ed:6d:45:80:fc:99:cd:15:ab:f0:17:e8:c6:bc:
                    26:1a:bf:68:25:9b:e0:b6:6f:91:07:47:de:06:47:
                    a7:83:84:53:03:3e:1d:b0:52:d5:0d:b0:19:08:9e:
                    be:3b:b1:90:14:b6:88:39:6c:32:3f:81:38:e1:0e:
                    19:34:36:15:17:32:28:b0:ba:e6:e2:d6:98:c9:6b:
                    bb:bb:9a:d1:52:64:12:34:42:55:2c:f3:da:e6:80:
                    ee:b2:b9:bc:31:07:5a:d1:c9:f4:8d:ab:55:9a:4f:
                    c5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:86:0D:3C:D7:90:88:B4:4C:B6:E8:7B:9A:F0:EE:53:D6:54:A7:B4
            X509v3 Authority Key Identifier:
                keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:bd:5c:2e:81:bb:d1:c2:09:46:98:e0:9a:45:c3:ab:2f:d1:
         a2:aa:52:04:14:74:ff:bd:22:7a:50:f0:08:84:91:9b:39:16:
         df:1b:7c:ba:0b:fb:39:ef:07:8c:c8:33:3c:1b:ab:8c:cb:a6:
         24:e0:bb:e2:28:fa:f2:51:99:a7:4a:2b:ec:2c:cf:87:53:b9:
         fe:08:cf:84:e3:ee:ed:af:f6:4a:6b:86:22:18:d5:5b:1c:c9:
         d5:89:3b:db:fd:1e:34:80:4c:f9:96:90:c1:a7:b2:44:0f:a0:
         dd:68:6f:25:4c:cf:74:d8:e2:6a:e9:43:f2:29:95:8d:a3:bf:
         53:1d:f8:48:54:26:98:ef:24:c1:eb:31:9c:8d:7b:73:fd:3d:
         b4:43:f4:79:c1:97:bc:00:22:df:24:22:0a:37:85:9b:a2:be:
         be:ff:27:00:93:a4:cd:34:7b:0d:96:a6:f4:95:c6:de:80:4a:
         aa:3a:5d:3d:54:b9:8c:44:8a:45:6d:9c:ef:12:0b:54:cd:85:
         a0:ec:66:05:c7:85:6d:87:ea:c4:81:ff:16:98:7e:f5:cf:57:
         63:46:a3:85:04:de:aa:05:1e:b7:df:d7:03:1f:94:cd:7e:43:
         ee:cc:0a:d5:e8:79:f5:77:c0:14:a4:44:70:92:66:60:5b:73:
         ea:5a:5f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:09:37 2026 by rpki-client