Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
File:                     8B75163A575523EE408D2A2F59F8DD509D80F164.mft (raw, json)
Hash identifier:          NxmHfnSNUh3ROuezbo4RKBt6FeAKvkpPteBCfBmrSzk=
Subject key identifier:   9D:E4:50:36:C5:CD:22:94:AC:19:69:52:78:B2:EE:4E:CF:1E:5B:05
Authority key identifier: 8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64
Certificate issuer:       /CN=8B75163A575523EE408D2A2F59F8DD509D80F164
Certificate serial:       2F055EC900947D151D82909F73E8B1D11A55851F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
Manifest number:          0141
Signing time:             Sun 25 Oct 2026 13:17:36 +0000
Manifest this update:     Sun 25 Oct 2026 13:12:36 +0000
Manifest next update:     Wed 28 Oct 2026 23:44:36 +0000
Files and hashes:         1: 3136332e35332e34362e302f32342d3234203d3e203633363033.roa (hash: BKdRplU9NLnZ/h4BLY3jja717klES4XVFnkmg3VXRow=)
                          2: 3136332e35332e34342e302f32342d3234203d3e2034383038.roa (hash: c+p/Pq+NtkL7P1u0AQLsUoR0/VGVk2bOvNqaUGqcFb4=)
                          3: 3130332e3130322e3139372e302f32342d3234203d3e203633363033.roa (hash: P+f1ZXGwHVSKGlNUY9mpTNk0/ILFxlAfGXJFsffvGXo=)
                          4: 3130332e3130322e3139362e302f32342d3234203d3e203633363033.roa (hash: t39tqTl03AtgcaTxzzX+hlLOe34eGKb2ybUya8XN4as=)
                          5: 3130332e3130322e3139392e302f32342d3234203d3e203633363033.roa (hash: 8p1bN7o95Nzhj1STP5Gdu458Kd/sUF994fVF4Dc/txk=)
                          6: 8B75163A575523EE408D2A2F59F8DD509D80F164.crl (hash: n+OLnl6eLkz0NGCRvvZhe9tArrVjM0/YafVZohCdJj8=)
                          7: 323430303a646538303a3a2f33322d3332203d3e203633363033.roa (hash: FSvtv2m7PR3ei7h52sarJkI6mAo3AA7N79yAEtYmVrM=)
                          8: 3130332e3130322e3139382e302f32342d3234203d3e203633363033.roa (hash: BLQHxFMpGiBy5T9u7yNcmRvaSSAlTAfB6BojWrEtAyk=)
                          9: 3136332e35332e34372e302f32342d3234203d3e203633363033.roa (hash: Hxl8gNH8HGcPW0AIzRUHMHmAqEopI8mJHP8Oyz77B9k=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 23:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:05:5e:c9:00:94:7d:15:1d:82:90:9f:73:e8:b1:d1:1a:55:85:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B75163A575523EE408D2A2F59F8DD509D80F164
        Validity
            Not Before: Oct 25 13:12:36 2026 GMT
            Not After : Oct 28 23:44:36 2026 GMT
        Subject: CN=9DE45036C5CD2294AC19695278B2EE4ECF1E5B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:37:ae:69:59:77:44:72:3a:ef:13:41:bc:4f:
                    3d:e6:e4:df:b6:db:bd:2a:3d:1f:3a:36:bd:20:e7:
                    5a:67:83:74:a2:dd:db:f3:59:a0:e5:a6:ee:e0:d3:
                    b5:3f:ee:bb:95:8e:0b:d0:4e:f6:11:00:50:c1:41:
                    21:53:58:c6:3b:70:8d:b6:99:b2:48:c3:49:9b:b5:
                    08:51:9f:3a:4f:af:0a:48:e4:8a:66:e9:60:34:ce:
                    e8:c1:f7:b0:de:2e:20:9d:51:7b:36:49:9f:10:cf:
                    7d:d1:e2:9d:20:13:c2:01:c0:e1:06:c4:c1:87:69:
                    1c:c8:17:52:fb:6e:eb:85:c0:b4:7e:bb:2a:f2:4e:
                    ae:5f:85:8c:ec:f0:4b:dc:a5:50:bc:b6:65:e0:69:
                    2c:79:f4:85:ae:7c:1a:c2:95:e3:cb:1b:03:32:2f:
                    90:80:71:17:ca:93:7d:de:ed:b3:42:6e:b6:f8:92:
                    a9:73:70:95:fd:fa:1a:7c:2f:4a:8b:1d:05:23:74:
                    f9:b6:8e:67:54:a6:fd:a2:83:12:b9:ef:bc:76:a1:
                    fd:06:dd:74:1b:0a:81:b3:46:ac:1c:e4:d5:a6:5a:
                    40:10:a9:93:6d:f5:92:e0:97:35:52:48:c9:82:6e:
                    0a:28:0d:28:48:98:b2:c6:b4:6f:f6:e1:3a:35:87:
                    2d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E4:50:36:C5:CD:22:94:AC:19:69:52:78:B2:EE:4E:CF:1E:5B:05
            X509v3 Authority Key Identifier:
                keyid:8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:db:be:48:46:94:4a:f0:37:e3:3a:a4:ca:aa:72:03:66:f4:
         a5:c7:12:ca:ee:00:ee:c6:17:1d:ba:7e:94:5b:78:ea:27:53:
         e2:3f:a6:d1:18:2b:5e:83:6f:17:fe:c8:86:64:2f:20:0c:45:
         19:19:63:f6:f1:7d:40:ba:d4:86:1a:bb:02:39:e9:6f:72:fb:
         8e:0f:f0:50:27:4c:e7:2f:bc:f4:70:96:c7:ca:26:7c:90:01:
         fc:f7:3a:50:0e:32:e0:82:28:ad:5c:bd:95:df:72:e3:c4:93:
         7f:28:03:b3:8b:fb:8b:78:76:c6:fa:66:e9:44:50:e2:44:b7:
         26:45:f3:bb:a0:2e:ce:2f:80:51:1a:dd:65:97:ef:3b:f0:7f:
         62:7d:3a:cd:60:0f:7c:a0:ac:38:fc:d3:cc:cb:47:7b:2d:02:
         ac:cb:1f:ce:55:c6:3a:88:c5:1b:25:ca:c0:f4:53:dd:6d:c3:
         74:29:8a:d1:8f:da:33:98:b4:76:fa:2f:17:6c:a8:69:2d:f1:
         ce:44:d6:6a:b4:ba:a5:eb:ef:c5:47:ff:b8:d4:50:47:10:4a:
         03:8e:0a:28:0c:54:83:2b:9f:7d:8f:77:d2:2f:be:62:7f:47:
         1d:61:63:0f:c1:4b:13:80:3f:ce:96:3f:10:53:33:47:f5:d1:
         9b:5d:57:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:38:13 2026 by rpki-client