Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
File:                     098D421CB46F292F13CE71DF3D685D5E82893289.mft (raw, json)
Hash identifier:          9cs4psx5jP4AitV43q4b3Uupy4RP+d4wEoQrl9cWbS8=
Subject key identifier:   CA:7A:A2:DF:28:A4:A0:3C:29:C3:94:FE:A1:1E:64:28:8B:80:2F:55
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Certificate issuer:       /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial:       292B87078237F33E63598D88EE236B8BE14C75BD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
Manifest number:          0147
Signing time:             Wed 14 Oct 2026 14:39:15 +0000
Manifest this update:     Wed 14 Oct 2026 14:34:15 +0000
Manifest next update:     Sat 17 Oct 2026 21:20:15 +0000
Files and hashes:         1: 3132322e31312e33322e302f32312d3231203d3e203233373234.roa (hash: h0Xaj72XHmJeYZGrLxwTo88nHBDFLZq98uJjTObVwD4=)
                          2: 3131382e3139342e34302e302f32312d3231203d3e2034383038.roa (hash: uTqtT2+Z+32pQg4cwaqs2sAF3NdBZFcby8wCkB8VGjE=)
                          3: 3132322e31312e35362e302f32312d3231203d3e2034383038.roa (hash: UIrLFpYiMVKyR3ZM/CIcfXzkOEOcfkPa2kE4Gw/lutg=)
                          4: 3131382e3139342e33322e302f32312d3231203d3e203233373234.roa (hash: nSWPu8aN6WamKVW4d0E8KInxi+UijHCRr0xuUppfJVc=)
                          5: 3131382e3139342e34382e302f32312d3231203d3e203233373234.roa (hash: 5aYFYC3sz9pdXlA4MZsC3Gzn3v3fHAYEvc5Hr3Osouw=)
                          6: 3131382e3139342e34302e302f32312d3231203d3e203233373234.roa (hash: wj7o0kMSNOyiUst8OjYtPK1TlZz/PgITlU4P+dX7JtE=)
                          7: 323430333a346338303a3a2f34382d3438203d3e2034383038.roa (hash: IvoN5KOxvoNe59IDfb24FFL6qpg8UBoTE/nVJ45csPk=)
                          8: 3132322e31312e35362e302f32312d3231203d3e203233373234.roa (hash: n4C7l2A4rvlhW4atbSQqHzhdugqhLlv/LQhObAnFTSY=)
                          9: 3131382e3139342e34382e302f32312d3231203d3e2034383038.roa (hash: Wlv1ILc08DXaAYSI+HkiftdI5PHLcW7mnRqo6voD11w=)
                          10: 3131382e3139342e34382e302f32312d3231203d3e203536303438.roa (hash: jJHfhdH55SAnLJjrfpHzF3IQbWlzuqxr70ysIHv2Qx4=)
                          11: 3132322e31312e34382e302f32312d3231203d3e203536303438.roa (hash: OeABueeL5bVOfgm0ioMscNw6JnIbVThJEuNaqIcxCnc=)
                          12: 3131382e3139342e34302e302f32312d3231203d3e203536303438.roa (hash: n4IPcR0vuUnwdrml1UZMOWsHcrDZi76Za6KE8Vlcgjo=)
                          13: 3132322e31312e34302e302f32312d3231203d3e203233373234.roa (hash: ai772q1EoRxuBDbBexQPnZXL/jCbU0YH2VB2woJTRp8=)
                          14: 3131382e3139342e35362e302f32312d3231203d3e2034383038.roa (hash: kPLgk6dYiF/WX5Rq65tlfXz+gdLaxsqZIwF0A7Ufkqo=)
                          15: 3132322e31312e34382e302f32312d3231203d3e2034383038.roa (hash: 0c/j1Gp0iCOrUSwBYehtFLY4kagoam0ofJWT9krdbRw=)
                          16: 3131382e3139342e35362e302f32312d3231203d3e203536303438.roa (hash: 3h+1mGvW/F1q6aPyrG2uRJfP0NCyMy+g8d9cHabmE9I=)
                          17: 3132322e31312e35362e302f32312d3231203d3e203536303438.roa (hash: OlqVUzQBn8tcFE4niny8RcvphQVQAF2g7rjIrsr8Fhc=)
                          18: 3131382e3139342e35362e302f32312d3231203d3e203233373234.roa (hash: ltZtkAqvZJofnyKNAI5X/W6jfZZwufYjJun0Ygp1JBc=)
                          19: 3132322e31312e34302e302f32312d3231203d3e2034383038.roa (hash: XDT9ktasaOET17rRRzYq/yK1DlnIymI/BRvWecxJGWQ=)
                          20: 098D421CB46F292F13CE71DF3D685D5E82893289.crl (hash: WQnep8sirWj0dNUQFY6LBQNbWVifjebY9VyPGJCqLBw=)
                          21: 3131382e3139342e33322e302f32312d3231203d3e2034383038.roa (hash: w2gS6YzrPmxBS3U09oI9HMSpNUd5vKBmQTETDvb5uLE=)
                          22: 3132322e31312e33322e302f32312d3231203d3e2034383038.roa (hash: wKnPfEKTLOcoPxcoU4igzvQtVEKsTlIE9YwzFVgOuGs=)
                          23: 3131382e3139342e33322e302f32312d3231203d3e203536303438.roa (hash: 66bgFsuwP5YR6jczc1wT5regWMhuco+8bvtJ9aQPcFU=)
                          24: 3132322e31312e34302e302f32312d3231203d3e203536303438.roa (hash: v4pzzGzUWs9sXfkWnaRsBIwheBnCfSO28nUsWmEeSrY=)
                          25: 323430333a346338303a3a2f34382d3438203d3e203233373234.roa (hash: sjXPx2W8FA2lwA4lPp9dbO6vjQOZbUVExJ17HnTJgb0=)
                          26: 323430333a346338303a3a2f34382d3438203d3e203536303438.roa (hash: 7/ltQtz2n5DqjAYwYbdRZYTje+izuD33MFyhCzobykM=)
                          27: 3132322e31312e34382e302f32312d3231203d3e203233373234.roa (hash: keY2EFny2N50oH6sPmEcnlgutDB4fpw2kzVuddOqR00=)
                          28: 3132322e31312e33322e302f32312d3231203d3e203536303438.roa (hash: 6YIv4SPnbt5J5t2pGyzsqmetgf6QOv/ADQllyX0zV+Q=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 21:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2b:87:07:82:37:f3:3e:63:59:8d:88:ee:23:6b:8b:e1:4c:75:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
        Validity
            Not Before: Oct 14 14:34:15 2026 GMT
            Not After : Oct 17 21:20:15 2026 GMT
        Subject: CN=CA7AA2DF28A4A03C29C394FEA11E64288B802F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:88:36:f9:db:95:c9:af:e2:88:46:d6:72:
                    b3:11:c9:aa:1a:4b:24:32:7c:18:2e:78:1b:48:c0:
                    b8:81:dc:26:8a:22:0e:c8:d8:d5:9c:da:3a:7f:74:
                    a3:c7:40:87:ef:60:46:48:2f:07:cf:58:36:d4:e3:
                    cf:d4:b9:b1:e3:d1:0d:74:6f:a4:e5:da:20:44:70:
                    56:0f:0a:d2:64:1a:0e:da:60:b7:30:f8:1d:97:ce:
                    0e:51:fb:71:b8:a6:b3:4e:c4:44:bb:c8:b8:1a:5b:
                    db:14:18:9e:d2:96:10:06:62:f1:1f:c5:e2:c2:bc:
                    c6:d0:67:e1:79:92:bd:8f:1c:a1:20:5f:34:aa:71:
                    4c:e9:6f:c3:7e:00:59:98:de:37:bf:ab:8b:50:8c:
                    2f:6c:8c:06:77:a8:c9:6d:39:4f:70:9d:37:fb:b7:
                    c2:d9:bf:59:59:41:26:7f:21:27:ce:13:26:2d:50:
                    dc:5b:c2:2c:2a:5e:0a:7b:15:d2:59:cd:92:3a:0f:
                    87:19:e0:8d:19:3f:1d:36:a5:e0:36:b5:e5:89:81:
                    21:b8:69:6b:06:e6:74:2c:de:69:9e:fc:4b:d9:45:
                    f3:25:d8:e1:cb:f4:90:d0:cd:b1:c3:62:fc:ec:7c:
                    29:5d:33:81:d9:ee:e2:36:3e:cb:1c:c7:37:48:ca:
                    9b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7A:A2:DF:28:A4:A0:3C:29:C3:94:FE:A1:1E:64:28:8B:80:2F:55
            X509v3 Authority Key Identifier:
                keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e6:6a:be:71:48:b7:c0:a8:5c:d0:28:81:c0:91:46:21:95:
         51:2e:8c:a8:32:c6:78:58:37:0b:9e:4d:4d:30:f0:93:47:35:
         db:75:d7:72:2b:e3:96:a6:16:c9:e9:04:2d:2e:6d:31:62:6b:
         7e:f5:c2:5d:51:50:c9:be:ac:65:46:37:64:e8:46:31:ae:87:
         36:38:9c:72:66:33:89:60:76:16:00:5b:2f:bc:7e:d8:2a:78:
         e6:af:b5:b0:50:ff:b5:6a:9d:92:1c:41:17:0c:e8:e3:9d:91:
         fa:bf:89:52:87:b0:98:6f:b7:95:45:d5:62:0d:ec:77:8c:9f:
         c4:f9:34:44:68:f9:e9:ce:d4:ee:d4:e2:38:59:0a:23:b8:a4:
         10:d8:aa:d9:c5:70:85:52:f9:08:cb:b5:0f:b3:7d:b5:84:3f:
         6f:55:7e:04:41:43:3b:46:2c:ca:8a:1d:4c:c4:20:a0:8f:70:
         36:16:bd:7d:3c:b9:0a:16:d9:fd:64:bd:5e:3c:2d:18:57:68:
         ef:b4:10:5a:f5:5d:b1:c2:5f:6c:4e:58:c6:5e:47:5e:11:98:
         bc:90:5b:74:40:19:e2:f9:73:f0:69:33:a0:36:8c:da:d0:32:
         54:52:61:41:c9:0e:a4:2d:6d:a9:36:ed:d0:6b:e6:17:79:91:
         e0:ec:92:d3
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUKSuHB4I38z5jWY2I7iNri+FMdb0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4
Mjg5MzI4OTAeFw0yNjEwMTQxNDM0MTVaFw0yNjEwMTcyMTIwMTVaMDMxMTAvBgNV
BAMTKENBN0FBMkRGMjhBNEEwM0MyOUMzOTRGRUExMUU2NDI4OEI4MDJGNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7Yg2+duVya/iiEbWcrMRyaoa
SyQyfBgueBtIwLiB3CaKIg7I2NWc2jp/dKPHQIfvYEZILwfPWDbU48/UubHj0Q10
b6Tl2iBEcFYPCtJkGg7aYLcw+B2Xzg5R+3G4prNOxES7yLgaW9sUGJ7SlhAGYvEf
xeLCvMbQZ+F5kr2PHKEgXzSqcUzpb8N+AFmY3je/q4tQjC9sjAZ3qMltOU9wnTf7
t8LZv1lZQSZ/ISfOEyYtUNxbwiwqXgp7FdJZzZI6D4cZ4I0ZPx02peA2teWJgSG4
aWsG5nQs3mme/EvZRfMl2OHL9JDQzbHDYvzsfCldM4HZ7uI2PsscxzdIypvbAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUynqi3yikoDwpw5T+oR5kKIuAL1UwHwYDVR0j
BBgwFoAUCY1CHLRvKS8TznHfPWhdXoKJMokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3NzY2MjQ2Ni8wLzA5OEQ0MjFDQjQ2RjI5MkYxM0NFNzFERjNENjg1
RDVFODI4OTMyODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4Mjg5MzI4OS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc2NjI0NjYvMC8wOThENDIxQ0I0NkYy
OTJGMTNDRTcxREYzRDY4NUQ1RTgyODkzMjg5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+ZqvnFIt8Co
XNAogcCRRiGVUS6MqDLGeFg3C55NTTDwk0c123XXcivjlqYWyekELS5tMWJrfvXC
XVFQyb6sZUY3ZOhGMa6HNjiccmYziWB2FgBbL7x+2Cp45q+1sFD/tWqdkhxBFwzo
452R+r+JUoewmG+3lUXVYg3sd4yfxPk0RGj56c7U7tTiOFkKI7ikENiq2cVwhVL5
CMu1D7N9tYQ/b1V+BEFDO0YsyoodTMQgoI9wNha9fTy5ChbZ/WS9XjwtGFdo77QQ
WvVdscJfbE5Yxl5HXhGYvJBbdEAZ4vlz8GkzoDaM2tAyVFJhQckOpC1tqTbt0Gvm
F3mR4OyS0w==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:38:19 2026 by rpki-client