Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
File:                     6A45D8322C3648F91E212472F604CAFDBA7019BB.mft (raw, json)
Hash identifier:          BzUuufKWVc7Hz7DM7BLBRjj9CyDBtqD05Nvmg1NcXQI=
Subject key identifier:   BA:8D:77:99:E7:93:B5:B4:B7:E9:99:FB:46:EE:F0:B4:56:10:9C:AA
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Certificate issuer:       /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial:       0EEB0AAE060F8AE42522EAC6063FDDDCC0532570
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
Manifest number:          0143
Signing time:             Tue 27 Oct 2026 01:39:14 +0000
Manifest this update:     Tue 27 Oct 2026 01:34:14 +0000
Manifest next update:     Fri 30 Oct 2026 07:32:14 +0000
Files and hashes:         1: 3130332e34332e3133342e302f32342d3234203d3e203535393931.roa (hash: Arahau1/zdBFquh22OcOxXJ61Cw0C3+PJGtnB+0ekGo=)
                          2: 3130332e34332e3133352e302f32342d3234203d3e203535393931.roa (hash: Iqvi8zah1N+/MUEIpeWL683Upeca1a29t8qNXjNsWBE=)
                          3: 3130332e3233352e3130312e302f32342d3234203d3e203535393931.roa (hash: y4iD+WZmyRqylC4ATqqLB8S0AwLFBnSmYnNr2Eb09NA=)
                          4: 3130332e3233352e3130332e302f32342d3234203d3e203535393931.roa (hash: sn5OSKvc07ovlAcz0b/lVzsgYr8++T6hfED7k7DkGRA=)
                          5: 3130332e3135372e3231322e302f32332d3233203d3e2030.roa (hash: 8m0e57u2wVKxRF/YZ3RBUb/FB78IzUONuz1gdm7u3Aw=)
                          6: 3130332e34332e3133322e302f32342d3234203d3e203535393931.roa (hash: PQwpOdF5Ex7Q2R7j4oTKXqncuOc5DZABUSDAojSAQug=)
                          7: 34352e3132342e37382e302f32342d3234203d3e203535393931.roa (hash: k8exgEof7UP4003lab+Jt39GCbZi/ZuMl5F2bByXX48=)
                          8: 34352e3132342e37362e302f32342d3234203d3e203535393931.roa (hash: U4tmDQhb9Ol98/9L64VDYt4HNIjh93kgrKwzoQS/mhE=)
                          9: 3130332e34332e3133342e302f32332d3233203d3e203535393839.roa (hash: IefQkI8Hfyxc4tb4gs5aVgR/yG32bYmYgetSb9VLX28=)
                          10: 3130332e3139322e3230382e302f32342d3234203d3e203535393931.roa (hash: d3ASlDfMVC/gtOrl6vQFyUojqbnZxFte8DXs9XPrPrg=)
                          11: 34352e3132342e37372e302f32342d3234203d3e203535393931.roa (hash: mtQtNdj9szZilLtTK//pM/h+ocuzur035q05fktIXuo=)
                          12: 3130332e3135372e3231332e302f32342d3234203d3e203535393839.roa (hash: JA+7kTjp2WRlf/AXz0FiSp2zY6KqTrgLwGsSbayo5U8=)
                          13: 6A45D8322C3648F91E212472F604CAFDBA7019BB.crl (hash: ncsmfb1FI5dEL9+yOwL1cIvl7gtQzRLlu3jHwhslz/Q=)
                          14: 3130332e3139322e3231302e302f32342d3234203d3e203535393931.roa (hash: 63AwH0JNDe88UgRiEZk11mXrDuOfakAl/Ic20VC4H+s=)
                          15: 3130332e3139322e3231312e302f32342d3234203d3e203535393931.roa (hash: k+LCBbRPVawp4Rtsb3NBIP+v4bxjVSnD9il2zTHON3M=)
                          16: 3130332e3139322e3230382e302f32322d3232203d3e2034383337.roa (hash: hHcJzGkaL63bz/B5cCM90j43PRCUTzKmH4NauShLPrg=)
                          17: 3130332e34332e3133332e302f32342d3234203d3e203535393931.roa (hash: XdGamdMSAy1lnVU2jYcYZZbhDxqwsaKSaAwC9H6/vA8=)
                          18: 3130332e3233352e3130322e302f32342d3234203d3e203535393931.roa (hash: d/U3NIj7qaoBeCrDzGEzR4wsfsmAGdyLg/VID04jiyw=)
                          19: 34352e3132342e37362e302f32322d3232203d3e203535393839.roa (hash: zFIm0VLvsUuecFtlGbSjghi253R2ygdOCwx+j/GSCJA=)
                          20: 34352e3132342e37362e302f32322d3232203d3e2034383337.roa (hash: 0RAvP2PlQGsViOKgQSlbU9Jnyva7IRYPaZUPOcsW7zk=)
                          21: 3130332e3139322e3230392e302f32342d3234203d3e203535393931.roa (hash: N8Oi6V973rdM73u0MOJ6Mq0jNacYqIpITVueY3fgBto=)
                          22: 3130332e3139322e3230382e302f32322d3232203d3e203535393839.roa (hash: 1dLcAHtoXHq//FproHRRjOCSgYqI4kWyRf26+UhTGsg=)
                          23: 3130332e3233352e3130302e302f32342d3234203d3e203535393931.roa (hash: mqgyVIKWcd9YPXCsBu33JjhSj4t3CTMMoRkvfZ77xG4=)
                          24: 34352e3132342e37392e302f32342d3234203d3e203535393931.roa (hash: 6ZZEnwDcgTL6tPVDr6GFQihUclNuFSkoAt1U4mSGRrc=)
                          25: 3130332e34332e3133342e302f32332d3233203d3e2034383337.roa (hash: FyzFdZgKo3BDxyrLpNZ7QCXKhLr45lg7mKPng6cg7mg=)
                          26: 3130332e3139322e3230382e302f32322d3232203d3e203535393931.roa (hash: +7t135INfa+sPupaJUnFagdsPHo9tCMwSYAZ8bpqT4E=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 07:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:eb:0a:ae:06:0f:8a:e4:25:22:ea:c6:06:3f:dd:dc:c0:53:25:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
        Validity
            Not Before: Oct 27 01:34:14 2026 GMT
            Not After : Oct 30 07:32:14 2026 GMT
        Subject: CN=BA8D7799E793B5B4B7E999FB46EEF0B456109CAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:73:6a:07:5e:22:c3:9f:3e:3d:f5:d9:03:07:
                    77:4d:6e:0d:b7:ac:1f:54:ca:2a:e2:74:aa:d0:dc:
                    fe:f2:58:50:9b:62:29:df:60:d0:0c:a3:88:18:bf:
                    08:d7:8c:2e:4f:41:6d:00:3b:92:af:37:40:f0:df:
                    0a:23:b6:63:2d:19:a3:45:36:ca:95:13:3c:0d:8a:
                    9f:39:f4:3e:07:9e:c1:0e:55:ff:0d:9b:d4:30:ba:
                    45:a0:95:48:75:f2:5a:10:9f:ab:88:d0:b6:08:35:
                    bb:68:c7:71:41:34:5b:43:8b:3b:b5:6e:cc:9b:06:
                    93:20:cd:f4:5a:48:f4:e6:3a:bf:d2:73:b6:04:7a:
                    75:7b:b9:95:2a:96:56:4c:13:2f:54:5a:52:89:36:
                    62:fb:9c:b8:31:83:a2:3f:ef:ab:b6:0d:37:d8:47:
                    e6:9c:72:db:76:79:5c:bb:c5:c0:c9:83:5d:c8:4e:
                    a3:07:e2:b5:98:41:24:8e:13:c1:b9:05:51:a6:b8:
                    08:07:e2:c6:3d:d7:ea:f0:0c:eb:1c:92:45:5a:11:
                    ec:73:e1:0e:e0:d8:b7:d1:9d:1a:3f:23:ea:52:49:
                    1c:62:54:65:ec:4b:9e:23:4e:71:48:2c:fa:5a:c9:
                    ad:c4:4c:7c:88:74:00:12:7b:eb:51:7a:bd:23:96:
                    cd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8D:77:99:E7:93:B5:B4:B7:E9:99:FB:46:EE:F0:B4:56:10:9C:AA
            X509v3 Authority Key Identifier:
                keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:64:b4:4d:5f:14:94:20:5b:5b:d1:00:f0:e6:fd:53:16:6e:
         e7:b5:c3:29:a7:eb:14:d6:64:e4:b9:a5:f2:94:b1:73:83:e7:
         0b:f5:8d:fa:bf:bf:06:ce:66:09:d5:55:17:46:c2:38:23:a0:
         24:96:23:7a:be:e8:5e:03:b5:5d:11:bf:34:9b:bb:02:d5:a2:
         80:78:e3:a4:19:42:45:9a:0c:3d:8a:ae:6b:f6:56:76:a2:eb:
         7c:e3:3b:4a:da:8f:e0:7c:2c:c0:66:3e:24:c7:98:79:4f:5a:
         fd:31:bc:a0:bf:79:bb:0b:0c:76:05:d0:86:c7:77:b1:4f:18:
         e7:af:d3:2b:de:ff:a4:13:a8:af:68:e7:86:ec:d1:d1:79:97:
         93:d1:c7:9e:c8:02:69:4d:94:f0:d1:ea:10:9e:b5:b4:f2:1b:
         b5:b4:4b:ed:16:ae:ee:09:08:28:4a:55:85:0f:ac:86:56:53:
         97:84:22:9d:21:f9:40:e3:65:a2:2c:46:9a:af:33:24:1e:30:
         e7:9e:d7:07:d2:fd:ec:6d:f1:3f:92:5c:d7:60:d1:5b:29:69:
         da:91:73:58:d2:51:40:03:ff:8f:b1:9f:61:b0:03:26:7c:c4:
         6c:f7:f9:38:16:1a:83:70:32:67:a4:d3:94:b0:82:0b:02:7e:
         f8:89:c1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:57:33 2026 by rpki-client