Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
File:                     134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft (raw, json)
Hash identifier:          IIYCtY3n13RUMv+AKn+AwNYdhhZIbqqoy6vKw8RPGtg=
Subject key identifier:   EA:26:81:32:5E:65:C8:5D:F2:1B:28:95:49:FE:C4:5E:27:97:13:C5
Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Certificate issuer:       /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Certificate serial:       6317A7A3E91F1B8D09C91635D99D34A7B9E1F78E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
Manifest number:          0126
Signing time:             Fri 28 Aug 2026 06:48:04 +0000
Manifest this update:     Fri 28 Aug 2026 06:43:04 +0000
Manifest next update:     Mon 31 Aug 2026 14:58:04 +0000
Files and hashes:         1: 3230322e3135332e372e302f32342d3234203d3e20313531323531.roa (hash: tfjUhuAMRoHw+XmcNvK63TdXVM18RqXuY24SvpDXfT8=)
                          2: 3230322e3137312e3233322e302f32342d3234203d3e20313531323531.roa (hash: 37J4UChBWQno0PS67CISco/dgUXgy2QBAlmPmhCNaN0=)
                          3: 3230332e3230312e3138312e302f32342d3234203d3e20313531323531.roa (hash: yJ3jHnPWhAaAMRxei37IPvzElQ724dxo+7tcpvoO8fw=)
                          4: 3230322e3135382e3234322e302f32342d3234203d3e20313531323531.roa (hash: gGkuc6EmqWxF5c3YAslxD/isaTWNxlZKyRi45M7xUFY=)
                          5: 3230332e3130302e36302e302f32342d3234203d3e20313531323531.roa (hash: lBCGwmuKofwgcufx94VrX8pzt30gxmwgJFLQKbe8WeA=)
                          6: 3230322e3137322e372e302f32342d3234203d3e20313531323531.roa (hash: XU32qEfDo85EorqSryLTBLXpsTPsVSeLnNoBf3B27Fc=)
                          7: 3230332e3139312e372e302f32342d3234203d3e20313531323531.roa (hash: zSnSXFOuavokFDJ0LSAvvl1QDzFRGSxODkOT+pQTD7k=)
                          8: 3230332e31372e3234392e302f32342d3234203d3e20313531323531.roa (hash: 8fNA7/e7ezAblkvOUimvp93vFc/b3lK5w+sKMxA5ybc=)
                          9: 134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl (hash: lnMVJWv958+L4W7K5FSOtfuVGZ3ilQWi6E4yjNE2pJA=)
                          10: 3230332e31362e36332e302f32342d3234203d3e20313531323531.roa (hash: vFdNFHiN3TMOKZPfat+9ys9S2MH2DGTTS/y9t11B0o8=)
                          11: 3230332e3134322e3231392e302f32342d3234203d3e20313531323531.roa (hash: BhfTobQuLUUFCm40O0UhVTcZ0Jym4fymlhVRNpS3frw=)
                          12: 3230332e31392e312e302f32342d3234203d3e20313531323531.roa (hash: /40aDXtlZCEP2hquD991/eX5+Ztiga8tf5eQrwVIQIQ=)
                          13: 3230322e3137332e362e302f32342d3234203d3e20313531323531.roa (hash: CWFmQv65CxvUZcuHEzxOtvNzP1xhd2hPja2Ei26zyso=)
                          14: 3230332e3139312e322e302f32342d3234203d3e20313531323531.roa (hash: e6+G3ic+FYJSXMDF4S5renCxEofbarg+TsDpBpy5bJM=)
                          15: 3230332e3137342e362e302f32342d3234203d3e20313531323531.roa (hash: q9iWdKLAdHbfEGWeTQTJnj5rz99RfjAIuFKzrZu0in8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 14:58:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:17:a7:a3:e9:1f:1b:8d:09:c9:16:35:d9:9d:34:a7:b9:e1:f7:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
        Validity
            Not Before: Aug 28 06:43:04 2026 GMT
            Not After : Aug 31 14:58:04 2026 GMT
        Subject: CN=EA2681325E65C85DF21B289549FEC45E279713C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c9:81:31:38:6f:0c:47:ab:67:5f:0c:b8:3a:
                    8a:88:1c:5d:c1:75:4e:dc:fa:fa:6c:f2:d1:2a:37:
                    f7:6e:bc:3f:b6:61:14:db:ad:e8:28:ed:ac:c0:ad:
                    59:20:e5:e6:07:1e:c2:5f:ff:08:15:6a:94:18:94:
                    4f:3a:22:68:be:05:0d:19:a6:8b:9d:03:67:28:3b:
                    41:31:e0:6f:9b:bd:bc:c7:62:05:91:09:36:6a:a4:
                    84:f8:e0:e3:cc:a1:33:9b:9e:ad:f5:eb:8e:75:e1:
                    d4:58:70:e5:4a:9c:eb:d3:8e:6b:d7:e0:63:71:91:
                    9c:af:1f:b1:bf:5c:a1:88:51:5d:e6:ce:f8:f8:60:
                    56:9a:97:be:fc:89:da:53:b1:82:59:9f:9d:74:39:
                    3d:d3:20:17:30:74:38:ec:4f:65:03:60:67:0f:cb:
                    78:9a:8d:76:84:7d:34:f8:69:44:bb:2c:65:9f:fc:
                    4d:bf:5f:aa:32:a6:c8:63:bf:54:b5:76:c8:48:13:
                    af:11:19:12:ef:3a:00:61:a1:c2:c2:97:81:53:40:
                    93:6a:87:51:9f:88:d7:9c:93:ed:c1:2a:ed:2d:c6:
                    ff:2d:de:59:52:43:b5:95:4c:78:12:22:8d:dd:42:
                    cf:b5:4a:a4:8f:2a:bf:60:2b:6c:cf:a9:45:b6:3b:
                    1c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:26:81:32:5E:65:C8:5D:F2:1B:28:95:49:FE:C4:5E:27:97:13:C5
            X509v3 Authority Key Identifier:
                keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:11:d6:d5:14:40:2a:7d:72:19:b9:88:b2:f0:7c:6f:e1:81:
         e3:12:3e:09:c5:b1:94:5d:a8:bc:8f:9a:eb:79:77:bf:86:fb:
         64:81:87:ee:9d:64:1d:d2:41:45:30:55:44:a4:92:b2:af:dd:
         b4:4c:43:6a:b3:7a:2f:19:0a:e3:04:59:fe:87:31:e2:8d:b0:
         89:9e:c0:ae:fd:8c:36:29:99:a2:3c:ea:4d:aa:cc:a1:84:da:
         46:06:39:1a:43:33:58:f0:f2:56:db:c3:37:26:a2:6a:e5:20:
         8e:59:70:12:bd:b2:c7:90:d7:a8:93:70:39:8a:bd:9c:06:7e:
         b1:22:cf:b5:3b:ed:62:12:e9:3e:2f:b4:0b:7d:93:bb:59:35:
         e4:16:01:fe:52:ff:bd:92:2f:b9:af:16:fe:3c:73:f5:9f:2d:
         66:74:f0:73:8e:8a:79:75:aa:3e:7b:3c:18:d7:87:f2:9f:e0:
         5a:65:f0:89:75:a9:b7:a1:6c:36:4d:aa:4d:ab:a0:88:c0:43:
         3c:c7:bf:b3:52:ae:47:7b:06:9e:b1:66:83:1d:31:1b:2b:62:
         c1:73:4a:9b:3a:be:ea:eb:ff:15:5d:0c:48:25:a1:93:8d:95:
         f3:81:54:9f:24:ab:b8:05:27:c6:45:ac:a0:35:ae:c0:83:f3:
         3a:a0:a0:a7
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUYxeno+kfG40JyRY12Z00p7nh944wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4
RDM3QzUxRTAeFw0yNjA4MjgwNjQzMDRaFw0yNjA4MzExNDU4MDRaMDMxMTAvBgNV
BAMTKEVBMjY4MTMyNUU2NUM4NURGMjFCMjg5NTQ5RkVDNDVFMjc5NzEzQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfyYExOG8MR6tnXwy4OoqIHF3B
dU7c+vps8tEqN/duvD+2YRTbrego7azArVkg5eYHHsJf/wgVapQYlE86Imi+BQ0Z
poudA2coO0Ex4G+bvbzHYgWRCTZqpIT44OPMoTObnq3164514dRYcOVKnOvTjmvX
4GNxkZyvH7G/XKGIUV3mzvj4YFaal778idpTsYJZn510OT3TIBcwdDjsT2UDYGcP
y3iajXaEfTT4aUS7LGWf/E2/X6oypshjv1S1dshIE68RGRLvOgBhocLCl4FTQJNq
h1GfiNeck+3BKu0txv8t3llSQ7WVTHgSIo3dQs+1SqSPKr9gK2zPqUW2Oxz7AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU6iaBMl5lyF3yGyiVSf7EXieXE8UwHwYDVR0j
BBgwFoAUE0rDZ00FxN3rP77l6WuT6o03xR4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTM5NDE3OS8wLzEzNEFDMzY3NEQwNUM0RERFQjNGQkVFNUU5NkI5
M0VBOEQzN0M1MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4RDM3QzUxRS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMC8xMzRBQzM2NzREMDVD
NERERUIzRkJFRTVFOTZCOTNFQThEMzdDNTFFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRHW1RRAKn1y
GbmIsvB8b+GB4xI+CcWxlF2ovI+a63l3v4b7ZIGH7p1kHdJBRTBVRKSSsq/dtExD
arN6LxkK4wRZ/ocx4o2wiZ7Arv2MNimZojzqTarMoYTaRgY5GkMzWPDyVtvDNyai
auUgjllwEr2yx5DXqJNwOYq9nAZ+sSLPtTvtYhLpPi+0C32Tu1k15BYB/lL/vZIv
ua8W/jxz9Z8tZnTwc46KeXWqPns8GNeH8p/gWmXwiXWpt6FsNk2qTaugiMBDPMe/
s1KuR3sGnrFmgx0xGytiwXNKmzq+6uv/FV0MSCWhk42V84FUnySruAUnxkWsoDWu
wIPzOqCgpw==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:24:08 2026 by rpki-client