Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
File:                     19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft (raw, json)
Hash identifier:          WQxWf6Rz566cF8EcceLGZGelKsVn89Wu137l5qmV+mI=
Subject key identifier:   63:73:A7:C6:FA:95:D1:A9:65:C6:05:E8:D7:F8:91:93:33:EC:7C:5D
Authority key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD
Certificate issuer:       /CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
Certificate serial:       1043C79BADFF511454D5B39D7B944AF5F26234D0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
Manifest number:          013E
Signing time:             Sun 18 Oct 2026 20:45:11 +0000
Manifest this update:     Sun 18 Oct 2026 20:40:11 +0000
Manifest next update:     Wed 21 Oct 2026 22:07:11 +0000
Files and hashes:         1: 3134342e37392e31302e302f32332d3234203d3e20313531323531.roa (hash: WjMCSVc2nZ6LHlmIFS3fh2fKf0RsOi1ahfbmP+aZL0U=)
                          2: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl (hash: 4pIuTr5F5eKDgQpxjC1tV1CiGB04ZOhCJ+7VLSQN1wQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 22:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:43:c7:9b:ad:ff:51:14:54:d5:b3:9d:7b:94:4a:f5:f2:62:34:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
        Validity
            Not Before: Oct 18 20:40:11 2026 GMT
            Not After : Oct 21 22:07:11 2026 GMT
        Subject: CN=6373A7C6FA95D1A965C605E8D7F8919333EC7C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:35:be:be:07:ab:e8:f7:2f:0d:2e:3b:27:5e:
                    3f:f3:8b:e4:6b:8c:53:d8:73:ab:92:34:66:d5:74:
                    bd:09:eb:a1:3c:75:74:f4:38:69:00:4a:67:4a:9c:
                    8b:e3:1f:79:59:1e:92:3f:c0:fb:ea:cc:a0:f4:54:
                    05:c3:42:ba:91:4a:ba:b4:c3:cb:36:00:cb:d4:64:
                    c7:39:2b:4b:b9:a7:3c:05:52:a8:ce:73:36:a0:eb:
                    32:33:81:90:58:4b:e5:88:35:87:c2:c6:d6:ea:eb:
                    a5:32:d0:c1:b1:6f:54:59:cb:48:f1:0f:e9:19:b3:
                    78:29:bd:75:e9:3e:4d:cb:95:1e:ef:96:15:21:97:
                    54:03:a0:e3:ac:47:fa:24:c8:25:7d:f9:6a:21:c1:
                    46:6d:eb:d6:86:e5:dc:09:e4:95:f4:62:54:2b:a7:
                    d5:43:fb:12:d5:17:12:2b:e3:64:ee:d6:1a:6b:74:
                    d5:c7:72:ca:e2:6b:8f:62:06:35:d7:cb:8c:56:a5:
                    69:02:14:8b:84:c8:0c:b1:89:12:82:a3:c3:d8:e8:
                    3f:b6:55:87:a5:0e:d1:94:72:ea:6f:12:89:12:82:
                    70:3d:ab:55:78:19:07:81:eb:33:42:6d:67:7e:d2:
                    a7:a1:15:50:af:c4:02:98:3c:83:b6:d5:2d:f3:39:
                    93:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:73:A7:C6:FA:95:D1:A9:65:C6:05:E8:D7:F8:91:93:33:EC:7C:5D
            X509v3 Authority Key Identifier:
                keyid:19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:27:c5:83:df:33:69:7e:5b:7e:f6:6a:e5:dd:b4:29:9f:b8:
         8e:42:df:0b:75:f4:b3:4b:ac:4d:bd:71:86:b8:3b:b1:77:27:
         6c:3e:01:23:9b:13:c3:a0:08:41:aa:0b:77:ba:2d:5b:fa:b9:
         b7:a1:9c:2a:aa:67:2b:99:f3:1b:ad:d1:9a:34:76:ba:52:06:
         49:a7:cc:34:c3:ed:10:cf:63:6f:b2:09:18:e0:ae:02:b5:97:
         72:ab:ab:17:e5:53:34:f2:96:90:d2:a6:22:8b:a3:3b:8a:23:
         64:eb:97:96:3a:19:10:80:64:92:53:9b:9e:31:1d:dc:21:7a:
         38:25:df:f3:11:9a:3f:56:fd:d7:60:f6:81:69:bc:70:7a:62:
         92:6f:c4:00:cd:bd:27:f3:0c:7b:09:93:90:2a:f7:69:0f:91:
         cc:a7:88:b6:b4:40:f1:58:56:9f:07:ac:fc:51:f6:79:fe:8d:
         53:13:10:dd:d1:e6:2c:bd:72:71:3e:a2:70:42:a9:15:03:c3:
         e2:80:c0:d9:b7:18:6d:19:36:54:ba:5b:34:a9:92:a4:9b:c3:
         9e:73:f0:67:7a:00:72:80:5a:be:c0:e6:0f:be:c6:a6:a3:84:
         49:61:f0:92:3a:30:92:a2:bb:3b:7a:8a:34:56:b7:b8:17:da:
         38:5a:ed:58
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUEEPHm63/URRU1bOde5RK9fJiNNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2
NUJDNzdBRDAeFw0yNjEwMTgyMDQwMTFaFw0yNjEwMjEyMjA3MTFaMDMxMTAvBgNV
BAMTKDYzNzNBN0M2RkE5NUQxQTk2NUM2MDVFOEQ3Rjg5MTkzMzNFQzdDNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcNb6+B6vo9y8NLjsnXj/zi+Rr
jFPYc6uSNGbVdL0J66E8dXT0OGkASmdKnIvjH3lZHpI/wPvqzKD0VAXDQrqRSrq0
w8s2AMvUZMc5K0u5pzwFUqjOczag6zIzgZBYS+WINYfCxtbq66Uy0MGxb1RZy0jx
D+kZs3gpvXXpPk3LlR7vlhUhl1QDoOOsR/okyCV9+WohwUZt69aG5dwJ5JX0YlQr
p9VD+xLVFxIr42Tu1hprdNXHcsria49iBjXXy4xWpWkCFIuEyAyxiRKCo8PY6D+2
VYelDtGUcupvEokSgnA9q1V4GQeB6zNCbWd+0qehFVCvxAKYPIO21S3zOZNPAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUY3OnxvqV0allxgXo1/iRkzPsfF0wHwYDVR0j
BBgwFoAUGa5VZr+D0Ucv2dm65cxwEmW8d60wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTM5NDE3OS8xLzE5QUU1NTY2QkY4M0QxNDcyRkQ5RDlCQUU1Q0M3
MDEyNjVCQzc3QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2NUJDNzdBRC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMS8xOUFFNTU2NkJGODNE
MTQ3MkZEOUQ5QkFFNUNDNzAxMjY1QkM3N0FELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwSfFg98zaX5b
fvZq5d20KZ+4jkLfC3X0s0usTb1xhrg7sXcnbD4BI5sTw6AIQaoLd7otW/q5t6Gc
KqpnK5nzG63RmjR2ulIGSafMNMPtEM9jb7IJGOCuArWXcqurF+VTNPKWkNKmIouj
O4ojZOuXljoZEIBkklObnjEd3CF6OCXf8xGaP1b912D2gWm8cHpikm/EAM29J/MM
ewmTkCr3aQ+RzKeItrRA8VhWnwes/FH2ef6NUxMQ3dHmLL1ycT6icEKpFQPD4oDA
2bcYbRk2VLpbNKmSpJvDnnPwZ3oAcoBavsDmD77GpqOESWHwkjowkqK7O3qKNFa3
uBfaOFrtWA==
-----END CERTIFICATE-----
Generated at Tue Oct 20 04:16:04 2026 by rpki-client