Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
File:                     18763247046D56AAFB3D6773D049459B01F9D976.mft (raw, json)
Hash identifier:          4rojvSYyoW8hxcL1pWSKSZvwyZryt80WDlCv7TWHbfo=
Subject key identifier:   28:4D:C5:1D:D5:22:80:8D:D8:D0:FB:F2:DD:8F:32:C4:CD:7D:C6:1C
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       1850DBFE0D6A94A6B53CACFD9631AF3076D202E5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
Manifest number:          0152
Signing time:             Sun 25 Oct 2026 23:33:05 +0000
Manifest this update:     Sun 25 Oct 2026 23:28:05 +0000
Manifest next update:     Thu 29 Oct 2026 09:07:05 +0000
Files and hashes:         1: AS216047.roa (hash: yuC5z/UqPJetMxdKF3rCNfuTYRjwlBMxNc3zqbEnFJg=)
                          2: AS40065.roa (hash: qeiPWKN11SLE/GYyJ+IUtb1I695J9qmFkzRjrQ5qcxA=)
                          3: AS8796.roa (hash: Q1cPLhb3WJuWuYM5Y1F4e020PH1kdHBQOJDqC2yhkHo=)
                          4: AS395886.roa (hash: CfoVZbR+/lwELN84bOdI9oThdD7UMoaNZ9TF+1TA5Og=)
                          5: AS18186.roa (hash: nzx2RA40piRu2JHnBOZA4KJRhWgnIG3Su1n21Hr865w=)
                          6: AS140869.roa (hash: G0AXBjKAqQ3cRNuqAMNt9oGLDNDpohEyM6k/7KkiFnc=)
                          7: AS137510.roa (hash: 4RIez1BGvVbwb2f50Z9nccLsOHbk4BS+pUXzwf69uNM=)
                          8: AS55933.roa (hash: 8HLVC0fXCtD4zFw4aN+yrkLF/KlwTbHVaE7XVJPUgYE=)
                          9: AS134176.roa (hash: qd4s/KMKPrLzfIDFi60v7bc5CYsFKq+Ri3uD6miZPcg=)
                          10: AS215305.roa (hash: KpVUYEaSuL0ZBkBn5fZd760A2uCNJ5jI+kNrrH5lB1g=)
                          11: 18763247046D56AAFB3D6773D049459B01F9D976.crl (hash: lcrJv8KsWzltYNWDb6H4CuJRPJDzMwXHurMtYwf90pA=)
                          12: AS136826.roa (hash: CIk+w3LsTt2NkxDuPu9ZuMDiVCkZyG3KArZs/m3lrb4=)
                          13: AS137508.roa (hash: IbmglsJdk/TfUQitwAWpgxdoxSY1a1O0Lf1Yi5UBmBA=)
                          14: AS1054.roa (hash: tU54vBuCqy69IKbJMx+Y5NUUdj79n2zrjagMlS8xkis=)
                          15: AS967.roa (hash: JVboMwrCRKAezTo9QepT0BoJv+pLm67QIaO3q/zAkoo=)
                          16: AS152918.roa (hash: nWuKhUivOjVjfvREDis5Q4XWvm1K8tSGawT+Qvzd+pk=)
                          17: AS9911.roa (hash: bW7BVbIGD+h8KMSeXFYS80m17tacTKlpfN3D4rNV8jo=)
                          18: AS138968.roa (hash: aEcwAJBhoE1+JrPQ5A2Fe/v4fqplNpRngONsurAdV1E=)
                          19: AS210528.roa (hash: zYHRWcF7L4yF0R4m/Q1ms97ZLGs6pt6ik2eZ+EJQI6c=)
                          20: AS134121.roa (hash: 4MCO91V3nZULWel7G3s84MuO6gbgH9st5HMkhZjQGos=)
                          21: AS134140.roa (hash: VNgwH1e8bmulMAt2rddO5C8oLzFnJHuLYbh7ihGM500=)
                          22: AS51847.roa (hash: 28MP5Hv6M84gfDb2jKFIjwJ6TVLSZvk5kGR6/r9qrDY=)
                          23: AS18207.roa (hash: o0AD3eHPCQQvw3txZJzNch2miZhCRQ0lgzH6bHZt+Kg=)
                          24: AS134823.roa (hash: jrdseS2hlhxemyIN9g7jBJd79oJ1I0WFThPk/GFgBfw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 03:49:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:50:db:fe:0d:6a:94:a6:b5:3c:ac:fd:96:31:af:30:76:d2:02:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Oct 25 23:28:05 2026 GMT
            Not After : Oct 29 09:07:05 2026 GMT
        Subject: CN=284DC51DD522808DD8D0FBF2DD8F32C4CD7DC61C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e0:99:01:0b:2b:25:b0:77:3a:8f:6e:fc:53:
                    1a:aa:6b:60:c3:ce:b1:23:76:78:ba:d1:c2:14:a1:
                    b7:2d:cc:d8:c9:ed:f9:2a:42:8c:f4:e7:8b:2f:d2:
                    3c:18:66:71:ce:a5:d8:15:58:b6:23:d8:95:32:13:
                    08:fe:0d:63:d5:49:9e:5a:df:ea:21:32:7c:36:e2:
                    65:37:64:12:2d:fb:86:2b:29:dc:61:19:c9:0a:4d:
                    a5:cc:10:a9:92:cb:e2:f0:7b:65:b2:26:ce:ee:ce:
                    bb:0c:85:7c:34:f9:f9:19:d6:f8:86:50:01:07:94:
                    0b:80:a0:02:c6:72:13:96:f4:ac:ae:8c:16:e8:f8:
                    1a:3f:e4:e9:2a:3b:46:18:75:d6:2e:2d:35:26:15:
                    df:15:c1:be:4f:b8:dc:f3:68:42:50:06:12:34:0e:
                    11:7d:6e:4f:c2:af:2e:3b:a3:3e:76:66:3c:32:b4:
                    5c:9a:78:64:22:50:0b:2f:68:d9:ae:b7:7b:fa:31:
                    1e:1c:08:75:b4:7d:0b:d9:fb:c8:ed:a1:fb:1a:f9:
                    39:3a:9d:ec:d0:3d:64:59:89:90:4c:bb:fe:14:26:
                    af:56:5b:ef:58:6f:07:56:ac:9c:98:10:3f:f1:4e:
                    23:52:c4:33:39:5e:1e:7b:76:30:5b:17:19:71:91:
                    ba:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4D:C5:1D:D5:22:80:8D:D8:D0:FB:F2:DD:8F:32:C4:CD:7D:C6:1C
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:1e:3d:72:b9:49:c7:12:6c:14:78:32:34:f2:75:fc:70:d0:
         25:0a:b0:34:06:56:dc:13:bb:2a:95:f5:3c:90:74:50:da:9f:
         9e:7d:7b:9c:15:97:4c:d3:c9:09:39:6a:d6:d0:13:f3:4d:5a:
         6e:c1:8d:72:32:93:6b:13:51:50:ea:d2:7c:00:27:8d:e6:d7:
         07:a1:ed:9e:76:69:9f:8a:af:a6:c5:8f:2f:05:53:b8:92:14:
         37:f6:c4:27:12:ab:65:f5:95:91:69:94:b1:23:a1:df:56:b8:
         43:34:ff:4d:41:60:32:a9:e6:9a:51:7d:35:d6:68:89:25:14:
         2b:42:89:ce:cf:60:d1:57:73:7f:d2:72:cc:40:10:3d:b0:c4:
         24:e4:0b:e9:9c:15:18:7d:1b:b1:6b:86:cd:2d:67:31:ec:97:
         af:24:73:31:56:34:2f:be:a6:84:fa:50:67:25:7b:5a:4d:fb:
         7b:e5:70:5f:0d:09:e4:4f:2e:da:98:62:69:fd:36:eb:2c:88:
         75:e5:f4:cb:14:63:c9:07:04:af:16:2c:fd:d9:1c:69:19:95:
         de:f0:de:a9:f5:db:19:96:40:1b:d7:69:bb:a1:b8:5b:76:3c:
         bb:30:05:ac:59:de:78:26:a8:b3:31:ab:94:72:05:ec:01:2c:
         a1:1a:7f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:59:50 2026 by rpki-client