Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
File:                     71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft (raw, json)
Hash identifier:          GeFM/p8oCy9wTR2bvWQcgBLUMkdCAo0twn8ENjvQc8U=
Subject key identifier:   6D:80:41:76:2B:BA:AD:B4:1B:8F:F9:FD:0A:AD:BB:48:DA:81:51:2E
Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0
Certificate issuer:       /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
Certificate serial:       364593A52EE6142E971250FDDCD16FE8C1C35F55
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
Manifest number:          0143
Signing time:             Wed 14 Oct 2026 02:28:26 +0000
Manifest this update:     Wed 14 Oct 2026 02:23:26 +0000
Manifest next update:     Sat 17 Oct 2026 13:11:26 +0000
Files and hashes:         1: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl (hash: ddK9FmdQBE08gtg95R/+svTAq86qRsy6Bm3yiIqMY0s=)
                          2: 3231392e3233342e382e302f32312d3234203d3e20313339303231.roa (hash: neFIvyXxaBO4GKvxdumHyTp3Jegmpd6j41pGZrduoe4=)
                          3: 3231392e3233342e302e302f32312d3234203d3e20313339303231.roa (hash: +dKM/gllg2/lgDr8VeqMWJOTPZBzrL20J3kdBce6JMo=)
                          4: 3130332e3133392e302e302f32322d3234203d3e20313339303231.roa (hash: 0ls8G7BHtbV6BLsVhBR5xCN3uX1VQZvowFrmsmKvAd8=)
                          5: 3135302e3234322e3232342e302f32322d3232203d3e2030.roa (hash: 8B51/FSxI9C/6jw0qS6a2P9d2NLwwFnuyvtAY5QcNHs=)
                          6: 3130332e3233352e3138342e302f32322d3232203d3e2030.roa (hash: XPCVxk8wrdPr0+HsLP2WlWWawH8V4P5eZRWw6QJ0Lt0=)
                          7: 3231382e3234372e38302e302f32322d3232203d3e20313339303231.roa (hash: TqLEMrsq1Mn2IIGkO5wiweM1cBFEqjZzxJ46X/Iy/Xw=)
                          8: 3231382e3234372e38382e302f32312d3231203d3e20313339303231.roa (hash: rVh9TWsozOWM1/9pIJGq8VsQr06FU37yrVIW3pKerpM=)
                          9: 3231392e3233342e31362e302f32302d3234203d3e20313339303231.roa (hash: Aa+WxdVJp40uEdOeWIgUVNNnp7psrbPdAACBmCHyDjw=)
                          10: 3231382e3234372e38342e302f32332d3233203d3e20313339303231.roa (hash: BUq8dikEBD9/E5M+chQ5i2WOW0qXw/yVjFpuEKKpDN0=)
                          11: 3231382e3234372e36342e302f31392d3139203d3e20313339303231.roa (hash: OkmPu73amMTWDVpTR3TyQTRJkDCDoCr/0/CnTI4191k=)
                          12: 3231392e3233342e31362e302f32312d3231203d3e20313339303231.roa (hash: A8e2s5zCPHJBFo2lyNcLi8vC/0rHrfeEjoL+zuoBMBk=)
                          13: 3231382e3234372e38362e302f32332d3233203d3e20313339303231.roa (hash: 2Qig5JQupD4VU7rBafbTCZkcUKK1Dademz1jBYMnzLM=)
                          14: 3130332e3130382e3139322e302f32322d3234203d3e20313339303231.roa (hash: 6DbMucsNRkT5GNRQ0no2LmjOH16k8wdSciEnNtEFfbQ=)
                          15: 3231382e3234372e36342e302f32302d3230203d3e20313339303231.roa (hash: FdGGm+XsvdXdDtBCIUq2SJv8PFv1A3KuSOTHHDzNHEM=)
                          16: 34332e3235302e3131362e302f32322d3234203d3e20313339303231.roa (hash: P69vzvvJ+gEfcs3vd5YGHFAOsQiX5VcBoP5Rnr+a/ik=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 12:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:45:93:a5:2e:e6:14:2e:97:12:50:fd:dc:d1:6f:e8:c1:c3:5f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
        Validity
            Not Before: Oct 14 02:23:26 2026 GMT
            Not After : Oct 17 13:11:26 2026 GMT
        Subject: CN=6D8041762BBAADB41B8FF9FD0AADBB48DA81512E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ae:3a:ff:e6:cd:cf:c7:0b:e2:19:48:2e:f2:
                    3e:06:5b:2a:1e:2b:7c:27:ec:46:50:88:50:33:6a:
                    3a:c1:7e:d8:d8:0d:7c:b7:f7:34:76:c8:fc:cd:cd:
                    7b:5d:5a:b4:83:f2:5e:2d:78:11:a6:d2:e6:e7:03:
                    43:9b:9f:bf:be:f1:8b:66:a5:88:e3:64:f6:f2:0a:
                    9e:95:8e:e7:d0:ba:8b:ef:af:5c:40:0e:92:7c:5e:
                    f0:63:7d:ee:be:04:9b:11:f4:a5:93:93:ba:25:9e:
                    73:08:94:a6:4f:3e:9b:37:c5:c5:bd:a2:3b:65:f2:
                    93:7e:0f:1b:af:1c:7c:64:50:b0:0a:35:5b:ff:6d:
                    34:de:13:77:f8:d2:9a:18:c4:37:0d:df:75:99:86:
                    f4:07:e2:5c:83:64:7c:36:85:91:ef:07:df:e1:b7:
                    25:3e:a3:44:28:e4:39:fe:30:c4:7f:77:a9:72:07:
                    97:95:a5:aa:00:b1:9b:42:34:09:f7:63:3c:5b:91:
                    5b:42:57:92:8e:da:a2:a3:41:f5:be:2e:38:60:e6:
                    fd:d3:74:7e:b8:dc:6d:85:98:92:45:82:3b:46:d1:
                    19:5a:6a:76:bd:e2:13:a3:d9:e2:a2:a5:65:93:7d:
                    ca:fb:c8:54:be:92:28:13:fb:5b:46:3d:cb:f8:40:
                    b5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:80:41:76:2B:BA:AD:B4:1B:8F:F9:FD:0A:AD:BB:48:DA:81:51:2E
            X509v3 Authority Key Identifier:
                keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b0:84:4c:89:f8:98:ff:d7:7d:c0:5d:2b:93:14:24:28:26:
         67:90:a7:2f:f9:a6:ad:d0:fd:b2:a8:2a:36:38:dd:91:51:8a:
         6c:04:63:25:ed:ff:dd:56:a3:8f:0e:47:96:be:5e:85:ab:7d:
         2c:fb:a8:b6:bd:eb:bd:a5:2b:fc:c2:37:7b:de:32:79:15:8c:
         cb:39:e4:30:71:df:4e:47:b2:64:d6:70:2f:5b:a7:db:4e:9d:
         c2:43:b3:60:66:0e:c2:95:ff:b8:d7:fa:d6:c0:cf:d4:fe:ac:
         b3:4a:d1:2d:62:14:d6:bc:2b:e2:3c:29:f7:1e:1c:fe:9f:73:
         24:a0:fd:49:53:45:45:ec:2a:fe:9a:74:27:ca:6a:bc:a6:2f:
         26:c4:84:66:51:44:5a:75:df:3e:15:ac:3e:81:11:58:d1:70:
         c8:b0:50:43:f9:b3:ba:02:ad:50:88:7d:c4:b0:42:d1:f6:fb:
         ae:67:b2:0c:15:e5:f5:83:59:11:6b:40:1a:1f:a6:92:54:a5:
         30:19:de:74:27:de:59:7c:4c:40:46:7f:f8:51:27:db:2c:5e:
         b2:fb:25:2e:8a:01:80:ce:48:9f:55:04:b8:2d:c0:72:22:10:
         26:0f:ca:82:da:e3:25:26:51:57:8a:f7:6b:5c:ff:7c:ca:63:
         e4:c6:a0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:05:23 2026 by rpki-client