Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
File:                     A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft (raw, json)
Hash identifier:          Lrbc0JMpqXn+glXwg6BaYNNun2LImxMiKsnKxKrXaQU=
Subject key identifier:   33:4B:D4:38:45:85:B3:73:04:3D:CF:DF:C0:DE:43:EA:2B:8E:9D:E8
Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29
Certificate issuer:       /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
Certificate serial:       4E6B6C48668496349C42880BF3675513BBBA7F8B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
Manifest number:          0156
Signing time:             Thu 10 Sep 2026 17:52:00 +0000
Manifest this update:     Thu 10 Sep 2026 17:47:00 +0000
Manifest next update:     Sun 13 Sep 2026 21:19:00 +0000
Files and hashes:         1: 34372e39382e302e302f31352d3234203d3e203337393633.roa (hash: iwjVE24waqNRMxAnsWWloR6ZemTe2jtU1nDhdHBmFDE=)
                          2: 3133392e3232342e302e302f31362d3234203d3e203337393633.roa (hash: nfA+B4HJUdTdXpxBunZTC0Mmi3ww7Q0Bo7aWuz3zYNE=)
                          3: 34372e3130302e302e302f31342d3234203d3e203337393633.roa (hash: ppj+TlXCIrAcPf1eMhGWrhP2Ij9TixTm3BfPz4IPvbI=)
                          4: 34372e3131322e302e302f31362d3234203d3e203337393633.roa (hash: 9TzYa3+Sl+tIX8tXSaj70/Us2wMIqXbVo3JClonsi1M=)
                          5: 34372e3131322e302e302f31322d3234203d3e203337393633.roa (hash: XnzoRBbJbU4JSck0zmxm+ruNtxcM8ugi+pAaXFexVd8=)
                          6: 34372e3130342e302e302f31332d3234203d3e203337393633.roa (hash: rwAzS9Eef9SzzpYNpqYqgoG+OJgKFf8Bv5eIn0vr0Fs=)
                          7: 3133392e3139362e302e302f31362d3234203d3e203337393633.roa (hash: 19ycWnE82ngKdpq5CfFKBBUaYUxLiUYMUdelOP4EkI8=)
                          8: 34372e3131332e302e302f31362d3234203d3e203337393633.roa (hash: Sc9B64EYbOlhHpRQn2hDIXOE8wTsYGOAnrQ1OGOsB2U=)
                          9: 34372e39322e302e302f31342d3234203d3e203337393633.roa (hash: d0QnujeLIiBwhkySIvzmuDq1uWWqMCzgEV4dGlw/0i4=)
                          10: A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl (hash: WuMFAjB0nAkPQs9tkFPJDQm13btHigAzKEomCsWvatM=)
                          11: 34372e39362e302e302f31352d3234203d3e203337393633.roa (hash: qCOeajORd8EdADqBCDEKYOaZ9qR0x8mo50AIxKKf2kk=)
                          12: 34372e3131322e302e302f31352d3135203d3e203337393633.roa (hash: oc0h7t2xyM1D/ueNRTcOjQuhsadrMwiGPusBtoLIrSY=)
                          13: 3133392e3132392e302e302f31362d3234203d3e203337393633.roa (hash: lmfFy/NByxflwbukOBqf2t5cvYb0y1mEUQilr1j5wEw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Sep 2026 03:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6b:6c:48:66:84:96:34:9c:42:88:0b:f3:67:55:13:bb:ba:7f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
        Validity
            Not Before: Sep 10 17:47:00 2026 GMT
            Not After : Sep 13 21:19:00 2026 GMT
        Subject: CN=334BD4384585B373043DCFDFC0DE43EA2B8E9DE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:a0:71:2a:31:70:63:2f:24:98:c2:b3:dc:
                    0a:4a:d6:9a:fb:6c:96:8e:c7:ca:dd:92:4b:eb:3e:
                    a5:93:d9:0b:4d:29:28:f2:ad:d4:fa:11:8b:db:9a:
                    36:49:93:89:85:83:a6:12:4f:e6:3d:08:f9:0b:40:
                    fa:9c:eb:ad:c4:59:0b:92:d6:0e:0b:2d:f5:11:43:
                    17:82:69:3f:6a:17:58:41:c9:ec:7c:d6:54:9a:2e:
                    91:b6:d6:93:54:8c:38:5d:18:9f:cd:d7:31:25:e2:
                    59:3d:39:5b:75:38:8b:41:9b:5b:27:cd:30:a4:9f:
                    88:8c:16:a7:be:43:cf:51:1a:e8:79:0f:9f:9c:a3:
                    c7:f5:58:ae:08:4a:42:6a:21:23:85:18:e8:62:52:
                    b2:9d:0b:88:60:dc:f5:e5:77:6c:6b:12:6c:f4:69:
                    0f:76:be:a5:43:a9:9e:78:c9:7f:ee:d6:92:1c:0c:
                    6c:eb:04:40:ff:c7:12:58:d1:33:16:ce:79:a5:68:
                    35:e1:a3:2d:d4:31:7b:5a:94:f6:d2:5b:ce:4e:f7:
                    96:2c:71:f7:d1:de:97:37:a7:bd:02:0d:67:ad:87:
                    77:3a:78:40:37:26:ac:57:f8:d3:87:45:ad:15:ac:
                    c0:98:46:70:78:96:54:0f:d2:73:93:38:21:46:76:
                    7a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4B:D4:38:45:85:B3:73:04:3D:CF:DF:C0:DE:43:EA:2B:8E:9D:E8
            X509v3 Authority Key Identifier:
                keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:79:b4:6b:06:69:b4:61:4a:41:c9:84:b4:62:32:ea:81:64:
         2e:6b:23:c0:60:28:4b:92:91:1a:64:b8:90:b3:df:1c:34:15:
         66:5d:df:40:89:fa:3b:52:8f:08:6a:aa:f1:12:86:5a:b0:30:
         46:17:06:2c:62:e0:a9:b6:e2:28:03:93:d9:6d:d6:00:b5:64:
         48:1c:bf:9a:6d:e5:67:b1:35:b2:a6:ce:80:7d:46:54:3c:fa:
         a8:e8:45:08:89:92:1a:70:01:fe:61:fc:42:76:00:87:ac:7f:
         95:e3:7a:f8:5e:06:ad:ba:31:8e:65:65:90:4c:4a:ae:08:f3:
         2d:2e:fc:15:85:3b:b2:4f:d1:48:8c:73:e8:c3:84:74:2d:f7:
         70:95:19:3e:53:33:77:89:29:1c:3f:e9:a1:6a:93:c2:d7:fd:
         3d:d7:3e:c8:dd:e1:4d:53:aa:55:4c:c6:e8:6d:37:25:8c:88:
         00:4f:4b:1c:6b:c1:b4:53:29:5e:44:6d:43:30:2c:c5:ac:87:
         c7:28:8e:2a:e8:86:05:35:c8:26:37:af:a4:9e:dc:d3:3c:21:
         85:7a:64:ad:84:ab:b1:42:fc:dc:c7:e1:af:f8:da:83:9b:cd:
         f1:b0:1a:81:ef:a2:6e:b0:80:5a:94:4f:91:be:39:e2:83:d9:
         ef:3d:2a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:54:05 2026 by rpki-client