Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
File:                     A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft (raw, json)
Hash identifier:          yRIWFhbKsBjOyCmDCvNJVchE5v3FvCNn0ZtPbub7AC8=
Subject key identifier:   47:B9:9F:D1:61:C2:C6:A1:7C:E2:DF:7F:B0:90:FF:FC:AD:FE:B8:55
Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29
Certificate issuer:       /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
Certificate serial:       4C43CC6DA7A8A95158FAE7FFA264C30130FA9597
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
Manifest number:          016A
Signing time:             Mon 26 Oct 2026 06:03:27 +0000
Manifest this update:     Mon 26 Oct 2026 05:58:27 +0000
Manifest next update:     Thu 29 Oct 2026 11:23:27 +0000
Files and hashes:         1: 34372e3131322e302e302f31352d3135203d3e203337393633.roa (hash: oc0h7t2xyM1D/ueNRTcOjQuhsadrMwiGPusBtoLIrSY=)
                          2: 34372e39322e302e302f31342d3234203d3e203337393633.roa (hash: d0QnujeLIiBwhkySIvzmuDq1uWWqMCzgEV4dGlw/0i4=)
                          3: 34372e3130342e302e302f31332d3234203d3e203337393633.roa (hash: rwAzS9Eef9SzzpYNpqYqgoG+OJgKFf8Bv5eIn0vr0Fs=)
                          4: 34372e3130302e302e302f31342d3234203d3e203337393633.roa (hash: ppj+TlXCIrAcPf1eMhGWrhP2Ij9TixTm3BfPz4IPvbI=)
                          5: 34372e3131322e302e302f31322d3234203d3e203337393633.roa (hash: XnzoRBbJbU4JSck0zmxm+ruNtxcM8ugi+pAaXFexVd8=)
                          6: 3133392e3232342e302e302f31362d3234203d3e203337393633.roa (hash: nfA+B4HJUdTdXpxBunZTC0Mmi3ww7Q0Bo7aWuz3zYNE=)
                          7: A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl (hash: Fy9nhcgsyPB3sTaZW/qVUiy4fgdRNEozLlP4MS8/SXk=)
                          8: 34372e39382e302e302f31352d3234203d3e203337393633.roa (hash: iwjVE24waqNRMxAnsWWloR6ZemTe2jtU1nDhdHBmFDE=)
                          9: 34372e3131322e302e302f31362d3234203d3e203337393633.roa (hash: 9TzYa3+Sl+tIX8tXSaj70/Us2wMIqXbVo3JClonsi1M=)
                          10: 3133392e3139362e302e302f31362d3234203d3e203337393633.roa (hash: 19ycWnE82ngKdpq5CfFKBBUaYUxLiUYMUdelOP4EkI8=)
                          11: 3133392e3132392e302e302f31362d3234203d3e203337393633.roa (hash: lmfFy/NByxflwbukOBqf2t5cvYb0y1mEUQilr1j5wEw=)
                          12: 34372e3131332e302e302f31362d3234203d3e203337393633.roa (hash: Sc9B64EYbOlhHpRQn2hDIXOE8wTsYGOAnrQ1OGOsB2U=)
                          13: 34372e39362e302e302f31352d3234203d3e203337393633.roa (hash: qCOeajORd8EdADqBCDEKYOaZ9qR0x8mo50AIxKKf2kk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 11:23:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:43:cc:6d:a7:a8:a9:51:58:fa:e7:ff:a2:64:c3:01:30:fa:95:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
        Validity
            Not Before: Oct 26 05:58:27 2026 GMT
            Not After : Oct 29 11:23:27 2026 GMT
        Subject: CN=47B99FD161C2C6A17CE2DF7FB090FFFCADFEB855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:08:99:32:00:97:7b:03:47:53:ca:cd:51:d8:
                    7d:07:23:2b:35:88:7b:e3:80:4a:f7:fb:90:4a:34:
                    01:43:ed:35:2b:8b:4a:00:7c:91:f2:a1:31:e9:15:
                    d0:c9:8a:87:24:f1:a5:ca:79:21:20:20:ce:a6:4b:
                    df:33:cc:ae:ca:af:f3:73:d3:ff:ea:5a:b9:78:7c:
                    0f:44:ff:9a:60:67:3d:2d:05:26:c9:09:8e:56:18:
                    0e:1a:0a:5f:b8:28:1a:b2:2e:65:64:b4:af:48:9b:
                    31:31:bb:fb:ac:07:15:16:fd:0c:09:de:b7:67:9f:
                    7a:dc:b7:44:d2:10:ca:c1:ae:64:17:d4:c3:33:9a:
                    93:f3:31:3e:51:60:ce:6f:12:16:2d:bb:32:23:71:
                    e8:bb:f2:81:42:bd:4f:58:a9:84:0c:d9:64:ab:1f:
                    53:46:e8:ab:16:a0:a8:29:dc:2f:ef:ea:08:d5:cf:
                    3d:e8:03:3e:9b:b7:41:4e:3e:d9:f9:b9:f6:80:13:
                    6a:3d:9d:46:48:81:01:09:db:33:bd:b7:7d:16:49:
                    07:02:53:4f:f0:02:74:40:0e:eb:b0:06:4a:55:94:
                    79:2b:df:77:6c:1f:be:af:14:47:53:15:11:74:f8:
                    5d:14:c8:95:cb:cd:ff:a3:40:5c:97:85:35:7c:70:
                    ad:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B9:9F:D1:61:C2:C6:A1:7C:E2:DF:7F:B0:90:FF:FC:AD:FE:B8:55
            X509v3 Authority Key Identifier:
                keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:72:8c:b4:6c:33:47:84:44:78:4b:0f:4d:12:09:1b:f0:37:
         80:b9:d2:d3:6a:4d:21:b9:a1:a5:5b:98:0f:ba:cf:65:4c:fc:
         0f:3a:33:86:a9:47:07:36:9e:65:1d:5a:c8:fc:be:33:7a:d4:
         7a:7e:1f:47:1a:66:8e:31:5c:4e:a1:52:bd:6f:21:22:ce:a4:
         f9:58:91:2d:bc:9b:91:56:f4:9c:a9:e0:21:42:92:77:8b:83:
         c8:26:89:be:fc:b0:61:f5:f7:4d:01:15:bd:6f:4d:02:ae:2f:
         6a:39:42:e4:e1:7c:4f:80:a3:cb:75:68:17:fc:b4:86:1b:ba:
         d6:42:23:70:b5:39:c3:18:35:fa:4e:fb:4c:6f:b8:70:8c:08:
         3c:60:80:67:3b:59:48:94:96:af:b8:ea:0c:d2:bc:c6:12:94:
         d1:e1:a8:9c:68:9f:f0:af:49:36:15:82:66:a5:05:0e:9f:06:
         81:c7:2a:f2:7a:c1:90:1a:5a:2f:b5:cf:6f:85:ff:52:5f:75:
         69:b8:a2:17:6a:a3:aa:ce:a4:6d:70:e1:75:26:f7:a3:6c:33:
         5a:d8:f5:cf:0e:c5:cc:5d:75:25:36:b6:df:e0:d4:a6:68:fc:
         16:d8:85:7b:b4:c9:9e:57:13:45:25:9d:db:d3:ba:d8:e6:f4:
         66:4c:a6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:37:44 2026 by rpki-client