Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
File:                     1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft (raw, json)
Hash identifier:          N/NnkZhqWIOSIIxuTd/NING+e6DNLtBv12400bJnxxY=
Subject key identifier:   BA:05:51:92:DD:83:A8:01:5E:01:B4:36:8B:9A:3C:2A:44:2C:61:1B
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Certificate issuer:       /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial:       39F12FA3118630DE6FA63429BE3366221FD3B928
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
Manifest number:          FA
Signing time:             Sun 25 Oct 2026 14:57:41 +0000
Manifest this update:     Sun 25 Oct 2026 14:52:41 +0000
Manifest next update:     Wed 28 Oct 2026 21:48:41 +0000
Files and hashes:         1: AS56040.roa (hash: HmwkCKoBQAU0uWAz5pjtRSJjSvqZi0caB0vR01UCqYc=)
                          2: AS58466.roa (hash: 2DFqjnyNEv+uIPb/Uz6u1okUeW1cxPg4G+ffDatksUE=)
                          3: AS9308.roa (hash: yftVhdAdhOlgvCg9H9SqFVvRoFbUFos16+3UvIPNuZo=)
                          4: AS17622.roa (hash: PlKFHLxhO02lNPofzh4875427lXAWURw4U69Gq37PDM=)
                          5: AS133119.roa (hash: cMFfyh0zqTClFl0ii2ZoZ1a+PgYVLblIHc1vHK0hAZs=)
                          6: AS23724.roa (hash: T0fAwl6wYamPJGnxn4dx30kfD3ZCVW9sUQOvSfYJGI0=)
                          7: AS17621.roa (hash: wfLodr6aTTmW76SpdHD4FwYka5Izs6CtYx4KwIUOG8I=)
                          8: AS56020.roa (hash: 0sLTu+DPLeyeHTFssSu3l6BgQB8sTAdWzngp4fBzNf4=)
                          9: AS4811.roa (hash: ddTKO1AsNR1SULkjlm2Hn5h6NSHZWKPAKCykA8E69zo=)
                          10: AS17428.roa (hash: e/ULKElOqavWoA242IT/ZZxzH9PHsVAXBwW95iPT/jU=)
                          11: AS133111.roa (hash: wczUjdPp/Uwb5rWXi6oHegyjpDQrvqpc3CUSK3r89BE=)
                          12: AS59020.roa (hash: /Pd1x3KaSGQFTXTyZbDS1WOjjkXg/3ewVYnbuFdYmwE=)
                          13: 1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl (hash: Bc7gYDbpFZvi1FrB+YF20ZHeMjA0taeDQPCKTASQmaQ=)
                          14: AS56046.roa (hash: mI1nt0SayxXQElAcu/cyI1exRhs6Pf9DcnVs45ciUq8=)
                          15: AS9808.roa (hash: 9DHAOxqPuZWJZQUPJlPeIiLta+TaGPyXD7TDGW80KoU=)
                          16: AS141679.roa (hash: +Dz+vmsU4Nyyvwcx+gRYUKBEeW5WRorKlfoJ/42yBPw=)
                          17: AS24400.roa (hash: 6koc0r+8oNvvJQ2n6u3kgNbZRGNkhF9vXGd/vCdqpYw=)
                          18: AS18244.roa (hash: 5yJK4ELO+Ql7zMnruxm9AyXZ6E0mJAXs2fYYGtt7U6s=)
                          19: AS56048.roa (hash: 5zXzSkrBQUFfid6aK1Hyf4IH0zjb8rUH3Vawr//Qfho=)
                          20: AS4847.roa (hash: 3rkjW99xQWcKDBNK98Xl6QzkJQaB+U43s7sVMj+RwZA=)
                          21: AS4808.roa (hash: u9OQxrqhpl1T/0ARzRa6lSxGFhl35YXPeECNJjqNd3M=)
                          22: AS4835.roa (hash: jAlH6Xn9Wx5euSm8I4X3tFNqFODKHPGDOqig5p/XK0k=)
                          23: AS136958.roa (hash: es7Px72aZsegKB/zlZjsZawH5pspdJD+M95b+DUVsMk=)
                          24: AS0.roa (hash: 132zAU1ahbknkNfBYBXQHL/eCue+m6AOBrdUkC7GbYY=)
                          25: AS9802.roa (hash: 4/kRC4vWJ83omtig7t5aCQ+XqmsWSbaprpXcANd7oSg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 21:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f1:2f:a3:11:86:30:de:6f:a6:34:29:be:33:66:22:1f:d3:b9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
        Validity
            Not Before: Oct 25 14:52:41 2026 GMT
            Not After : Oct 28 21:48:41 2026 GMT
        Subject: CN=BA055192DD83A8015E01B4368B9A3C2A442C611B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a7:c7:25:54:ea:10:e1:43:ee:92:7e:00:ed:
                    de:03:e1:4e:a8:d0:6d:9c:09:b1:a5:39:e4:0c:a4:
                    f8:48:bb:e2:cc:07:66:3a:e3:bf:20:1a:36:dd:46:
                    8e:d8:75:8f:6e:6a:4b:f2:a5:ff:c2:32:20:00:db:
                    e7:f5:85:db:f2:fc:43:16:b2:62:c2:3b:3a:8a:a1:
                    05:4f:8d:c8:41:01:77:39:f7:5d:6c:91:2e:9e:f6:
                    ee:b3:fb:a9:20:9f:3a:71:6c:54:d5:7c:1d:d9:87:
                    3e:31:20:e1:04:b0:c3:9e:42:a8:f0:cb:f6:d6:2e:
                    e0:d4:18:da:25:0e:44:5d:19:cb:b6:6b:e2:b8:d3:
                    3a:18:31:94:1c:0b:3e:76:5f:69:75:29:0a:d3:ce:
                    fa:8f:b4:96:b9:61:31:1f:9a:ed:17:ae:08:8d:27:
                    3e:a0:8e:04:93:80:2f:be:f7:30:40:38:b1:16:48:
                    95:fb:83:e6:cd:22:c1:a3:ee:8b:25:14:27:7e:f1:
                    b9:88:49:7a:b5:3b:a2:92:af:51:94:f7:9f:4a:58:
                    db:8d:f8:8c:e8:cc:d6:b8:ee:2c:d7:0c:d2:cd:5d:
                    07:dd:f6:15:ab:37:34:c6:19:fb:1c:1e:69:93:fb:
                    40:af:53:03:b1:2a:27:51:1b:a3:ee:2c:c4:7a:0a:
                    5f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:05:51:92:DD:83:A8:01:5E:01:B4:36:8B:9A:3C:2A:44:2C:61:1B
            X509v3 Authority Key Identifier:
                keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:06:6b:ea:e7:ab:ec:50:eb:51:97:a8:87:30:cb:a5:12:f6:
         f5:d3:98:31:e9:af:30:35:96:be:0c:d4:23:2c:32:5e:b4:09:
         5a:d1:82:ef:cb:36:e1:c2:91:f0:78:5f:19:76:f5:b4:63:28:
         d8:e6:84:af:e5:16:99:5c:92:96:89:02:3e:26:10:42:95:41:
         6d:15:cd:b2:20:4d:21:8f:31:3b:30:5a:3d:b3:6b:f7:3f:60:
         18:95:39:ad:28:88:52:cd:fa:b0:7d:af:70:81:df:4f:61:d0:
         f8:6b:fb:5c:c9:d4:ee:b4:4a:fd:fd:8c:bd:22:a0:a6:b9:2f:
         f6:c0:cf:94:10:42:1e:0a:0a:e3:2e:a2:86:06:d3:ef:52:be:
         c3:8d:e0:fc:df:bc:38:fb:e1:33:a3:eb:8f:35:5e:4d:0d:81:
         ed:fd:ff:12:1d:df:d7:c4:b3:8e:dd:94:66:80:23:ae:35:f0:
         48:5e:b5:51:cc:43:4e:3a:ac:7f:73:bd:49:28:f9:52:f3:65:
         a2:32:dc:93:9e:ad:2d:72:39:34:cb:21:c1:12:d1:1e:af:91:
         e8:6a:fc:e6:1d:ea:65:6b:64:23:6b:e9:b1:f0:1b:5a:91:0f:
         3c:59:d0:5e:68:01:4a:de:2a:c1:e6:d7:18:53:29:71:f1:23:
         96:c7:45:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:05:05 2026 by rpki-client