Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
File:                     158B95F55D548B072B42C2C2820ACE7D9908E60F.mft (raw, json)
Hash identifier:          VHT83iUUGA5PbTC0Elr4Ly/8ESecOaJ3ybaY5Cl/oXY=
Subject key identifier:   74:C7:44:B8:D1:9C:D1:7C:5C:9A:DF:2F:AE:B3:78:6A:EF:42:DA:59
Authority key identifier: 15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F
Certificate issuer:       /CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
Certificate serial:       1CA8127EF839F29357AEBFBAC2FA719B4988E42A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
Manifest number:          45
Signing time:             Fri 12 Jun 2026 00:49:36 +0000
Manifest this update:     Fri 12 Jun 2026 00:44:36 +0000
Manifest next update:     Sat 13 Jun 2026 03:01:36 +0000
Files and hashes:         1: 3130332e32342e3137362e302f32322d3232203d3e203539303732.roa (hash: T83A0nhY2rHA4sN3mO3P5tUJfQ79vOxGS+0CJKHN3qI=)
                          2: 3130332e3233382e3138382e302f32322d3232203d3e20313335303631.roa (hash: xJ7VcowKTFAh+WOZ79sCa/KDiTGsKX9YSHQBCzfiaTk=)
                          3: 3130332e3233382e3138382e302f32322d3232203d3e2034383136.roa (hash: IN2IWp9b73L95UufodS/94IdWqlYTDWZOnKKI30WHGM=)
                          4: 34332e3234372e36382e302f32322d3232203d3e2034383136.roa (hash: RgvI0XhO3XacBu3wOvzmrHKrZIWSkSXKoEV6lCdxrrM=)
                          5: 34332e3235342e3135362e302f32322d3232203d3e2034383136.roa (hash: U7lk/seyK5wsmf9rpNYFQ60FADMFiDu0J8En0AwUKps=)
                          6: 34332e3234372e36382e302f32322d3232203d3e203539303732.roa (hash: HFam681MVql7io9x8AgabYOuz1bqi/F3PX9muXtUEIY=)
                          7: 158B95F55D548B072B42C2C2820ACE7D9908E60F.crl (hash: GeDnnzMHNtS+AtL+zdbUjPILWtLrzjVoOD2pDuPn6Fo=)
                          8: 34332e3235342e3135362e302f32322d3232203d3e20313335303631.roa (hash: 6gCPRqIsIGqs9K+MX9psHeijf0HFSORn3xh/W/ZUVN8=)
                          9: 3130332e3233382e3138382e302f32322d3232203d3e203539303732.roa (hash: MJV3liXPzb+8HJt4Ngb1akXn1l5wwQw1ddvEgcsiGwE=)
                          10: 34332e3234372e36382e302f32322d3232203d3e20313335303631.roa (hash: sZKR1aSpK2bfOPYuVGIDfBr4OmtJuXL3mW99K3THAoc=)
                          11: 3130332e32342e3137362e302f32322d3232203d3e20313335303631.roa (hash: sXBIyQqRHVSZNcPR9Xrj9U2Y6sS9BHJ6YoFqJ54U90c=)
                          12: 34332e3234372e36382e302f32322d3232203d3e20313334313936.roa (hash: BOrnJuBQWWbSNEwWS9msbaKMlsq7KEpqAJujOnLFNU8=)
                          13: 3130332e32342e3137362e302f32322d3232203d3e2034383136.roa (hash: JjMQBoGwSlzFw0HyUckCXXshRc+6JJT58uH4bfroxMk=)
                          14: 34332e3235342e3135362e302f32322d3232203d3e203539303732.roa (hash: 6gR0ZPFuNC294r5LAsw0olROZtYwrJv5AXDoSLqwLXc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 03:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a8:12:7e:f8:39:f2:93:57:ae:bf:ba:c2:fa:71:9b:49:88:e4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
        Validity
            Not Before: Jun 12 00:44:36 2026 GMT
            Not After : Jun 13 03:01:36 2026 GMT
        Subject: CN=74C744B8D19CD17C5C9ADF2FAEB3786AEF42DA59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f2:7f:58:87:7d:20:a0:c2:47:92:af:7a:7a:
                    ae:a4:da:56:a7:31:25:24:15:75:e0:ef:7f:e2:36:
                    33:69:36:fd:ab:c3:f8:51:02:18:05:36:7d:39:f6:
                    72:6f:22:cf:15:27:2f:ca:00:a8:59:c0:5c:55:c0:
                    f3:b2:23:29:56:af:15:50:60:4a:dd:0a:ce:9a:c2:
                    98:8a:e7:96:cb:e8:0a:7d:6f:e1:dd:34:13:08:f1:
                    42:35:59:67:bd:21:7c:71:b6:36:55:c5:6c:69:b7:
                    51:47:23:ec:37:fe:89:82:0b:d4:bb:cc:10:f8:7c:
                    53:c2:01:e1:d6:fa:64:a5:62:f5:21:23:0c:67:e0:
                    d1:3a:32:ba:27:c0:f1:20:b5:e7:2f:a9:6b:41:c2:
                    c3:2b:e9:2e:1d:bb:6f:52:cb:1d:0d:16:30:29:df:
                    38:cd:f0:e3:b6:a0:aa:97:e1:46:0e:33:63:fc:bc:
                    6b:6d:66:2b:67:34:70:62:72:2c:6d:3a:ec:80:54:
                    82:76:17:4a:3d:1a:32:7b:ff:66:4a:f1:59:01:b6:
                    b7:cf:c5:4f:69:41:05:5a:4a:bb:a1:62:cd:0d:04:
                    14:29:ad:dc:6f:44:00:85:d7:2b:6b:9b:20:9d:6f:
                    18:82:b1:58:21:ef:d5:d2:2b:af:b5:28:ab:37:4d:
                    40:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C7:44:B8:D1:9C:D1:7C:5C:9A:DF:2F:AE:B3:78:6A:EF:42:DA:59
            X509v3 Authority Key Identifier:
                keyid:15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:31:5d:99:f2:a3:f2:9d:06:11:df:8d:f4:ec:35:f6:e5:a5:
         09:ac:51:a9:8f:82:69:3f:4e:51:ef:e3:c2:5d:55:c3:a1:1f:
         0a:36:67:1c:a9:bc:41:c3:62:a1:91:af:c0:ed:d8:33:65:66:
         19:60:e6:3b:10:4e:b2:48:83:77:2f:3b:b8:aa:a3:d5:52:16:
         d0:6d:99:22:86:8c:07:5e:91:6d:64:b1:ad:14:fa:82:07:bd:
         ed:6e:a8:13:f4:dd:57:3f:e0:83:4f:80:f7:9c:d1:c5:c6:a5:
         e7:b0:81:58:ce:a1:be:c5:ef:4b:39:2c:a7:0e:71:25:46:98:
         38:9e:c5:33:1f:d2:52:fd:3c:bb:08:9e:90:8c:00:53:94:a4:
         d7:d7:32:6b:6d:a2:64:d6:ba:4d:8c:af:99:4a:33:ea:0c:2a:
         5c:ef:c2:0a:97:b2:bb:3b:9f:da:8b:ed:37:67:57:61:b6:87:
         30:9c:d0:4f:66:44:92:82:42:23:9d:65:8d:d1:a2:3a:35:6e:
         56:84:12:14:55:bf:49:01:bd:ae:a8:a4:0b:04:96:ae:cb:9c:
         b7:37:aa:95:4c:17:2e:e2:f9:44:91:15:ce:9d:35:94:37:b9:
         f3:27:25:27:b0:7b:f8:01:4d:0d:77:52:8f:bc:6f:7e:e6:23:
         98:29:de:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:46:47 2026 by rpki-client