Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
File:                     78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft (raw, json)
Hash identifier:          lzPw987I7gJQClxXA6RG/FCkOdAuWlMqTHfF2YRaDUY=
Subject key identifier:   12:25:C0:64:79:8F:39:68:2E:69:B6:B4:7D:71:9D:F3:6D:FF:DA:8B
Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
Certificate issuer:       /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Certificate serial:       242A757AFAF579FDC6286CF6BC878132620FC771
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
Manifest number:          0154
Signing time:             Fri 28 Aug 2026 06:47:59 +0000
Manifest this update:     Fri 28 Aug 2026 06:42:59 +0000
Manifest next update:     Mon 31 Aug 2026 11:03:59 +0000
Files and hashes:         1: AS140716.roa (hash: GS7v0EcdG/AXCHc0iFo17HUzaeWlVx3LY/f80n+5gVA=)
                          2: AS17623.roa (hash: z6g5MCOUrEssoy1uJfKEk94+LrQeJ2+bymHuIDB9xxE=)
                          3: AS140726.roa (hash: LHXg8VC1+lhD5VedELvxN4ZWH7p16RhvsK7qHiX7+Bg=)
                          4: AS133119.roa (hash: UwOt5tr2s7AJyQIvzsx549pVsgIpDht61NuHGXjQm18=)
                          5: AS137539.roa (hash: hgbPsIvw/d1FiopIGd9dsMQ/f/0+FCTUyZgg2C0Ykg4=)
                          6: AS4837.roa (hash: X7zKJsBYpv1NhnO6fnAV2643DDN67ma3AUOCeJ0TQ/E=)
                          7: AS140707.roa (hash: QGY68alUvxudDfvgKo0dIVPwgS9RrQLPSx5VEu/UuYI=)
                          8: AS10206.roa (hash: MwQKlViCcT7jO1Ny0MR34yNXUdcM+8YzcJ82W3X7RTI=)
                          9: AS17621.roa (hash: o2TQhxFBmNRz2cC3fbMds5ZUARL93ZTG9QZTsznGFeg=)
                          10: AS138421.roa (hash: +2a938K7/9xt1CQHblBDN7U/GrPxwsQgk8jTZwFAz6g=)
                          11: AS139007.roa (hash: YiJ6BkElfnNZ700uQApYitDZq50ty+TSesXDCL+6OEE=)
                          12: AS135061.roa (hash: aAOr4zp8LVI+6zhscnheUfOu12efYqxDQrvW/A11q+s=)
                          13: AS140886.roa (hash: WUaoZKu7K4H2AeGcE1P71u/YcQk8t3wFdKe7sIqIROQ=)
                          14: 78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl (hash: SjNz6+zvgg+IzU1XmYyKSG0NVSdDlqbzeEF2LlzKfV8=)
                          15: AS17622.roa (hash: 05xru/3t4/mY6Rq3gfBggWm7mmeWUAJkJ4u95bY1Y/w=)
                          16: AS152120.roa (hash: Qbns3jTpPiZ4HvTvydl/LN6gM52cFh04J88DXulOgjc=)
                          17: AS17816.roa (hash: r3nW2d2gjZnHj4Ls4S4OjmI9LiE0IbXz4p8XGg3/a94=)
                          18: AS136958.roa (hash: bO6uRLPGKDb5G5NHguosrRNfcKh5HJvfSnNuUsL9w+c=)
                          19: AS9929.roa (hash: KK74jwcDvE4/GRyR/ZxHCafKJSJIeyfgPASS8MlUljs=)
                          20: AS140979.roa (hash: 3ZaH20GCcLuBW4CZhfJkyavct0/76doMmkuQUvPtUOA=)
                          21: AS4808.roa (hash: kqByL1Zclk4Qwl77KzCp9upUtOuASsLyyK2yfuSlb18=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 11:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2a:75:7a:fa:f5:79:fd:c6:28:6c:f6:bc:87:81:32:62:0f:c7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
        Validity
            Not Before: Aug 28 06:42:59 2026 GMT
            Not After : Aug 31 11:03:59 2026 GMT
        Subject: CN=1225C064798F39682E69B6B47D719DF36DFFDA8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:ad:15:f2:52:c9:96:ea:9a:6c:8a:1f:31:
                    09:00:e0:fc:f7:bf:aa:9e:d2:c8:03:8a:bd:b5:6d:
                    f1:16:77:85:cb:23:81:07:d4:48:eb:81:4d:c9:f2:
                    b3:b9:c7:09:8f:dd:7c:9b:1e:c9:cb:4a:6c:b4:28:
                    c5:16:30:f3:3c:61:9f:28:75:3d:61:3c:f2:9a:8d:
                    d4:21:3c:ab:46:cb:70:99:60:09:c2:f4:11:51:23:
                    2b:3f:6d:0d:4d:0b:c8:6b:0a:44:d4:35:5a:09:b6:
                    3d:3d:cd:83:fa:b1:8d:1c:06:10:2c:39:94:b5:e6:
                    61:cd:db:80:d1:f1:4f:cb:e4:36:c7:89:98:e3:5c:
                    2f:f0:94:f8:e2:b6:a8:8e:59:47:35:f8:47:ed:c6:
                    7f:21:05:e3:76:36:83:0e:31:c8:16:dd:5f:b6:a3:
                    b4:ce:b6:c1:d4:f4:c9:aa:49:47:7f:6f:64:a2:69:
                    90:1b:25:a0:e0:8b:2e:b8:d0:78:4f:c8:a3:51:00:
                    a4:64:ab:0b:8d:ab:78:cd:95:e8:f4:f3:52:5d:45:
                    b9:42:9e:06:76:9b:28:75:04:02:6d:d9:c7:68:4d:
                    d2:8f:d8:4a:19:54:e3:53:32:dd:da:b9:fc:a9:c8:
                    4c:09:1c:e8:92:fe:ab:35:fe:33:2a:6f:55:55:e6:
                    b1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:25:C0:64:79:8F:39:68:2E:69:B6:B4:7D:71:9D:F3:6D:FF:DA:8B
            X509v3 Authority Key Identifier:
                keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:43:ce:ff:a1:c9:cd:91:c9:d8:f0:af:02:1b:2f:55:d4:9c:
         09:d7:df:3e:20:cd:8a:2c:53:c6:76:28:61:0c:e7:f6:87:c4:
         0b:e3:f2:c2:1c:bf:10:3a:86:34:b9:df:82:99:b7:6a:cc:4c:
         4d:10:cc:fb:58:d8:3e:f9:90:fd:6e:22:45:ef:ec:42:81:94:
         47:2e:e0:07:ee:c5:ee:60:71:de:5a:69:f2:d0:f3:e0:ea:89:
         e8:77:20:07:03:f1:26:82:63:b2:94:38:79:86:78:fc:e2:b8:
         7a:f4:70:67:cc:2d:21:b6:53:4d:19:f3:c7:dd:9f:ca:6c:f5:
         23:00:61:97:62:af:9e:ca:d3:c7:36:c7:81:2d:04:7f:66:d0:
         a3:c0:67:70:88:58:96:09:46:6e:e7:e2:a5:cb:bc:af:e5:38:
         b4:eb:da:8a:07:de:4b:af:8d:98:15:cd:6c:0e:21:32:ee:73:
         87:8d:b9:cf:20:76:24:4d:bc:97:bd:c3:0d:dc:82:27:50:d7:
         e6:b1:00:84:b3:f6:b2:52:e6:85:1d:ea:3a:3b:ca:c8:b5:01:
         65:66:23:60:d5:a1:aa:d9:55:a1:24:c7:3e:2e:f1:ad:be:0b:
         14:a4:f3:67:13:09:df:79:26:64:16:28:c0:26:79:d2:cf:e6:
         09:80:f9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:23:11 2026 by rpki-client