Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
File:                     B5148646F2C451864E20696E4F1C926A098BC8D2.mft (raw, json)
Hash identifier:          K0rJSNEcZuJRdlCjvf5VFUVXmqBQmBL7D/8Xcsvj748=
Subject key identifier:   09:3F:EC:16:99:32:5B:4B:98:BD:72:69:81:52:1D:3F:76:74:DC:C0
Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Certificate issuer:       /CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Certificate serial:       65C37F93DE5BAB311BA49CE7388BD00262D18A85
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
Manifest number:          A9
Signing time:             Wed 14 Oct 2026 11:39:03 +0000
Manifest this update:     Wed 14 Oct 2026 11:34:03 +0000
Manifest next update:     Sat 17 Oct 2026 12:20:03 +0000
Files and hashes:         1: 34352e3235342e392e302f32342d3234203d3e2034383038.roa (hash: V9cDWRBADDfMj7Gr+jGNeCURz0MN/608S9KkOjIS7nA=)
                          2: 3130332e37322e3232342e302f32312d3231203d3e203633363333.roa (hash: +xww1oAoOERvGNhmVfxKYnnGzSx8WBbI8K8RerAoeyI=)
                          3: 34352e3235342e382e302f32342d3234203d3e2034383038.roa (hash: VpZ8FbBlmNhUuL/1VLo0qosPgq8i+8uaHFmEuk5tiDg=)
                          4: 34352e3235342e382e302f32332d3233203d3e203633363333.roa (hash: OupSETeNES+E6EQKnoTym1IonUo5VuuLCKmGEp4Jhg4=)
                          5: 34352e3235342e382e302f32342d3234203d3e2034383437.roa (hash: +hAqXWTni4XLLYmJ7GcuPp0Na8xp4NPXQIH+R4INNCM=)
                          6: 3130332e3232302e36302e302f32322d3232203d3e2039383038.roa (hash: ig0VbLcqHiuOvyohwmjWpHEUrnPZeizj9UxnCfpup+M=)
                          7: 34352e3235312e39362e302f32322d3232203d3e2039383038.roa (hash: NH1gynqSs7G2vkZrLnXyhx0zx1/5I1+9TU/pNnIMyi0=)
                          8: 3130332e3232302e36342e302f32322d3232203d3e203538353139.roa (hash: skWq9DVjr/L+lEV4OnmJAyThXYF3upqH3K4mAGCnER0=)
                          9: 3130332e37322e3232342e302f32342d3234203d3e203633363333.roa (hash: 8LecJ+E4ZI/jNoQTEs0sKUbACfH6Gj8ANm9cnIrMbr8=)
                          10: B5148646F2C451864E20696E4F1C926A098BC8D2.crl (hash: OlnEGICJuvOzy+sapfUnYrjhw0pMlQaEeGRfO9uF2SM=)
                          11: 34352e3235342e382e302f32332d3233203d3e2034383437.roa (hash: SP+QM9OtW5RmdBJJFM+OJXICimpfberqBDE5B1rJKNk=)
                          12: 3130332e3232302e35362e302f32322d3232203d3e203538353139.roa (hash: SbUX1LdpKn0uCIj+EVZcsAfOwjyeJW7igJZMkmidqas=)
                          13: 34352e3235342e392e302f32342d3234203d3e203633363333.roa (hash: wDkFnkOKolmiwC2jO5CsKf8kF/vNpoZGbBt0vTO4BHw=)
                          14: 34352e3235342e392e302f32342d3234203d3e2034383437.roa (hash: 9KMtusMUgjBGmA/TbBwckDV/WMFxBB9kkTkmv+BGjxQ=)
                          15: 3130332e3232302e36302e302f32322d3232203d3e203338303139.roa (hash: iShB9cHkCwz5TExfHEI9Gv8GmO4ZLK8Bb54bQbSoCVs=)
                          16: 34352e3235312e39362e302f32322d3232203d3e203338303139.roa (hash: 4T6XRtxPs6ZSsCkIbcBkih9Lcmxqq8lhG6rNbcuTYQQ=)
                          17: 34352e3235312e39322e302f32322d3232203d3e203538353139.roa (hash: ePQdZvLEBEPecmiRi/mFtngHDwQwodel2INEy7X9N4E=)
                          18: 34352e3235342e382e302f32342d3234203d3e203633363333.roa (hash: 2wyVk8ZYds07gMgFgv5tN5PEVXabnwJjCcdDeX5PRh4=)
                          19: 34352e3235312e3130302e302f32322d3232203d3e203538353139.roa (hash: +1W1XexONgisqiQl8crOWAFeeckAYAY5KgqkjbIJosk=)
                          20: 34352e3235342e382e302f32322d3232203d3e203633363333.roa (hash: QtpkCaAbIIcmF/w+6AQIgwsDzeZjED0NUe3lVS+FSxI=)
                          21: 34352e3235342e382e302f32332d3233203d3e2034383038.roa (hash: fyh+el9sgg8/Y93qBnXPHlHdezwIV67264v8qH2vob4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 12:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c3:7f:93:de:5b:ab:31:1b:a4:9c:e7:38:8b:d0:02:62:d1:8a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
        Validity
            Not Before: Oct 14 11:34:03 2026 GMT
            Not After : Oct 17 12:20:03 2026 GMT
        Subject: CN=093FEC1699325B4B98BD726981521D3F7674DCC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:af:f5:50:fa:cf:dd:35:b1:35:36:4c:4d:
                    b7:f4:2f:76:fd:74:4e:81:14:b0:21:b1:8e:d7:85:
                    76:68:0b:b3:76:1b:38:a5:f3:2f:e0:4e:65:3e:7f:
                    83:e5:4a:d7:3c:2f:4d:43:f8:98:c9:2a:93:cf:ed:
                    f3:3b:2d:d9:58:0f:75:8e:e5:d4:ed:d8:dd:8e:4c:
                    db:a4:e7:0e:39:5a:40:ef:46:55:46:dc:e7:52:fb:
                    f5:ca:08:ff:84:94:f4:bb:05:ea:67:7f:49:40:ae:
                    1c:8a:8e:79:6d:00:03:f7:49:58:57:da:9e:21:a6:
                    e7:1f:40:49:7a:2c:78:d9:81:f7:10:bd:cc:d8:ce:
                    b3:f6:99:6b:d2:77:ba:cb:7e:6c:36:a3:e9:11:92:
                    4d:d2:6d:68:b2:89:ff:83:dd:d2:2d:49:b0:c1:8e:
                    9f:24:41:84:4b:78:cb:50:b1:24:4d:31:41:4f:b6:
                    37:09:e3:b6:fa:d0:f9:5e:5b:2d:c4:74:93:89:50:
                    f9:7a:50:57:ce:74:30:8d:24:80:da:51:81:36:8b:
                    af:94:01:b8:24:90:a4:05:14:f3:c8:33:10:6b:77:
                    4e:2b:6a:5b:0f:05:8c:ad:82:0c:59:2b:8b:2d:5f:
                    5a:88:61:e7:9c:65:08:8f:cb:93:16:43:60:f3:85:
                    98:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3F:EC:16:99:32:5B:4B:98:BD:72:69:81:52:1D:3F:76:74:DC:C0
            X509v3 Authority Key Identifier:
                keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d7:7f:5f:a5:89:76:1d:d7:15:d0:6d:d1:d1:7a:06:4d:4e:
         d0:54:9d:d2:ed:e1:4e:b1:57:08:b1:c0:61:16:16:3e:48:83:
         eb:c0:56:65:48:a0:80:d9:b6:06:64:0a:1c:45:c8:8d:20:22:
         8a:b9:dd:8c:63:20:b8:84:70:70:93:13:e0:31:05:95:04:3d:
         4e:a5:c3:10:bd:83:ae:31:d7:7a:58:6b:0e:da:57:90:d3:6f:
         e8:2c:40:13:8a:99:57:9e:b5:7b:53:36:f3:eb:8b:ca:e3:ff:
         42:74:da:78:04:81:50:b2:54:f1:0f:9e:56:34:5f:d9:b3:6f:
         0a:f4:95:48:ef:fb:e9:21:f4:5d:f6:b0:77:3c:2a:e6:b0:42:
         51:63:c6:d2:94:88:b9:c2:5a:14:0c:50:c5:7b:57:62:8b:c6:
         07:1b:20:6d:da:21:e9:2c:ff:c5:39:d5:46:66:fe:64:c9:84:
         c5:88:fe:6d:72:6b:d3:0d:eb:3c:9a:7f:0c:cb:e0:1f:3c:7b:
         7e:27:0b:f9:ae:5b:3a:f2:f2:1e:99:62:dc:33:bb:a8:d7:f7:
         01:2b:b1:e5:a0:be:f9:c7:1b:89:c9:b7:df:fa:76:b9:a9:96:
         a4:8b:67:b4:b6:5c:ab:b7:4c:d3:3a:12:ec:4a:ee:f9:4b:5e:
         ae:d8:19:c0
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUZcN/k95bqzEbpJznOIvQAmLRioUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEw
OThCQzhEMjAeFw0yNjEwMTQxMTM0MDNaFw0yNjEwMTcxMjIwMDNaMDMxMTAvBgNV
BAMTKDA5M0ZFQzE2OTkzMjVCNEI5OEJENzI2OTgxNTIxRDNGNzY3NERDQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxK/1UPrP3TWxNTZMTbf0L3b9
dE6BFLAhsY7XhXZoC7N2Gzil8y/gTmU+f4PlStc8L01D+JjJKpPP7fM7LdlYD3WO
5dTt2N2OTNuk5w45WkDvRlVG3OdS+/XKCP+ElPS7Bepnf0lArhyKjnltAAP3SVhX
2p4hpucfQEl6LHjZgfcQvczYzrP2mWvSd7rLfmw2o+kRkk3SbWiyif+D3dItSbDB
jp8kQYRLeMtQsSRNMUFPtjcJ47b60PleWy3EdJOJUPl6UFfOdDCNJIDaUYE2i6+U
AbgkkKQFFPPIMxBrd04ralsPBYytggxZK4stX1qIYeecZQiPy5MWQ2DzhZh1AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUCT/sFpkyW0uYvXJpgVIdP3Z03MAwHwYDVR0j
BBgwFoAUtRSGRvLEUYZOIGluTxySagmLyNIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTM1NDAzNjg2OTQ2NDA4NS8wL0I1MTQ4NjQ2RjJDNDUxODY0RTIwNjk2RTRGMUM5
MjZBMDk4QkM4RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEwOThCQzhEMi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDkzNTQwMzY4Njk0NjQwODUvMC9CNTE0ODY0NkYyQzQ1
MTg2NEUyMDY5NkU0RjFDOTI2QTA5OEJDOEQyLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9d/X6WJdh3X
FdBt0dF6Bk1O0FSd0u3hTrFXCLHAYRYWPkiD68BWZUiggNm2BmQKHEXIjSAiirnd
jGMguIRwcJMT4DEFlQQ9TqXDEL2DrjHXelhrDtpXkNNv6CxAE4qZV561e1M28+uL
yuP/QnTaeASBULJU8Q+eVjRf2bNvCvSVSO/76SH0Xfawdzwq5rBCUWPG0pSIucJa
FAxQxXtXYovGBxsgbdoh6Sz/xTnVRmb+ZMmExYj+bXJr0w3rPJp/DMvgHzx7ficL
+a5bOvLyHpli3DO7qNf3ASux5aC++ccbicm33/p2uamWpItntLZcq7dM0zoS7Eru
+UtertgZwA==
-----END CERTIFICATE-----
Generated at Wed Oct 14 17:13:06 2026 by rpki-client