Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.mft
File:                     185BC8F795FC60E163D641A01BAA510BF953C375.mft (raw, json)
Hash identifier:          653Q4Km7MIbYX33UDsNsE66EySKjjF8VZPKEs+npHGU=
Subject key identifier:   BD:82:78:47:FC:7E:14:0F:B7:6A:F2:8C:7A:A3:1B:81:F1:9F:FA:7E
Authority key identifier: 18:5B:C8:F7:95:FC:60:E1:63:D6:41:A0:1B:AA:51:0B:F9:53:C3:75
Certificate issuer:       /CN=185BC8F795FC60E163D641A01BAA510BF953C375
Certificate serial:       56E3BC021730D5A27B2AE3A65D70F52E6077B33F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.mft
Manifest number:          3E
Signing time:             Sun 11 Oct 2026 22:21:10 +0000
Manifest this update:     Sun 11 Oct 2026 22:16:10 +0000
Manifest next update:     Thu 15 Oct 2026 04:28:10 +0000
Files and hashes:         1: 323430373a396263303a3a2f33322d3332203d3e203539303734.roa (hash: 0pw/Avjlv0JZ+GRAb03h4Z1CFfbUDynRCBE0Zi80CPE=)
                          2: 3130332e3131332e342e302f32342d3234203d3e203539303734.roa (hash: MPI8BXVCyX2qdi9aUwFESJdWF4nM8gGhkSy9VqMiPSo=)
                          3: 323430343a373234303a323030383a3a2f34382d3438203d3e203539303734.roa (hash: XPRCCZsT1P5a73kfa0XZLO8NAMJJOtMoz7/y88FSMOQ=)
                          4: 185BC8F795FC60E163D641A01BAA510BF953C375.crl (hash: XQSl8cZa2YT0lFgvskLR8YiXMc3AVxoUWWlyjFw998s=)
                          5: 3130332e3136392e36322e302f32332d3233203d3e203539303734.roa (hash: 7Df55ih/ns70tuHbU22icrVvR/efHAQ00CQYLJ+Aims=)
                          6: 3130332e3131332e362e302f32332d3233203d3e203539303734.roa (hash: KUsSAkShXoN2ZS8RDBR5OOTRYENeDdoP3xwlA+umfuc=)
                          7: 323430343a373234303a3a2f33332d3333203d3e203539303734.roa (hash: jF+3cfaIQDjY1LGgIryQymJzgh2wmDFMt+nwkp9/pCU=)
                          8: 3130332e3131332e352e302f32342d3234203d3e203539303734.roa (hash: voPM/XkF1ytAgEyvZaM7EZ0FoFoyhdT1uaThV1LU6xg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 04:28:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e3:bc:02:17:30:d5:a2:7b:2a:e3:a6:5d:70:f5:2e:60:77:b3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185BC8F795FC60E163D641A01BAA510BF953C375
        Validity
            Not Before: Oct 11 22:16:10 2026 GMT
            Not After : Oct 15 04:28:10 2026 GMT
        Subject: CN=BD827847FC7E140FB76AF28C7AA31B81F19FFA7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:33:8c:4d:34:8a:cc:00:6e:4e:a5:5d:5d:28:
                    68:2d:2c:51:a0:6f:88:d6:70:e2:af:18:83:29:45:
                    8d:06:5f:95:ee:a2:a2:0f:be:bc:69:dd:b3:d8:58:
                    f3:7e:78:fb:05:ad:50:c4:77:60:6c:ea:53:30:43:
                    fb:f8:43:2c:d9:4b:42:7c:e9:66:c4:75:d4:6a:a9:
                    7d:38:7f:7b:f1:f5:2e:17:1b:74:85:fa:f6:86:f8:
                    ca:8e:f6:c1:50:ae:51:d3:72:eb:0a:a8:3a:c1:04:
                    bd:5e:43:ad:55:69:99:9f:7a:30:e5:e3:46:7f:53:
                    a3:ec:eb:62:f4:bc:02:6d:26:fa:72:a4:65:da:0e:
                    86:aa:16:7d:c8:92:39:7f:bb:0a:58:11:92:2b:70:
                    88:63:35:75:d5:00:79:75:e0:b0:89:86:89:84:12:
                    1a:ba:a4:39:07:ea:59:f5:6a:e7:b7:d1:a7:d8:83:
                    63:10:76:e1:c6:d8:39:06:d2:d5:42:45:70:30:72:
                    d9:b5:09:3a:53:f5:9f:28:42:94:c3:1e:a0:b5:35:
                    3c:98:d1:0c:e1:71:01:42:38:8b:13:09:1f:18:9d:
                    43:bd:f2:2a:f8:39:c9:b7:9a:3a:69:4b:5e:09:49:
                    82:c9:36:59:09:02:b1:3b:7a:8f:ec:39:64:11:73:
                    ba:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:82:78:47:FC:7E:14:0F:B7:6A:F2:8C:7A:A3:1B:81:F1:9F:FA:7E
            X509v3 Authority Key Identifier:
                keyid:18:5B:C8:F7:95:FC:60:E1:63:D6:41:A0:1B:AA:51:0B:F9:53:C3:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:06:29:91:c8:ac:5a:e0:e4:93:c4:ae:03:5f:ba:55:f3:15:
         6f:9d:77:b3:e8:6f:7d:8b:c8:97:c1:02:70:38:33:00:b3:a0:
         b8:1e:19:9e:af:21:3c:e3:50:f4:80:1a:6a:0c:12:b9:74:c4:
         ff:21:93:31:4a:67:d7:42:d8:35:43:f0:d1:db:d7:36:7a:ac:
         9d:db:6b:76:3c:fb:c5:82:b7:18:17:a2:8b:ee:b1:99:a8:6f:
         6c:48:75:aa:cf:9e:21:24:e3:7e:66:b3:67:d5:7a:73:dd:09:
         9a:56:aa:84:69:c4:7a:b8:87:b5:86:83:c4:b3:1f:85:d6:8f:
         12:de:78:2d:8e:5a:50:c4:9b:84:b3:11:a5:17:91:7f:42:7a:
         4c:91:f4:f0:5a:74:77:f5:d3:3d:a6:0a:b4:8f:84:2f:62:23:
         b1:11:65:e3:15:c1:42:89:c7:c0:1d:34:00:b3:de:ff:c3:aa:
         c2:bf:53:0a:91:37:92:dd:0f:50:5a:92:70:c6:29:d2:70:01:
         82:5c:2d:61:e3:3c:51:71:83:17:03:42:d8:b9:a4:f3:96:d3:
         39:f5:14:d0:90:df:d2:65:5a:be:71:96:76:10:70:02:e5:fe:
         6f:b5:42:9c:e9:d1:28:be:0d:b9:b6:bf:70:ec:7b:21:ad:67:
         9c:78:1d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:38:08 2026 by rpki-client