Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft
File:                     57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft (raw, json)
Hash identifier:          QVtlWppQqqdscMpBEmgjdMKCzf+5RMQfWL6Hpva04VY=
Subject key identifier:   3A:AF:BC:AB:E4:E6:17:D0:6D:6D:3E:3B:39:B6:C9:7C:74:6A:38:E4
Authority key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0
Certificate issuer:       /CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0
Certificate serial:       547A5F4E3E1C5F9F7B884C0A383153EDAD352B73
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft
Manifest number:          013B
Signing time:             Mon 05 Oct 2026 04:08:40 +0000
Manifest this update:     Mon 05 Oct 2026 04:03:40 +0000
Manifest next update:     Thu 08 Oct 2026 14:35:40 +0000
Files and hashes:         1: 323430313a376530303a3a2f33322d3332203d3e203338333535.roa (hash: ehMU3S2JCPT5vg3hKKo4ROHo5igNX1sYoyqjVpMh6WA=)
                          2: 323430313a376530303a3a2f33322d3634203d3e203137393639.roa (hash: EdGOODlWG3ONCUozOTYrfpFlATRW8oodZdYBqM1SnNY=)
                          3: 3132352e36322e302e302f31382d3234203d3e203137393639.roa (hash: HUI+HHCfEB2nbQeHqwwB6/Ms2ZiM/pUUCnk/LE3eDjc=)
                          4: 323430313a376530303a3a2f33362d3336203d3e203338333535.roa (hash: aKmhFp9xXN13SrJmpZLgk6u8O9Vm0OBVE6ERJGr76Bc=)
                          5: 3131372e35392e302e302f31362d3234203d3e203137393639.roa (hash: jqEdbt3MhK6Z7J07psMZQBv74go8mG34DhxeSdGowbk=)
                          6: 3231382e3234342e302e302f31392d3234203d3e203137393639.roa (hash: qIBIXAx+bxCxVuXrC5KPDpWcIbbQfaWsos9qY8Hyohk=)
                          7: 34322e3132332e3132382e302f31372d3234203d3e203137393639.roa (hash: HJAEw0em6DXYtKjOb8eOjxjOleqPkWguwakB00hU4DQ=)
                          8: 32372e3134342e302e302f31362d3234203d3e203137393639.roa (hash: SYPXnxeRtZ7noFu43LGfNAwPQXoAc39ePYXU17knFQc=)
                          9: 3230332e3136312e3139322e302f31392d3234203d3e203137393639.roa (hash: 5Tg0FQdSDq/Zu86whup67Wa88hxIMsyCZY10zhpGkNQ=)
                          10: 57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl (hash: NDRPC6APZlLyqnuh6vbXy2mHeiFJb4p+Zm3ZC9lQnVU=)
                          11: 323430313a376530303a666666383a3a2f34352d3435203d3e203338333535.roa (hash: ZVOiXJmXMUUoqcqPt09Dq1VOfAp9Wv0un73gutc12gs=)
                          12: 323430313a376530303a666666663a3a2f34382d3438203d3e203338333535.roa (hash: B4BJlhUus8tyirjIaFKqqMplYcSijSoV1lH0TWBWjNw=)
                          13: 3132352e36322e34392e302f32342d3234203d3e20313436373838.roa (hash: LNEhmHCp10qCUFCDAGMIVGvXtcIDgvLqYw5r6nwi1B0=)
                          14: 34322e35302e302e302f31362d3234203d3e203137393639.roa (hash: BU7824LM2GcqISfl9RQuaQpqoVPVFfmsdHGml4Pg4E8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 14:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7a:5f:4e:3e:1c:5f:9f:7b:88:4c:0a:38:31:53:ed:ad:35:2b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0
        Validity
            Not Before: Oct  5 04:03:40 2026 GMT
            Not After : Oct  8 14:35:40 2026 GMT
        Subject: CN=3AAFBCABE4E617D06D6D3E3B39B6C97C746A38E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2c:f4:b7:36:9b:f7:49:09:27:60:d8:47:32:
                    2f:8d:82:3a:6e:f9:03:88:7c:7c:37:b6:cd:23:61:
                    36:aa:a2:8c:6c:77:05:50:e4:06:8b:8c:26:1a:38:
                    a2:b5:a9:b5:22:3f:c8:74:81:de:a2:b6:24:45:30:
                    4d:53:6f:69:f9:0f:5a:00:1f:80:c1:0f:54:73:6f:
                    26:c2:f9:f1:22:8a:2f:4d:dd:9e:0c:22:07:15:97:
                    19:4d:aa:7c:cc:fc:5b:c3:7f:4d:0f:0c:ee:54:45:
                    4b:6e:f7:3b:25:e2:28:bd:6d:bb:b2:13:b7:c6:39:
                    f8:2e:46:a0:4e:e0:11:49:0e:2d:f8:38:5e:2a:0c:
                    74:0e:b3:0e:9a:fa:88:84:f6:88:6e:ab:4d:44:d8:
                    b8:c4:4b:77:b7:96:7f:e3:0e:c9:e7:74:1e:2a:50:
                    94:bc:78:a6:1e:1c:0d:cd:9a:2f:b0:84:f9:36:c0:
                    79:ea:6c:4c:16:1e:43:80:03:d8:9a:d0:09:82:01:
                    f9:5b:5a:7b:3d:7f:3c:45:c6:cd:f4:26:90:6b:d6:
                    0e:72:62:be:58:8d:c2:96:af:32:4d:91:b8:2d:ac:
                    d8:00:72:63:12:b2:3c:6f:e4:e0:b1:f9:11:5c:9c:
                    3a:03:85:4f:e4:52:d3:5e:dc:db:41:f4:e2:30:50:
                    8b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AF:BC:AB:E4:E6:17:D0:6D:6D:3E:3B:39:B6:C9:7C:74:6A:38:E4
            X509v3 Authority Key Identifier:
                keyid:57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c2:51:2c:63:87:f2:22:e1:b0:8c:08:7c:d0:94:8e:bd:43:
         9d:57:1d:5d:44:15:98:d0:3f:0d:cc:42:ae:43:cf:c1:ed:0c:
         e8:c1:ed:e4:d6:79:30:1f:ff:3b:33:5a:45:d8:cb:62:f0:02:
         a5:9e:7c:96:4e:19:8d:27:91:3d:bf:ac:48:7e:be:e4:48:42:
         47:96:a6:b4:3e:b1:fc:a3:e1:80:7c:88:5e:c4:29:1b:e2:1e:
         4c:d7:53:14:cc:f7:50:4a:11:a8:64:a5:1f:62:0d:b1:54:a4:
         fb:e8:3f:de:27:22:80:c0:73:77:f5:44:bc:d3:25:83:44:5e:
         09:75:63:42:4d:e0:31:3f:4c:95:df:04:4e:9b:5a:2d:a6:ea:
         bd:d3:42:7a:af:9e:d4:e8:40:5c:6a:c8:45:4d:3d:3d:24:49:
         7b:ef:c5:b1:38:93:05:33:06:bb:ac:70:ae:43:b1:d6:40:2a:
         e8:95:c4:e5:b7:ef:12:45:fa:4c:2b:20:72:43:48:b3:45:f6:
         9a:90:01:bb:ab:ab:d7:a7:dc:ed:62:66:77:59:85:a2:fc:96:
         a2:5d:ff:32:0d:59:f2:5a:0c:e9:f6:9c:af:31:59:9d:4c:fe:
         86:52:1c:17:42:ef:6d:dc:a2:9b:75:b2:9d:04:0a:56:91:31:
         eb:40:e4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:55:58 2026 by rpki-client