Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
File:                     0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft (raw, json)
Hash identifier:          8FGXmP+IjnU+rle5M0Bi3RiksOUrji8Q2HPn8mioaqI=
Subject key identifier:   A7:DD:80:9B:ED:B9:5C:A9:0A:E0:9F:E8:54:6C:7D:40:2E:53:BA:06
Authority key identifier: 0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
Certificate issuer:       /CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Certificate serial:       5FF70BC792172FCD774AA8CF918166BC9B4E811F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
Manifest number:          0139
Signing time:             Fri 25 Sep 2026 20:17:51 +0000
Manifest this update:     Fri 25 Sep 2026 20:12:51 +0000
Manifest next update:     Tue 29 Sep 2026 00:42:51 +0000
Files and hashes:         1: 3131362e3235312e36342e302f31382d3234203d3e203337393633.roa (hash: c0UPetqv4UH1FCrUJE1PkrN+kosNn3NSpLA0/9EQ7Og=)
                          2: 3131362e3235312e36342e302f31382d3234203d3e203435313032.roa (hash: LjfpxDo4n9DURJySPAVdSCss5Og9jbyQxEU2rPQE7mg=)
                          3: 3131302e37352e302e302f31382d3234203d3e203337393633.roa (hash: hqcYOV5DzQRa8/wBnBYjQnjsbrLdtVYrbvETGifMOeE=)
                          4: 3130332e3231322e34342e302f32322d3234203d3e203337393633.roa (hash: LZ5ZiHAjJ58unIuXAet8TkcoHvRxwDe8hTAorVHPgBo=)
                          5: 3131302e37352e302e302f31372d3137203d3e203337393633.roa (hash: NjV/4Tmugxcb7MxgKN/CQ0Zj9ubpxTO3VJ0+YKiY0Bc=)
                          6: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl (hash: kRUubHP4oosbJYLKaMI6BAqAqIHC4Bw7oZMsRVCY84E=)
                          7: 3131352e3132342e31362e302f32302d3234203d3e203337393633.roa (hash: vvfwFZ8SwgMfa65mBo2v4msDDyJZbOcUBOdsiqZAZJU=)
                          8: 3133392e352e3136302e302f32322d3234203d3e203337393633.roa (hash: A267Qqwq0aG5nDt5DxIjTlpU0ZWaCBcTmpXTBaHvJtQ=)
                          9: 323430363a313838303a3a2f33322d3438203d3e203337393633.roa (hash: hJsybIobgo+Zdtzi5pveEPQvo/wP2zxjwnIddOptEdE=)
                          10: 3131302e3137332e3139322e302f31392d3234203d3e203337393633.roa (hash: D0J+ywNira+Kl03ezdRJIK+PVflth3zvrHDo5domtUQ=)
                          11: 3131302e37352e36342e302f31382d3234203d3e203337393633.roa (hash: ybHh2urN2/zaCl1x/9nmbMr6wmHj3aI03LgNct/0feE=)
                          12: 3130362e31312e302e302f31362d3234203d3e203337393633.roa (hash: yQmD+OYAINvD98IxrI87Ly9AvZOmM2xePYRx0N/oDyQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 12:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f7:0b:c7:92:17:2f:cd:77:4a:a8:cf:91:81:66:bc:9b:4e:81:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
        Validity
            Not Before: Sep 25 20:12:51 2026 GMT
            Not After : Sep 29 00:42:51 2026 GMT
        Subject: CN=A7DD809BEDB95CA90AE09FE8546C7D402E53BA06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:79:40:d3:e8:0e:a8:a2:76:9f:34:59:fe:c4:
                    e9:58:70:56:10:97:fc:f5:18:43:54:e2:49:92:4d:
                    ed:e6:bb:ff:77:d9:72:9a:34:40:b1:b1:a8:03:79:
                    c8:66:8d:88:a0:ec:f5:69:a9:29:ee:08:ee:05:7c:
                    1e:f8:d4:21:61:52:34:78:59:a3:28:68:3e:3c:33:
                    98:1f:f5:8d:2b:96:b7:10:65:85:2c:26:cd:e7:f5:
                    20:ec:25:98:d5:a2:03:2b:cc:b5:06:f1:3e:65:75:
                    68:7d:23:d4:c0:e9:8d:31:dd:18:3a:d0:c4:ad:43:
                    3d:5f:0b:d1:11:0b:cc:3c:4c:c9:7e:60:e1:15:47:
                    bd:01:3c:6a:2d:b0:d1:55:b4:06:37:32:ac:dc:76:
                    e2:67:04:fd:b6:33:62:64:9f:4a:3c:30:41:fa:9d:
                    98:e6:56:fb:7d:e1:d8:1e:40:1b:51:dc:bd:03:eb:
                    db:88:bb:02:29:37:66:06:e2:9a:8b:28:fa:65:a5:
                    64:c2:8c:d9:43:8a:97:b8:fe:8d:af:cb:0b:9d:7e:
                    15:e0:91:30:2b:18:05:4c:02:80:47:51:46:1d:42:
                    4a:67:09:0a:73:c2:20:0a:39:56:84:e4:fb:b6:41:
                    f9:90:f1:99:0e:2d:1f:6f:f7:a8:a1:d1:da:46:dc:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DD:80:9B:ED:B9:5C:A9:0A:E0:9F:E8:54:6C:7D:40:2E:53:BA:06
            X509v3 Authority Key Identifier:
                keyid:0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:75:25:64:6c:6a:51:dd:80:ec:77:0a:63:df:c1:bc:76:ec:
         6d:42:d6:1e:7a:db:a4:ef:15:58:ee:ac:08:8b:b6:30:27:68:
         14:3f:b3:61:68:e6:14:03:41:58:ca:83:35:3c:0d:9b:8e:01:
         32:33:97:21:c0:58:18:4a:89:18:a5:30:d3:1a:87:3b:50:35:
         41:fa:02:b8:90:94:68:cb:ce:93:18:23:27:a7:d0:9b:c1:20:
         7b:07:7b:62:2c:bd:6c:bc:fd:ae:71:cd:12:76:10:07:fe:2f:
         1e:f2:75:e0:fe:04:83:21:4c:b2:83:bd:0c:22:2f:0e:35:fa:
         df:95:a8:54:22:a4:18:c4:cb:d5:4f:8a:c3:5d:4f:b0:83:ab:
         6c:3a:d7:f3:8c:fe:42:bf:f7:23:26:39:4d:18:82:af:21:42:
         36:95:c7:a3:60:b3:c1:ab:48:b8:43:b4:20:22:1a:13:b3:93:
         d1:9a:ee:4b:09:f4:37:c6:4f:3e:09:2b:39:d9:68:7a:ec:a5:
         04:2a:33:8c:40:ca:b4:4a:d3:96:5f:e1:88:16:00:69:ce:13:
         d1:7f:95:fd:b8:b6:0b:d5:bb:6c:ff:17:c0:56:1f:7a:ac:1c:
         73:20:d0:cc:f5:33:fc:27:75:32:78:43:02:be:ed:91:7e:a5:
         b1:6a:aa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:04:28 2026 by rpki-client