Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
File:                     2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft (raw, json)
Hash identifier:          lqvl97jVGqBia6AbvXt9VJCg0jmakOt90uhNLu1joLc=
Subject key identifier:   F3:AF:A9:78:21:72:FA:BF:0D:6A:3A:BF:AB:52:B3:DB:79:0F:C8:B1
Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
Certificate issuer:       /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Certificate serial:       1E8C437FF7B1BC69BD9F165BA9793E8F03E661AD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
Manifest number:          0151
Signing time:             Sun 11 Oct 2026 06:15:20 +0000
Manifest this update:     Sun 11 Oct 2026 06:10:20 +0000
Manifest next update:     Wed 14 Oct 2026 07:01:20 +0000
Files and hashes:         1: 3131392e3233352e3134352e302f32342d3234203d3e203234343237.roa (hash: cRHV7X3G/PQJ92A12wotA3DpyVsL+d9PuLjA/A0Nb9c=)
                          2: 3131392e3233352e3136302e302f32342d3234203d3e203234343237.roa (hash: 0V8lM1Bn5F+GN6qFR/iyuC3X56n7vTa4N4BWsHp44As=)
                          3: 3230322e3137302e3232332e302f32342d3234203d3e203234343237.roa (hash: XwAGEo52R3/295sfFWGTsHRJeXRAQPtlmlUvnH8SLCk=)
                          4: 3131392e3233352e3136372e302f32342d3234203d3e203234343237.roa (hash: EcBAZ9E6nz/Jb75uEjGHvAGmLGTaXjfuFeKbWfc4enE=)
                          5: 3131392e3233352e3133362e302f32342d3234203d3e203234343237.roa (hash: P3jXS0lLFc4DM3hVmFyaQ5NRZvxXxC81SrFQZS9hz8Y=)
                          6: 3131392e3233352e3138352e302f32342d3234203d3e203234343237.roa (hash: y+0yz/Orh5jDhKBtMq/BWVyUvkwfKPK9TJ2TBjSxOBc=)
                          7: 3131392e3233352e3133382e302f32342d3234203d3e203234343237.roa (hash: 7lq4F+kN4dfPPhClDRlyHjLRkbdsAPEeIZnDaZUPfho=)
                          8: 3131392e3233352e3135312e302f32342d3234203d3e203234343237.roa (hash: hYt2A/jghiSr+S1LZEbd4lSZNEEFRojqYjsnEer5F04=)
                          9: 3230322e3137302e3231392e302f32342d3234203d3e203234343237.roa (hash: 2XKwc+tclrWbdl8kq+8mfw+izHBOIwST00sm/13O4fc=)
                          10: 3131392e3233352e3136312e302f32342d3234203d3e203234343237.roa (hash: lv53noT2X5eaiI1tnOSXvfADsas3LsuXeApSZgepJgg=)
                          11: 3230322e3137302e3231362e302f32342d3234203d3e203234343237.roa (hash: VAhlOybzXKl74DjpAZWqA5wWuw72zIg3z2/LDN7OZHU=)
                          12: 3230322e3137302e3232312e302f32342d3234203d3e203234343237.roa (hash: eLf51BLu0K8JOwlH6IFc5jAcFpHJFCctgrNJUcADl74=)
                          13: 3131392e3233352e3133302e302f32342d3234203d3e203234343237.roa (hash: HoRk+vOtUZtbIjrp6u/EWfXW2czPAr3G6Df5irzJNwk=)
                          14: 2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl (hash: LGVU9/PObpIvL0etiZJFmwg2reGIQtLjSeJaJq6XL8g=)
                          15: 3230322e3137302e3232322e302f32342d3234203d3e203234343237.roa (hash: pCqCdfeTBDZ1ufXIAdXFKHOH0guOfd8eNNLcRHIYyf8=)
                          16: 3230322e3137302e3232302e302f32342d3234203d3e203234343237.roa (hash: HId4vrNLiK+ND0zQR5D2ItU9HGeVy1wXldT93pOdLOc=)
                          17: 3230322e3137302e3231382e302f32342d3234203d3e203234343237.roa (hash: JSYukomI+EXQlc3XoizcwTgOHfV+PE8qH5q8KtFf0xQ=)
                          18: 3131392e3233352e3134332e302f32342d3234203d3e203234343237.roa (hash: Ol89eMrUaCaAzxFLMX+QHnOCMpZp0gTaHt7lzoiplTc=)
                          19: 3230322e3137302e3231372e302f32342d3234203d3e203234343237.roa (hash: EXQ+5nHfL2CSocP6gK127ORzb92cBqRvxJuWAIUrj3c=)
                          20: 3131392e3233352e3134342e302f32342d3234203d3e203234343237.roa (hash: ZIpXfUCxWXx/Yh12y5PNrm1YJbqJK3Qj4q0RnCjYmRk=)
                          21: 3131392e3233352e3132382e302f32342d3234203d3e203234343237.roa (hash: gKGf9ncPC0mDmhttmgm4Nc+M5A6UymruGAO1ADoEIsY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8c:43:7f:f7:b1:bc:69:bd:9f:16:5b:a9:79:3e:8f:03:e6:61:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
        Validity
            Not Before: Oct 11 06:10:20 2026 GMT
            Not After : Oct 14 07:01:20 2026 GMT
        Subject: CN=F3AFA9782172FABF0D6A3ABFAB52B3DB790FC8B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:74:55:8b:f4:90:f8:9e:45:8f:52:d1:8b:c5:
                    83:52:6d:c6:3f:8c:32:8f:d2:84:d3:de:09:3a:4c:
                    df:65:53:a4:f9:a6:d3:b4:35:99:9a:fb:67:0a:ff:
                    d4:fa:26:e3:b6:24:1b:d5:19:27:e9:f6:0d:c1:06:
                    9e:57:17:a2:2a:c3:12:eb:96:0a:14:ca:a4:85:74:
                    84:e5:a8:c6:08:e4:06:a9:85:30:48:60:75:4b:28:
                    1c:ec:32:64:1e:fa:38:5f:99:ff:62:0c:ff:85:12:
                    fe:dc:5c:82:d8:c9:62:ee:94:98:05:6c:69:89:89:
                    22:88:42:c5:d0:e9:cf:8f:cc:17:e0:62:d6:70:c2:
                    05:10:be:da:6c:f8:d8:26:1d:93:6b:fd:06:3c:6b:
                    00:61:b3:d1:9b:16:90:4b:d5:53:48:c1:b0:e3:d7:
                    c9:82:8d:62:c1:a9:52:a5:7e:ac:6a:20:40:3e:09:
                    b4:ec:11:d1:5c:ed:44:52:d9:8d:0f:90:23:cb:65:
                    07:44:d4:f4:3f:52:ee:08:f6:79:4e:e1:33:76:71:
                    fb:94:8c:7c:8c:43:18:95:e3:11:05:be:ed:e3:92:
                    1c:be:01:c3:c3:37:c6:cd:32:0c:d2:e3:e3:4e:50:
                    99:5a:0b:14:17:27:4a:06:0a:12:fe:88:df:f8:6a:
                    39:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AF:A9:78:21:72:FA:BF:0D:6A:3A:BF:AB:52:B3:DB:79:0F:C8:B1
            X509v3 Authority Key Identifier:
                keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c8:61:54:3e:8e:26:07:14:a6:0a:be:e1:bd:ae:71:75:ce:
         ac:25:d0:ed:70:b0:63:bb:d8:4b:94:31:0d:95:db:d2:a5:27:
         43:a3:79:0a:3b:b0:35:32:be:b7:8b:a3:ac:32:53:10:dd:d8:
         6b:8d:4b:9c:8f:c2:b8:7b:c2:12:8f:d9:e0:35:5e:7a:24:b2:
         3b:b3:07:15:33:ac:93:06:24:a8:c7:5b:cd:da:3a:ca:b1:7d:
         65:72:f2:2b:55:13:39:f5:cc:07:9a:eb:19:0f:f6:40:f9:5a:
         3b:88:6b:cf:88:82:64:17:66:b5:18:33:cd:7d:6c:7a:fb:98:
         c2:8f:21:8e:42:79:2c:42:26:da:f2:08:92:a8:60:d5:a6:8c:
         81:27:db:db:60:4f:6a:52:88:64:70:3d:01:05:7f:88:7d:4b:
         c2:03:19:71:fe:53:ff:02:6f:b0:0e:60:69:ea:e2:54:0b:9a:
         2b:fd:45:e6:ee:bf:42:60:7f:22:b8:e3:a4:55:0c:7a:67:04:
         8f:f3:c6:b8:dc:16:9a:df:a0:09:74:15:ef:94:74:87:6d:d6:
         c8:fb:c2:2d:a9:9f:17:81:fc:34:ee:4e:c8:43:34:fe:96:ca:
         3f:ff:3f:d3:00:7e:e8:da:ca:f0:ac:dc:a1:e0:dd:35:d8:83:
         65:c4:ef:a3
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUHoxDf/exvGm9nxZbqXk+jwPmYa0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFG
NDgyRDhENTAeFw0yNjEwMTEwNjEwMjBaFw0yNjEwMTQwNzAxMjBaMDMxMTAvBgNV
BAMTKEYzQUZBOTc4MjE3MkZBQkYwRDZBM0FCRkFCNTJCM0RCNzkwRkM4QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmdFWL9JD4nkWPUtGLxYNSbcY/
jDKP0oTT3gk6TN9lU6T5ptO0NZma+2cK/9T6JuO2JBvVGSfp9g3BBp5XF6IqwxLr
lgoUyqSFdITlqMYI5AaphTBIYHVLKBzsMmQe+jhfmf9iDP+FEv7cXILYyWLulJgF
bGmJiSKIQsXQ6c+PzBfgYtZwwgUQvtps+NgmHZNr/QY8awBhs9GbFpBL1VNIwbDj
18mCjWLBqVKlfqxqIEA+CbTsEdFc7URS2Y0PkCPLZQdE1PQ/Uu4I9nlO4TN2cfuU
jHyMQxiV4xEFvu3jkhy+AcPDN8bNMgzS4+NOUJlaCxQXJ0oGChL+iN/4ajlVAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU86+peCFy+r8Najq/q1Kz23kPyLEwHwYDVR0j
BBgwFoAUIzmSE2P3ADw960fthTSv4fSC2NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzI3NTI2NS8wLzIzMzk5MjEzNjNGNzAwM0MzREVCNDdFRDg1MzRB
RkUxRjQ4MkQ4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFGNDgyRDhENS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyNzUyNjUvMC8yMzM5OTIxMzYzRjcw
MDNDM0RFQjQ3RUQ4NTM0QUZFMUY0ODJEOEQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8hhVD6OJgcU
pgq+4b2ucXXOrCXQ7XCwY7vYS5QxDZXb0qUnQ6N5CjuwNTK+t4ujrDJTEN3Ya41L
nI/CuHvCEo/Z4DVeeiSyO7MHFTOskwYkqMdbzdo6yrF9ZXLyK1UTOfXMB5rrGQ/2
QPlaO4hrz4iCZBdmtRgzzX1sevuYwo8hjkJ5LEIm2vIIkqhg1aaMgSfb22BPalKI
ZHA9AQV/iH1LwgMZcf5T/wJvsA5gaeriVAuaK/1F5u6/QmB/IrjjpFUMemcEj/PG
uNwWmt+gCXQV75R0h23WyPvCLamfF4H8NO5OyEM0/pbKP/8/0wB+6NrK8KzcoeDd
NdiDZcTvow==
-----END CERTIFICATE-----
Generated at Mon Oct 12 14:30:23 2026 by rpki-client