Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
File:                     2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft (raw, json)
Hash identifier:          RDiyT43jo/aRAzxRREsJigXQ8R3fvnrEw5zQ2kQF8dI=
Subject key identifier:   15:C4:56:1A:13:0A:77:C8:D7:72:BD:AF:32:B3:93:9C:E5:11:04:9B
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Certificate issuer:       /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial:       3914D0DF8156024C086CAB74BC746A0B7CFDF458
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
Manifest number:          0167
Signing time:             Sat 10 Oct 2026 10:39:34 +0000
Manifest this update:     Sat 10 Oct 2026 10:34:34 +0000
Manifest next update:     Tue 13 Oct 2026 20:43:34 +0000
Files and hashes:         1: 3130332e35362e37382e302f32342d3234203d3e203538343636.roa (hash: MwkQ3+t6Ku9ZgQ2hzhnEetkeZCae+zCq8iuzHsTztoc=)
                          2: 34332e3235352e3232382e302f32322d3232203d3e20313336393538.roa (hash: yN7g2ljeI/Mw/iTnlxgZ+5yk6cpw0rkDvekA71JTxBc=)
                          3: 34352e3131362e33322e302f32342d3234203d3e203536303430.roa (hash: AQ7YaYVdLxTd9EsxIEUpB1+UMOAakasWUEEDh2Wd16A=)
                          4: 34352e3131362e33342e302f32342d3234203d3e203536303430.roa (hash: AH59k0QTlW1Ifhw1dyNl8R7ZP53lYjb8V6wr+a5vTwE=)
                          5: 34352e3131362e33322e302f32342d3234203d3e203538343636.roa (hash: c7x7ZUNyyGgVZKjjyIFBNoelMopbDzY2eXsw6n7n3wY=)
                          6: 34352e3131362e33352e302f32342d3234203d3e203536303430.roa (hash: Z6HP1gNf5vHaIhAztVSLR7En0SY6RclqEHxA5xvfiM4=)
                          7: 34352e3131362e33332e302f32342d3234203d3e203538343636.roa (hash: aB6HYu91QLkogF7NEuI1Mr5U979LZu4ToUHN6214DcM=)
                          8: 3130332e35362e37382e302f32342d3234203d3e203536303430.roa (hash: 0iVARIi/xaFEn8mjMQ+LAQ219v5jwEi5LY11w8fzALw=)
                          9: 34352e3131362e3134322e302f32342d3234203d3e203536303430.roa (hash: QGr+zWvjHYnvlfuyUD70L+P+SEKlqqKcZjvIvcIqHxc=)
                          10: 34352e3131362e3134312e302f32342d3234203d3e203538343636.roa (hash: nMk2GWR6myV/w53248tA4bXj+Pd2kJp7jwJ4W1hn+QU=)
                          11: 34352e3131362e33352e302f32342d3234203d3e203538343636.roa (hash: qxdUkd5rdUjl2maTgpkv+yjhay0+7ctRGe4ff8DLO+g=)
                          12: 34352e3131362e33322e302f32322d3232203d3e203536303430.roa (hash: r+Vu8KXPLwZi4i7livp3MfUV2IrrNQGMyiWDliwb/cE=)
                          13: 34352e3131362e33342e302f32342d3234203d3e203538343636.roa (hash: Y6mQZSgH/FimPg/WTmpLa0NFsYy+VLMdkKJBk3Gt430=)
                          14: 34352e3131362e33332e302f32342d3234203d3e203536303430.roa (hash: 2yzQQ3RfFhDKquFcv8UXbeKG27V0WF41cfHeNhLc4wY=)
                          15: 34352e3131362e3134312e302f32342d3234203d3e203536303430.roa (hash: L/7s2Osm6u7F5Z5g7aI/Kk9+KBEU/Pvwv6J3oMrzoDY=)
                          16: 3130332e35362e37362e302f32342d3234203d3e20313336393538.roa (hash: edxfICWQgEuB7UdFNoeRvYHic5A69bcsIyzULVGWrKg=)
                          17: 3130332e35362e37372e302f32342d3234203d3e20313336393538.roa (hash: cVniIZILY94j+lzh7lZSt/NcMs8j0gEL6bcjdqkUZts=)
                          18: 3130332e3233392e3230342e302f32322d3232203d3e203536303430.roa (hash: DX8TfZ/AacCXstB9zzDLtLPpu3OkGddCsxxjB+Kml5U=)
                          19: 34352e3131362e3134312e302f32342d3234203d3e20313336393538.roa (hash: h5Sd5QfZ+jrcfzy19xnH1ge84VV2Tw5UMLJLOUaRH2U=)
                          20: 34352e3131362e33352e302f32342d3234203d3e20313336393538.roa (hash: peLFbPaYay0LuzMzJlXfkUbU5TVbXKkiA9QhHEtSqvo=)
                          21: 34332e3235352e3232382e302f32322d3232203d3e203539303433.roa (hash: p6a9V5OeyK0/7K91vnWGRfhAfM7IjPj37nbDG7sqFs8=)
                          22: 34352e3131362e3134332e302f32342d3234203d3e203536303430.roa (hash: 6e4lggZCBnIZSNoVsTuI/rCVl9xr5T9SABl5+ekw/48=)
                          23: 34352e3131362e33322e302f32342d3234203d3e20313336393538.roa (hash: l9Gsrt4nzqtfu76U8v30H+wYxj/oWKD4MpUXXlmhBmo=)
                          24: 34352e3131362e3134302e302f32322d3232203d3e203536303430.roa (hash: LsQIfsUKOQjsnX05xlup9BkZVlHz+kCT806/GW4sdX0=)
                          25: 3130332e35362e37362e302f32322d3232203d3e203536303430.roa (hash: mIOP15gRcOtsuKf+tYmRuvxc1mYkQYV33jCx6VgjW4k=)
                          26: 34352e3131362e3134322e302f32342d3234203d3e203538343636.roa (hash: +2HE3F+8WpQQc5JprS4NEmn9/NhFGXgXOhHvozrmObA=)
                          27: 3130332e35362e3138342e302f32322d3232203d3e203536303430.roa (hash: l1wavDmga4Oh7J86j1GjlYuKKSefHbOrVDv4qJaQZe4=)
                          28: 3130332e3233392e3230342e302f32322d3232203d3e203539303433.roa (hash: CnJ51iaKSmLX4YUNstsoA0gBimSBtrCcBaFLxxGyG2A=)
                          29: 34352e3131362e3134302e302f32342d3234203d3e203536303430.roa (hash: g8tfq1aiysMAHy6RuyCaLs4fsG4BReI5+zor251/Y7I=)
                          30: 3130332e35362e37392e302f32342d3234203d3e203536303430.roa (hash: Nr4MzKLDLUkXQhAnRCy78zyl92lMVVApHlc9+QDFYSg=)
                          31: 34352e3131362e3134302e302f32342d3234203d3e203538343636.roa (hash: oJAn1OO7T7QY3gR/aW3IuFcTz6O+pTx4SliLxtC1jEY=)
                          32: 2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl (hash: XLM2ALvBwrVDwe30BgPKMlNvCD5MCjQK1ulefYSmU4c=)
                          33: 34352e3131362e3134302e302f32342d3234203d3e20313336393538.roa (hash: uGi/AcLPJ7YMbtrC6gkhv8y/ZAYPj/6sASnujMFg9qM=)
                          34: 3130332e35362e37362e302f32342d3234203d3e203536303430.roa (hash: S0ibJK/LXYJ212kDehN8NGHUDYlk99qx8kr5YHeEyDo=)
                          35: 3130332e35362e37362e302f32342d3234203d3e203538343636.roa (hash: R1hxKKYTfXhQuFkFGluK3tACxevJigS0e+7JkvDFOfY=)
                          36: 3130332e35362e37392e302f32342d3234203d3e203538343636.roa (hash: a2ZvPYlJ+VfFAhB3jALdNHCAr8okKe4s5j9azyTOzyk=)
                          37: 34352e3131362e33332e302f32342d3234203d3e20313336393538.roa (hash: 4n/+z90i0E7E3WMno5Rm3w9nJLVZNXLkhRix6rg9I9g=)
                          38: 34352e3131362e3134302e302f32322d3232203d3e203539303433.roa (hash: OGa9chNdGvVi1ng761qxRIwE4bUGvJq+32/2abf029A=)
                          39: 3130332e35362e37372e302f32342d3234203d3e203536303430.roa (hash: yUW/lRrcc2CuYYkzLpRBuDJQQrAjQqqAYgYaC1SgDto=)
                          40: 34332e3235352e3232382e302f32322d3232203d3e203536303430.roa (hash: 2AjbaO8fVNae8qsW7nQQdWESYhJG93MIMZ/RdkuunwQ=)
                          41: 3130332e35362e37382e302f32342d3234203d3e20313336393538.roa (hash: 9rgzsazn7f5Bz9xEgTtbRZgJjJ5wzd/wEQjNIajNz4I=)
                          42: 3130332e3233392e3230342e302f32322d3232203d3e20313336393538.roa (hash: 4SGQGDTeifTEL2nRET1HkWeR1h7ix/qM7mgDVuxLyuU=)
                          43: 34352e3131362e3134332e302f32342d3234203d3e203538343636.roa (hash: o2f8/5Kqql5i/J9YLJewLTpDhd3Qph7vvMr967evfko=)
                          44: 3130332e35362e37392e302f32342d3234203d3e20313336393538.roa (hash: bPWn77QsKWNX/WzhHQI3PkZBl572Q6SCtlSS7vdiYSs=)
                          45: 3130332e35362e37372e302f32342d3234203d3e203538343636.roa (hash: chBgBk+jhYLzhqNLC9Wumx3OD/gmhPMrOo1fCvHxlng=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 09:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:14:d0:df:81:56:02:4c:08:6c:ab:74:bc:74:6a:0b:7c:fd:f4:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
        Validity
            Not Before: Oct 10 10:34:34 2026 GMT
            Not After : Oct 13 20:43:34 2026 GMT
        Subject: CN=15C4561A130A77C8D772BDAF32B3939CE511049B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b4:32:bf:a8:8a:02:b3:a5:92:18:d5:41:54:
                    82:d3:af:bd:35:3e:0e:ff:3a:a9:63:9a:64:1a:ea:
                    95:4f:1c:cf:82:35:79:b7:55:8d:a5:89:59:b6:94:
                    80:3e:9e:a6:98:95:7e:bd:87:b7:5d:51:88:10:46:
                    04:75:fd:4f:50:fb:d2:0b:77:3b:5a:c6:79:c4:02:
                    42:28:62:34:31:dd:9b:6e:eb:80:67:44:7c:3e:ae:
                    93:ed:87:54:6e:87:4b:e2:17:fa:fe:31:20:1b:18:
                    13:eb:4b:5e:a3:b4:00:e1:85:8e:18:10:2c:8a:fd:
                    a3:ea:aa:8e:c9:57:a5:eb:c0:b5:ca:3e:79:c9:7d:
                    57:9a:13:0a:43:e4:93:db:8f:ad:be:05:e4:53:4c:
                    28:d6:61:46:0b:68:57:5d:34:df:90:3b:31:40:ad:
                    bd:a9:a1:3f:78:3c:52:08:f3:b7:57:c3:66:fc:fa:
                    0c:03:db:44:50:6d:85:6a:af:90:f7:fd:b2:28:3c:
                    df:a1:16:b6:1a:2e:91:a2:ff:7a:73:aa:c0:94:24:
                    ee:e2:7e:d8:af:06:46:50:21:29:ec:da:e1:71:ae:
                    ec:94:df:aa:64:83:f0:17:19:13:34:03:ec:9f:6a:
                    79:1b:b9:30:63:19:2b:23:31:e3:2d:e7:92:58:89:
                    39:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C4:56:1A:13:0A:77:C8:D7:72:BD:AF:32:B3:93:9C:E5:11:04:9B
            X509v3 Authority Key Identifier:
                keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:01:ca:71:ab:3a:51:61:be:12:40:52:3b:c0:ac:f8:b7:22:
         dc:f7:95:43:4c:67:7b:cf:34:0f:06:a4:86:03:5b:54:45:61:
         f9:3f:7a:d3:cc:d9:0d:6b:a9:90:d8:2e:5e:ff:8c:94:9a:d1:
         0d:b3:96:33:43:9c:97:5e:ba:05:c2:d8:c5:b9:43:12:74:6c:
         de:28:d7:b1:79:08:55:02:f6:65:b5:51:e1:43:61:e1:95:65:
         fd:d0:2f:ec:03:08:e3:20:cd:af:32:c9:7c:6c:ae:19:89:b1:
         ca:f7:ab:c5:b6:8b:5b:4f:2f:4c:13:bd:44:c5:8d:9c:dc:a3:
         a3:fd:80:0a:05:ff:62:52:b6:36:e0:b3:5d:64:56:a7:78:2e:
         45:fa:07:3b:a0:55:02:2e:c9:e1:e3:c9:26:3e:cc:05:7b:0c:
         a7:ce:a9:b9:a2:e7:15:72:57:f5:ed:1d:7f:82:29:7f:66:35:
         47:29:f1:b0:48:5f:ec:90:7f:78:14:89:5b:2e:c3:79:1c:60:
         64:73:b2:25:23:5e:4a:2b:24:88:d4:75:32:63:ea:21:d7:c6:
         a6:d5:02:37:f5:79:31:eb:ac:c7:64:78:a1:64:70:9e:19:b3:
         03:8c:b5:76:0e:6e:4f:d2:6a:bb:93:cd:ff:ff:85:1d:60:81:
         25:f8:e1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:42:54 2026 by rpki-client