Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
File:                     B8C15036932176BBE4E7217ED5772ACA3DB00427.mft (raw, json)
Hash identifier:          kIn6PD7/exIgfk7Rj3KF6V0VSFb/qc/A9pPkJnXTDvU=
Subject key identifier:   CA:7E:7F:19:DA:90:4D:A0:57:77:04:38:60:2A:CF:97:AB:05:37:30
Authority key identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27
Certificate issuer:       /CN=B8C15036932176BBE4E7217ED5772ACA3DB00427
Certificate serial:       573058E0BE3E7C02718C684B31C9ACFF57D3F2B2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
Manifest number:          013E
Signing time:             Fri 09 Oct 2026 09:23:17 +0000
Manifest this update:     Fri 09 Oct 2026 09:18:17 +0000
Manifest next update:     Mon 12 Oct 2026 18:16:17 +0000
Files and hashes:         1: 3130332e3233342e3133312e302f32342d3234203d3e203137363231.roa (hash: RMNTQapEhHCiy0mYS+fxG4lDIlhhdGLWHWapAq2ssyk=)
                          2: 3130332e3233342e3132392e302f32342d3234203d3e2034383131.roa (hash: mw8bGddUMh0smhnu0EDySI9xXIF1U085FD7r5icQb20=)
                          3: 34332e3234372e3130302e302f32342d3234203d3e2034383132.roa (hash: dHGyU7geUikrWUH4+V6rrwLj/7DuM2eS0YArF7qmFec=)
                          4: 34332e3234372e3130332e302f32342d3234203d3e2034383132.roa (hash: mcRm4nNS2pGUBNGwxEjJhwYd95LI8enACj0yJGkk/8Y=)
                          5: 323430333a336438303a3a2f33322d3332203d3e203138343634.roa (hash: jmZoJtvNeF3nRBqm9mCIeeNh40ogUOoqJVCfZUbJjSw=)
                          6: 3130332e34332e3234302e302f32342d3234203d3e2034383038.roa (hash: /6V8/lHSdyOZ/qsg/Eu2PZkif0ZtiWnLcFDDZfE9+dU=)
                          7: 3131392e33382e3232342e302f32342d3234203d3e2034383337.roa (hash: qp/xe4dbx92bg7b1OJL31k1LFy6tICSbK/7RkEnbYz4=)
                          8: 3130332e34332e3234312e302f32342d3234203d3e2034383038.roa (hash: GzguvVAUN/QsRFgpZbpng5ljs24N7/shA4iD6/un6DY=)
                          9: 3130332e3233342e3132382e302f32342d3234203d3e203137363231.roa (hash: atudpMhY9fm9b2EjCblsA85B+GiQUrV8/Po0z7vcUAY=)
                          10: 34332e3234372e3130322e302f32342d3234203d3e2034383132.roa (hash: cyElE1Bhw1k8N2KlQApQW6apuaMTDy/PfxxWg4X95gQ=)
                          11: B8C15036932176BBE4E7217ED5772ACA3DB00427.crl (hash: 2ur1W9DYNPlE2tOncwStoTuYw/POkFkvaxx+i4X29ek=)
                          12: 34332e3234372e3130312e302f32342d3234203d3e2034383132.roa (hash: mvUECDvLodFp/11AD5O24Evd5dSLDBKZTKf3mHCuAvc=)
                          13: 34332e3232342e3234302e302f32342d3234203d3e2034383038.roa (hash: VZdouybWTmMR/dD6/6+ICJKr/ZGHu6EZhyfCeNZnSRA=)
                          14: 3130332e3233342e3132382e302f32342d3234203d3e2034383131.roa (hash: 4e85YMIIgo3G1mvyUkSGL3GPadM0LCSpbYBEPrbGu54=)
                          15: 3130332e3233342e3132392e302f32342d3234203d3e203137363231.roa (hash: hjZZWuzPbHVXr03JjZNZ9eEAXooHh0hek1gV2iAOLKs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 16:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:30:58:e0:be:3e:7c:02:71:8c:68:4b:31:c9:ac:ff:57:d3:f2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8C15036932176BBE4E7217ED5772ACA3DB00427
        Validity
            Not Before: Oct  9 09:18:17 2026 GMT
            Not After : Oct 12 18:16:17 2026 GMT
        Subject: CN=CA7E7F19DA904DA057770438602ACF97AB053730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:de:8e:89:dd:5b:96:46:71:cc:6b:bd:7b:66:
                    f0:48:fe:fa:6d:f6:9e:d6:89:a0:13:12:de:37:32:
                    18:f7:66:74:39:17:b7:56:76:2f:0f:f9:1e:2e:45:
                    f9:56:7a:41:fe:56:2c:b9:f9:4e:8f:3b:76:88:9b:
                    24:ca:1b:38:16:3e:8f:41:05:a5:26:37:b3:86:1f:
                    72:ab:fb:5e:8d:13:24:2a:b2:64:85:50:e8:7e:d6:
                    0b:1f:db:c6:29:8f:c3:3a:c3:4f:2c:7c:bf:c9:dc:
                    cc:c3:cc:92:ba:a7:b5:8f:00:cd:ab:07:3d:e0:da:
                    6e:13:ec:2e:e2:32:dd:89:ff:7b:11:43:dc:4e:4a:
                    d1:84:1c:4f:32:68:15:7c:62:e1:dc:e2:56:e7:05:
                    a8:f0:59:b0:93:eb:2e:9f:32:59:0b:0d:89:df:cc:
                    07:ec:26:74:45:56:fb:51:d7:02:4e:d4:cb:02:19:
                    9e:53:a9:d1:c0:47:2c:f4:d9:ff:80:a2:f6:6c:22:
                    95:b4:a7:db:b7:11:5f:e1:b0:90:db:00:bc:b3:4f:
                    b6:8b:c0:00:60:0c:5c:8d:52:b6:a6:0b:74:cb:0f:
                    7d:0b:0a:a1:5c:d5:0b:21:2d:8d:e6:a9:cb:a5:f0:
                    1b:ad:d5:32:02:fa:dc:87:91:73:d7:4e:d0:fc:45:
                    98:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7E:7F:19:DA:90:4D:A0:57:77:04:38:60:2A:CF:97:AB:05:37:30
            X509v3 Authority Key Identifier:
                keyid:B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:39:05:49:34:40:b5:2e:3a:0e:f7:d0:f7:ed:32:17:b6:e2:
         75:19:7e:6f:6e:a4:10:af:2c:6c:58:cf:bf:8b:96:01:61:84:
         d7:f7:6e:3a:8f:4f:c6:e2:58:fa:d2:20:31:2c:c3:3e:7e:77:
         1e:83:a6:39:37:31:0a:a8:b9:db:00:9d:6c:9e:00:33:3c:5e:
         d9:17:2b:cc:a8:ce:12:3f:fd:5f:4f:cb:2f:32:c4:ed:61:f7:
         5c:8e:7a:54:4b:5c:6d:af:10:15:4b:77:67:ae:a0:9e:05:67:
         8b:52:8e:eb:fa:55:90:24:82:28:09:b0:fe:0f:c0:14:27:02:
         e8:86:c5:91:47:49:16:24:74:b7:bf:c9:b5:36:eb:94:ae:f2:
         ae:e2:b9:1c:c3:4a:e5:c8:d2:c4:3f:6e:62:62:ce:6a:30:43:
         54:2b:03:87:f9:21:02:24:90:06:d1:13:85:b6:f7:4b:70:a3:
         8d:90:52:65:e7:69:20:a9:f4:7a:74:fa:f7:73:f0:40:8b:34:
         d5:25:cd:63:50:fc:e0:f0:19:5e:95:01:e9:ff:60:55:6c:0c:
         5e:b3:2e:ae:0b:1e:46:67:e9:27:08:da:15:5d:30:c9:67:7c:
         33:98:7c:70:c5:9c:57:ac:f6:6a:a4:b7:a2:ff:72:f1:6e:55:
         0a:eb:ba:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:57:28 2026 by rpki-client