Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
File:                     D9EB5C6DC17682949F5243587DA38740C3EEA953.mft (raw, json)
Hash identifier:          uli/h7AaK7ycKUte/q68GDm+Elc4ILtfAQAf3un7a2s=
Subject key identifier:   8B:E7:10:00:69:1A:85:3C:73:09:A9:4A:8B:F6:27:A4:A7:AD:7A:46
Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
Certificate issuer:       /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Certificate serial:       3159F2630259AB0A26D00503B4976BB55BCCE3FA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
Manifest number:          0159
Signing time:             Sat 14 Nov 2026 16:35:38 +0000
Manifest this update:     Sat 14 Nov 2026 16:30:38 +0000
Manifest next update:     Tue 17 Nov 2026 22:12:38 +0000
Files and hashes:         1: 3131392e3136312e3135382e302f32342d3234203d3e203633363331.roa (hash: LQZaiQ/Qd/M/fCrq9bHgdqWNP7ugk6V735y0mDkj9fA=)
                          2: 3131392e3136312e3135322e302f32342d3234203d3e203633363331.roa (hash: 0O6HwC17CULgpOdtwyeoQhjd7sYNr0qRKV4vgoZ3uFs=)
                          3: 3131392e3136312e3134322e302f32342d3234203d3e203633363331.roa (hash: GCzj2v7L5bU/5xAICc7Mo0IWDU6IPyXLJDYDlG2dtII=)
                          4: 3131392e3136312e3135372e302f32342d3234203d3e203633363331.roa (hash: tUiIUTqcTNvN/U4B9L5lCpdQw6TwFJaaWBbk34dQlvI=)
                          5: 3130332e37372e37342e302f32342d3234203d3e203633363331.roa (hash: +SACmmpAElpqmXII63Jhjhb5xmU61Ubzx0s1wYb2aAg=)
                          6: 3131392e3136312e3133372e302f32342d3234203d3e203633363331.roa (hash: uYXy1ZNlr/DDnhA91fdp96VTjAGbBGrKxJ/nJwBFE4c=)
                          7: 3131392e3136312e3133362e302f32342d3234203d3e203633363331.roa (hash: NksUuzaBeVkKNYYjX7N4wyQP9lOFOqUoF5HK3727RWk=)
                          8: 3130332e37372e37332e302f32342d3234203d3e203633363331.roa (hash: qzRlWsrI6PetcGa/KoRszsGPl8m2KxKVGBHbcN8k8R8=)
                          9: 3131392e3136312e3133382e302f32342d3234203d3e203633363331.roa (hash: lHQp/Div7ulKm97od1SQswQ3yI5J9U71XxLou9kga38=)
                          10: 3131392e3136312e3136302e302f32312d3231203d3e2030.roa (hash: cPpjqUpV6F29loCVOOwbyveyBY/0tKDAJE22QRL0osg=)
                          11: 3131392e3136312e3134332e302f32342d3234203d3e203633363331.roa (hash: q5UvvsX5qH7j9+5pZLRPJUdgPc2NxY5OKXVZ0NSCJAo=)
                          12: 3131392e3136312e3135392e302f32342d3234203d3e203633363331.roa (hash: +SiM0cwCxJkpIIpaeYtLkv/nxt4GytCuAhasO+bG19M=)
                          13: 3131392e3136312e3135362e302f32342d3234203d3e203633363331.roa (hash: 7XOgZuVkvvQZdo3gGn56dhtyiau+6lvq0uc3bf0+xMY=)
                          14: 3131392e3136312e3135312e302f32342d3234203d3e203633363331.roa (hash: 34DEjgc+uFzAvaJR2gQqwSseBX9CZsTiDQ1qcyMCy+A=)
                          15: 3131392e3136312e3135342e302f32342d3234203d3e203633363331.roa (hash: Ci42JOqMjSAJ3WJUTwnlTLR8G5pTY1EIpg2hwNySDug=)
                          16: 323430373a393038303a3a2f33322d3634203d3e203633363331.roa (hash: RtOoe4RmLFL3YbHfpUMA6V286a2QhifPZV7nvutl6kg=)
                          17: D9EB5C6DC17682949F5243587DA38740C3EEA953.crl (hash: H7H2Mmd/Y0aAcfWaFL56m/RyyEZsAqYMQEc0p4xGypk=)
                          18: 3131392e3136312e3134392e302f32342d3234203d3e203633363331.roa (hash: N5OiNy6gpNAI122IfWvxLK3QW0HsLsxWhpB7bPfA+x8=)
                          19: 3131392e3136312e3134372e302f32342d3234203d3e203633363331.roa (hash: nG5OMbfJfXjqu0EBfh5ujK0tpWUhR/z7nnDCbIOL/P0=)
                          20: 323430373a386238303a3a2f33322d3634203d3e203633363331.roa (hash: WdIf6CkgwHhBtmwW9wC8z2X2aD7F1CPhNusCG6l7zvk=)
                          21: 3130332e37372e37322e302f32342d3234203d3e203633363331.roa (hash: x17cHSRYcX/Kt66624cs2XAt5w4hzS22OUj6QmZWVd8=)
                          22: 3131392e3136312e3134302e302f32342d3234203d3e203633363331.roa (hash: eing/mIPhXhe93XLvq3RC5YRPf8OivgAJSu54LJSd48=)
                          23: 3131392e3136312e3134342e302f32342d3234203d3e203633363331.roa (hash: 6ovO21OX+Y8oKycYWcOevNdq7wTJgYIGsvp+nnMw1x8=)
                          24: 3130332e37372e37322e302f32322d3232203d3e203633363331.roa (hash: NpW6AlD0eVdPdmCTOskky2wwQE64FmrJNHWbldBZcxc=)
                          25: 3131392e3136312e3134352e302f32342d3234203d3e203633363331.roa (hash: pUhjYD0PQ8rwZ1DafU0Rvby54ZCdFvTYF7jxsVBaHpI=)
                          26: 3131392e3136312e3135352e302f32342d3234203d3e203633363331.roa (hash: x+ksNF78CQTw/L4V1wT8nZZBF8Nz+W+s1SYOjKA6wdo=)
                          27: 3131392e3136312e3135302e302f32342d3234203d3e203633363331.roa (hash: okNrHQWlAZcM0ybXfs5gjhn4SzMvRZc5F26x1wSUssw=)
                          28: 3131392e3136312e3134382e302f32342d3234203d3e203633363331.roa (hash: 5KmbHs67IA/wY5tBVDS22+6mTsCdZcqAE09P4TvLmS4=)
                          29: 3131392e3136312e3133392e302f32342d3234203d3e203633363331.roa (hash: nydKiRyHm3PHN6iWfg7icv7RBMzkwjFy+ct03JbKQdw=)
                          30: 3131392e3136312e3135362e302f32322d3232203d3e203633363331.roa (hash: mGhhS9V+FPXHBGr0eZP7LW1/tN5GxJ8237aMyOgPCuA=)
                          31: 3131392e3136312e3134362e302f32342d3234203d3e203633363331.roa (hash: OABa4cNuqzmJY4gHN33EpjQDWN7uNzrp8aMvvXUl78s=)
                          32: 3130332e37372e38382e302f32322d3232203d3e2030.roa (hash: fR4BJhyIgU9EzBWn21D2hiiwP5vaUp6WzpNrB0SQRaY=)
                          33: 3131392e3136312e3135332e302f32342d3234203d3e203633363331.roa (hash: /bES/Bm3e3I6uwLynFP1nPItfsrn7ti5dzc/15vqHrg=)
                          34: 3131302e3137322e3232342e302f32322d3232203d3e2030.roa (hash: vfSoXvfxdoOO8Tcwj9aUwTPHooLMqelVtrGaoAhknTQ=)
                          35: 3131392e3136312e3134312e302f32342d3234203d3e203633363331.roa (hash: f4vNZ08uUNtuyklw4goVqXSaWbpQ5fYDLqZ5SHP2/5g=)
                          36: 3130332e37372e37352e302f32342d3234203d3e203633363331.roa (hash: a7l7+V4+dpfaquk22MoeFRXSKe1Gx6rGVmWsi2/A0CA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Nov 2026 22:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:59:f2:63:02:59:ab:0a:26:d0:05:03:b4:97:6b:b5:5b:cc:e3:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
        Validity
            Not Before: Nov 14 16:30:38 2026 GMT
            Not After : Nov 17 22:12:38 2026 GMT
        Subject: CN=8BE71000691A853C7309A94A8BF627A4A7AD7A46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cf:1b:1e:a0:67:a2:26:09:3d:88:e1:95:f3:
                    82:a8:f0:74:14:62:70:d6:7f:c5:15:a5:8f:fa:ec:
                    63:0f:26:dc:13:5b:93:72:ae:38:23:a4:2d:b5:ea:
                    0f:63:05:36:76:f1:dd:73:66:3c:05:94:10:21:ab:
                    b6:0f:ad:cf:50:6c:f0:d5:5a:0e:31:4d:2b:97:61:
                    4d:ac:09:43:93:48:95:22:82:19:bd:4f:3e:07:70:
                    89:f7:5d:29:19:03:76:ee:bc:ab:ed:bb:2c:d7:0d:
                    a9:b1:42:fc:2d:5a:5c:a0:2d:fc:9e:ee:14:53:0c:
                    cc:ec:57:87:0a:bb:a8:69:c3:36:76:46:f4:fe:37:
                    36:b3:27:9c:29:17:91:1c:6b:7d:4e:bf:bb:59:b7:
                    75:e5:01:d9:6b:4f:ad:5b:ce:ad:c6:53:36:8f:0a:
                    2f:b0:3f:cb:ff:99:c2:a4:63:35:84:63:36:b0:ac:
                    9d:0e:11:e3:dc:6a:01:a5:4b:0d:11:1f:fa:3b:bc:
                    80:b4:09:7c:d8:14:0b:cf:fe:ac:a9:bb:bb:2e:73:
                    92:97:ab:29:5b:85:c2:ad:b7:da:2a:5d:aa:56:2d:
                    53:26:ad:97:f8:d7:be:fc:19:20:6c:73:9f:24:f0:
                    58:02:38:8b:71:54:f5:ce:16:0e:dd:13:0a:79:23:
                    5e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E7:10:00:69:1A:85:3C:73:09:A9:4A:8B:F6:27:A4:A7:AD:7A:46
            X509v3 Authority Key Identifier:
                keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:bb:4d:3a:3f:1a:62:ad:18:cb:62:59:c3:50:0c:f6:52:b2:
         73:ec:32:3d:0b:b0:c9:9e:89:66:8f:9c:a6:21:5b:96:d2:8c:
         74:be:b2:19:eb:69:93:5b:5a:42:95:28:37:ea:bb:9b:73:90:
         82:90:cd:b7:eb:3a:65:d3:c9:80:0b:70:e2:18:59:0f:c6:5f:
         1d:b6:c4:22:99:b2:99:4d:b5:8f:00:80:9e:8b:04:2c:56:50:
         3d:c0:55:a9:1a:ed:d6:e0:b3:3f:ef:77:e1:54:9c:8c:a7:15:
         97:4f:56:b6:31:e3:0b:79:d7:73:93:bd:b2:8e:64:fe:26:d4:
         af:f4:7d:b2:25:ca:14:c7:ce:bd:b0:ca:8d:5c:75:d2:7d:a4:
         a5:7a:af:77:9c:c6:b5:e4:d7:c8:6e:54:74:74:e2:ca:72:9a:
         38:44:f1:a5:26:62:3e:b3:11:5e:5d:34:dc:2c:b1:be:4d:83:
         ee:39:54:50:8c:48:71:30:1a:91:82:c6:82:41:3d:43:e3:68:
         63:df:71:f4:3c:f1:5d:5b:b8:a0:1b:12:b8:09:66:60:6f:6e:
         6a:eb:54:ca:09:87:fe:b8:b9:2d:70:9f:5c:76:ca:d9:e9:36:
         c1:2b:c3:ae:c5:ce:68:b5:eb:2c:71:6f:56:07:a9:b2:9c:ae:
         72:6e:f0:22
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUMVnyYwJZqwom0AUDtJdrtVvM4/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBD
M0VFQTk1MzAeFw0yNjExMTQxNjMwMzhaFw0yNjExMTcyMjEyMzhaMDMxMTAvBgNV
BAMTKDhCRTcxMDAwNjkxQTg1M0M3MzA5QTk0QThCRjYyN0E0QTdBRDdBNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWzxseoGeiJgk9iOGV84Ko8HQU
YnDWf8UVpY/67GMPJtwTW5NyrjgjpC216g9jBTZ28d1zZjwFlBAhq7YPrc9QbPDV
Wg4xTSuXYU2sCUOTSJUighm9Tz4HcIn3XSkZA3buvKvtuyzXDamxQvwtWlygLfye
7hRTDMzsV4cKu6hpwzZ2RvT+NzazJ5wpF5Eca31Ov7tZt3XlAdlrT61bzq3GUzaP
Ci+wP8v/mcKkYzWEYzawrJ0OEePcagGlSw0RH/o7vIC0CXzYFAvP/qypu7suc5KX
qylbhcKtt9oqXapWLVMmrZf41778GSBsc58k8FgCOItxVPXOFg7dEwp5I16NAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUi+cQAGkahTxzCalKi/YnpKetekYwHwYDVR0j
BBgwFoAU2etcbcF2gpSfUkNYfaOHQMPuqVMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0Njg2NDY0MS8wL0Q5RUI1QzZEQzE3NjgyOTQ5RjUyNDM1ODdEQTM4
NzQwQzNFRUE5NTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBDM0VFQTk1My5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY4NjQ2NDEvMC9EOUVCNUM2REMxNzY4
Mjk0OUY1MjQzNTg3REEzODc0MEMzRUVBOTUzLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObtNOj8aYq0Y
y2JZw1AM9lKyc+wyPQuwyZ6JZo+cpiFbltKMdL6yGetpk1taQpUoN+q7m3OQgpDN
t+s6ZdPJgAtw4hhZD8ZfHbbEIpmymU21jwCAnosELFZQPcBVqRrt1uCzP+934VSc
jKcVl09WtjHjC3nXc5O9so5k/ibUr/R9siXKFMfOvbDKjVx10n2kpXqvd5zGteTX
yG5UdHTiynKaOETxpSZiPrMRXl003Cyxvk2D7jlUUIxIcTAakYLGgkE9Q+NoY99x
9DzxXVu4oBsSuAlmYG9uautUygmH/ri5LXCfXHbK2ek2wSvDrsXOaLXrLHFvVgep
spyucm7wIg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:49:00 2026 by rpki-client