Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
File:                     A162689F28161D4D4C3DF339D95097D5EF647370.mft (raw, json)
Hash identifier:          EJwcLvsKqVDqctRzeDGVYI6srbtoxnBY0DdIMLgsFDc=
Subject key identifier:   3B:93:BE:A3:3A:61:D7:58:75:A2:89:A6:88:69:19:E7:CF:CA:37:8A
Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Certificate issuer:       /CN=A162689F28161D4D4C3DF339D95097D5EF647370
Certificate serial:       11D17C13A62FC9C0B4D18235A7E3D945C17B7086
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
Manifest number:          0143
Signing time:             Mon 12 Oct 2026 16:47:10 +0000
Manifest this update:     Mon 12 Oct 2026 16:42:10 +0000
Manifest next update:     Thu 15 Oct 2026 23:35:10 +0000
Files and hashes:         1: 3132342e31342e352e302f32342d3234203d3e20313331353336.roa (hash: qCkf31qW56+BwVujsRBMC3+NyNTTMjYUeteTmbYcAZs=)
                          2: 3231312e3136312e3139322e302f32322d3234203d3e20313331353336.roa (hash: v1k7FDQ/V16wN/n+YT+CgoPJnJorrs3kzHZsHjz4jHU=)
                          3: 3231312e3136312e3139322e302f32332d3233203d3e20313331353336.roa (hash: c5LlQRjDMIDPFYAA46Xq9/sJL6HBaBIS4V8SaP+8ikQ=)
                          4: 3231312e3136312e3130322e302f32332d3234203d3e20313331353336.roa (hash: Q8W+bSL4F/OrSPCAAw8jepeEoblyyZzumcKkNHNfksc=)
                          5: A162689F28161D4D4C3DF339D95097D5EF647370.crl (hash: kBHj/O5xeMQ/IdN/oYRI4sabPbpEogaBsDQ5N3/0W+s=)
                          6: 3132342e31342e31322e302f32322d3234203d3e20313331353336.roa (hash: w67cbBWIps2lqPx9Dge6FJRm6CLOFI7zMSFt0Sxs0Ro=)
                          7: 3132342e31342e312e302f32342d3234203d3e20313331353336.roa (hash: gqfAZi5D9eRLNFfiI6sUq/JBgetsWJmrTB3FKlauctU=)
                          8: 3231312e3136312e3230392e302f32342d3234203d3e20313331353336.roa (hash: kWEzW9z+CT5ay6VmfWRWgY42vBwmJBNnIKHq7lgm+i8=)
                          9: 3231312e3136312e3139342e302f32332d3233203d3e20313331353336.roa (hash: WriACry53SHuZAqaOHUmQZQBLKUHAPX8KbmqCW+xxjY=)
                          10: 3132342e31342e382e302f32342d3234203d3e20313331353336.roa (hash: U6qXyW4djQVEWnom2YIf6YERnqKKkEMbFBwGjVK9L8w=)
                          11: 3132342e31342e31302e302f32342d3234203d3e20313331353336.roa (hash: bspg306c0D2jxX1n5EIMk8aNVY1DeCMk2D8krhmDj0M=)
                          12: 3132342e31342e372e302f32342d3234203d3e20313331353336.roa (hash: CsiJAib13bjqRBlimbK3uTYoMIBIKwMNewp2EygK87w=)
                          13: 3231312e3136312e3232312e302f32342d3234203d3e20313331353336.roa (hash: HJttaNOAYXD3fpbBJQqAMDoPxtoi8sq6TnfqmNGwbbI=)
                          14: 3132342e31342e31332e302f32342d3234203d3e20313331353336.roa (hash: QC/RNF6fthoqyk0s4+w9CA9/N4e5bgB49YzS6M+25kM=)
                          15: 3132342e31342e31362e302f32312d3234203d3e20313331353336.roa (hash: r6yu3Jn4CZw5sx0P3bx9jJxyvhFz8i1HoZ9GkNk6u3w=)
                          16: 3231312e3136312e3130312e302f32342d3234203d3e20313331353336.roa (hash: ii3JZMAtftwEr9yCKrIhjf4ILpgRV/V4U1+/dSss/xU=)
                          17: 3231312e3136312e3230332e302f32342d3234203d3e20313331353336.roa (hash: EUY+yW80diYWVuOiJtIlBhTG+YWMpD67vHScGqyUTZg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 23:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d1:7c:13:a6:2f:c9:c0:b4:d1:82:35:a7:e3:d9:45:c1:7b:70:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370
        Validity
            Not Before: Oct 12 16:42:10 2026 GMT
            Not After : Oct 15 23:35:10 2026 GMT
        Subject: CN=3B93BEA33A61D75875A289A6886919E7CFCA378A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:37:79:81:6d:f9:64:7a:92:d5:33:09:f3:bb:
                    3d:44:18:d6:69:c7:fe:81:c3:cc:81:a0:ec:d8:b7:
                    fb:60:fa:5f:50:ca:bf:2c:38:e0:28:03:40:e3:53:
                    2d:ed:79:44:95:06:87:11:4c:02:50:94:fe:46:1f:
                    90:f7:e6:04:1d:d0:f9:82:3d:7d:86:66:e1:fd:c4:
                    af:52:bf:8c:0a:83:8e:1e:5f:e9:8a:2d:26:42:f4:
                    9f:d3:ad:ac:3c:e5:f5:2d:e1:3f:52:3c:55:eb:8a:
                    c3:0a:70:5a:fb:d6:12:57:75:d7:d7:3f:93:48:77:
                    61:80:c9:2c:e6:51:7a:af:28:32:c6:e7:e5:54:10:
                    28:e4:ce:0d:57:d7:3e:08:2f:4d:0a:e9:98:7a:ae:
                    b7:23:f5:02:85:56:74:87:bd:ff:73:5b:34:bd:49:
                    a1:e7:4a:46:7f:9e:72:b2:42:d2:3c:65:d7:02:74:
                    ac:2f:a8:d0:05:75:57:bd:2c:f3:88:da:4f:8f:ce:
                    74:a5:0f:e5:de:da:d0:fb:89:55:5a:52:de:95:93:
                    b7:60:05:7a:5f:ea:c1:48:18:35:a1:95:94:91:3a:
                    1e:94:a3:83:dd:c8:00:69:ad:53:4c:93:21:4c:81:
                    55:d1:64:8f:60:fe:40:80:ff:6d:f9:f1:48:0d:d4:
                    d3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:93:BE:A3:3A:61:D7:58:75:A2:89:A6:88:69:19:E7:CF:CA:37:8A
            X509v3 Authority Key Identifier:
                keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:eb:4f:22:33:d1:26:a8:b3:74:b3:d9:26:9c:10:8f:9b:f5:
         21:e9:86:ca:3f:29:65:55:3e:c6:f1:d6:87:7a:f3:d9:47:a6:
         ba:93:ec:e6:8d:17:f4:8c:bb:85:9a:48:47:a2:65:b0:92:56:
         bf:4a:d4:40:5c:14:c6:d0:d2:71:6c:17:0f:61:8d:a5:b1:b5:
         a5:a9:e9:a1:cd:d3:a7:29:8c:05:e9:41:e8:68:a4:c6:8f:b5:
         d1:db:ff:2c:23:b4:90:b2:ca:84:d4:ba:26:14:26:c8:e5:d3:
         1b:96:32:2d:53:56:59:9a:c3:cb:4b:94:bc:15:a7:a7:7b:65:
         0d:69:97:c5:81:70:af:51:c4:e3:54:48:56:ab:34:6c:ad:ff:
         c1:f8:73:81:03:71:4b:e2:4c:a1:2b:c1:1b:cd:c4:36:b2:d5:
         c8:5d:26:94:7f:00:61:ba:e9:de:56:d1:e7:2b:11:04:29:06:
         6a:d2:17:5c:0c:35:ae:ac:f8:3d:d7:31:a9:9f:72:7a:56:bf:
         37:06:a1:29:0b:21:88:e2:42:07:3e:33:45:21:33:55:ff:06:
         e9:92:53:9f:70:7a:c0:27:93:e6:0b:fd:e9:8b:cf:e8:c4:68:
         80:b6:a5:0f:64:f5:e1:45:8e:4a:fa:4c:dd:71:7e:a4:f3:8a:
         de:af:df:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:27:08 2026 by rpki-client