Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
File:                     EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft (raw, json)
Hash identifier:          yM2ige8Ge5MTlvkqHrEmoKdcqyIbBlgYBzkyhpRhLLk=
Subject key identifier:   BD:33:18:E4:09:41:8A:C6:FF:FE:42:0F:E9:C6:78:EF:43:5F:AA:FE
Authority key identifier: EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5
Certificate issuer:       /CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
Certificate serial:       52A0499E6CF76A1CE16A61F8A4C0DF7ECC44718C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
Manifest number:          0140
Signing time:             Sun 11 Oct 2026 17:35:46 +0000
Manifest this update:     Sun 11 Oct 2026 17:30:46 +0000
Manifest next update:     Wed 14 Oct 2026 23:47:46 +0000
Files and hashes:         1: 3130332e37342e38302e302f32342d3234203d3e20313531323935.roa (hash: ojd5nwedF4XlTGnZpRFJdkkhy/IcrVc5AV8Stc1jLX8=)
                          2: 3130332e37342e38302e302f32322d3232203d3e20313531323935.roa (hash: Ptud8Vi1Pw6xtT0XUYXIlq+M8IqFwvfvlWb0izE+nAE=)
                          3: 3130332e37342e38332e302f32342d3234203d3e20313531323935.roa (hash: ZK37D3POQjLgRumV6wwAdb4ImPqv186/SywxsSYNUro=)
                          4: EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl (hash: a3UKqix2OrldTKm8uS7Yls2WIBUAURN27DsjNo1NjwI=)
                          5: 323430313a373636303a3a2f34382d3438203d3e20313531323935.roa (hash: 2+yyuf0q+IhzvVQcrgl86mPakw+vDRgR2+ECQACOS/U=)
                          6: 3130332e3231362e3133362e302f32322d3232203d3e20313531323935.roa (hash: BnRwU7chHYIIGouHIczgpLM7dAInCSB+/HmUy3rXXck=)
                          7: 3130332e3231362e3133372e302f32342d3234203d3e20313531323935.roa (hash: BRSBREBlJiozb5aCZT0vm2rl2EDV+oFHhYiS3Y6nCBA=)
                          8: 3130332e3231362e3133382e302f32342d3234203d3e20313531323935.roa (hash: 795M1pb0jQwcgoLJvZEPFCAMB3MJiYLqo/HMVpljzN0=)
                          9: 3130332e3231362e3133362e302f32342d3234203d3e20313531323935.roa (hash: 9kHoyMHbc5Lo9JrmsxQ0p4owCPiQ4h7ry2QhVrlEM6E=)
                          10: 3130332e37342e38312e302f32342d3234203d3e20313531323935.roa (hash: /FNmedKDyMblLmwWPDGKOWe30qAKcRfq3PdARmATgJ4=)
                          11: 3130332e3231362e3133392e302f32342d3234203d3e20313531323935.roa (hash: hir7K87mcLiuQQs6GKFUqXPDidq1NP0alSojNrH0xMA=)
                          12: 3130332e37342e38322e302f32342d3234203d3e20313531323935.roa (hash: 5mr3pAfi6VYXP3QTlvsdwggy2bmbBTx6ynIJhBTco2U=)
                          13: 323430313a373636303a3a2f33322d3332203d3e20313531323935.roa (hash: RfpY9li0VVA1/HvZlShR6hjAgfxjacrdKsj5MrW4eNw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 23:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a0:49:9e:6c:f7:6a:1c:e1:6a:61:f8:a4:c0:df:7e:cc:44:71:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
        Validity
            Not Before: Oct 11 17:30:46 2026 GMT
            Not After : Oct 14 23:47:46 2026 GMT
        Subject: CN=BD3318E409418AC6FFFE420FE9C678EF435FAAFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e5:bb:ab:48:2e:53:7c:5f:1d:ce:82:5d:af:
                    d4:97:bc:3c:ab:1b:d9:0c:fe:73:2f:c2:37:87:f9:
                    eb:8f:95:2c:17:9d:32:53:9c:dd:3a:1c:6e:17:e8:
                    74:d0:01:45:4d:b1:b0:d5:fa:39:d3:44:49:df:7f:
                    b2:8a:bf:46:7d:f5:10:6b:48:cb:e0:4a:3d:e0:9e:
                    17:54:67:11:a0:2a:d7:22:c1:27:6c:0a:e9:9e:af:
                    60:3f:a0:44:d3:9b:44:4f:3e:78:bb:06:02:70:85:
                    7f:95:23:a8:37:27:7e:08:0b:a2:fe:de:d4:ed:9b:
                    9e:be:f2:eb:ae:35:28:d6:6c:43:c0:4b:d0:f0:75:
                    22:07:fb:5f:ff:99:7f:54:13:fa:64:fb:b8:61:f8:
                    e0:14:98:46:1f:a0:79:78:cb:a9:a8:e8:95:fb:43:
                    08:e4:c3:18:5a:f4:d8:f6:15:e5:5c:0b:b2:77:3d:
                    43:f4:1b:06:e5:8f:6b:ae:61:39:9f:3f:7e:7e:e6:
                    c6:5c:3d:ec:a4:d1:16:75:27:2a:86:0b:b0:f6:d1:
                    87:bf:62:c7:cf:96:71:92:e8:ff:68:98:2d:ed:b1:
                    4d:a7:2d:f3:6b:dd:1e:7f:a6:c2:46:7c:0f:4b:77:
                    e5:da:d8:fa:8e:54:7f:c8:f5:47:b1:cf:64:41:6f:
                    15:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:33:18:E4:09:41:8A:C6:FF:FE:42:0F:E9:C6:78:EF:43:5F:AA:FE
            X509v3 Authority Key Identifier:
                keyid:EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:02:3f:56:29:2b:96:37:9f:12:2d:ba:93:b3:74:99:3b:5a:
         1f:01:ba:b5:64:ba:c3:6e:4b:30:94:e4:30:b5:ae:7c:24:93:
         df:af:37:54:55:2b:87:2f:aa:e5:13:62:05:61:ab:c0:c8:fb:
         0b:f2:6b:9c:9d:e5:a1:09:65:f3:9a:ea:fd:70:11:d5:20:15:
         d0:30:21:ed:36:ee:de:7b:61:70:84:c0:89:bb:3c:43:2e:bb:
         33:e0:88:cd:cf:6d:29:e1:3d:9d:b9:aa:6a:eb:99:67:77:e8:
         c0:21:73:44:7b:a7:63:15:c6:3e:e0:be:8b:66:17:c0:96:a6:
         a2:68:95:3f:31:9d:ea:7e:cf:88:09:7b:4b:74:98:e3:13:26:
         01:72:ea:31:f0:dc:d5:4b:b8:f4:32:f1:79:a0:70:57:77:12:
         7d:8e:3e:b3:87:9c:97:90:36:61:b0:fa:3e:89:a6:fb:03:0e:
         45:b5:21:db:c1:12:96:19:82:b7:a6:a9:2b:b5:b2:d3:87:4e:
         6e:26:d7:0b:c4:18:f2:2c:5b:32:f1:ed:41:57:e6:66:38:2f:
         04:b1:8f:11:00:de:7e:2f:34:1e:1d:22:06:6b:c6:91:78:12:
         5a:78:f7:71:54:22:d2:80:29:d8:fd:88:01:62:59:7b:be:4f:
         8d:f8:40:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:04:18 2026 by rpki-client