Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
File:                     4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft (raw, json)
Hash identifier:          SFI9RA2WLCNGyOmxuBV+5pBLf80GubsVnhW5VlR3THg=
Subject key identifier:   7F:F2:36:F4:4A:51:6C:80:60:D2:1B:E3:ED:0E:AE:54:C7:9E:22:76
Authority key identifier: 4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5
Certificate issuer:       /CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
Certificate serial:       1EA73BF23F8A5255E1D5EC02122F580F5E81D139
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
Manifest number:          0140
Signing time:             Wed 07 Oct 2026 07:25:44 +0000
Manifest this update:     Wed 07 Oct 2026 07:20:44 +0000
Manifest next update:     Sat 10 Oct 2026 08:11:44 +0000
Files and hashes:         1: 3136302e3235302e38342e302f32332d3234203d3e2034383136.roa (hash: M0wfTR/OAJBje8n+/3S62Tlg2BVD3Kl2zCHWBs3Dqbo=)
                          2: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl (hash: IkNPNDP1jGZf+yItbgoZMs1lClN0vsxEj9Ff0vOW34U=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a7:3b:f2:3f:8a:52:55:e1:d5:ec:02:12:2f:58:0f:5e:81:d1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
        Validity
            Not Before: Oct  7 07:20:44 2026 GMT
            Not After : Oct 10 08:11:44 2026 GMT
        Subject: CN=7FF236F44A516C8060D21BE3ED0EAE54C79E2276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9d:2a:79:67:cc:4f:65:84:c3:4f:94:26:a9:
                    97:ef:cb:7c:fe:48:b4:80:99:93:c6:0f:dc:76:f1:
                    5f:d0:af:85:a0:27:2e:ed:c6:09:7e:44:4f:2b:77:
                    c9:63:9a:de:9a:c0:22:59:d2:63:b4:1a:19:6b:55:
                    2b:16:3d:17:0e:aa:b5:1c:ab:08:dd:1e:9b:fa:fb:
                    6c:38:5c:1b:1c:e0:37:1d:ea:e7:97:97:d3:14:22:
                    7b:8d:da:44:52:dd:9e:83:48:cd:2b:e7:68:74:45:
                    03:99:c6:d5:48:ca:a1:db:14:c4:a7:4e:f9:ea:e4:
                    e6:2d:a9:90:c9:b8:3f:9c:26:e0:24:3b:77:c0:a1:
                    74:1e:47:e4:76:1d:ae:4c:8d:35:c1:bb:bf:70:f5:
                    8c:f5:9d:08:33:50:88:35:3e:a3:f5:70:ab:5a:d7:
                    d7:9e:17:33:5b:b3:ed:0b:15:29:fb:a8:93:fd:99:
                    79:75:88:5f:b4:9c:c1:0b:b6:d6:7f:27:7f:4d:87:
                    cb:99:41:3e:75:3d:dc:03:df:ce:fc:3d:24:ca:4d:
                    16:64:13:94:5e:c2:6c:c5:a8:4e:a1:7f:f6:30:dd:
                    73:a0:cb:ea:16:5e:1c:9d:9c:7c:df:c0:19:cb:68:
                    1d:9a:f1:b2:a7:47:86:79:54:30:65:59:62:5c:0a:
                    3f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F2:36:F4:4A:51:6C:80:60:D2:1B:E3:ED:0E:AE:54:C7:9E:22:76
            X509v3 Authority Key Identifier:
                keyid:4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b5:58:1d:92:b2:49:31:27:66:8d:90:36:b9:bc:be:27:69:
         2d:60:ff:ea:11:82:90:d0:6b:35:e8:65:20:ba:ec:11:5e:08:
         2c:91:0c:84:a1:5d:98:b6:9c:9e:9f:43:8b:14:87:bc:ed:13:
         dc:ea:25:ca:1b:6c:76:b6:d5:f9:0f:b6:53:9a:61:e3:02:16:
         1e:97:52:32:58:d3:f7:49:64:6e:81:4e:19:35:43:bf:e6:2e:
         bd:d1:b8:4f:6e:84:87:31:20:a6:26:ff:cb:e7:89:81:19:7b:
         d9:54:c9:c8:e8:06:4a:89:1e:23:7f:af:62:44:e8:79:d0:18:
         25:e8:e5:bd:f1:2f:97:f9:a7:0a:17:f4:c8:dd:3f:da:ca:84:
         95:91:77:29:27:6a:35:d5:62:fc:6d:36:a7:a2:b8:b6:cb:9a:
         f8:6f:8a:aa:b9:ce:98:20:29:66:60:f2:1e:95:99:2b:05:d4:
         2f:19:7d:2d:a1:d4:89:6a:c9:6c:96:c4:8d:1d:3f:75:d5:ab:
         eb:58:58:d1:7e:cc:0d:d1:10:83:f9:00:6c:40:9f:37:7b:c1:
         f7:90:75:78:e4:8d:5a:56:20:b9:86:99:d5:92:7a:4b:db:1c:
         f8:e7:3a:7f:bb:9c:13:b1:44:55:cf:c0:82:f7:40:47:39:01:
         96:53:5c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:53:45 2026 by rpki-client