Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
File:                     71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft (raw, json)
Hash identifier:          5h5Ouw7o5G0MYqfk+lFwjl0fEQCirLzNTxJA+q2mhG4=
Subject key identifier:   75:A3:2B:F0:2C:0F:D5:45:53:52:A8:6D:D9:B4:1F:AE:02:FA:35:D8
Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0
Certificate issuer:       /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
Certificate serial:       779A00943CC801674F420399EF3F8110FA1DEE84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
Manifest number:          013A
Signing time:             Wed 23 Sep 2026 22:50:42 +0000
Manifest this update:     Wed 23 Sep 2026 22:45:42 +0000
Manifest next update:     Sun 27 Sep 2026 05:27:42 +0000
Files and hashes:         1: 3231382e3234372e38362e302f32332d3233203d3e20313339303231.roa (hash: 2Qig5JQupD4VU7rBafbTCZkcUKK1Dademz1jBYMnzLM=)
                          2: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl (hash: yE0BP4QYdnfQtuJhLVCUPcjdF3dr8Kwvy1DiqI50J+I=)
                          3: 3135302e3234322e3232342e302f32322d3232203d3e2030.roa (hash: 8B51/FSxI9C/6jw0qS6a2P9d2NLwwFnuyvtAY5QcNHs=)
                          4: 3231382e3234372e38342e302f32332d3233203d3e20313339303231.roa (hash: BUq8dikEBD9/E5M+chQ5i2WOW0qXw/yVjFpuEKKpDN0=)
                          5: 3130332e3233352e3138342e302f32322d3232203d3e2030.roa (hash: XPCVxk8wrdPr0+HsLP2WlWWawH8V4P5eZRWw6QJ0Lt0=)
                          6: 3231392e3233342e382e302f32312d3234203d3e20313339303231.roa (hash: neFIvyXxaBO4GKvxdumHyTp3Jegmpd6j41pGZrduoe4=)
                          7: 3130332e3130382e3139322e302f32322d3234203d3e20313339303231.roa (hash: 6DbMucsNRkT5GNRQ0no2LmjOH16k8wdSciEnNtEFfbQ=)
                          8: 3231392e3233342e31362e302f32312d3231203d3e20313339303231.roa (hash: A8e2s5zCPHJBFo2lyNcLi8vC/0rHrfeEjoL+zuoBMBk=)
                          9: 3231382e3234372e36342e302f32302d3230203d3e20313339303231.roa (hash: FdGGm+XsvdXdDtBCIUq2SJv8PFv1A3KuSOTHHDzNHEM=)
                          10: 34332e3235302e3131362e302f32322d3234203d3e20313339303231.roa (hash: P69vzvvJ+gEfcs3vd5YGHFAOsQiX5VcBoP5Rnr+a/ik=)
                          11: 3231382e3234372e36342e302f31392d3139203d3e20313339303231.roa (hash: OkmPu73amMTWDVpTR3TyQTRJkDCDoCr/0/CnTI4191k=)
                          12: 3130332e3133392e302e302f32322d3234203d3e20313339303231.roa (hash: 0ls8G7BHtbV6BLsVhBR5xCN3uX1VQZvowFrmsmKvAd8=)
                          13: 3231382e3234372e38382e302f32312d3231203d3e20313339303231.roa (hash: rVh9TWsozOWM1/9pIJGq8VsQr06FU37yrVIW3pKerpM=)
                          14: 3231392e3233342e31362e302f32302d3234203d3e20313339303231.roa (hash: Aa+WxdVJp40uEdOeWIgUVNNnp7psrbPdAACBmCHyDjw=)
                          15: 3231382e3234372e38302e302f32322d3232203d3e20313339303231.roa (hash: TqLEMrsq1Mn2IIGkO5wiweM1cBFEqjZzxJ46X/Iy/Xw=)
                          16: 3231392e3233342e302e302f32312d3234203d3e20313339303231.roa (hash: +dKM/gllg2/lgDr8VeqMWJOTPZBzrL20J3kdBce6JMo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 05:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9a:00:94:3c:c8:01:67:4f:42:03:99:ef:3f:81:10:fa:1d:ee:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
        Validity
            Not Before: Sep 23 22:45:42 2026 GMT
            Not After : Sep 27 05:27:42 2026 GMT
        Subject: CN=75A32BF02C0FD5455352A86DD9B41FAE02FA35D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:0d:26:4b:f9:ee:ec:82:67:88:66:9e:6a:
                    06:01:05:06:70:bd:5a:17:c9:7a:43:99:4d:2d:ae:
                    a1:52:91:38:ac:10:a9:33:74:bb:d2:2c:34:de:88:
                    99:ed:5b:2d:e0:56:b7:12:9a:1d:55:89:54:06:e2:
                    2c:87:92:67:0d:21:27:f3:35:92:82:eb:50:d7:34:
                    4e:16:dc:f6:79:1c:bb:73:25:bd:0a:24:27:3d:d1:
                    7e:7f:1a:53:8c:85:cb:79:62:0c:87:0a:64:27:5a:
                    6a:a7:4c:34:1b:7f:d3:94:d1:6f:72:dd:be:f3:96:
                    4d:fc:6d:e4:67:1d:48:25:51:c2:8d:93:6b:60:d6:
                    0e:ea:53:6e:67:9b:29:44:97:91:d3:3e:cb:a6:70:
                    30:0e:04:ee:37:3c:5b:49:eb:4c:3e:d6:9d:7c:e5:
                    34:f5:e9:0e:2d:18:9e:d8:3e:63:7c:08:55:3f:af:
                    90:a3:e4:6d:ee:1c:fc:1e:91:13:77:7e:7e:b7:37:
                    8c:17:d7:59:a3:bd:79:ae:99:c5:3e:a7:39:58:57:
                    b3:2c:98:07:2c:cd:8a:dc:17:50:4e:56:74:5a:ed:
                    05:7d:85:91:43:7e:72:bb:45:6f:ed:dd:f0:84:bf:
                    77:7e:2e:d5:aa:80:f8:26:b4:39:f3:ed:e1:e4:fd:
                    b3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A3:2B:F0:2C:0F:D5:45:53:52:A8:6D:D9:B4:1F:AE:02:FA:35:D8
            X509v3 Authority Key Identifier:
                keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:37:9f:c9:d7:e0:55:5d:5c:f9:05:33:d0:18:54:7a:47:b3:
         82:37:54:41:59:2a:97:06:18:f9:1f:dc:8b:41:5c:1c:28:e6:
         84:c0:3a:33:fd:51:e1:5b:73:62:53:9f:18:2e:c6:6b:2e:cc:
         22:ee:fa:dc:ff:68:d6:86:49:08:6d:06:23:fa:e0:1b:0a:2a:
         c4:c3:18:14:c2:89:ed:4c:11:50:01:a3:67:f6:1b:89:ac:7e:
         73:31:41:bf:25:67:ba:70:46:37:da:bf:7a:82:e5:d6:46:01:
         0f:27:5d:04:1d:e5:e2:35:97:c3:79:ca:d8:b3:6b:fc:5d:41:
         9a:3d:bf:05:d3:3a:06:97:65:10:f1:e0:3b:31:61:d3:b3:55:
         18:dc:65:7b:1b:74:cb:04:38:fe:46:31:5b:c4:3c:ff:f7:e9:
         8c:35:85:0b:97:34:a7:65:c5:5e:9d:7b:7b:7b:25:79:c6:a3:
         fc:bb:1b:3b:5d:09:ef:ae:d5:74:93:29:25:ec:f4:be:ae:5e:
         9d:6a:a8:52:4a:38:78:8f:3c:c9:28:22:70:5f:04:1d:9e:76:
         4f:3f:f7:7b:b7:92:0b:c7:2d:ef:a6:33:55:75:39:84:23:e6:
         9b:2a:6c:5b:1c:b7:68:47:4a:0c:29:1e:fe:ea:6a:85:2d:26:
         dd:9e:be:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:31:01 2026 by rpki-client