Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
File:                     7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft (raw, json)
Hash identifier:          ejYIUvsu1NIExNz8MBISNmKzSAPDX+uJDKs0BD6flPI=
Subject key identifier:   AB:3A:CB:C1:54:CA:69:8C:42:1C:9C:28:39:20:AF:B5:B0:23:9C:1F
Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
Certificate issuer:       /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Certificate serial:       4AFA478A208EE85CB6C6A411D9DA824C110A7987
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
Manifest number:          0138
Signing time:             Tue 06 Oct 2026 02:59:47 +0000
Manifest this update:     Tue 06 Oct 2026 02:54:47 +0000
Manifest next update:     Fri 09 Oct 2026 08:10:47 +0000
Files and hashes:         1: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl (hash: z04L1hpAFAQU9ZprQcLRnrez80Wej+L90WKAvt1BJg0=)
                          2: 3135372e36362e34322e302f32332d3233203d3e20313436383036.roa (hash: TrX91umpUF20olN9d51b5mXoqNwu+IRPH9g8P9Ni2l8=)
                          3: 3135372e36362e34322e302f32332d3233203d3e20323131333932.roa (hash: VYTt+hHm1Z1epaMQlhdt9T6x0ohGsGgds18dnOlsrdo=)
                          4: 3135372e36362e34332e302f32342d3234203d3e20313436383036.roa (hash: ZdAJvwbevxcTChu0/ksJ8GMgEReQH9B3GrE13G0F5YI=)
                          5: 3135372e36362e34322e302f32332d3233203d3e20343031313630.roa (hash: uUSbmt/DFa4HyDl5SAFGT6+xVlP2TqhsgzRQhrjcsGw=)
                          6: 3135372e36362e34322e302f32332d3233203d3e20323039323432.roa (hash: HIHD4+vJEqN67iNJaPRj3O/8PeBUKrUaC2/UlqKhO0A=)
                          7: 3135372e36362e34322e302f32342d3234203d3e20313436383036.roa (hash: 5BjffqQuLoy9KdB4KbETMrKfZtQLhtqGMgjq8dyw6sU=)
                          8: 3135372e36362e34332e302f32342d3234203d3e20323131333932.roa (hash: QVpa/t5BrPmcaniN6fTC6mn2Hc337ptuGpqO+9pbZUI=)
                          9: 3135372e36362e34322e302f32342d3234203d3e20323131333932.roa (hash: kxd6F4bEyBxVrM29SgCibt07AVmkF+UBKK4h7nsIEYw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 08:10:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fa:47:8a:20:8e:e8:5c:b6:c6:a4:11:d9:da:82:4c:11:0a:79:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
        Validity
            Not Before: Oct  6 02:54:47 2026 GMT
            Not After : Oct  9 08:10:47 2026 GMT
        Subject: CN=AB3ACBC154CA698C421C9C283920AFB5B0239C1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6a:0c:c6:b9:d3:33:74:7e:70:39:4e:72:a5:
                    73:f2:87:61:3c:0c:7e:9d:59:e7:40:39:c0:d2:89:
                    9d:f1:3c:d4:5d:72:57:5c:6c:3c:10:1e:c5:47:b2:
                    9e:fd:89:5f:6b:60:eb:dd:70:5d:a3:4e:be:85:46:
                    98:54:ef:2d:82:9d:1a:79:71:ba:a0:6a:a4:6f:85:
                    9a:1b:fd:23:42:4a:55:00:d5:20:27:db:64:3d:5f:
                    cf:05:21:0e:e5:fc:3d:ef:d6:fe:1c:e4:55:c4:e3:
                    b5:1f:d3:20:cb:29:f6:ba:6c:49:58:3b:4a:d5:6c:
                    9a:27:6e:76:ea:22:4f:78:a8:24:d4:77:06:16:9d:
                    19:dc:09:ab:f2:23:e6:21:b1:70:9b:6c:6a:fb:59:
                    88:00:ac:ed:77:03:a7:14:e3:4d:80:54:0d:31:46:
                    0a:64:b7:d0:e7:f5:e4:1d:93:95:61:d5:29:e9:c7:
                    dd:df:f8:a3:c0:56:3a:0a:14:cd:b8:39:f2:ba:65:
                    38:8a:c1:62:b9:0a:83:75:15:4d:81:10:71:56:fc:
                    50:a0:80:dd:4f:e8:8e:24:46:0b:06:55:2d:41:cd:
                    13:ed:5c:91:6f:6e:67:be:1b:c2:e2:c8:07:ca:5d:
                    72:df:13:44:00:a5:f3:6b:0b:5c:24:7b:76:29:ea:
                    77:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3A:CB:C1:54:CA:69:8C:42:1C:9C:28:39:20:AF:B5:B0:23:9C:1F
            X509v3 Authority Key Identifier:
                keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0c:aa:27:2e:f6:4d:42:06:72:50:6d:a3:bc:37:0c:70:cd:
         46:96:a1:ce:ae:4c:df:e8:7c:d7:7f:7a:94:7c:93:52:27:21:
         62:d7:b4:75:e5:b4:2c:d0:40:be:5d:ed:af:1d:b8:9e:b3:b0:
         8c:35:8e:b5:2c:47:78:37:59:38:46:77:78:b4:4f:5f:ee:71:
         d1:8e:05:26:84:e1:79:9a:6d:c4:9e:a5:ac:37:20:9d:4e:75:
         3c:40:07:91:7d:85:63:4b:b5:a5:2e:d6:77:8b:9b:23:91:ed:
         5c:54:f5:a1:5d:23:3d:fd:f9:a4:83:ec:9d:95:df:58:9f:e8:
         2c:69:af:d0:38:34:13:67:36:bf:ea:0a:97:5f:79:b0:b0:08:
         a1:46:48:d9:85:0f:18:24:a4:aa:3b:7a:00:04:72:8b:00:bf:
         de:7e:45:1c:3c:8c:03:77:c3:5f:fd:56:46:c4:85:56:5b:1a:
         e2:ad:83:97:d0:31:d0:94:ea:70:32:47:98:47:03:0f:24:74:
         d8:7d:04:7c:76:d1:97:7a:ca:b6:1b:83:7e:b7:5f:6f:27:4c:
         26:98:11:23:9b:cc:14:b7:93:fb:f2:d0:a4:37:28:ea:19:52:
         78:ce:f0:65:53:2b:75:13:60:fe:6a:71:20:14:a4:7b:4d:7b:
         44:83:6a:db
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUSvpHiiCO6Fy2xqQR2dqCTBEKeYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3
QzkwNTUxNjAeFw0yNjEwMDYwMjU0NDdaFw0yNjEwMDkwODEwNDdaMDMxMTAvBgNV
BAMTKEFCM0FDQkMxNTRDQTY5OEM0MjFDOUMyODM5MjBBRkI1QjAyMzlDMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKagzGudMzdH5wOU5ypXPyh2E8
DH6dWedAOcDSiZ3xPNRdcldcbDwQHsVHsp79iV9rYOvdcF2jTr6FRphU7y2CnRp5
cbqgaqRvhZob/SNCSlUA1SAn22Q9X88FIQ7l/D3v1v4c5FXE47Uf0yDLKfa6bElY
O0rVbJonbnbqIk94qCTUdwYWnRncCavyI+YhsXCbbGr7WYgArO13A6cU402AVA0x
Rgpkt9Dn9eQdk5Vh1Snpx93f+KPAVjoKFM24OfK6ZTiKwWK5CoN1FU2BEHFW/FCg
gN1P6I4kRgsGVS1BzRPtXJFvbme+G8LiyAfKXXLfE0QApfNrC1wke3Yp6ncdAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUqzrLwVTKaYxCHJwoOSCvtbAjnB8wHwYDVR0j
BBgwFoAUf8VBi0pZDfFTVeFnt6/A/3yQVRYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTY4MzA2MTk3Mjk5NC8wLzdGQzU0MThCNEE1OTBERjE1MzU1RTE2N0I3QUZD
MEZGN0M5MDU1MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3QzkwNTUxNi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE5NzI5OTQvMC83RkM1NDE4QjRBNTkw
REYxNTM1NUUxNjdCN0FGQzBGRjdDOTA1NTE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegyqJy72TUIG
clBto7w3DHDNRpahzq5M3+h81396lHyTUichYte0deW0LNBAvl3trx24nrOwjDWO
tSxHeDdZOEZ3eLRPX+5x0Y4FJoTheZptxJ6lrDcgnU51PEAHkX2FY0u1pS7Wd4ub
I5HtXFT1oV0jPf35pIPsnZXfWJ/oLGmv0Dg0E2c2v+oKl195sLAIoUZI2YUPGCSk
qjt6AARyiwC/3n5FHDyMA3fDX/1WRsSFVlsa4q2Dl9Ax0JTqcDJHmEcDDyR02H0E
fHbRl3rKthuDfrdfbydMJpgRI5vMFLeT+/LQpDco6hlSeM7wZVMrdRNg/mpxIBSk
e017RINq2w==
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:12:28 2026 by rpki-client