Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
File:                     A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft (raw, json)
Hash identifier:          cHyrMrV/Yn0+fUu4eFmXC5ZIWTqAYYreXEDZgcA7QiI=
Subject key identifier:   9B:C5:05:AA:9F:D8:3C:A7:01:68:5B:45:77:CB:8D:16:53:C1:F1:D8
Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29
Certificate issuer:       /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
Certificate serial:       652157D412CA3156618A06A3AAC7AAD362DDD481
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
Manifest number:          015F
Signing time:             Thu 01 Oct 2026 04:39:08 +0000
Manifest this update:     Thu 01 Oct 2026 04:34:08 +0000
Manifest next update:     Sun 04 Oct 2026 07:30:08 +0000
Files and hashes:         1: 34372e39382e302e302f31352d3234203d3e203337393633.roa (hash: iwjVE24waqNRMxAnsWWloR6ZemTe2jtU1nDhdHBmFDE=)
                          2: 34372e3130302e302e302f31342d3234203d3e203337393633.roa (hash: ppj+TlXCIrAcPf1eMhGWrhP2Ij9TixTm3BfPz4IPvbI=)
                          3: A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl (hash: nPk3AbJ+E0ExxI1twJMxRDm+okZ8gJQ2HW9ZZEKvK20=)
                          4: 3133392e3232342e302e302f31362d3234203d3e203337393633.roa (hash: nfA+B4HJUdTdXpxBunZTC0Mmi3ww7Q0Bo7aWuz3zYNE=)
                          5: 3133392e3132392e302e302f31362d3234203d3e203337393633.roa (hash: lmfFy/NByxflwbukOBqf2t5cvYb0y1mEUQilr1j5wEw=)
                          6: 34372e3131322e302e302f31362d3234203d3e203337393633.roa (hash: 9TzYa3+Sl+tIX8tXSaj70/Us2wMIqXbVo3JClonsi1M=)
                          7: 34372e39322e302e302f31342d3234203d3e203337393633.roa (hash: d0QnujeLIiBwhkySIvzmuDq1uWWqMCzgEV4dGlw/0i4=)
                          8: 34372e39362e302e302f31352d3234203d3e203337393633.roa (hash: qCOeajORd8EdADqBCDEKYOaZ9qR0x8mo50AIxKKf2kk=)
                          9: 34372e3131332e302e302f31362d3234203d3e203337393633.roa (hash: Sc9B64EYbOlhHpRQn2hDIXOE8wTsYGOAnrQ1OGOsB2U=)
                          10: 34372e3131322e302e302f31322d3234203d3e203337393633.roa (hash: XnzoRBbJbU4JSck0zmxm+ruNtxcM8ugi+pAaXFexVd8=)
                          11: 34372e3131322e302e302f31352d3135203d3e203337393633.roa (hash: oc0h7t2xyM1D/ueNRTcOjQuhsadrMwiGPusBtoLIrSY=)
                          12: 34372e3130342e302e302f31332d3234203d3e203337393633.roa (hash: rwAzS9Eef9SzzpYNpqYqgoG+OJgKFf8Bv5eIn0vr0Fs=)
                          13: 3133392e3139362e302e302f31362d3234203d3e203337393633.roa (hash: 19ycWnE82ngKdpq5CfFKBBUaYUxLiUYMUdelOP4EkI8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 03:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:21:57:d4:12:ca:31:56:61:8a:06:a3:aa:c7:aa:d3:62:dd:d4:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
        Validity
            Not Before: Oct  1 04:34:08 2026 GMT
            Not After : Oct  4 07:30:08 2026 GMT
        Subject: CN=9BC505AA9FD83CA701685B4577CB8D1653C1F1D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:36:74:1a:09:2a:d3:3c:d6:8c:3e:d3:ea:04:
                    9b:be:79:8f:76:7c:6f:8c:09:b9:d6:1b:6f:1c:16:
                    e9:a6:05:ff:36:be:2a:8f:2e:05:b1:c2:b2:0a:4e:
                    cc:fc:66:4a:d4:6f:87:79:1f:e7:9e:0d:47:6a:18:
                    0e:13:5f:bb:56:48:48:a2:9e:b2:94:7b:f8:48:ec:
                    f6:2f:1f:86:ab:7e:cf:ed:75:3e:d2:e7:40:b0:1a:
                    58:71:37:cc:35:c2:2b:c6:68:7f:b7:4f:21:02:59:
                    9f:9e:48:79:6b:c5:1d:f9:a1:c3:44:4c:c4:ee:ec:
                    18:45:96:b5:23:90:99:fc:34:30:cf:08:24:f2:74:
                    14:76:ae:ca:c5:2e:8c:29:c7:58:3a:c1:5f:12:c5:
                    6e:89:d2:f6:c7:ad:26:ac:67:fb:3d:b2:64:84:7f:
                    df:ad:34:9f:12:d7:e4:5d:92:01:6c:0c:ee:03:34:
                    6a:bb:68:64:e8:c0:a6:07:ee:24:6f:37:2e:39:0c:
                    44:19:cc:6a:27:fa:ef:d9:65:d8:4a:3d:cc:1e:85:
                    40:2e:45:68:e0:34:93:67:0e:5d:13:a7:26:e8:d9:
                    b6:bb:24:7f:fb:6c:72:9e:45:b1:2e:38:88:e3:02:
                    55:74:f5:5b:5a:06:a0:30:81:b1:65:f8:e5:9f:fa:
                    2f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C5:05:AA:9F:D8:3C:A7:01:68:5B:45:77:CB:8D:16:53:C1:F1:D8
            X509v3 Authority Key Identifier:
                keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:01:0f:82:2c:7a:ca:1e:84:ed:d5:52:52:55:53:0b:fc:63:
         74:95:8a:a4:a4:ce:04:31:d0:fb:81:74:40:d0:b8:db:24:e9:
         8e:fc:52:b8:82:d7:51:f4:44:a7:35:29:1f:c7:64:1e:f6:5d:
         fa:cf:b1:88:b1:e4:41:fa:ac:9f:06:08:c0:49:36:0c:62:dc:
         0d:02:8a:61:9f:09:a5:d1:d6:bb:c7:b2:50:c8:ea:92:0c:50:
         4b:33:26:82:9e:0b:2d:6b:07:0d:72:f9:29:16:d8:d3:68:4d:
         98:c3:f7:24:8f:17:83:c0:f7:3f:7c:49:ee:18:87:8d:66:7e:
         77:72:0a:26:ec:b8:d8:fd:9a:d3:79:a9:84:2a:ef:64:ea:a4:
         91:0f:ad:9b:c2:f6:d0:64:4c:5d:24:93:33:30:af:3e:ca:11:
         95:1a:bb:cb:c1:d5:e2:c8:74:cb:57:e9:b9:89:39:aa:da:0f:
         fd:0e:78:a5:49:b6:42:a7:33:c6:9d:e0:35:65:09:ed:86:68:
         2a:a6:25:5d:e4:b5:b4:30:4e:ec:1c:e0:6c:9e:3c:fc:82:f1:
         0d:ef:3e:eb:13:9b:55:88:6a:70:a5:40:46:ad:a1:35:08:98:
         1b:00:14:0f:48:32:de:2d:67:06:9f:e9:48:1b:cd:b9:22:5e:
         bb:e4:87:0b
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUZSFX1BLKMVZhigajqseq02Ld1IEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkx
MkRGRDIyOTAeFw0yNjEwMDEwNDM0MDhaFw0yNjEwMDQwNzMwMDhaMDMxMTAvBgNV
BAMTKDlCQzUwNUFBOUZEODNDQTcwMTY4NUI0NTc3Q0I4RDE2NTNDMUYxRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtNnQaCSrTPNaMPtPqBJu+eY92
fG+MCbnWG28cFummBf82viqPLgWxwrIKTsz8ZkrUb4d5H+eeDUdqGA4TX7tWSEii
nrKUe/hI7PYvH4arfs/tdT7S50CwGlhxN8w1wivGaH+3TyECWZ+eSHlrxR35ocNE
TMTu7BhFlrUjkJn8NDDPCCTydBR2rsrFLowpx1g6wV8SxW6J0vbHrSasZ/s9smSE
f9+tNJ8S1+RdkgFsDO4DNGq7aGTowKYH7iRvNy45DEQZzGon+u/ZZdhKPcwehUAu
RWjgNJNnDl0Tpybo2ba7JH/7bHKeRbEuOIjjAlV09VtaBqAwgbFl+OWf+i8JAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUm8UFqp/YPKcBaFtFd8uNFlPB8dgwHwYDVR0j
BBgwFoAUpbKxTZdRO2wMgrHlQHA+uRLf0ikwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTg4NzY0NDA5MDYzMDE0NS8xL0E1QjJCMTREOTc1MTNCNkMwQzgyQjFFNTQwNzAz
RUI5MTJERkQyMjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkxMkRGRDIyOS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU4ODc2NDQwOTA2MzAxNDUvMS9BNUIyQjE0RDk3NTEz
QjZDMEM4MkIxRTU0MDcwM0VCOTEyREZEMjI5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwEPgix6yh6E
7dVSUlVTC/xjdJWKpKTOBDHQ+4F0QNC42yTpjvxSuILXUfREpzUpH8dkHvZd+s+x
iLHkQfqsnwYIwEk2DGLcDQKKYZ8JpdHWu8eyUMjqkgxQSzMmgp4LLWsHDXL5KRbY
02hNmMP3JI8Xg8D3P3xJ7hiHjWZ+d3IKJuy42P2a03mphCrvZOqkkQ+tm8L20GRM
XSSTMzCvPsoRlRq7y8HV4sh0y1fpuYk5qtoP/Q54pUm2Qqczxp3gNWUJ7YZoKqYl
XeS1tDBO7BzgbJ48/ILxDe8+6xObVYhqcKVARq2hNQiYGwAUD0gy3i1nBp/pSBvN
uSJeu+SHCw==
-----END CERTIFICATE-----
Generated at Thu Oct 1 19:17:45 2026 by rpki-client