Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
File:                     4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft (raw, json)
Hash identifier:          R0x9r9UMZubIsDjXEyaiMM0ouBSj1C1fY8uhgdiWUjk=
Subject key identifier:   17:AB:98:6B:5E:79:B4:CF:23:C8:96:BB:0A:7F:2D:36:39:7C:2C:CB
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Certificate issuer:       /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial:       31FAB3BBEAF483BA5F995EFA339892C132A6E24A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
Manifest number:          D8
Signing time:             Sun 11 Oct 2026 12:10:37 +0000
Manifest this update:     Sun 11 Oct 2026 12:05:37 +0000
Manifest next update:     Wed 14 Oct 2026 12:31:37 +0000
Files and hashes:         1: 3130332e3232322e3138302e302f32342d3234203d3e203538343636.roa (hash: 0JGuJhToHH0L5OQLMRNBtLB9WwPftj52WrM4HHFq/M8=)
                          2: 3130332e3232322e3138302e302f32322d3232203d3e203538343636.roa (hash: KJ8ndn4BgQmtgW+vFewhPUiCUx0OF8yJqc/FF4/GVvA=)
                          3: 34352e3235312e35342e302f32342d3234203d3e203633353939.roa (hash: cTOAofuVrZB6PvajehxRqJi1HOjgKdwuykVDBV6ic3Y=)
                          4: 3130332e38392e3131332e302f32342d3234203d3e203633353939.roa (hash: hQKB7wKD7sK/SrxmBN5jMLs19OSDy2v58Jdv0HOGrB4=)
                          5: 3130332e38392e3131342e302f32342d3234203d3e203633353939.roa (hash: HWzCIK0J3kj61jM4RJKLtXp5PntrD5IoFA2l+KWrNdg=)
                          6: 3130332e3232322e3137382e302f32342d3234203d3e203538343636.roa (hash: F41StT+x2rlWXOQVNKcm+wNnMgPZjhcz7G5e31rQ98c=)
                          7: 3130332e3231352e34352e302f32342d3234203d3e203633353939.roa (hash: 8mVkqtHAsXXoQdq7QTFwXAv0F2qADSnLhXnxk2xo7+M=)
                          8: 3130332e3231352e34372e302f32342d3234203d3e203633353939.roa (hash: u/vlygKRp4uqaQ1eQKS9c4Kf1g9VgGjmp1fspJX/cVs=)
                          9: 34352e3235312e35322e302f32342d3234203d3e203633353939.roa (hash: J5ttVDSRteWIi4hwKsChc1z51WL7/hz22Kunm15KqPk=)
                          10: 3130332e3231352e34342e302f32342d3234203d3e203538343636.roa (hash: aTIutstV7nnOrlPVa9rL0oVDFBjtwfzvlvl2eoyD1/8=)
                          11: 3130332e3232322e3138312e302f32342d3234203d3e203538343636.roa (hash: uKysvU2wPaXdqx5np2DX47AZPrvFjLAnDA6TLyNZjPM=)
                          12: 3130332e38342e31372e302f32342d3234203d3e203633353939.roa (hash: 08vQYNuWTP9OAw5cshG0cE68oQpzGq6+3rF8HhD3PJY=)
                          13: 3130332e3232322e3137392e302f32342d3234203d3e203538343636.roa (hash: G/oPdJHLin19eoCFgMmdJT+rkoQwoDBkC0Q90Pre/iY=)
                          14: 3130332e38342e31362e302f32342d3234203d3e203633353939.roa (hash: b4swGTnagQiiHyws9QCt7f/EiuwxqkWDoYa89SJ+Pro=)
                          15: 3130332e38392e3131322e302f32342d3234203d3e203633353939.roa (hash: qeNecZYzzDOdHNQ7OI1FGeTPwXb6OHSlmtGAyhOcfnc=)
                          16: 3130332e3231352e34362e302f32342d3234203d3e203633353939.roa (hash: lCKeTzCngwtaI2otW+3pf3dT4E8FfBmqb7nBEm4iEO0=)
                          17: 3130332e38342e31392e302f32342d3234203d3e203633353939.roa (hash: G7UdhBTuk//TBOjHKhN/OeEw0aA18CQ1k+SEI8xy8bc=)
                          18: 3130332e3232322e3138332e302f32342d3234203d3e203538343636.roa (hash: trWDmxj/bNtvLXn0EQ5qDElMfvX977EfQlgVuGKjWOk=)
                          19: 3130332e3232322e3137372e302f32342d3234203d3e203538343636.roa (hash: sH7OowcFHJCcPwvZJv25D4lUlZf+T7s/iYMS2TGzZjc=)
                          20: 34352e3235312e35352e302f32342d3234203d3e203633353939.roa (hash: Jeg+X5mimydK7xcUiFtmKKbOa2PTH3bkxmXeoztyTKI=)
                          21: 3130332e3232322e3137362e302f32322d3232203d3e203538343636.roa (hash: UpPEAYdcHSdgSDgWM1Xgq+oFeYVQGymiRyGhcR0Lp6Y=)
                          22: 3130332e3232322e3137362e302f32342d3234203d3e203538343636.roa (hash: XB81JUcmyZM4a4Aj4m+xpC4HUoBeeoNN9kOjOp5xSlU=)
                          23: 4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl (hash: +wxqb4Kg2AtLFqvexCwLi0SGOIwQpZBpyAuR5qLX/p0=)
                          24: 3130332e38392e3131352e302f32342d3234203d3e203633353939.roa (hash: B4R2Xn+gXDVx1b+C8xHqcnF6Dc+KqwoBc8mdRqmz84g=)
                          25: 3130332e3232322e3138322e302f32342d3234203d3e203538343636.roa (hash: HWtDjdcXqq3zhzr+mpXlFH5pOBwY2xagFmHw0HxdMcA=)
                          26: 34352e3235312e35332e302f32342d3234203d3e203633353939.roa (hash: gpdB2M4QzC5+FVSJ96SLxf+q0nMlU6vsNa1+V19UGpU=)
                          27: 3130332e38342e31382e302f32342d3234203d3e203633353939.roa (hash: 3DmQOstdoBvJ2hoZgDbRJT6QPLY4tMgVKWUBkWPRlxo=)
                          28: 3130332e3231352e34352e302f32342d3234203d3e203538343636.roa (hash: XkU0YtFgShSzOo20rJdwEEfkrJVTk7yy7dqNfbR4/fo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 12:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fa:b3:bb:ea:f4:83:ba:5f:99:5e:fa:33:98:92:c1:32:a6:e2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
        Validity
            Not Before: Oct 11 12:05:37 2026 GMT
            Not After : Oct 14 12:31:37 2026 GMT
        Subject: CN=17AB986B5E79B4CF23C896BB0A7F2D36397C2CCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:42:fe:78:3a:12:d5:a3:97:82:d5:12:64:69:
                    d9:6e:dc:8d:bd:18:cd:9e:57:34:2f:be:00:39:ed:
                    12:02:e9:f3:25:c4:cf:74:fe:98:e7:ba:2c:8e:97:
                    59:e1:40:9c:b7:1b:2b:72:de:e4:85:24:db:44:34:
                    fd:ad:d9:b9:4a:1a:dc:4b:81:d5:e9:45:81:3c:6b:
                    bf:60:98:b3:b3:c6:4d:17:c6:68:54:e0:70:4e:cb:
                    7a:3f:cb:d2:32:3e:e7:a1:b4:5c:75:2c:91:a6:5e:
                    f1:27:82:e8:55:86:69:06:89:eb:3e:fc:89:7d:ec:
                    97:bd:42:fe:f3:e5:05:1e:34:22:b5:25:e5:3d:3e:
                    cb:0a:74:88:5f:53:a6:68:8d:7e:18:c9:28:c5:95:
                    bb:0b:20:bd:43:ac:0e:8b:65:e1:ae:8e:01:57:6f:
                    35:01:16:11:16:60:03:c4:64:c9:3b:95:7b:77:c2:
                    c0:bd:fa:7c:cb:08:97:ee:b4:42:37:8a:99:e2:a4:
                    26:b5:fa:95:2e:c7:10:c1:fa:22:77:bf:b7:10:91:
                    80:0d:96:22:ca:b9:53:6e:73:1f:c6:61:1a:66:de:
                    fa:d5:e6:48:30:3a:99:15:01:36:ad:ad:fb:74:44:
                    50:08:28:d5:72:cc:36:e7:cf:48:73:40:1e:2a:f7:
                    e9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AB:98:6B:5E:79:B4:CF:23:C8:96:BB:0A:7F:2D:36:39:7C:2C:CB
            X509v3 Authority Key Identifier:
                keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:05:28:ac:56:f4:54:be:fb:e2:b5:b8:a4:14:46:e1:ad:8a:
         ef:b7:d0:b2:01:de:b0:eb:64:d2:c6:81:62:3f:47:0b:d4:e7:
         cf:28:f7:cb:ba:a2:94:83:c8:a0:a0:08:45:a3:a6:40:f4:b9:
         aa:1a:94:28:7d:48:11:ef:d0:b2:ff:28:6b:3e:f3:b4:dc:26:
         2a:35:d2:06:ba:75:fd:56:f5:e2:63:47:2b:7a:7d:d8:64:3d:
         d5:e3:f0:f9:39:2b:d6:76:87:57:8e:09:38:a6:62:82:2d:64:
         e7:d3:9c:7b:d0:49:83:7b:1d:ad:18:51:48:ee:94:42:ef:87:
         97:6a:0a:26:34:14:d7:b7:71:7e:ec:d3:06:77:3c:e3:ce:eb:
         66:e5:36:c9:0c:2f:96:e1:7c:3b:3b:25:ef:31:0d:b3:0a:78:
         38:d8:b3:c8:cd:47:c4:ab:b6:9e:c5:ce:75:81:67:bd:83:eb:
         db:04:88:be:70:d5:78:8e:53:9a:ff:f9:d1:02:33:74:ba:29:
         c4:95:a4:f2:b0:7f:8d:70:f5:d3:85:71:1f:23:16:53:b8:7f:
         61:f9:86:f8:7a:64:b7:03:40:f7:24:3b:f0:bc:0f:97:0f:c9:
         71:1a:54:ce:3a:33:94:10:2f:47:66:bb:64:c4:cc:63:d1:21:
         cc:a9:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:06:48 2026 by rpki-client