Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
File:                     158B95F55D548B072B42C2C2820ACE7D9908E60F.mft (raw, json)
Hash identifier:          MC8SpyuPUb2ZZBGZoFXsWG/pHP18IcUwDv3SOOlXeUI=
Subject key identifier:   DD:E2:36:A3:D3:43:62:03:CE:67:7D:CD:FC:3F:A9:19:1F:47:67:CB
Authority key identifier: 15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F
Certificate issuer:       /CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
Certificate serial:       268B367C9AA322017730FD8A4D912668C992E6CA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
Manifest number:          B8
Signing time:             Wed 23 Sep 2026 18:20:25 +0000
Manifest this update:     Wed 23 Sep 2026 18:15:25 +0000
Manifest next update:     Sun 27 Sep 2026 05:27:25 +0000
Files and hashes:         1: 3130332e32342e3137362e302f32322d3232203d3e2034383136.roa (hash: JjMQBoGwSlzFw0HyUckCXXshRc+6JJT58uH4bfroxMk=)
                          2: 3130332e3233382e3138382e302f32322d3232203d3e2034383136.roa (hash: IN2IWp9b73L95UufodS/94IdWqlYTDWZOnKKI30WHGM=)
                          3: 3130332e32342e3137362e302f32322d3232203d3e203539303732.roa (hash: T83A0nhY2rHA4sN3mO3P5tUJfQ79vOxGS+0CJKHN3qI=)
                          4: 3130332e3233382e3138382e302f32322d3232203d3e203539303732.roa (hash: MJV3liXPzb+8HJt4Ngb1akXn1l5wwQw1ddvEgcsiGwE=)
                          5: 34332e3235342e3135362e302f32322d3232203d3e20313335303631.roa (hash: 6gCPRqIsIGqs9K+MX9psHeijf0HFSORn3xh/W/ZUVN8=)
                          6: 34332e3235342e3135362e302f32322d3232203d3e203539303732.roa (hash: 6gR0ZPFuNC294r5LAsw0olROZtYwrJv5AXDoSLqwLXc=)
                          7: 34332e3234372e36382e302f32322d3232203d3e2034383136.roa (hash: RgvI0XhO3XacBu3wOvzmrHKrZIWSkSXKoEV6lCdxrrM=)
                          8: 34332e3235342e3135362e302f32322d3232203d3e2034383136.roa (hash: U7lk/seyK5wsmf9rpNYFQ60FADMFiDu0J8En0AwUKps=)
                          9: 3130332e32342e3137362e302f32322d3232203d3e20313335303631.roa (hash: sXBIyQqRHVSZNcPR9Xrj9U2Y6sS9BHJ6YoFqJ54U90c=)
                          10: 158B95F55D548B072B42C2C2820ACE7D9908E60F.crl (hash: gG04jaQngNnET6wE7Ig/q124p7SVyS+2fbbFkWCTfaw=)
                          11: 34332e3234372e36382e302f32322d3232203d3e203539303732.roa (hash: HFam681MVql7io9x8AgabYOuz1bqi/F3PX9muXtUEIY=)
                          12: 3130332e3233382e3138382e302f32322d3232203d3e20313335303631.roa (hash: xJ7VcowKTFAh+WOZ79sCa/KDiTGsKX9YSHQBCzfiaTk=)
                          13: 34332e3234372e36382e302f32322d3232203d3e20313335303631.roa (hash: sZKR1aSpK2bfOPYuVGIDfBr4OmtJuXL3mW99K3THAoc=)
                          14: 34332e3234372e36382e302f32322d3232203d3e20313334313936.roa (hash: BOrnJuBQWWbSNEwWS9msbaKMlsq7KEpqAJujOnLFNU8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 05:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8b:36:7c:9a:a3:22:01:77:30:fd:8a:4d:91:26:68:c9:92:e6:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
        Validity
            Not Before: Sep 23 18:15:25 2026 GMT
            Not After : Sep 27 05:27:25 2026 GMT
        Subject: CN=DDE236A3D3436203CE677DCDFC3FA9191F4767CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8e:2b:65:5f:30:0e:0b:55:fa:06:c3:75:97:
                    ae:d3:f2:4e:dd:22:1a:ff:c9:1e:be:51:70:8d:2c:
                    ae:88:da:7e:43:3c:65:95:9d:aa:cb:41:ab:3e:85:
                    2c:5c:c0:20:ab:c3:51:c3:a1:4b:11:2a:65:65:d8:
                    2c:d4:a6:d3:0d:c0:d0:0d:62:a3:71:7d:49:6f:61:
                    99:cf:38:5b:94:f1:59:04:b2:ff:72:2d:90:1a:8c:
                    c9:bc:45:4a:8a:f1:1d:f7:37:51:7c:22:11:26:8c:
                    a8:40:0e:7a:b2:d2:7c:26:72:d1:fe:b8:69:2c:3e:
                    92:9d:f2:7b:d2:b2:21:c9:e9:90:2c:b7:3e:87:01:
                    e8:c0:05:b4:f7:79:06:3c:ab:b5:12:d3:4e:86:1c:
                    06:7f:68:05:bf:cc:e5:91:50:21:d5:ab:13:a3:f2:
                    95:64:2a:5c:65:05:b8:1f:3a:f0:93:df:ee:92:e2:
                    b8:74:98:79:11:9c:47:bd:96:50:86:e2:ca:d2:ef:
                    ed:46:79:1a:b1:04:54:a3:a5:ea:23:17:a4:33:b0:
                    6a:fb:39:b4:5e:79:f5:3e:09:ac:2a:7b:50:d9:b0:
                    e3:fd:35:88:dc:69:7c:fa:6a:43:8d:f4:25:dc:2f:
                    53:0a:bd:50:a9:72:78:5b:18:ff:df:12:c6:c3:bd:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E2:36:A3:D3:43:62:03:CE:67:7D:CD:FC:3F:A9:19:1F:47:67:CB
            X509v3 Authority Key Identifier:
                keyid:15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:93:05:ee:0f:c3:ee:07:f6:20:82:6f:77:bf:86:ea:6c:d1:
         9f:ac:13:d4:33:4b:ee:a0:26:53:29:5a:94:ab:e4:a3:9a:7f:
         63:ed:48:b9:50:9b:e5:30:b9:66:9a:74:25:8f:67:d8:88:fe:
         25:00:0f:64:00:fc:44:1d:0e:00:63:b1:f9:c2:31:ea:26:0f:
         b8:1f:9a:c3:14:af:c7:b7:76:48:93:20:1a:3a:4b:3e:b7:c1:
         a0:5f:2e:ef:72:25:d1:a9:21:01:0c:a9:f2:d3:62:42:18:7d:
         67:5b:56:17:2c:9c:30:37:5e:98:31:9e:af:81:08:ff:55:3e:
         9d:2f:34:c1:d7:c9:f9:0f:5a:77:a7:16:82:d7:b2:3d:10:22:
         21:a0:5d:41:8d:f1:e0:46:03:59:12:ce:57:bf:d4:23:18:fd:
         7f:9e:7a:5b:aa:21:2c:02:f8:e6:e5:25:86:1d:d0:ae:5a:f7:
         b9:b4:aa:9e:f3:49:3c:09:ca:4d:08:51:52:f6:20:67:07:dd:
         9a:d1:59:c3:cd:01:64:f5:53:4e:1c:04:cb:32:55:46:b7:8a:
         42:eb:4c:53:41:25:0c:64:20:5f:4d:ac:6c:13:6b:ce:e8:a8:
         2e:7f:3d:9c:17:12:80:c3:9e:78:4a:36:f8:dd:71:cd:14:90:
         64:5b:74:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:30:06 2026 by rpki-client