Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
File:                     78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft (raw, json)
Hash identifier:          BMJ/BVvbk/TpglHJ/OFLnKdUojCVfrYBdNKoKnc45hY=
Subject key identifier:   60:B2:A7:3D:54:BD:B2:73:BF:91:EF:DD:CB:B2:22:63:17:80:A8:E7
Authority key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
Certificate issuer:       /CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Certificate serial:       395C36F8C3AFDD4D67664E0C2A516FEDBB61CF94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
Manifest number:          016C
Signing time:             Wed 14 Oct 2026 15:44:19 +0000
Manifest this update:     Wed 14 Oct 2026 15:39:19 +0000
Manifest next update:     Sun 18 Oct 2026 00:15:19 +0000
Files and hashes:         1: AS136958.roa (hash: bO6uRLPGKDb5G5NHguosrRNfcKh5HJvfSnNuUsL9w+c=)
                          2: AS152120.roa (hash: Qbns3jTpPiZ4HvTvydl/LN6gM52cFh04J88DXulOgjc=)
                          3: AS139007.roa (hash: YiJ6BkElfnNZ700uQApYitDZq50ty+TSesXDCL+6OEE=)
                          4: AS17621.roa (hash: o2TQhxFBmNRz2cC3fbMds5ZUARL93ZTG9QZTsznGFeg=)
                          5: AS4808.roa (hash: kqByL1Zclk4Qwl77KzCp9upUtOuASsLyyK2yfuSlb18=)
                          6: AS140707.roa (hash: QGY68alUvxudDfvgKo0dIVPwgS9RrQLPSx5VEu/UuYI=)
                          7: 78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl (hash: BxivcLevCg11pY4Og3AQRc+q2QBC938h+YyiLBSus4A=)
                          8: AS140886.roa (hash: K5iUVEu675lj+AF0RThtVbTFERKfLsnu04bkletpO2Y=)
                          9: AS140979.roa (hash: 3ZaH20GCcLuBW4CZhfJkyavct0/76doMmkuQUvPtUOA=)
                          10: AS133119.roa (hash: UwOt5tr2s7AJyQIvzsx549pVsgIpDht61NuHGXjQm18=)
                          11: AS4837.roa (hash: 3aNfv9rNFrbl3Fv18rtSckqHucV+4bflbjPecW89hZ4=)
                          12: AS140726.roa (hash: fBsrI90xa4tCD6y9mHKQWz6rZEcRrSIEagDlnHcC0cw=)
                          13: AS10206.roa (hash: MwQKlViCcT7jO1Ny0MR34yNXUdcM+8YzcJ82W3X7RTI=)
                          14: AS135061.roa (hash: aAOr4zp8LVI+6zhscnheUfOu12efYqxDQrvW/A11q+s=)
                          15: AS138421.roa (hash: +2a938K7/9xt1CQHblBDN7U/GrPxwsQgk8jTZwFAz6g=)
                          16: AS17622.roa (hash: 05xru/3t4/mY6Rq3gfBggWm7mmeWUAJkJ4u95bY1Y/w=)
                          17: AS137539.roa (hash: hgbPsIvw/d1FiopIGd9dsMQ/f/0+FCTUyZgg2C0Ykg4=)
                          18: AS140716.roa (hash: GS7v0EcdG/AXCHc0iFo17HUzaeWlVx3LY/f80n+5gVA=)
                          19: AS9929.roa (hash: KK74jwcDvE4/GRyR/ZxHCafKJSJIeyfgPASS8MlUljs=)
                          20: AS17816.roa (hash: r3nW2d2gjZnHj4Ls4S4OjmI9LiE0IbXz4p8XGg3/a94=)
                          21: AS17623.roa (hash: z6g5MCOUrEssoy1uJfKEk94+LrQeJ2+bymHuIDB9xxE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 12:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5c:36:f8:c3:af:dd:4d:67:66:4e:0c:2a:51:6f:ed:bb:61:cf:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
        Validity
            Not Before: Oct 14 15:39:19 2026 GMT
            Not After : Oct 18 00:15:19 2026 GMT
        Subject: CN=60B2A73D54BDB273BF91EFDDCBB222631780A8E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f7:f9:64:50:ce:de:df:52:40:76:0b:0d:1b:
                    7f:5a:b2:00:4c:5f:ad:39:5f:61:cf:c1:6b:b2:73:
                    15:ed:a7:52:02:3d:91:49:48:8d:95:d9:07:16:78:
                    00:b4:ca:10:15:01:f5:ac:38:8e:88:49:45:04:c2:
                    49:2c:2f:30:84:df:ae:3b:1f:13:25:f8:88:53:c6:
                    cc:a8:45:8b:ba:1f:6e:26:cb:b4:a5:d9:0f:02:84:
                    92:2d:08:7c:5b:60:42:17:e5:88:c5:a5:94:cc:bf:
                    46:3b:a3:a3:3a:ec:14:1c:ce:34:af:3f:14:5a:39:
                    d7:91:ba:97:aa:8e:02:97:62:79:6e:0a:af:c7:8b:
                    60:4b:bf:3f:73:c7:0c:63:c1:8f:86:57:d9:20:a8:
                    6b:9f:01:da:f5:15:4f:a6:64:9d:90:ed:9a:2f:ab:
                    b6:ef:96:41:cb:a3:43:77:f0:7d:42:0e:74:0c:99:
                    ac:a6:a5:c0:35:82:5b:a1:5f:12:f8:05:e2:bf:d8:
                    17:75:3d:d6:b0:be:49:87:34:2f:6e:1c:ab:07:53:
                    a8:28:e0:f7:70:b6:03:dd:f1:0f:4a:63:a1:76:ae:
                    30:80:b8:36:5f:a4:7a:2f:3d:80:32:10:9f:8d:72:
                    ce:42:a9:b2:22:08:cb:2e:e8:7c:75:7d:a9:b3:65:
                    0b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B2:A7:3D:54:BD:B2:73:BF:91:EF:DD:CB:B2:22:63:17:80:A8:E7
            X509v3 Authority Key Identifier:
                keyid:78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ee:35:5d:8f:6d:a1:64:3e:c8:5f:1e:ba:e4:a0:ea:41:08:
         6b:11:24:d0:ea:ca:6d:4c:92:c0:2c:9e:cc:57:d3:6d:77:21:
         b0:06:15:be:42:81:f2:20:58:22:e6:27:dd:05:ea:65:56:1a:
         5a:7b:9d:69:3f:9d:d0:21:81:0a:5f:98:48:aa:88:e5:82:9a:
         b1:59:ba:d7:ad:0c:ec:46:03:4d:eb:f3:b3:42:4b:8d:af:86:
         45:bc:d9:bd:47:29:3f:11:a5:f0:dc:a2:b4:b9:c0:73:80:42:
         2c:1f:e0:2b:af:25:d7:c3:67:e4:58:25:2c:d9:17:dd:36:82:
         01:ef:8b:c8:92:86:35:a6:60:94:db:69:d0:46:41:9d:24:26:
         20:c0:73:ed:b8:5f:0f:aa:55:16:a5:5d:11:a5:53:b3:b1:8d:
         9f:0b:07:c8:fe:40:33:6b:4b:32:22:4b:a2:36:bb:87:3a:76:
         91:71:20:2f:c2:76:15:f9:31:0a:c9:c7:96:eb:73:f9:1b:7d:
         c3:0e:df:93:b1:93:a9:35:f4:76:c3:76:ed:fd:af:d6:cd:03:
         f6:bb:25:a6:ef:7e:7e:86:11:35:cd:e7:78:7a:3a:34:ae:68:
         5d:5a:75:81:bf:84:13:6f:20:e7:4d:d4:22:c0:04:c6:ad:e8:
         00:06:cb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:58:45 2026 by rpki-client