Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
File:                     A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft (raw, json)
Hash identifier:          /FSpiyz38xq93SXNj5+9kFGvBpFV7Lh2aps2xnFEFdM=
Subject key identifier:   EB:15:0B:C5:B4:E6:FF:64:9F:58:B0:F5:C8:8E:6A:5E:90:4B:51:BA
Authority key identifier: A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F
Certificate issuer:       /CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F
Certificate serial:       1F2967ADF12CEEA1688829B7AB2B7D10B2EBAFC8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
Manifest number:          C0
Signing time:             Sat 03 Oct 2026 17:02:05 +0000
Manifest this update:     Sat 03 Oct 2026 16:57:05 +0000
Manifest next update:     Tue 06 Oct 2026 21:23:05 +0000
Files and hashes:         1: 3132312e34362e3139362e302f32322d3232203d3e20313430373137.roa (hash: r1OrvrQbOG3CWpMBVfsfGJEW6xW4KGBKQR94p3XbtMs=)
                          2: 3132312e34362e3139322e302f32322d3232203d3e203536303436.roa (hash: eS3fIU3qyAFP/R9AYBNjmWcu/ek4BsGa+9vz4CrGdkE=)
                          3: 3132312e34362e3139322e302f32322d3232203d3e20313430373137.roa (hash: 5wawcPsM5m80HU28KarQtD66H36M4Wp3DiAa4Kkd7FM=)
                          4: 3132312e34362e3230302e302f32322d3232203d3e20313430323932.roa (hash: 8xs+dUd+uQdNQZJjuvb+nFvO1wt2heC5dsLAy2/mChI=)
                          5: 3132312e34362e3139362e302f32322d3232203d3e20313430323932.roa (hash: O/AD3qSU6wTIgj4hkNfIn+Jeen/941RJSXGvoa481lc=)
                          6: 3132312e34362e3230302e302f32322d3232203d3e20313430373137.roa (hash: EEb5FwKgW5dHQUxB859/L0aDnU2++rdkRtR6F19ReF8=)
                          7: 3132312e34362e3139362e302f32322d3232203d3e203536303436.roa (hash: aodd28e8U9PHDKWSm11EB6EZp6VbHVm/MuILVwyonvk=)
                          8: A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl (hash: 3giH49IMksfOMTBiAhBtbwCrxVmWaN+wXWnoDuy2P6w=)
                          9: 3132312e34362e3139322e302f32322d3232203d3e20313430323932.roa (hash: wc58+9s0xCI5qy0srFHch4c3xXfPOj0QoS2Uy2hNKzo=)
                          10: 3132312e34362e3230302e302f32322d3232203d3e203536303436.roa (hash: ctS4EHMva7f1SKBENENSA56WVaEq0k2ByBGUs33Z5FA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 09:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:29:67:ad:f1:2c:ee:a1:68:88:29:b7:ab:2b:7d:10:b2:eb:af:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F
        Validity
            Not Before: Oct  3 16:57:05 2026 GMT
            Not After : Oct  6 21:23:05 2026 GMT
        Subject: CN=EB150BC5B4E6FF649F58B0F5C88E6A5E904B51BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d9:07:a9:09:ca:2b:aa:54:8c:ff:7e:92:07:
                    47:fd:e6:eb:a7:17:e7:4d:ce:83:8c:34:1f:da:68:
                    68:02:42:56:60:dd:eb:1d:48:d0:b8:24:3c:af:1c:
                    1d:b8:1b:49:c3:e3:4b:15:e6:d7:e1:5b:46:5f:5b:
                    d6:49:b6:23:81:79:55:3b:f5:66:26:6b:28:94:c2:
                    a8:11:99:51:d1:e9:f3:f0:ef:d1:05:38:e5:f9:00:
                    e0:61:be:7c:25:3d:c0:18:a2:e5:9a:b5:2f:1f:de:
                    26:f6:38:63:ba:5d:f9:85:a7:d3:96:09:61:6c:69:
                    ca:38:73:35:01:7b:68:15:3a:f7:aa:d4:cb:c4:16:
                    cf:d7:e8:f3:26:f9:6f:e3:d5:01:32:94:80:66:cd:
                    79:ea:1d:98:f7:c3:c0:21:d6:1e:ba:6d:c0:e9:de:
                    f0:b4:b1:cd:24:45:a6:34:6a:49:e0:da:9c:e1:0a:
                    1b:5f:15:15:07:11:f0:5e:91:93:51:29:99:f8:da:
                    34:cd:90:73:69:19:bf:03:13:fc:29:f5:55:0f:38:
                    64:a2:ac:3a:6a:cf:30:b4:5e:93:93:bd:bc:02:21:
                    7a:88:8d:e5:d3:03:0e:94:e5:5d:51:46:41:3a:e9:
                    4f:cf:38:4b:5f:f5:d0:25:4a:b6:ea:3e:dc:29:f6:
                    78:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:15:0B:C5:B4:E6:FF:64:9F:58:B0:F5:C8:8E:6A:5E:90:4B:51:BA
            X509v3 Authority Key Identifier:
                keyid:A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:2b:40:69:c9:04:83:b1:b3:f7:91:52:bb:2d:39:fc:32:db:
         c9:ed:39:13:b1:74:1c:70:49:68:a0:49:e9:fa:59:3f:ad:b3:
         30:99:fe:65:44:8c:6e:1b:a5:d8:26:20:e3:b3:82:cc:9f:e2:
         8b:a4:ef:22:67:13:39:76:ad:02:e1:2f:e1:14:bd:25:24:5d:
         51:74:e9:89:6c:e6:27:85:58:bd:1f:4e:1a:60:d4:7d:4d:d8:
         eb:5c:d1:46:d0:1d:63:49:cb:2a:d9:1d:73:bd:c3:a3:18:47:
         4a:06:c6:cc:f7:b7:7f:95:44:7d:7f:9a:3a:de:68:f5:07:7e:
         d1:c2:9a:44:13:82:78:f7:f7:99:24:c1:ee:b0:2e:19:4c:cc:
         af:88:d4:c4:92:fc:f7:d2:39:fb:8b:bf:92:1b:4e:ec:d9:93:
         20:c7:30:5e:9c:4f:60:72:59:0e:7a:53:7c:cd:7d:09:3b:2a:
         3a:ff:19:f6:04:24:f1:d7:0b:f0:25:53:97:2d:1f:9f:03:a8:
         ae:a5:ae:dd:12:25:cd:a3:24:28:9d:1f:94:a6:24:61:e3:55:
         57:1a:d3:d2:a5:dd:13:d6:33:b8:4b:51:6d:aa:a2:b9:6a:b8:
         17:92:53:86:c7:80:52:5e:3c:c4:e3:97:79:30:05:81:72:3d:
         4d:52:bb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:46:11 2026 by rpki-client