Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft
File:                     C178E89AC582AE71D7881FC86E201466F09D849B.mft (raw, json)
Hash identifier:          xPsFYOlXtgHwC5M1mhFHKGUeQU/I7NFjHdVyImebA9o=
Subject key identifier:   FB:8C:A6:39:5E:53:3B:54:ED:06:5F:34:B4:29:1D:76:14:D6:7C:B8
Authority key identifier: C1:78:E8:9A:C5:82:AE:71:D7:88:1F:C8:6E:20:14:66:F0:9D:84:9B
Certificate issuer:       /CN=C178E89AC582AE71D7881FC86E201466F09D849B
Certificate serial:       4DBCE07620CDD40D15B65404F54E962762E222C7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft
Manifest number:          A1
Signing time:             Fri 09 Oct 2026 11:38:21 +0000
Manifest this update:     Fri 09 Oct 2026 11:33:21 +0000
Manifest next update:     Mon 12 Oct 2026 20:18:21 +0000
Files and hashes:         1: 3130332e35332e3230382e302f32342d3234203d3e2034383038.roa (hash: enYv3abbVKOktfEN/FTcAdZ8EmguoNf0izTnKUsvjeY=)
                          2: C178E89AC582AE71D7881FC86E201466F09D849B.crl (hash: zgoTq1USGktnBcnwtDUaS1jYOlCRze9hp3gqx0sxPc4=)
                          3: 3130332e35332e3231312e302f32342d3234203d3e2034383038.roa (hash: 9USapACXMKvdBF3g3pPaZVE/MEDexYhYCH1QWormaIc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 20:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:bc:e0:76:20:cd:d4:0d:15:b6:54:04:f5:4e:96:27:62:e2:22:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C178E89AC582AE71D7881FC86E201466F09D849B
        Validity
            Not Before: Oct  9 11:33:21 2026 GMT
            Not After : Oct 12 20:18:21 2026 GMT
        Subject: CN=FB8CA6395E533B54ED065F34B4291D7614D67CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a8:2e:35:b8:dd:db:a1:a9:c4:d5:b3:4b:51:
                    89:ca:5b:f3:57:9a:88:e2:8e:4b:7f:bb:92:f5:3b:
                    d6:14:90:05:e4:b4:29:5a:5b:0a:f9:49:f5:79:18:
                    27:26:9a:d0:63:ec:a6:e4:f7:7d:c0:0e:ed:ee:a0:
                    94:ba:9a:4a:54:9d:df:12:e0:8c:9b:a5:04:af:35:
                    15:a7:ad:cd:74:69:d6:9c:6e:85:d2:1d:c5:fd:23:
                    06:6c:29:4f:aa:ee:4e:f8:ee:c7:b8:97:00:95:92:
                    ef:93:6c:ba:10:84:23:5e:b8:17:cb:46:f6:8b:43:
                    03:48:67:ef:d0:ff:08:66:eb:53:bc:c0:03:04:a1:
                    87:6a:29:f5:b1:1f:b5:fe:1b:4f:ce:de:1a:d4:62:
                    c6:7b:7c:91:f9:fe:12:58:b3:3f:51:96:6d:a2:82:
                    6b:1a:84:2f:4d:e9:c8:3f:2d:f1:38:71:83:b3:e5:
                    be:a7:38:80:11:25:ea:10:de:d7:b6:24:e1:af:e6:
                    17:8b:af:3e:88:75:bf:ed:6b:c7:44:93:e3:e4:2d:
                    d3:fb:dc:a8:47:73:7e:f5:f2:26:f3:c4:a7:d0:6d:
                    65:ae:11:2a:f9:1b:30:e5:3c:bd:79:a1:05:93:75:
                    ec:55:87:39:fc:0a:db:f1:3e:66:66:99:93:a8:62:
                    42:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8C:A6:39:5E:53:3B:54:ED:06:5F:34:B4:29:1D:76:14:D6:7C:B8
            X509v3 Authority Key Identifier:
                keyid:C1:78:E8:9A:C5:82:AE:71:D7:88:1F:C8:6E:20:14:66:F0:9D:84:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:4c:8e:18:6a:43:ec:4f:f3:09:8b:76:7b:a4:c1:c5:e0:b4:
         9f:5c:f8:bf:08:f5:d1:f3:e2:89:6e:ec:2f:19:08:96:df:2c:
         df:e1:4f:23:b9:5a:02:91:49:47:21:b6:b8:e5:d3:a9:5b:c9:
         82:49:28:24:3e:e8:c8:70:7e:65:83:c2:6d:ae:4a:a6:b3:20:
         f0:6e:80:64:66:06:4d:7b:34:36:77:90:cf:6c:2a:3d:a5:ee:
         8f:79:db:97:3e:aa:cc:a5:5f:81:7a:1c:ae:5f:ed:4b:d8:b5:
         c7:60:68:66:50:be:7b:4f:0b:9a:11:49:29:f4:56:d5:21:c3:
         76:ae:ba:22:25:59:af:b8:ae:7f:67:9b:81:58:0e:9d:8d:cc:
         3e:e7:5a:f2:1b:cf:74:b9:1d:13:58:37:26:ad:c1:38:88:86:
         53:91:2d:48:fa:68:e5:b9:4f:4f:2c:4b:d5:c1:2e:99:a2:63:
         f4:93:04:41:0a:1d:92:73:01:cd:1e:4d:18:73:fe:29:da:70:
         13:6c:e2:68:30:1d:c9:3f:5f:d8:60:92:9f:0e:83:6f:d9:20:
         14:4f:fa:31:2b:7a:58:ab:a9:83:bb:94:a7:eb:d6:b8:23:f6:
         c8:2e:66:ed:24:c8:ad:f4:48:4f:e7:c9:a4:4c:21:2b:f9:d1:
         86:b4:a0:24
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUTbzgdiDN1A0VtlQE9U6WJ2LiIscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzE3OEU4OUFDNTgyQUU3MUQ3ODgxRkM4NkUyMDE0NjZG
MDlEODQ5QjAeFw0yNjEwMDkxMTMzMjFaFw0yNjEwMTIyMDE4MjFaMDMxMTAvBgNV
BAMTKEZCOENBNjM5NUU1MzNCNTRFRDA2NUYzNEI0MjkxRDc2MTRENjdDQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtqC41uN3boanE1bNLUYnKW/NX
mojijkt/u5L1O9YUkAXktClaWwr5SfV5GCcmmtBj7Kbk933ADu3uoJS6mkpUnd8S
4IybpQSvNRWnrc10adacboXSHcX9IwZsKU+q7k747se4lwCVku+TbLoQhCNeuBfL
RvaLQwNIZ+/Q/whm61O8wAMEoYdqKfWxH7X+G0/O3hrUYsZ7fJH5/hJYsz9Rlm2i
gmsahC9N6cg/LfE4cYOz5b6nOIARJeoQ3te2JOGv5heLrz6Idb/ta8dEk+PkLdP7
3KhHc3718ibzxKfQbWWuESr5GzDlPL15oQWTdexVhzn8CtvxPmZmmZOoYkKpAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU+4ymOV5TO1TtBl80tCkddhTWfLgwHwYDVR0j
BBgwFoAUwXjomsWCrnHXiB/IbiAUZvCdhJswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzUwODI4NTE4NDkzMzkwNS8wL0MxNzhFODlBQzU4MkFFNzFENzg4MUZDODZFMjAx
NDY2RjA5RDg0OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzE3OEU4OUFDNTgyQUU3MUQ3ODgxRkM4NkUyMDE0NjZGMDlEODQ5Qi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDc1MDgyODUxODQ5MzM5MDUvMC9DMTc4RTg5QUM1ODJB
RTcxRDc4ODFGQzg2RTIwMTQ2NkYwOUQ4NDlCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEyOGGpD7E/z
CYt2e6TBxeC0n1z4vwj10fPiiW7sLxkIlt8s3+FPI7laApFJRyG2uOXTqVvJgkko
JD7oyHB+ZYPCba5KprMg8G6AZGYGTXs0NneQz2wqPaXuj3nblz6qzKVfgXocrl/t
S9i1x2BoZlC+e08LmhFJKfRW1SHDdq66IiVZr7iuf2ebgVgOnY3MPuda8hvPdLkd
E1g3Jq3BOIiGU5EtSPpo5blPTyxL1cEumaJj9JMEQQodknMBzR5NGHP+KdpwE2zi
aDAdyT9f2GCSnw6Db9kgFE/6MSt6WKupg7uUp+vWuCP2yC5m7STIrfRIT+fJpEwh
K/nRhrSgJA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 03:40:37 2026 by rpki-client