Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
File:                     C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft (raw, json)
Hash identifier:          O3BlVun64nJGHdNjaOkiOpx7hUKHAhify5g97G9Y4s8=
Subject key identifier:   37:D4:CC:13:C6:B5:53:C5:F7:5A:1D:D9:13:9D:63:E2:03:9E:F1:D1
Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
Certificate issuer:       /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Certificate serial:       6476A0E083AEA7B96E59FC1F941E413760986DDC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
Manifest number:          C5
Signing time:             Mon 12 Oct 2026 17:12:11 +0000
Manifest this update:     Mon 12 Oct 2026 17:07:11 +0000
Manifest next update:     Fri 16 Oct 2026 04:53:11 +0000
Files and hashes:         1: 3131392e38302e3136312e302f32342d3234203d3e2034383038.roa (hash: 5sGFVAkwsSFCfdJmEgFc8dvUZwQjRQL81uXxcgJGHj4=)
                          2: 3131392e38302e31362e302f32302d3230203d3e2030.roa (hash: wXdUkHyko20WaVlYUiHP8tBEIEQIv2A+egzvJ1QeSK4=)
                          3: 3131392e38302e3137362e302f32302d3230203d3e2030.roa (hash: WkeMQ5ShuDCNuxaVGUtgg2qrqKsnJFK/iRO/iA40KzY=)
                          4: 3131392e38302e3136332e302f32342d3234203d3e2030.roa (hash: 5CdaaTQdvXXChpnSQuj4LrMOT2wdb5Jvb4r+gllu8XE=)
                          5: 3131392e38302e302e302f32312d3231203d3e2034383038.roa (hash: kz6VvEWmHlmuYkpHk1spnIMXYN9OBLP2wWo126znQG8=)
                          6: 323430303a353538303a3a2f33322d3332203d3e2030.roa (hash: WDe3fPz0Ru7oQ8lptrq7BUV2TKBOPhsKhVJ9oIcxGTU=)
                          7: C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl (hash: RFnzzw+m+XvmrAvfbebgM3HLmrittfniuCjnmjliQMA=)
                          8: 3131392e38302e3132382e302f31392d3139203d3e2030.roa (hash: Ct0o7TSSCq4PzJ93SEgUx5TYDYHAXXbcTgI0iDVnxPI=)
                          9: 3131392e38302e31322e302f32322d3232203d3e2030.roa (hash: hX440M+Wr7Ig6ORoOb9B089xro/8qY67jnC7q5UxTpk=)
                          10: 3131392e38302e3136322e302f32342d3234203d3e2034383038.roa (hash: YEkfNK8LOZ1JFLzbHDckq08/tISjndMpA7MJC4C3dAk=)
                          11: 3131392e38302e382e302f32322d3232203d3e2034383038.roa (hash: uyAV2B0UgAaqhJ8Tx6GUKDrM2HT/GW8HLdhSG7e1nbM=)
                          12: 3131392e38302e3136302e302f32342d3234203d3e2034383038.roa (hash: qSXxhC20oRpA+UGtk0r2ggGDZENJxwJyROsMvVIHgOU=)
                          13: 3131392e38302e3234382e302f32312d3231203d3e2034383437.roa (hash: pIPjQtBk7ySpPKDYwLrcO6FivWIQX1TOftKSwNXxiHI=)
                          14: 3131392e38302e3136342e302f32322d3232203d3e2030.roa (hash: xReNAiKc02O6ON9duGFhPCnC21q/s+X/7DTsmPr1mTo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 01:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:76:a0:e0:83:ae:a7:b9:6e:59:fc:1f:94:1e:41:37:60:98:6d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
        Validity
            Not Before: Oct 12 17:07:11 2026 GMT
            Not After : Oct 16 04:53:11 2026 GMT
        Subject: CN=37D4CC13C6B553C5F75A1DD9139D63E2039EF1D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:30:e7:54:ca:f5:7b:46:05:06:45:26:b1:d3:
                    b3:ba:e6:3f:f2:a7:4b:d5:3d:fc:49:59:e9:83:54:
                    4d:64:9e:ef:37:25:24:a7:63:a2:48:97:f7:b9:86:
                    93:32:22:0f:22:3d:71:5e:bf:66:7f:dd:d9:d0:38:
                    90:4d:58:a8:26:68:ea:1e:fc:73:8d:66:e3:c2:ec:
                    8a:f9:6a:b1:c4:93:e6:b6:6f:8d:8a:cf:3c:82:9e:
                    1b:ca:50:21:03:33:9f:c5:ee:d6:fc:c7:05:74:a3:
                    70:3d:fc:84:48:de:c9:05:d9:00:45:f8:29:0f:9d:
                    19:e3:c5:d4:39:33:ed:70:58:de:df:68:28:0b:be:
                    00:2e:cf:e2:a1:cd:af:0c:ec:de:e3:14:8a:42:cc:
                    09:54:08:86:04:e9:c1:00:a0:9e:99:20:95:c5:05:
                    5a:73:ff:7d:4d:fa:d2:d7:6c:f3:86:cd:9d:e0:d9:
                    92:d4:d7:67:82:4e:e0:87:e2:d1:72:b6:19:00:7f:
                    4d:3d:b7:ac:5f:e7:bc:3d:12:98:cf:d4:44:78:66:
                    8c:0f:e1:33:74:23:c5:b2:90:6e:45:51:d2:72:5e:
                    e7:09:6d:77:29:13:72:5f:21:db:d6:dc:05:ef:1c:
                    31:9b:09:6b:0a:b2:5e:9b:55:b4:dc:ab:7a:4c:38:
                    c0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D4:CC:13:C6:B5:53:C5:F7:5A:1D:D9:13:9D:63:E2:03:9E:F1:D1
            X509v3 Authority Key Identifier:
                keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:da:2a:d4:40:bd:80:fd:2c:58:52:1d:28:ed:00:79:0b:73:
         68:3e:3a:f5:b6:5e:c4:15:07:b4:0b:c4:d8:0e:8c:8a:3e:6b:
         f6:e5:6f:8e:ec:76:d7:b9:26:f0:62:f0:65:d9:67:7d:2a:87:
         38:08:e1:ee:a5:88:22:9c:13:3c:9e:da:23:51:93:88:fb:d3:
         c2:72:4a:99:35:86:d0:1d:46:c1:8e:e1:3a:3b:5a:c1:f8:3b:
         84:ae:ec:b5:47:ac:e3:d0:cf:70:1b:d9:c1:7e:9b:11:e9:13:
         0e:0a:b2:b5:9e:12:4b:90:dd:13:29:e4:26:90:1f:38:b8:42:
         0f:c0:cf:98:13:96:b6:59:b9:1e:3a:cc:fa:bc:0b:79:5d:79:
         5b:5a:9c:6e:36:ce:17:2e:45:40:41:43:35:4b:ff:d7:75:23:
         11:78:53:b0:da:6d:10:22:1d:fe:13:4a:42:36:c7:27:45:33:
         1f:d5:9d:39:89:fc:81:68:b0:76:4d:b8:99:d6:ed:af:51:34:
         ae:7a:03:59:36:fc:ff:23:38:48:5e:21:76:9f:25:75:e2:34:
         33:13:63:80:07:d2:0b:a2:71:6d:bc:90:ed:84:18:33:de:2c:
         83:c8:4e:79:7e:dd:ba:70:78:41:1d:8b:0b:96:70:29:38:2a:
         59:35:51:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:51:18 2026 by rpki-client