Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
File:                     816C81988ECBEB701F4EA593D34F28951B10ABF2.mft (raw, json)
Hash identifier:          yjvlm7v7Bi+EB284PzTBMm1IQuRTV60FaugRnB36HRM=
Subject key identifier:   C7:85:8D:26:60:14:B4:45:90:A9:B9:AE:BE:DE:F3:4D:98:F5:A4:10
Authority key identifier: 81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2
Certificate issuer:       /CN=816C81988ECBEB701F4EA593D34F28951B10ABF2
Certificate serial:       447F0CADF9DEB9957AD99A4259B8E16388758E97
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
Manifest number:          013A
Signing time:             Sun 11 Oct 2026 01:40:07 +0000
Manifest this update:     Sun 11 Oct 2026 01:35:07 +0000
Manifest next update:     Wed 14 Oct 2026 11:01:07 +0000
Files and hashes:         1: 816C81988ECBEB701F4EA593D34F28951B10ABF2.crl (hash: CaDO7Ym9OAYXMVpTIwSRQV5RslXwziVQwsao4lQa4ss=)
                          2: 3130332e3130332e33362e302f32322d3232203d3e20313331353431.roa (hash: xcZBgro6gTw3A6GIg7z78vFpQLq7KHZet7uMhtkrnY0=)
                          3: 3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa (hash: 6URKjFRR2qwyPlFJN5f0XQRtR84QyHyhmK66ypB33K8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 11:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7f:0c:ad:f9:de:b9:95:7a:d9:9a:42:59:b8:e1:63:88:75:8e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816C81988ECBEB701F4EA593D34F28951B10ABF2
        Validity
            Not Before: Oct 11 01:35:07 2026 GMT
            Not After : Oct 14 11:01:07 2026 GMT
        Subject: CN=C7858D266014B44590A9B9AEBEDEF34D98F5A410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:09:d6:54:28:6b:cb:be:66:ab:ab:93:ec:
                    65:fd:6c:ae:e4:78:f9:af:d2:10:41:69:96:78:8a:
                    f7:36:da:8a:37:3c:00:a2:4a:a5:07:f8:f1:ba:b1:
                    de:7e:e4:e1:03:ca:69:cd:41:31:2d:28:ca:eb:02:
                    e7:87:ae:33:b5:61:ee:67:a9:b6:38:11:d8:01:bd:
                    d9:c5:b9:1b:4b:63:65:63:24:81:6a:3b:75:16:9c:
                    54:f6:4e:46:3a:57:d4:26:15:93:ed:44:fc:61:39:
                    f4:4a:af:c7:2d:2c:2a:fc:3d:85:af:11:00:73:39:
                    96:f9:f2:12:a0:f0:92:f1:04:20:2c:e8:a7:18:b2:
                    ea:ee:15:20:26:01:1e:30:6b:4a:30:23:ee:2f:95:
                    20:98:d7:05:0a:65:7b:2d:83:1a:ab:13:e4:20:63:
                    3a:a7:38:c6:96:24:4c:56:32:7f:28:d1:10:9d:7e:
                    11:be:38:c7:7d:46:70:ca:e0:d8:6f:31:1b:8a:20:
                    ce:73:ec:2d:c5:08:bd:24:7f:36:85:e3:f2:fa:f3:
                    77:7a:35:b2:94:d3:c5:26:3f:05:1f:2f:cb:17:b2:
                    c1:b0:ce:8f:20:fa:21:65:18:8f:39:28:8c:66:c3:
                    1e:42:2a:61:13:47:db:8d:c6:0b:fa:af:3e:3a:8d:
                    9b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:85:8D:26:60:14:B4:45:90:A9:B9:AE:BE:DE:F3:4D:98:F5:A4:10
            X509v3 Authority Key Identifier:
                keyid:81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:fd:5d:91:71:c5:f7:c3:53:e1:61:d2:57:2c:ba:99:ba:49:
         8b:cb:2f:77:18:72:0b:7a:b3:db:1e:d4:11:82:25:33:96:ae:
         4a:6c:43:6d:62:55:e9:57:b5:f0:77:d7:94:51:a2:45:64:26:
         f6:f7:1c:61:38:36:36:ef:f1:59:21:e2:e6:83:17:9c:e4:81:
         a1:a9:0c:47:58:ee:fc:ca:2a:83:4c:2d:aa:7a:14:4d:1a:8f:
         4f:39:01:52:ef:98:2d:ad:28:14:27:94:fb:cd:dc:be:12:0c:
         2c:c2:1f:f5:74:80:58:e1:5c:98:f0:50:07:ca:21:a2:09:f7:
         99:33:ee:07:27:5e:7a:5e:f6:9b:05:cc:72:cb:f8:c8:40:0c:
         a8:d5:d5:b0:86:e1:90:db:83:9f:37:80:76:d1:92:f6:a9:67:
         91:87:2a:ab:b6:39:a6:d4:db:e4:27:87:bd:a6:7b:ea:f4:fe:
         ff:81:08:6d:70:13:ee:fc:7c:8b:ed:39:c5:33:06:00:1b:15:
         80:0d:29:96:78:67:75:9f:27:73:9e:24:1d:cb:b6:82:fd:1b:
         61:7b:aa:f2:7d:e2:ad:a3:99:20:45:97:30:6f:fd:e1:d5:d6:
         2c:2f:2a:a2:99:c8:3d:c4:78:9e:ca:6b:09:b8:6d:c1:da:52:
         95:37:61:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:03:57 2026 by rpki-client