Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
File:                     B361C757B6D70C317FD018CE921CC13F568B00D8.mft (raw, json)
Hash identifier:          D8xWp+7QuldP6rld3TdQdSDd3aK8q/HwTRz9mP0n1D0=
Subject key identifier:   64:16:6F:2B:AA:10:AD:97:48:26:04:EE:C1:64:7B:59:0F:A7:83:10
Authority key identifier: B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8
Certificate issuer:       /CN=B361C757B6D70C317FD018CE921CC13F568B00D8
Certificate serial:       191F99DCFA8E27D78D1643EDC0E42A55B7F638D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
Manifest number:          0140
Signing time:             Wed 14 Oct 2026 08:53:53 +0000
Manifest this update:     Wed 14 Oct 2026 08:48:53 +0000
Manifest next update:     Sat 17 Oct 2026 12:18:53 +0000
Files and hashes:         1: 3130332e3130342e3135322e302f32322d3234203d3e20313531323331.roa (hash: UU8+VwXx5kLXE1vREUzKeaHXeDerUJ/54dl+hLa2H6g=)
                          2: 323430323a326536303a3a2f33322d3438203d3e20313531323331.roa (hash: bgR/NVrBsnz+F/Uqm+DFCd1LSczUrvNifQljXjBX0Cw=)
                          3: B361C757B6D70C317FD018CE921CC13F568B00D8.crl (hash: FhbhtKmUR4RA/NU1rUEVCaOWWWLWPqhndMOkykAXqig=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 12:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1f:99:dc:fa:8e:27:d7:8d:16:43:ed:c0:e4:2a:55:b7:f6:38:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B361C757B6D70C317FD018CE921CC13F568B00D8
        Validity
            Not Before: Oct 14 08:48:53 2026 GMT
            Not After : Oct 17 12:18:53 2026 GMT
        Subject: CN=64166F2BAA10AD97482604EEC1647B590FA78310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e1:ff:c7:98:04:8b:2f:e2:f2:f7:cf:cb:1f:
                    e3:ef:0e:6b:79:c4:74:bd:a7:75:b2:79:c2:af:ba:
                    0d:99:f6:48:41:c8:7e:e3:29:55:0d:8e:86:23:da:
                    83:9c:b0:09:ee:76:91:e5:ff:8a:f8:73:be:0c:a9:
                    9a:d9:79:7e:56:92:d2:5f:e0:9a:c9:02:05:54:f3:
                    33:06:89:8f:39:c1:b2:e0:62:29:a7:34:c3:20:df:
                    1c:59:3c:ec:76:d1:9f:27:e4:7c:48:9d:09:eb:1c:
                    0c:79:8d:df:f0:4b:77:9e:13:d1:55:69:cd:02:74:
                    6a:28:f6:8c:b2:9a:de:7b:85:79:45:b2:10:3f:6b:
                    8b:34:ae:ae:80:0d:2a:94:12:71:d3:1c:c9:f2:c1:
                    86:15:ee:16:87:33:a2:f9:0d:36:cc:d0:98:2f:f9:
                    11:87:01:31:9c:7c:ea:57:06:1d:cd:fd:cc:52:2e:
                    23:f5:ed:8f:d9:80:7f:ea:f1:19:f0:32:da:3f:48:
                    06:6f:7d:40:e0:05:c6:cf:b2:29:ad:f1:09:85:4e:
                    0b:b0:1d:5d:83:fd:7d:24:c8:34:bf:0f:69:90:2b:
                    b0:fa:85:49:c9:9b:d2:e8:fe:3d:22:98:69:fb:f0:
                    6a:58:94:33:57:e9:ae:fa:d3:31:a3:65:7c:9c:cc:
                    6f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:16:6F:2B:AA:10:AD:97:48:26:04:EE:C1:64:7B:59:0F:A7:83:10
            X509v3 Authority Key Identifier:
                keyid:B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:9b:a7:40:99:4b:cb:07:1e:dd:f4:b6:2d:75:ed:e9:de:30:
         5b:13:55:89:6b:4f:e8:48:ed:b0:05:8a:b8:6a:5f:c4:50:6f:
         8e:58:ac:02:5c:b2:26:d4:e1:c8:4d:f6:eb:0e:de:69:a2:51:
         df:cb:65:23:1d:92:39:e7:7f:47:dc:36:61:0f:b5:c2:46:db:
         8d:93:ab:e0:f1:db:4b:59:db:e8:e1:31:e1:79:12:a9:15:6e:
         cd:9d:4e:87:b3:c7:29:d1:63:a7:13:d7:73:3b:b1:59:4b:90:
         5b:c3:9f:ca:f1:ad:fa:6e:2a:fd:ca:d4:61:51:c5:9d:52:1d:
         9a:e2:88:04:21:5c:77:7b:bd:b0:31:40:87:53:9a:10:ab:bf:
         e6:f2:e4:70:83:6f:eb:c8:b2:3c:90:3a:53:e2:79:03:d4:5b:
         47:f1:aa:2c:f5:59:bb:6a:e8:b2:a2:d8:ab:cf:45:1c:57:ef:
         b4:06:6d:ec:32:b8:4b:8c:2b:c4:e7:db:76:27:cc:80:35:f1:
         24:63:b7:7b:6e:d1:c0:3d:03:6f:53:cf:e3:41:67:c4:53:5b:
         1e:b0:e9:ea:cd:0e:66:9f:d2:2e:78:87:ca:c1:68:42:6b:c2:
         99:de:78:3d:9f:c4:93:38:9a:b0:da:68:1d:00:3e:65:7f:31:
         80:68:25:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:27:09 2026 by rpki-client