Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
File:                     8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft (raw, json)
Hash identifier:          9JNdNs5ZQnjEspjv0FFS/4xGtMujJH3dlu08n2OQXEc=
Subject key identifier:   BD:10:BD:2C:38:F5:D1:63:5D:E3:8F:35:96:37:0A:E7:65:62:CE:46
Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
Certificate issuer:       /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Certificate serial:       019B6277A8323DFDA0C9D4C8911ECD40902D430A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
Manifest number:          0134
Signing time:             Sun 27 Sep 2026 05:59:41 +0000
Manifest this update:     Sun 27 Sep 2026 05:54:41 +0000
Manifest next update:     Wed 30 Sep 2026 08:07:41 +0000
Files and hashes:         1: 3130332e3131362e3134392e302f32342d3234203d3e20313430323234.roa (hash: pP2K3HiVYBHdGBjx/LhUqM1IgWlPl0rSVXLA0eShH2g=)
                          2: 3130332e3131362e3135312e302f32342d3332203d3e203431373137.roa (hash: VlVCVPXjjW4YexrI/H0GFGSpaR7DLmyFK6sA+2KWcH0=)
                          3: 3130332e3131362e3135302e302f32342d3234203d3e20313430323234.roa (hash: d4N+6+ZvyPWMnoQuXQvtFWn2iecqQr50dVgRsFkdfMk=)
                          4: 3130332e3131362e3134382e302f32342d3234203d3e203231383539.roa (hash: hb8LpnbbXDFD6nnVASx9otFeKHSuMrRCIYTSzaGK/QY=)
                          5: 3130332e3131362e3135302e302f32342d3234203d3e203138313836.roa (hash: Pq91xvCrN3/5zWnvVJSEMqoONxXt9OWTFN9DsvUS+cs=)
                          6: 3130332e3131362e3134392e302f32342d3234203d3e203138313836.roa (hash: zKTHFw5A/5A4GJfDVGwpemfdwlWQX4xJwt4nMBMvrMw=)
                          7: 3130332e3131362e3135302e302f32342d3234203d3e203431373137.roa (hash: IgDPyqOj/L0PxUnz7eU6yhqxHUKS38LqOYL7vjB0wuA=)
                          8: 3130332e3131362e3135312e302f32342d3332203d3e20313430323234.roa (hash: 1Ufsi2cApRq4VzMpVC5wUXBntzWTIoNYV52b6m40FTU=)
                          9: 3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa (hash: GZ2WOW7JsZPc5s/Q2qJ2w1atwdfDkqEf0lhuZ8+9zHo=)
                          10: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl (hash: Tq+uJ8eJNvw7YRGXoIOa/cN4QewJB4GK6TFScYNtmFI=)
                          11: 3130332e3131362e3134382e302f32322d3234203d3e203231383539.roa (hash: 5JsD0wX1QDBSopdnoRNZCwKiwO2b9FDGs7UbU+U0hhI=)
                          12: 3130332e3131362e3135312e302f32342d3332203d3e203138313836.roa (hash: t4rYVjYfVv+8FXJ3wpB9gzjdLdiETsT5N2UFAEaCOnM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:62:77:a8:32:3d:fd:a0:c9:d4:c8:91:1e:cd:40:90:2d:43:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
        Validity
            Not Before: Sep 27 05:54:41 2026 GMT
            Not After : Sep 30 08:07:41 2026 GMT
        Subject: CN=BD10BD2C38F5D1635DE38F3596370AE76562CE46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3a:7d:48:55:4d:f7:cc:4b:60:d9:46:08:5c:
                    46:b6:4c:16:08:44:15:a4:59:5e:35:8c:06:0e:be:
                    8d:eb:de:b3:4a:d9:46:c1:a3:55:6f:fd:0a:8b:2d:
                    d7:b6:35:f9:82:65:ca:0f:f4:9b:27:09:82:a0:26:
                    a3:f1:69:4b:b4:48:1e:df:9a:9a:ff:34:94:f2:a6:
                    ef:1e:a3:12:70:34:c4:36:b5:b6:97:eb:52:13:43:
                    af:ef:f6:8e:74:51:2a:fa:5a:de:16:4d:38:7b:a8:
                    fd:f8:69:0a:cb:ad:48:97:5b:1b:91:a2:73:ba:4b:
                    76:4f:fb:34:e3:36:24:02:ba:88:c8:6b:b1:88:d1:
                    44:a5:98:b0:98:97:4b:d0:0a:20:e2:30:a1:da:f2:
                    69:a1:c6:8b:67:91:e9:21:87:68:75:29:c0:03:f2:
                    87:24:04:33:64:91:42:ab:7a:ff:36:c4:02:0e:a6:
                    5f:fc:d7:d0:21:4d:95:63:81:be:ad:f9:ac:06:66:
                    1e:89:20:16:66:7b:86:ed:13:6c:20:8b:ff:66:34:
                    f3:34:68:d0:ec:39:e7:6d:98:fe:03:59:43:14:02:
                    e5:a1:2b:30:e9:77:2f:0f:83:15:2b:fc:5c:d9:f8:
                    b1:dd:3b:86:ab:97:8c:6a:35:f5:97:bb:23:f5:55:
                    46:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:10:BD:2C:38:F5:D1:63:5D:E3:8F:35:96:37:0A:E7:65:62:CE:46
            X509v3 Authority Key Identifier:
                keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:8d:35:e6:b3:1f:eb:bf:49:02:38:8d:b4:af:ad:4a:f8:af:
         24:99:2d:d5:a0:f1:b8:80:19:2d:d5:72:1a:46:31:02:5d:fa:
         cf:f6:11:72:14:6c:d0:c9:1e:0b:f2:6a:64:7f:27:35:0e:74:
         19:ae:ad:fd:b3:cb:9c:de:06:12:3e:2c:54:95:3b:a4:10:d0:
         ce:b1:e6:87:9a:9f:60:38:52:af:38:56:d4:1e:b3:07:cc:74:
         ee:a4:69:e1:3f:f7:e5:bf:55:6d:f5:37:82:59:fe:64:55:37:
         e0:c9:84:b1:cb:c8:7a:4b:ab:10:c0:92:1a:9c:c0:60:77:f3:
         21:62:7a:ad:62:9c:ce:a6:95:9c:ed:8a:b7:2e:fd:c7:34:f3:
         75:5b:64:97:8d:7f:13:ac:d2:dc:26:25:c4:3e:46:72:08:f0:
         2e:98:7e:f2:d4:4b:aa:9f:7d:3d:8d:f2:04:b9:9b:52:44:21:
         d1:8a:52:81:a9:58:21:1e:94:a7:c2:6f:02:e6:70:95:65:df:
         6d:aa:6c:b0:d8:00:20:f9:56:e4:f0:ed:0b:42:ca:0d:f4:4a:
         1f:a4:90:42:dc:b2:90:c1:c3:ea:6f:6b:0b:7e:38:18:96:f8:
         77:a8:d8:65:bc:54:63:6b:5a:2e:1d:25:96:29:f6:76:39:c5:
         b8:f1:43:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:40:02 2026 by rpki-client