Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
File:                     2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft (raw, json)
Hash identifier:          EbL7Xkam3YQMVlN/lCecLIraZ7HurJyOU2UAPvC5Xgw=
Subject key identifier:   8E:3E:8A:C0:80:DF:BA:F4:A5:A7:0E:69:1A:E9:D6:09:D1:8F:7D:D9
Authority key identifier: 2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85
Certificate issuer:       /CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85
Certificate serial:       6DA86BABCDB0DB7B036EF1CBB62B9D9C2C8B1810
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
Manifest number:          0134
Signing time:             Thu 24 Sep 2026 09:36:42 +0000
Manifest this update:     Thu 24 Sep 2026 09:31:42 +0000
Manifest next update:     Sun 27 Sep 2026 21:34:42 +0000
Files and hashes:         1: 3130332e3132302e35322e302f32322d3232203d3e2030.roa (hash: z33o4OymdWUBIy78ttDROdjMR5QblNN+hfrm6DQnxik=)
                          2: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl (hash: KuCmcHxFSj+3cf5v2tg4GQiY3bjv25+Rq/hAR2LFwi4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 12:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a8:6b:ab:cd:b0:db:7b:03:6e:f1:cb:b6:2b:9d:9c:2c:8b:18:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85
        Validity
            Not Before: Sep 24 09:31:42 2026 GMT
            Not After : Sep 27 21:34:42 2026 GMT
        Subject: CN=8E3E8AC080DFBAF4A5A70E691AE9D609D18F7DD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:37:84:19:e4:71:6c:f6:71:5e:22:85:97:90:
                    31:0d:f4:e8:6b:f1:0a:8d:8f:23:77:d5:cb:4c:a2:
                    46:6b:8d:27:0f:1d:6e:14:fb:6a:d8:94:ff:cd:5d:
                    b0:47:6d:b0:31:dc:2c:21:71:a8:25:17:9b:5b:fe:
                    53:40:84:0d:10:59:75:0b:3a:db:f9:50:ff:05:0c:
                    5f:95:59:3f:00:e7:d3:fe:56:c6:97:fc:03:87:c9:
                    54:76:23:00:df:d6:d9:cc:a7:5b:2d:0e:07:5f:e4:
                    36:74:60:0a:b5:45:91:5c:7a:a3:6b:33:fb:77:06:
                    16:2a:08:85:9d:0c:32:06:e9:e0:41:b8:69:41:7b:
                    1e:f7:b5:1a:ea:1e:6e:66:7e:21:98:9c:70:f6:de:
                    cd:cb:03:b6:dc:5f:b9:2e:46:1c:22:70:d7:0b:ed:
                    0b:49:7a:78:2b:9c:55:b5:61:ff:4a:d9:f7:1a:58:
                    1b:ab:c0:69:92:be:26:3c:84:12:b6:be:95:5c:c2:
                    e6:b8:d6:db:dd:e6:83:3f:1a:03:55:21:63:2f:96:
                    6d:a0:4b:06:61:23:f2:fe:63:88:dc:e3:0f:75:1e:
                    fc:db:57:e9:7f:1d:9d:3a:aa:76:a6:a5:ea:f3:a5:
                    8f:5c:9e:b2:b0:14:dd:5e:f0:b5:57:72:65:ee:c1:
                    48:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3E:8A:C0:80:DF:BA:F4:A5:A7:0E:69:1A:E9:D6:09:D1:8F:7D:D9
            X509v3 Authority Key Identifier:
                keyid:2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:12:a7:a7:9e:92:67:52:79:0e:40:2e:e4:5b:ba:df:73:42:
         53:d4:46:d0:c4:29:64:34:12:4c:07:64:f8:75:a6:b4:a5:19:
         fb:d9:42:ee:ce:c7:55:6b:1b:41:05:76:b1:8e:34:9b:e4:d5:
         ec:c5:6a:ea:5c:de:cf:ca:cc:db:46:41:c0:ff:65:a1:38:32:
         97:d6:35:de:72:47:db:96:92:0b:7b:e5:9e:05:bd:a1:bf:7d:
         28:2c:0c:b6:50:aa:f8:eb:e4:8c:87:fe:ea:ae:db:29:d0:87:
         01:76:00:9d:df:24:96:c7:7a:ed:e2:35:b9:b8:91:a6:2b:62:
         1f:73:6b:c5:33:0f:05:f0:83:b6:3a:35:69:9b:d6:0f:c3:4d:
         db:07:47:53:08:8b:aa:fd:c1:83:23:c9:de:04:41:ae:f9:21:
         a1:4f:f1:f6:fc:92:c5:48:19:61:75:e1:24:63:ab:e9:4c:f1:
         6f:6f:4d:44:de:6d:7b:46:87:0c:c5:51:fe:52:26:64:5c:ca:
         a9:89:82:47:99:cb:a1:0a:dc:87:bd:f3:1d:64:ea:55:25:36:
         7c:35:9c:37:6c:4a:86:f6:c7:ad:23:5f:26:0f:c0:2c:c5:86:
         de:7a:36:a2:33:27:c1:b9:0a:1d:39:14:ce:bd:62:26:5d:04:
         42:b4:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:07:53 2026 by rpki-client