Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094533607986298883/0/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.mft
File:                     83E69C7B79263FFF603292BA2BBC4995A77B7C5D.mft (raw, json)
Hash identifier:          xF4ESIMyWAAWxX6fv582rRfx8I/8jg2r3OIIjb6UXNY=
Subject key identifier:   66:BD:5F:B7:9B:A9:AF:82:A9:C4:5C:20:19:F1:6C:47:E2:09:4C:53
Authority key identifier: 83:E6:9C:7B:79:26:3F:FF:60:32:92:BA:2B:BC:49:95:A7:7B:7C:5D
Certificate issuer:       /CN=83E69C7B79263FFF603292BA2BBC4995A77B7C5D
Certificate serial:       408BA9535A1E9667C1F20424296BC5AD8481BF4F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094533607986298883/0/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.mft
Manifest number:          CD
Signing time:             Fri 25 Sep 2026 17:37:45 +0000
Manifest this update:     Fri 25 Sep 2026 17:32:45 +0000
Manifest next update:     Tue 29 Sep 2026 04:00:45 +0000
Files and hashes:         1: 3230322e33382e382e302f32312d3231203d3e2034383038.roa (hash: 0rGJHRr/y3+8kcWE1AQNhiqwnmr11g0sMb5CItFnh/E=)
                          2: 83E69C7B79263FFF603292BA2BBC4995A77B7C5D.crl (hash: jnHvVih0Mo1QGuLZQiJ5OyY+mYCR9mHQA1w8sSf/+Vc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094533607986298883/0/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094533607986298883/0/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8b:a9:53:5a:1e:96:67:c1:f2:04:24:29:6b:c5:ad:84:81:bf:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83E69C7B79263FFF603292BA2BBC4995A77B7C5D
        Validity
            Not Before: Sep 25 17:32:45 2026 GMT
            Not After : Sep 29 04:00:45 2026 GMT
        Subject: CN=66BD5FB79BA9AF82A9C45C2019F16C47E2094C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:b6:c0:9c:e2:d1:8b:18:55:e5:0b:6c:22:
                    9a:dc:72:bf:79:b5:27:61:2c:2c:0a:e9:21:24:24:
                    0b:9b:b8:81:c7:6d:b4:2f:2c:36:30:04:09:4e:a0:
                    24:ff:47:41:11:d2:4f:24:97:4b:83:4b:db:21:b3:
                    04:f3:e3:59:bc:2f:04:df:2f:79:cb:af:ad:8d:9b:
                    e4:0f:df:0e:66:b4:8b:29:31:e6:a5:a2:b3:0e:2a:
                    5c:10:a3:cc:1a:bb:7d:26:85:93:d6:4f:cb:62:95:
                    8d:12:05:c3:4d:73:5d:98:cd:5b:07:29:ca:ba:22:
                    24:b9:fd:0f:90:db:ab:31:b4:e7:9c:d4:f5:aa:f3:
                    d2:63:da:2e:f0:96:e1:0e:5b:f5:14:7c:db:24:6d:
                    b5:e5:a4:b7:92:b3:ff:63:8c:e4:a2:82:94:e9:e7:
                    a2:53:36:55:19:c8:b6:36:e5:a6:c1:98:ce:9e:f3:
                    76:eb:d6:d6:38:23:6e:fc:a9:de:0d:cf:48:49:08:
                    83:be:35:e9:59:fe:11:e0:2b:fa:c4:55:2b:bd:b0:
                    ee:42:af:63:88:0c:20:d5:ba:1e:19:e7:e2:0b:99:
                    bc:35:cc:0a:8b:83:53:bf:cc:e6:2c:10:15:b9:f8:
                    60:42:2f:34:3a:5c:36:28:2b:3e:54:33:09:06:df:
                    e0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BD:5F:B7:9B:A9:AF:82:A9:C4:5C:20:19:F1:6C:47:E2:09:4C:53
            X509v3 Authority Key Identifier:
                keyid:83:E6:9C:7B:79:26:3F:FF:60:32:92:BA:2B:BC:49:95:A7:7B:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094533607986298883/0/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094533607986298883/0/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:49:5e:fa:9b:ed:05:bb:a3:de:2c:72:57:63:35:b1:2a:a8:
         3b:d1:f9:4c:2b:aa:cc:11:eb:1a:5f:60:8d:5c:2c:f1:96:57:
         90:54:79:e4:8f:4b:be:6a:9f:9a:2a:3c:94:12:a8:9e:eb:43:
         a2:74:2c:60:32:49:8b:3a:b3:aa:14:68:8d:46:82:62:55:23:
         9c:9c:3c:4f:b8:3a:47:74:c0:aa:08:84:83:e9:8e:8e:cf:7a:
         79:1c:1e:e3:96:fb:c3:04:80:47:1c:8d:f5:b2:06:d0:b1:79:
         27:b0:19:c5:b2:23:7d:ff:08:69:0e:95:a1:1f:d0:19:23:96:
         42:54:09:dc:a4:db:31:30:69:5b:64:05:f5:bd:73:15:01:c6:
         18:4a:23:39:c1:5e:a9:25:81:62:f7:f4:cb:50:2e:2c:4d:ac:
         d7:a8:9f:50:a4:31:ab:fd:f5:14:9e:64:41:b8:f4:51:37:c2:
         0f:f2:a5:01:4d:8e:5c:26:ec:8a:e2:ec:b4:d2:2a:1d:af:86:
         2f:e4:b3:8b:d7:eb:ac:7b:7a:15:1a:bc:02:5c:ea:a1:f6:eb:
         b8:45:77:f3:73:cd:c2:6c:d3:8c:02:b1:7f:be:52:93:a3:07:
         f0:9c:80:8a:9e:b4:fc:4c:37:87:a1:57:da:82:dc:d8:38:3e:
         9e:5e:dc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:49:31 2026 by rpki-client