Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft
File:                     6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft (raw, json)
Hash identifier:          iMpVP9Wwc03JIKbhNfsrQ3rn+yb5TrMsBS3F4jc4N5M=
Subject key identifier:   EC:25:D6:16:F1:A8:AF:59:6B:15:6C:8E:31:10:D8:BC:01:07:AB:FB
Authority key identifier: 6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D
Certificate issuer:       /CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D
Certificate serial:       54C8D8EE6BC56384A93ED031B29EE24836AE5AAD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft
Manifest number:          C8
Signing time:             Sat 03 Oct 2026 18:07:11 +0000
Manifest this update:     Sat 03 Oct 2026 18:02:11 +0000
Manifest next update:     Tue 06 Oct 2026 18:49:11 +0000
Files and hashes:         1: 34332e3232352e3231362e302f32322d3232203d3e2034383437.roa (hash: j/eV+lOtMaJE7zLazg78nWoyQGsOhGQyTahosxccrn8=)
                          2: 3130332e34342e3137382e302f32332d3233203d3e2034383437.roa (hash: lSEivQpgfyTwattyz5XGR7SBQ4DIJ5haeZxfSmZXjnc=)
                          3: 3130332e34342e3137362e302f32332d3233203d3e2034383437.roa (hash: ae7SUgq9OA/NLExuOxlNbHZGMMv09rTQmfolmacGeB4=)
                          4: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl (hash: QnJtHCMm5uLiEMz++ahE+iJbhGSGBADpWX1w5UimyqQ=)
                          5: 3130332e34342e3139382e302f32342d3234203d3e2034383030.roa (hash: 6dqpVUqXBgLgk1fCILtRSZoIidor7YhnbVbc5fHfQhk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 09:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c8:d8:ee:6b:c5:63:84:a9:3e:d0:31:b2:9e:e2:48:36:ae:5a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D
        Validity
            Not Before: Oct  3 18:02:11 2026 GMT
            Not After : Oct  6 18:49:11 2026 GMT
        Subject: CN=EC25D616F1A8AF596B156C8E3110D8BC0107ABFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:a6:b8:6e:1a:3c:25:e9:67:26:58:33:97:
                    18:f0:df:da:d3:d8:76:86:3f:16:e5:52:0a:ca:1a:
                    91:94:fc:d0:d8:e7:76:a4:88:2e:8a:1b:09:18:b1:
                    f9:3d:95:a6:ee:68:dc:cb:c5:ea:49:d7:f1:8b:65:
                    5d:0e:71:6b:b4:e4:4d:80:c2:1f:c9:fc:e1:ad:71:
                    c7:de:f7:d7:cd:b1:06:94:be:4e:8b:05:6d:6a:9d:
                    b4:e8:9a:e1:1a:5e:12:bd:2e:64:50:c5:b8:3a:79:
                    05:51:70:f7:2a:06:93:41:34:bc:c6:03:36:94:58:
                    21:a9:fb:27:bb:f9:ba:23:4f:66:dc:02:26:cc:99:
                    57:1d:5b:7d:cf:f2:7c:d2:ea:c6:7a:2d:df:a2:24:
                    73:3e:5f:19:4b:98:19:7f:4c:13:d3:a9:f1:e2:5a:
                    95:32:9d:1b:cc:02:30:f8:7c:4c:5b:c6:ba:ee:98:
                    fd:02:b7:60:96:14:6a:74:b4:f0:24:91:cc:0e:2e:
                    9d:f7:95:5e:73:82:0d:f5:40:5e:35:8a:40:0d:5e:
                    53:9a:f3:5e:64:7b:e5:4a:a1:5a:2f:80:2f:84:7a:
                    1c:65:ba:7d:1c:8c:8c:82:51:bf:38:4d:01:a4:6f:
                    c0:e4:b4:50:2d:09:fa:4a:8b:d9:7a:d4:01:10:cd:
                    80:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:25:D6:16:F1:A8:AF:59:6B:15:6C:8E:31:10:D8:BC:01:07:AB:FB
            X509v3 Authority Key Identifier:
                keyid:6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:6b:41:31:cf:b7:72:ef:47:2d:a5:79:ac:74:a7:f9:38:11:
         f6:28:63:51:72:83:a7:e0:9c:10:b4:38:d3:a8:15:92:36:75:
         d4:64:98:0a:3b:bc:b0:53:02:2d:d8:10:6c:4b:40:a3:ad:db:
         f6:28:3f:d1:d8:12:88:7b:fc:7e:f8:35:92:36:82:d2:a3:fe:
         12:59:32:86:19:32:2d:ba:42:0e:5b:17:b3:78:d9:ef:99:31:
         2c:b5:41:bd:d0:70:ad:5e:b7:20:4a:bc:6c:23:fe:6e:2a:9c:
         4a:40:5e:32:e8:56:6b:26:57:2e:99:5b:2e:3f:2f:85:ab:ad:
         ed:dd:a8:d8:8d:19:e5:e0:a9:bf:27:2d:26:c2:f3:45:ed:92:
         17:d2:a7:e1:77:98:a9:46:f2:cd:e8:de:c4:8e:06:2a:d6:93:
         da:19:d7:46:38:4d:9b:50:8d:33:7e:23:26:81:b2:d2:b8:03:
         df:7c:ef:24:8f:66:da:d5:21:0d:ee:ce:02:9b:fd:da:f2:18:
         6a:1b:4c:49:11:1f:60:81:37:e7:7c:04:b7:eb:a2:ae:18:54:
         8a:34:4f:fe:21:9a:2d:8b:88:9a:8d:87:be:7d:30:26:55:b4:
         49:79:d6:eb:a5:06:eb:ef:1f:8a:db:00:10:34:20:b6:58:68:
         ad:02:96:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:19:49 2026 by rpki-client