Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097052342001336322/0/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.mft
File:                     6ABD7F185CF85906D0796D3C7AA359D61F5C6847.mft (raw, json)
Hash identifier:          KBeZVAwisHKagoZBz09JXbB9lE0h6QcHbqkDZz0laTE=
Subject key identifier:   0F:C6:4A:CE:47:8E:F0:7E:41:E4:B4:78:22:13:43:41:F0:DC:E3:F6
Authority key identifier: 6A:BD:7F:18:5C:F8:59:06:D0:79:6D:3C:7A:A3:59:D6:1F:5C:68:47
Certificate issuer:       /CN=6ABD7F185CF85906D0796D3C7AA359D61F5C6847
Certificate serial:       666A7907C7A0F5192756FDCACB5F72ACA069C0E3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097052342001336322/0/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.mft
Manifest number:          C2
Signing time:             Mon 28 Sep 2026 18:56:16 +0000
Manifest this update:     Mon 28 Sep 2026 18:51:16 +0000
Manifest next update:     Fri 02 Oct 2026 04:30:16 +0000
Files and hashes:         1: 6ABD7F185CF85906D0796D3C7AA359D61F5C6847.crl (hash: WLpQ9Hsz5bLEkKhIzQrnzTXG67eI6fZuvI3PuKeBt/g=)
                          2: 3130332e37382e3137362e302f32322d3232203d3e2030.roa (hash: A6X6rG9OoHxKXkNcU4tMI7qaAFW0uyVupFi/ayK18Ek=)
                          3: 323430373a656338303a3a2f33322d3332203d3e2030.roa (hash: I2H6S+PDHCuYueVmdvA596FpUYTeqGn4cwFc/hTD/Qs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097052342001336322/0/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097052342001336322/0/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:21:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6a:79:07:c7:a0:f5:19:27:56:fd:ca:cb:5f:72:ac:a0:69:c0:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ABD7F185CF85906D0796D3C7AA359D61F5C6847
        Validity
            Not Before: Sep 28 18:51:16 2026 GMT
            Not After : Oct  2 04:30:16 2026 GMT
        Subject: CN=0FC64ACE478EF07E41E4B47822134341F0DCE3F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:85:e9:16:e9:09:e1:c4:c3:2c:ca:a9:c9:d0:
                    90:c0:35:76:ea:a5:20:b2:7d:1f:29:2b:8c:7b:44:
                    d7:a5:b2:b9:48:eb:49:82:aa:28:df:9d:6f:78:37:
                    5d:7e:fd:de:4d:08:89:42:69:35:3a:b3:18:68:9a:
                    61:d3:4e:64:bb:c8:3e:29:ae:e9:f6:b5:b0:17:44:
                    6c:c4:7f:cb:da:d9:11:b3:47:c6:cf:ce:48:f9:2c:
                    e3:33:ea:90:ec:c2:17:47:a8:69:2f:32:97:fc:ce:
                    53:f8:88:f9:d9:f3:2c:6e:6b:bb:49:45:fa:7b:e4:
                    dc:a1:c5:ef:ff:f1:82:b3:1c:f1:86:ef:1c:57:f9:
                    44:5d:28:57:e0:f5:2a:e2:20:b5:28:f2:40:e5:04:
                    f5:5a:23:a2:8e:c1:ef:0f:f2:77:f9:52:e7:76:ab:
                    7d:13:3a:10:c4:7b:d0:39:16:e7:8d:ca:15:f5:e9:
                    b6:e1:87:40:c0:c8:22:cb:7e:3a:d7:8d:ed:0e:4c:
                    b9:11:05:05:dc:3b:23:aa:30:81:19:aa:e8:f8:f8:
                    76:c3:8a:a6:b9:35:1e:2c:9e:eb:b0:a6:9f:4b:98:
                    fb:be:07:62:78:1a:d2:7e:e9:cb:ab:2a:f0:95:1b:
                    7f:d7:87:65:83:bd:d8:ca:0e:37:3a:15:0b:ec:9e:
                    3e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C6:4A:CE:47:8E:F0:7E:41:E4:B4:78:22:13:43:41:F0:DC:E3:F6
            X509v3 Authority Key Identifier:
                keyid:6A:BD:7F:18:5C:F8:59:06:D0:79:6D:3C:7A:A3:59:D6:1F:5C:68:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097052342001336322/0/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097052342001336322/0/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:cf:8d:b0:62:e9:0e:ae:5b:da:2c:3b:65:b0:b8:03:79:d8:
         bf:f3:d5:73:14:c1:30:d0:c8:91:0d:b5:e0:0d:f8:26:31:00:
         cb:cf:73:3b:b8:ad:51:5e:60:32:c2:a6:4f:d2:1d:1f:6d:d8:
         1d:2a:37:29:ed:01:11:73:15:99:0d:da:f6:fa:c2:42:c9:ae:
         63:31:b5:05:d7:31:25:02:6f:ca:79:ec:61:40:6e:84:67:99:
         5e:56:ee:85:7f:87:6d:e4:00:37:c9:55:0b:55:4c:48:d3:5d:
         6d:d8:bf:8d:2f:fc:bd:f8:ce:21:7d:a3:fb:97:fb:9f:57:64:
         79:58:2f:58:60:0d:17:f3:31:66:32:82:91:f8:3d:d1:86:2e:
         d1:af:3b:85:f8:0a:f0:9b:99:2f:02:96:c9:c9:78:70:a8:82:
         4d:7e:b5:6a:90:9c:41:e5:f8:fa:6e:10:8c:72:f5:4d:42:44:
         95:ba:fc:65:52:83:47:a0:e0:d5:4d:2f:f8:dd:b8:1c:76:65:
         8e:44:4b:a3:7c:f4:64:cb:c8:b2:6b:47:99:68:c3:5a:3a:78:
         92:11:dd:7e:72:63:86:63:34:62:01:c5:b8:b1:3d:f0:7a:b9:
         e2:26:42:bb:ae:1b:f7:0e:11:10:67:c4:ea:06:10:2c:8f:8f:
         cd:b0:74:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:49:37 2026 by rpki-client