Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft
File:                     B632502E8D6D2369C51A2346CBA569E60257BDC7.mft (raw, json)
Hash identifier:          OWmbZy1HiaFmnPoytNk12tO1c0W2niZ6UiV8eAfYK0s=
Subject key identifier:   D5:A3:46:57:43:24:DD:3A:AF:C3:AD:05:EA:75:F0:46:70:10:7C:76
Authority key identifier: B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7
Certificate issuer:       /CN=B632502E8D6D2369C51A2346CBA569E60257BDC7
Certificate serial:       3461F7B7CCC53048BF2001C75CDF7CFE626A29C3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft
Manifest number:          C4
Signing time:             Wed 07 Oct 2026 22:26:54 +0000
Manifest this update:     Wed 07 Oct 2026 22:21:54 +0000
Manifest next update:     Sun 11 Oct 2026 00:03:54 +0000
Files and hashes:         1: 3130332e37382e3232382e302f32322d3332203d3e20313337363937.roa (hash: bt3z6UAXgFoqUQwlcBAwdfCZL7ZO5stc9zJoa9wZ/8M=)
                          2: 3130332e37382e3232382e302f32322d3332203d3e203536303436.roa (hash: +pGX+4RF/lOQKxZj6NDh0Y4S1YBl+3XFNef0tyQCdFY=)
                          3: 3130332e3130312e3138302e302f32322d3332203d3e20313337363937.roa (hash: DyYzPlLrqkBaVCuPGLHoXQducvBZJJk5MiJRqpCJOCk=)
                          4: 3130332e37382e3232382e302f32322d3332203d3e2034383337.roa (hash: 61L5aR5bgll/4iVZjJp7bD1aBZNc1/iMX2m/DXeH6tQ=)
                          5: B632502E8D6D2369C51A2346CBA569E60257BDC7.crl (hash: tI7mT54xniqsbIAzJf6eZOcYDz8adnKzw/uB/GgE2YE=)
                          6: 3130332e3130312e3138302e302f32322d3332203d3e203536303436.roa (hash: VuVh96LZ9ENVQD/HGtz9Sl/s+j7OTeDSyuCpjWemmUw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 00:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:61:f7:b7:cc:c5:30:48:bf:20:01:c7:5c:df:7c:fe:62:6a:29:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B632502E8D6D2369C51A2346CBA569E60257BDC7
        Validity
            Not Before: Oct  7 22:21:54 2026 GMT
            Not After : Oct 11 00:03:54 2026 GMT
        Subject: CN=D5A346574324DD3AAFC3AD05EA75F04670107C76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fa:17:c8:9b:46:5b:33:8e:1a:68:e2:06:bf:
                    f4:bd:fd:a6:f9:f8:56:34:72:58:7c:f9:62:1d:88:
                    87:fb:ba:87:25:32:88:17:3e:ef:45:d4:80:ef:46:
                    10:68:1f:10:83:19:65:df:0a:d2:ab:79:d0:a0:07:
                    a7:92:f1:71:51:ff:53:5f:8f:df:57:67:a0:c2:b3:
                    8c:6e:9a:89:bc:b0:2c:8a:61:18:8d:62:26:f0:47:
                    fb:70:0c:a8:06:88:55:3e:92:e3:4f:ed:5e:b1:5b:
                    1b:b7:e7:22:00:74:33:01:5c:aa:ae:99:fa:0f:f1:
                    16:6c:06:7a:8c:8e:7c:66:23:07:2a:c2:ed:fb:e4:
                    59:56:6f:ca:80:a5:0b:fc:e5:2b:0b:b7:87:e1:82:
                    2c:d8:50:eb:64:bb:c4:ac:91:f4:2a:51:46:3b:2a:
                    5a:07:93:2b:19:b8:93:5f:b9:f7:27:f9:c2:a6:c3:
                    53:65:4e:8e:66:9d:c4:95:71:29:0a:0f:9b:d6:dd:
                    5d:9f:19:82:a8:e5:8f:cc:a0:de:7b:b1:d2:05:18:
                    57:3e:78:66:c3:3f:0c:ed:50:30:41:a2:ae:e3:b5:
                    55:dc:3e:ff:c0:7f:ba:60:e1:e3:32:83:c2:f4:ff:
                    3a:36:a8:cb:f5:96:5e:2f:f8:6b:b5:0f:75:d2:bb:
                    c8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A3:46:57:43:24:DD:3A:AF:C3:AD:05:EA:75:F0:46:70:10:7C:76
            X509v3 Authority Key Identifier:
                keyid:B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:2b:a2:49:5e:0a:11:53:c5:8f:46:9f:a9:c6:59:8b:d1:fd:
         aa:f7:0a:5f:19:78:02:51:0c:33:85:8f:f3:85:31:2c:01:09:
         be:45:4c:3f:85:56:33:cb:4c:63:62:13:46:2b:28:9c:5b:80:
         34:08:ce:91:94:ed:38:3b:1f:20:2b:7c:a9:a7:30:00:93:6a:
         2d:31:1a:87:0d:57:d9:b4:71:65:4f:de:26:7f:dd:11:30:6b:
         a1:65:a0:bc:a5:54:33:c6:5b:79:12:ff:5f:87:fd:43:2e:86:
         4d:e4:48:4b:4c:05:3d:ab:c9:bb:c1:fd:3d:1b:d9:d8:51:c8:
         6d:f3:15:8e:21:16:32:00:f4:96:34:a7:ea:52:5a:ff:7e:60:
         4f:17:e3:a9:b2:d0:bd:dd:c7:9b:54:f0:2a:1b:32:b2:2f:2e:
         94:d5:1c:4c:d7:63:eb:33:1e:91:d2:e1:c2:bc:cb:9e:61:56:
         89:71:e1:e0:86:d2:2f:5c:21:14:50:56:eb:f7:81:55:ff:dd:
         e5:cd:b3:20:b1:67:9d:19:61:bd:78:4a:c6:ac:6c:e1:8e:ab:
         ca:81:3f:52:6b:c1:38:1c:05:99:26:7c:ab:19:94:51:fa:cc:
         8a:ba:4f:01:96:7f:8c:4f:33:e4:06:d1:e8:26:43:dd:5f:e1:
         4e:e6:91:b0
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUNGH3t8zFMEi/IAHHXN98/mJqKcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYzMjUwMkU4RDZEMjM2OUM1MUEyMzQ2Q0JBNTY5RTYw
MjU3QkRDNzAeFw0yNjEwMDcyMjIxNTRaFw0yNjEwMTEwMDAzNTRaMDMxMTAvBgNV
BAMTKEQ1QTM0NjU3NDMyNEREM0FBRkMzQUQwNUVBNzVGMDQ2NzAxMDdDNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+hfIm0ZbM44aaOIGv/S9/ab5
+FY0clh8+WIdiIf7uoclMogXPu9F1IDvRhBoHxCDGWXfCtKredCgB6eS8XFR/1Nf
j99XZ6DCs4xumom8sCyKYRiNYibwR/twDKgGiFU+kuNP7V6xWxu35yIAdDMBXKqu
mfoP8RZsBnqMjnxmIwcqwu375FlWb8qApQv85SsLt4fhgizYUOtku8SskfQqUUY7
KloHkysZuJNfufcn+cKmw1NlTo5mncSVcSkKD5vW3V2fGYKo5Y/MoN57sdIFGFc+
eGbDPwztUDBBoq7jtVXcPv/Af7pg4eMyg8L0/zo2qMv1ll4v+Gu1D3XSu8jDAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU1aNGV0Mk3Tqvw60F6nXwRnAQfHYwHwYDVR0j
BBgwFoAUtjJQLo1tI2nFGiNGy6Vp5gJXvccwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzUxNTgxMzkzMTMxOTI5OS8wL0I2MzI1MDJFOEQ2RDIzNjlDNTFBMjM0NkNCQTU2
OUU2MDI1N0JEQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjYzMjUwMkU4RDZEMjM2OUM1MUEyMzQ2Q0JBNTY5RTYwMjU3QkRDNy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTc1MTU4MTM5MzEzMTkyOTkvMC9CNjMyNTAyRThENkQy
MzY5QzUxQTIzNDZDQkE1NjlFNjAyNTdCREM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiuiSV4KEVPF
j0afqcZZi9H9qvcKXxl4AlEMM4WP84UxLAEJvkVMP4VWM8tMY2ITRisonFuANAjO
kZTtODsfICt8qacwAJNqLTEahw1X2bRxZU/eJn/dETBroWWgvKVUM8ZbeRL/X4f9
Qy6GTeRIS0wFPavJu8H9PRvZ2FHIbfMVjiEWMgD0ljSn6lJa/35gTxfjqbLQvd3H
m1TwKhsysi8ulNUcTNdj6zMekdLhwrzLnmFWiXHh4IbSL1whFFBW6/eBVf/d5c2z
ILFnnRlhvXhKxqxs4Y6ryoE/UmvBOBwFmSZ8qxmUUfrMirpPAZZ/jE8z5AbR6CZD
3V/hTuaRsA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:19:12 2026 by rpki-client