Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft
File:                     8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft (raw, json)
Hash identifier:          6+Ner90Fx8eXzLdk/eLO7Xl7MsJHSlyU9kaCoxjUByU=
Subject key identifier:   42:98:15:F6:7E:72:5D:44:1E:0D:F5:0B:32:EB:6B:7D:A2:65:6D:FB
Authority key identifier: 8C:09:65:B6:2E:08:A9:FD:16:FB:7F:9A:18:5F:AD:44:38:54:71:62
Certificate issuer:       /CN=A91A58AA0001/serialNumber=8C0965B62E08A9FD16FB7F9A185FAD4438547162
Certificate serial:       69AF7977F8F803DC2C08F4DA983D510D5D9D2844
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft
Manifest number:          CC
Signing time:             Thu 24 Sep 2026 13:38:07 +0000
Manifest this update:     Thu 24 Sep 2026 13:33:07 +0000
Manifest next update:     Sun 27 Sep 2026 23:51:07 +0000
Files and hashes:         1: 8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl (hash: j5qi0apJZsWEQpNjmt7Xem2AatG1OL6Cr7LhF1qjcFE=)
                          2: AS7497.roa (hash: XHLcSp7qiWPFjDSo6O1VKaK3gIiH903/9ErIXSoKfEE=)
                          3: AS3460.roa (hash: 4+sYZc5isl8CSbCgD53in0pt+eKcGW6HRYe6bgqwhLQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:af:79:77:f8:f8:03:dc:2c:08:f4:da:98:3d:51:0d:5d:9d:28:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A58AA0001, serialNumber=8C0965B62E08A9FD16FB7F9A185FAD4438547162
        Validity
            Not Before: Sep 24 13:33:07 2026 GMT
            Not After : Sep 27 23:51:07 2026 GMT
        Subject: CN=429815F67E725D441E0DF50B32EB6B7DA2656DFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:61:88:19:5b:e1:3c:16:99:79:3e:c3:b1:52:
                    2f:90:8f:ef:d7:59:0d:cc:b7:50:9f:1d:7c:02:d1:
                    c0:66:74:d5:3f:43:97:d6:ae:c9:87:18:03:07:bc:
                    15:66:01:81:c5:32:23:3a:cd:88:07:a6:71:9c:ec:
                    3c:f5:85:d2:66:bc:60:b8:27:00:42:8a:b4:2d:80:
                    d3:37:0b:29:a6:29:b7:16:ac:31:f0:fc:90:da:f3:
                    df:aa:e4:ab:99:24:84:d7:16:47:a3:6e:f7:ad:fd:
                    b3:43:5d:0d:48:f8:d7:dd:d8:2e:87:3f:0c:7e:2f:
                    32:dc:9e:66:c4:f0:a9:82:27:d8:ce:8f:41:07:0e:
                    f4:37:d5:4b:b0:df:af:d3:52:32:36:b1:92:55:98:
                    43:1a:68:90:7e:dc:54:7d:32:e0:00:1f:de:7d:43:
                    0b:12:99:48:2f:45:30:15:cc:4a:9a:03:cf:2d:ea:
                    db:31:a8:d6:5e:b1:c9:13:60:44:27:68:fe:6a:50:
                    46:5f:19:35:df:57:0a:07:30:86:51:00:20:0a:66:
                    12:6f:1b:c4:03:28:af:1e:bb:52:20:66:b3:2d:a0:
                    d3:d0:cf:81:b4:92:c5:8e:81:89:6a:19:af:2c:4c:
                    60:ee:fd:af:ad:95:15:1b:e3:ea:96:16:56:30:a0:
                    03:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:98:15:F6:7E:72:5D:44:1E:0D:F5:0B:32:EB:6B:7D:A2:65:6D:FB
            X509v3 Authority Key Identifier:
                keyid:8C:09:65:B6:2E:08:A9:FD:16:FB:7F:9A:18:5F:AD:44:38:54:71:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e8:06:b7:3a:3e:54:d6:8c:b1:e2:b5:c4:b2:5e:f4:97:e6:
         da:cb:5a:fd:08:b2:91:e8:43:86:c0:f4:4b:e3:6a:24:1d:ed:
         36:a0:69:e3:0a:04:c4:de:37:e1:bc:46:5d:6b:f6:94:e0:66:
         02:85:cb:03:ce:5b:06:8a:2f:6c:81:e7:5a:3e:18:8a:84:e0:
         0b:97:91:cf:e1:4b:cb:c7:69:f4:3d:dd:d1:56:14:02:bd:8a:
         df:70:ca:dd:ec:67:84:74:fd:e2:db:03:b6:51:80:d6:37:3a:
         df:46:7b:0d:16:a9:cc:99:68:79:a4:76:d1:6b:76:a3:e8:fe:
         ab:9b:ec:d0:d3:47:fd:00:f2:d2:16:15:c1:71:f4:84:d9:a7:
         39:8f:1e:4d:8e:7d:ab:58:66:a9:ac:40:88:b5:ae:a1:a5:80:
         82:55:ce:02:73:eb:e0:8a:c3:6e:3d:89:28:69:f8:08:6f:3e:
         2d:02:86:a9:9f:65:46:3b:4e:6a:19:68:08:b1:05:0f:0b:6e:
         13:97:89:8d:17:31:cc:b9:8a:9e:b7:5f:82:f5:ed:d3:67:38:
         5b:c5:e4:c7:f6:ce:8f:29:28:f4:63:26:e7:42:a0:fb:cf:72:
         e3:e3:50:1f:7b:1f:77:9a:bc:04:7c:4f:1e:42:12:f3:9b:b9:
         2a:11:fc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:02:41 2026 by rpki-client