Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft
File:                     FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft (raw, json)
Hash identifier:          VNRgGRiRNuGfQE+TvJnG6s0lQXO/gHG4yVAoUsEJylI=
Subject key identifier:   22:11:B4:9F:1E:B1:5E:20:2B:49:6A:74:78:A2:8F:85:B5:48:FE:28
Authority key identifier: FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9
Certificate issuer:       /CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9
Certificate serial:       145F2BB1F455CB4B8D7ADD221925EAE9124633AC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft
Manifest number:          B1
Signing time:             Mon 05 Oct 2026 21:29:32 +0000
Manifest this update:     Mon 05 Oct 2026 21:24:32 +0000
Manifest next update:     Fri 09 Oct 2026 09:09:32 +0000
Files and hashes:         1: FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl (hash: 2R8FhZBGlAzd9In1g3FqoBzg4amM2jfJuIDAuykT+6Y=)
                          2: AS24139.roa (hash: qdYkjvhQ+XXRS0M+IDlpLknRxmi951UHbBDsRT0lR9I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 09:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5f:2b:b1:f4:55:cb:4b:8d:7a:dd:22:19:25:ea:e9:12:46:33:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9
        Validity
            Not Before: Oct  5 21:24:32 2026 GMT
            Not After : Oct  9 09:09:32 2026 GMT
        Subject: CN=2211B49F1EB15E202B496A7478A28F85B548FE28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e2:a8:e7:a6:f1:58:20:63:65:8a:9c:0f:5e:
                    33:f6:ce:32:08:78:e5:4f:e9:4e:fe:f7:28:b8:42:
                    b2:47:e0:3f:d5:f3:1c:ad:e4:f0:e1:a8:c6:9d:aa:
                    c5:7f:58:4f:7e:5d:12:68:65:39:6a:6c:9d:09:0d:
                    4f:90:c6:2e:de:9b:f8:8a:c3:23:81:ce:05:ed:c7:
                    9f:97:4e:ce:df:81:18:78:12:03:26:3b:d1:e4:33:
                    40:f3:cc:ac:95:bd:8a:a2:18:6c:0b:2b:7e:b2:ad:
                    9c:4f:d1:bb:0c:ce:29:2d:7d:bf:8a:95:06:94:7d:
                    e7:b0:50:ad:b2:fb:55:b8:aa:15:f0:57:5d:76:3e:
                    ee:ee:23:1a:de:bd:08:5c:ab:56:0c:97:39:69:50:
                    4e:93:b3:be:83:8d:0d:e6:48:c0:97:fa:6f:b4:f7:
                    17:a5:22:05:2a:ce:6b:0a:ea:5e:9b:37:32:d7:c4:
                    9b:c9:2c:1f:8a:0e:d4:ff:36:f9:3e:b9:2d:24:0b:
                    aa:2b:ad:16:64:d7:81:db:58:41:ce:9b:da:2c:1b:
                    40:16:4a:37:43:3f:84:16:ea:ea:1a:f2:20:7d:83:
                    94:3f:9e:3d:c0:9c:ff:ca:b3:d9:c8:cb:c0:66:1b:
                    3a:fd:6c:c8:87:92:9a:52:9b:e3:e4:7c:f4:3c:38:
                    82:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:11:B4:9F:1E:B1:5E:20:2B:49:6A:74:78:A2:8F:85:B5:48:FE:28
            X509v3 Authority Key Identifier:
                keyid:FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:0e:4e:81:cc:d7:d0:cc:c6:8f:5c:34:ac:b3:7c:52:94:c8:
         9f:63:53:2e:fa:c8:d6:94:4c:55:07:46:e5:f2:a5:8b:71:51:
         b3:12:97:b2:20:46:7d:b9:d5:2a:7c:e4:cd:76:99:2c:96:7e:
         db:67:87:fb:0e:ca:a4:4d:83:6d:2b:11:63:6f:16:4e:91:98:
         f9:b5:76:e0:5c:3e:03:e8:89:8f:0c:80:02:ff:bd:a6:32:f2:
         46:51:24:29:54:03:8b:99:e4:28:03:cf:30:74:f6:b9:fd:ee:
         88:b7:dd:dc:9f:02:52:c8:22:76:89:07:9a:1c:12:cf:4f:81:
         89:e6:44:5d:34:a1:b8:77:1a:9f:e7:34:f9:5a:10:0c:5e:94:
         79:c0:73:67:71:d3:e2:cf:a5:10:67:98:5e:c8:80:9e:62:fc:
         ad:53:e0:2c:68:90:20:a0:1f:e4:90:74:de:e5:a8:d1:63:da:
         5c:45:c6:2c:3e:cb:83:72:c3:d9:16:0b:17:ae:4b:74:42:c9:
         b9:34:05:a3:93:a1:3a:52:47:d6:bb:50:30:e3:a3:34:ab:8b:
         3d:a0:a1:04:7d:00:eb:ff:82:42:bc:b1:69:96:8e:c9:4b:68:
         9e:41:f2:67:c4:b7:c6:c3:e6:c3:4b:a3:52:67:1f:7b:62:ec:
         87:89:a7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:44:15 2026 by rpki-client