Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
File:                     EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft (raw, json)
Hash identifier:          jdruCMaRgb11vvUCqmM9TuTrBIfYZK2Xdlb2rqKx+sg=
Subject key identifier:   5F:04:4F:95:37:F1:28:F8:4C:CF:05:98:C3:2B:81:B2:B1:8A:E8:36
Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
Certificate issuer:       /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Certificate serial:       64726B8D40163BE10697310B261C745BEECF743D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
Manifest number:          9F
Signing time:             Mon 05 Oct 2026 20:14:27 +0000
Manifest this update:     Mon 05 Oct 2026 20:09:27 +0000
Manifest next update:     Fri 09 Oct 2026 07:17:27 +0000
Files and hashes:         1: 34352e3131332e3230352e302f32342d3234203d3e2030.roa (hash: BD64OSACeGxAeO4KURjOtf7p0Hi9TEXugn1QNLI3BW0=)
                          2: 34352e3131332e3230342e302f32342d3234203d3e2030.roa (hash: azwF4QxJ4o7RUv11JVeJn4yL6J0MCJE7wPtk5VKUtmc=)
                          3: 3130332e38332e34342e302f32342d3234203d3e2034383437.roa (hash: HO5MmtYJt5XtkkC6oFdIZjx3K0y//CdRIISyid2o6JE=)
                          4: 34352e3131332e3230372e302f32342d3234203d3e2030.roa (hash: CVagD8Z9yMPAdysjmCoIAoVUBTyn6Sqbck57pfmRU50=)
                          5: 34332e3232392e3138352e302f32342d3234203d3e2034383437.roa (hash: Mk1ZRjdXSKbl1/uFe7FLy9RQ8B0w6L8obQIaBkMJHl8=)
                          6: 34332e3232392e3138372e302f32342d3234203d3e2034383038.roa (hash: mQ/yWNZmDUQo9Pngz7MlnXAExe/cEgg0ErqD67vpet0=)
                          7: 34332e3235342e32342e302f32342d3234203d3e2034383038.roa (hash: ZAMX0/tAb+nwZhAw4xAuQz3sFyhvrglPoAtPXFxaiOA=)
                          8: 34332e3232392e3138372e302f32342d3234203d3e2034383437.roa (hash: xMI16+K1Gz9Axy9BUqR6H93tK+fzxf3wumq2nZUQslk=)
                          9: 34352e3131332e3230362e302f32342d3234203d3e2034383038.roa (hash: zcRmo63dclxgiZ3nFyKCKGrLFhXcY5p/S+EzqtAO7J0=)
                          10: 323430333a653763303a313a3a2f34382d3438203d3e2034383437.roa (hash: Qzmbn7+BiqPdX+/uBh1aA5bogjMd1mjMZMN2yWhJeCc=)
                          11: 34332e3232392e3138362e302f32342d3234203d3e2034383437.roa (hash: lu4vogcuvhM57mFxv78YqTlqKjpnM4ATCJM3qXrRxuo=)
                          12: 3130332e38332e34372e302f32342d3234203d3e2034383437.roa (hash: Y10Vqyb0XJ0HNTfHx0Vvch3nLgELGfJsukHkkTDyvyQ=)
                          13: 34332e3232392e3138362e302f32342d3234203d3e2034383038.roa (hash: OU4d1XrxVWrge7GzfV+WPEL0nCQEursBPS5TeT7CJmI=)
                          14: 3130332e38332e34352e302f32342d3234203d3e2034383437.roa (hash: +MbSziKgPrPl1SsyN4rJPpOURE3gwv64hE9pCH5hC7M=)
                          15: 3130332e38332e34362e302f32342d3234203d3e2034383437.roa (hash: mdSscBSM9XKJNkb7F/9rJNPLkHKycB/dFizvvcw5fCs=)
                          16: 323430333a653763303a333a3a2f34382d3438203d3e2034383038.roa (hash: 5Cssj0oD+zq7BYXS/ITi5VE8H5pPSZbUy+Vkm3Mrsh8=)
                          17: EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl (hash: HNs7bNQOZYI6A5HaA6l13hVc01H7O7p/BRJm5t2oScs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 07:17:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:72:6b:8d:40:16:3b:e1:06:97:31:0b:26:1c:74:5b:ee:cf:74:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
        Validity
            Not Before: Oct  5 20:09:27 2026 GMT
            Not After : Oct  9 07:17:27 2026 GMT
        Subject: CN=5F044F9537F128F84CCF0598C32B81B2B18AE836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7f:5b:e0:52:81:74:95:7b:a1:17:25:c1:56:
                    42:56:a3:01:9b:7e:08:71:89:a2:3b:dc:9e:53:bb:
                    7e:1b:ee:99:1b:8e:55:5c:82:c7:a5:4e:10:00:91:
                    a7:74:21:92:c6:ff:fc:22:46:34:db:07:0b:bb:36:
                    c7:23:75:65:69:54:72:9b:af:f8:63:c0:96:ba:d0:
                    7a:6c:76:6a:ba:44:99:00:cc:5c:9e:da:0e:19:da:
                    43:04:54:7e:00:19:89:7f:6f:2b:2b:cb:e1:d7:f6:
                    19:15:3a:8d:08:f4:e2:53:6e:a5:1b:e4:41:7e:34:
                    86:35:ea:9b:1e:d6:8d:98:39:61:be:72:f0:ce:12:
                    ba:38:74:41:2b:98:6e:14:d7:e3:ce:63:33:c2:bf:
                    55:a0:1c:59:3f:f1:45:28:96:3b:7e:f8:f3:c8:fd:
                    22:cd:c1:cf:de:f7:05:df:fe:cd:7a:7b:cb:2f:4e:
                    cb:a2:83:df:04:d0:c5:b1:52:ce:c3:50:c0:30:dc:
                    bc:6c:47:31:39:9c:bb:a3:2e:8e:89:f9:5d:42:43:
                    a1:49:e3:47:f0:d2:12:08:56:1a:aa:9e:7d:73:04:
                    34:07:3e:8f:87:c3:41:49:ce:99:b9:00:61:9f:6b:
                    ad:75:f9:c8:bf:59:df:4e:c0:ff:ea:1a:9f:0a:fc:
                    c0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:04:4F:95:37:F1:28:F8:4C:CF:05:98:C3:2B:81:B2:B1:8A:E8:36
            X509v3 Authority Key Identifier:
                keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:54:1f:85:07:3a:0b:40:2c:0a:20:9a:b9:eb:5c:c1:62:e9:
         15:d7:2a:96:bb:20:aa:fb:af:27:03:b6:b3:bd:a5:a0:f8:f3:
         c9:00:80:41:9e:54:91:c1:6e:2f:cb:66:df:c5:c3:5a:73:75:
         c3:dc:f5:08:cf:12:bf:07:ba:e2:06:75:57:8e:87:b4:50:92:
         8f:7c:b5:3c:eb:cf:83:2b:23:5b:62:8c:45:90:97:7f:0f:54:
         47:09:05:5b:f4:33:44:5f:e1:92:61:e8:fa:9e:98:bf:55:d9:
         7e:02:99:be:68:9f:a8:75:a9:e2:2a:fb:42:19:a7:31:55:ed:
         07:c2:ba:0f:43:0c:29:c3:96:5e:a4:5e:40:62:dd:e4:86:54:
         67:d9:ee:3c:f7:17:ab:88:fc:6f:bc:f7:da:c9:0b:ce:ed:51:
         ac:49:de:b2:4a:5c:ce:40:30:97:d1:74:b1:e8:eb:57:3e:65:
         46:29:b1:11:c0:a6:5e:59:a5:1e:c2:22:38:cc:65:2b:6f:2f:
         e9:53:42:57:af:8e:c7:8b:81:a3:cf:78:c3:38:0c:c7:b4:5d:
         2e:0c:16:11:2f:0f:ab:4a:f2:9c:cc:ef:56:f1:6e:5c:38:7e:
         d2:32:e1:e3:e7:a4:31:78:d2:c8:a7:35:aa:f6:4b:22:d2:48:
         7b:fd:d1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:59:20 2026 by rpki-client