Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft
File:                     F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft (raw, json)
Hash identifier:          0XIgOf/Vg7r6FkFWzfHYdzhOm0DUVDM5xjJxG1f5jEA=
Subject key identifier:   55:E2:33:68:88:DE:DB:7A:D7:17:1C:4E:2B:FB:04:F6:36:D1:92:F0
Authority key identifier: F0:71:BD:CF:D0:0F:17:B0:D2:CB:7A:04:E3:9F:7F:C3:C3:3A:0B:8D
Certificate issuer:       /CN=F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D
Certificate serial:       3D0EAF7FA4857C64B692AEA5DE5DAC5ED3CAB3FA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft
Manifest number:          AF
Signing time:             Sat 26 Sep 2026 11:33:44 +0000
Manifest this update:     Sat 26 Sep 2026 11:28:44 +0000
Manifest next update:     Tue 29 Sep 2026 14:28:44 +0000
Files and hashes:         1: AS56047.roa (hash: sOB/0xCvANLFyAUMciUsWEdcJJQE+e/pwZ+FBWrYdhk=)
                          2: AS0.roa (hash: hr/y8Vrz7JwAP+c/RvJl3p5fDAyUbA1PYMKSxrjs7FE=)
                          3: AS131562.roa (hash: lyeaZzzsA1wNSTES7Ho+HHZ+RzXLaE47z3sSRZstjus=)
                          4: F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl (hash: K/j6u5hwkU5fLYSia0AU5ifJRoVVtq84xNB8s2/7tQA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 14:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0e:af:7f:a4:85:7c:64:b6:92:ae:a5:de:5d:ac:5e:d3:ca:b3:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D
        Validity
            Not Before: Sep 26 11:28:44 2026 GMT
            Not After : Sep 29 14:28:44 2026 GMT
        Subject: CN=55E2336888DEDB7AD7171C4E2BFB04F636D192F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:4f:5c:4a:79:db:08:ad:79:d9:82:58:7b:
                    46:fb:5c:55:c3:9f:26:6b:6b:0e:84:26:f8:ec:03:
                    1c:53:75:a3:8b:c1:7f:da:33:b4:d9:e7:6c:3d:45:
                    07:54:bc:c5:ca:7e:b1:7c:c1:e5:c9:3f:07:bb:0d:
                    e2:90:ee:3c:65:88:14:46:1d:52:e6:45:fb:65:9b:
                    62:d2:51:62:df:bf:65:d4:71:a5:64:cb:06:00:2a:
                    d8:f6:7f:85:f3:0b:43:65:8b:57:9f:e0:5d:aa:f9:
                    b6:67:76:82:37:6c:29:77:1f:b2:ee:64:db:d7:ba:
                    2b:26:85:18:14:eb:68:fb:ea:31:bb:ae:83:da:19:
                    06:af:c4:c0:9c:5d:0b:1b:5f:2f:48:01:f1:54:7f:
                    39:ed:a7:1a:52:04:1c:3f:7a:2b:ec:97:03:7f:1f:
                    a8:28:05:f8:c8:d5:cd:00:54:b9:e1:92:dc:dc:cd:
                    36:44:b3:2e:80:5f:62:23:ce:a9:e9:4d:94:e3:09:
                    fd:7b:33:70:f3:54:37:b8:9d:74:bd:17:d3:1f:0e:
                    2e:4c:8f:42:20:44:d0:b9:7b:5f:e4:fe:a5:e2:cd:
                    5b:3c:8d:a9:d9:e8:6e:62:25:ed:59:3e:ef:53:44:
                    a6:59:d9:3b:4a:04:c6:ab:a5:88:e5:e8:59:f4:38:
                    65:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E2:33:68:88:DE:DB:7A:D7:17:1C:4E:2B:FB:04:F6:36:D1:92:F0
            X509v3 Authority Key Identifier:
                keyid:F0:71:BD:CF:D0:0F:17:B0:D2:CB:7A:04:E3:9F:7F:C3:C3:3A:0B:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9a:94:d9:a4:37:f6:fb:6a:ce:0e:8c:53:f9:93:4d:94:79:
         77:a5:75:bb:19:56:fd:22:64:78:fc:c5:07:2b:f0:f4:d8:26:
         b1:90:35:a5:41:10:52:c3:c5:cc:5a:b7:ff:b2:0b:02:ef:dd:
         67:25:88:f8:17:b2:80:06:3a:6b:88:28:ae:9b:8b:60:ac:2f:
         1d:f3:79:4b:77:fe:b2:e2:cf:16:66:1f:34:9d:40:c4:30:ce:
         fe:78:e8:8e:2c:cd:32:a9:18:8f:49:1e:35:2b:6e:82:70:65:
         55:ec:74:09:40:ee:04:d4:01:00:86:a6:6b:82:12:eb:7f:31:
         85:ac:47:f6:8c:01:93:26:a6:cf:16:4e:ef:4c:47:d2:f5:a6:
         27:6f:ff:40:d8:65:c7:41:37:70:7b:b4:bf:57:e5:1c:3a:03:
         cb:b0:91:6c:e2:f7:b4:37:93:89:37:9c:b9:57:d7:4d:73:f7:
         26:2f:5d:6b:1c:fc:47:99:83:82:da:44:54:c0:fc:4a:fe:73:
         46:9e:87:7b:37:30:a9:1a:b4:5b:97:a3:eb:ee:25:41:f6:0a:
         7d:5a:c2:95:e1:a6:76:55:58:34:68:91:89:c8:c6:ee:5a:77:
         54:8f:73:31:e5:5e:8a:de:51:09:2b:8a:e4:fc:d3:1a:c3:f4:
         99:fc:ac:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:57:02 2026 by rpki-client