Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft
File:                     1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft (raw, json)
Hash identifier:          4Vf5iCUNIDwUUa4SOHy/djJQXEcA0eyiBWYqDNoH7T4=
Subject key identifier:   42:7C:44:D0:59:2C:8C:D5:50:3A:96:F3:3F:6B:F0:3E:69:09:4B:8D
Authority key identifier: 18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8
Certificate issuer:       /CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8
Certificate serial:       64F0BD3FDF5F204DB902BDA85E18C5357E2FE630
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft
Manifest number:          78
Signing time:             Mon 12 Oct 2026 02:26:18 +0000
Manifest this update:     Mon 12 Oct 2026 02:21:18 +0000
Manifest next update:     Thu 15 Oct 2026 11:49:18 +0000
Files and hashes:         1: 3230322e3132322e33322e302f32312d3231203d3e2037343937.roa (hash: mS1TYURsC1rJOd4t7iMX5ACFJtFx79PgFQvXC5HulAU=)
                          2: 3230322e33382e3132382e302f32332d3233203d3e2037343937.roa (hash: 3KN0MikBInjR2AE42lOEjDcp6hhwhQEE2fCSsY3rvnk=)
                          3: 1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl (hash: zQ/0rXRUNJkc5sAtEhJ1+tWW9PIFgHsGBgvcBGWGg5I=)
                          4: 323430313a646530303a3a2f33322d3332203d3e2037343937.roa (hash: rj+xhwjSRL8r9RnI2hIan5czVYkPPTC00QgifmSjB34=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 01:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f0:bd:3f:df:5f:20:4d:b9:02:bd:a8:5e:18:c5:35:7e:2f:e6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8
        Validity
            Not Before: Oct 12 02:21:18 2026 GMT
            Not After : Oct 15 11:49:18 2026 GMT
        Subject: CN=427C44D0592C8CD5503A96F33F6BF03E69094B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:dd:8b:73:1e:d6:e3:cc:b7:0a:8f:ba:61:99:
                    77:bf:ba:aa:1d:ef:40:bb:a3:c1:00:8a:3b:76:64:
                    48:e7:fc:73:1f:d7:7f:73:67:40:da:6b:0c:8d:c5:
                    1e:08:74:3e:c3:83:b2:ec:18:93:66:05:ea:74:cf:
                    87:2b:f1:15:5a:56:4a:8f:88:ab:b4:7c:c7:0c:0a:
                    74:97:9d:92:42:8e:e8:26:7e:4b:37:e4:59:c6:73:
                    b1:91:e2:c1:18:64:54:27:d7:f6:f5:57:4e:8c:f0:
                    6c:8a:f3:43:2b:ed:2d:80:03:cb:f6:c1:be:a0:0e:
                    e5:e7:cd:ff:fa:f5:2d:e7:65:8b:71:f2:eb:fc:d5:
                    d4:0a:cd:48:19:0b:ba:aa:f0:1f:e0:5e:28:29:d2:
                    b6:32:2e:a2:91:6f:06:57:10:41:85:eb:5d:f4:f6:
                    43:93:54:1a:81:db:00:99:b7:34:26:5e:e3:15:ec:
                    a4:f6:34:ac:95:91:57:41:28:8e:b8:64:8c:6b:4c:
                    46:b8:e7:b0:ea:9b:a0:ac:e0:82:fa:ca:17:b1:f9:
                    d4:ff:12:d5:c5:11:ed:6c:67:32:51:fe:a1:fa:a2:
                    ea:7b:77:a2:17:01:47:e5:96:81:76:03:b8:a6:88:
                    6c:31:c9:24:52:be:ac:58:34:59:63:be:d1:de:58:
                    b7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7C:44:D0:59:2C:8C:D5:50:3A:96:F3:3F:6B:F0:3E:69:09:4B:8D
            X509v3 Authority Key Identifier:
                keyid:18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:df:59:5a:e2:f0:f6:0f:23:22:34:87:3a:96:90:1d:eb:43:
         3a:c7:bd:16:4c:e6:58:eb:32:7d:8b:db:94:21:9c:4f:fa:68:
         11:c2:4f:fc:f2:c2:d3:da:41:98:2c:9d:4a:e8:bf:09:29:6a:
         76:9e:3e:62:f9:53:95:ec:a5:7a:8c:58:70:54:a4:02:c8:af:
         19:02:e0:b5:4d:69:e5:3d:15:5c:50:c4:0b:4e:9e:32:32:0d:
         bc:6e:42:ea:05:32:05:8e:58:56:ec:08:ee:53:a3:9c:e6:d9:
         24:df:58:d7:11:b8:f5:a7:e0:9d:e6:81:af:ec:a9:df:3a:db:
         51:f2:9d:1b:9e:12:f8:8e:15:36:0b:a5:16:78:ed:5d:c8:aa:
         0d:63:f2:bd:2c:e1:19:ed:e1:8c:50:31:cd:16:be:79:16:37:
         bf:8e:e9:1f:38:ae:6a:90:eb:62:a3:7d:d2:7b:d2:13:85:8e:
         eb:9e:3b:81:4e:e3:70:cf:15:21:b8:aa:79:5e:14:4c:3f:cc:
         7f:5a:6a:e5:e4:e2:6c:ab:83:a6:d7:4d:25:4f:34:c3:c3:60:
         e8:d5:e4:3b:7c:46:ce:62:85:ff:0d:11:f6:fb:ce:ec:df:d3:
         52:0c:89:43:49:22:fd:e9:fa:77:0a:67:4d:96:6d:9b:f1:54:
         b4:ee:f6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:46:38 2026 by rpki-client