Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft
File:                     12BD80FB666E9FF3B78C5257CB80604CE466A620.mft (raw, json)
Hash identifier:          ryo/cXfawFWhvVD9a5YiL2IJUl1sSMCg6ZCKv96TT/8=
Subject key identifier:   05:44:EF:CF:4C:BD:31:57:AD:E5:C1:B8:E0:42:39:5B:F8:B7:48:97
Authority key identifier: 12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20
Certificate issuer:       /CN=12BD80FB666E9FF3B78C5257CB80604CE466A620
Certificate serial:       1682CE7DDA16D8D8DE384BA739F129D2D1776EFC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft
Manifest number:          66
Signing time:             Tue 13 Oct 2026 18:08:13 +0000
Manifest this update:     Tue 13 Oct 2026 18:03:13 +0000
Manifest next update:     Fri 16 Oct 2026 20:04:13 +0000
Files and hashes:         1: 323430323a366538303a3a2f33322d3332203d3e20313339313030.roa (hash: vwm0wFYdrshqVC19O/olyhuC+X7rA1oBdsrwCje/4V0=)
                          2: 12BD80FB666E9FF3B78C5257CB80604CE466A620.crl (hash: jhZ0KhFX4sMRGtEb5mWy4lhuLi9gNYFCqZ2a4wjJJX8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 20:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:82:ce:7d:da:16:d8:d8:de:38:4b:a7:39:f1:29:d2:d1:77:6e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12BD80FB666E9FF3B78C5257CB80604CE466A620
        Validity
            Not Before: Oct 13 18:03:13 2026 GMT
            Not After : Oct 16 20:04:13 2026 GMT
        Subject: CN=0544EFCF4CBD3157ADE5C1B8E042395BF8B74897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:50:6f:5a:65:85:54:cf:e6:7c:1c:ac:30:
                    e8:92:38:a3:52:7c:8d:57:84:4e:af:d6:84:65:d5:
                    c6:a9:b8:d3:f2:1b:d5:ce:7a:11:ca:71:8c:68:d4:
                    54:21:e0:87:5c:9f:a3:78:7c:cc:1b:37:53:63:71:
                    bc:7a:04:bf:14:8a:20:f9:9d:fb:45:f0:4b:c5:ae:
                    e0:f7:e2:11:3c:0a:fc:95:26:9c:bf:10:25:e3:b8:
                    a5:18:76:92:83:09:c4:a3:ca:6d:bc:f2:5f:32:f5:
                    fd:73:f6:e1:0b:49:db:0a:25:d9:69:c8:d1:98:dc:
                    a1:00:1b:70:20:c0:3b:32:d6:5d:73:61:1c:eb:15:
                    4a:13:fc:5a:a1:71:bb:49:d2:80:ff:3b:6b:b3:0b:
                    df:b3:b2:14:28:09:08:d9:4e:37:3c:38:9b:20:3a:
                    8f:06:fd:de:15:0b:49:93:70:fb:bd:ff:57:f5:72:
                    80:bb:71:76:a5:b4:ac:61:1c:45:48:8b:4c:ce:9f:
                    e7:0e:7e:57:f6:7f:42:88:2f:2a:15:c8:bd:1e:e1:
                    a5:29:c7:a3:50:0f:4e:dc:39:5b:52:f9:90:c1:3d:
                    db:a6:89:40:7f:72:a6:b9:ce:af:f9:fb:7c:10:61:
                    f3:db:2d:53:6c:13:e0:d6:e8:6f:61:5b:8f:45:ba:
                    ce:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:44:EF:CF:4C:BD:31:57:AD:E5:C1:B8:E0:42:39:5B:F8:B7:48:97
            X509v3 Authority Key Identifier:
                keyid:12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:dc:c7:76:6d:a3:40:a5:b8:ad:e1:b8:76:38:63:f6:36:1d:
         0a:31:03:00:b0:e0:c1:80:a8:b3:33:a7:1c:c7:81:4b:2d:01:
         eb:54:fe:68:8e:8d:f4:5f:4a:27:f7:57:6c:98:5a:58:54:2b:
         1a:ef:52:45:6f:9a:4f:7d:d6:82:cc:6c:7e:60:95:37:05:7d:
         78:11:91:3b:cf:98:dd:ce:e0:6b:be:cc:a3:41:28:83:c4:19:
         a4:3c:02:5f:69:f5:41:a0:49:9c:3f:15:15:cc:19:35:31:a0:
         63:cf:55:85:ee:cb:b5:4d:d4:1b:1c:09:17:7e:bd:45:a8:5d:
         41:46:58:a2:5b:77:e0:e9:82:a6:e4:bf:00:3e:85:cf:21:39:
         30:9f:fb:c9:1d:64:ab:65:3c:15:cb:87:8f:04:40:11:53:36:
         68:e1:fa:83:ef:9a:a7:f2:2c:34:44:4a:d8:ee:46:63:ef:8e:
         50:44:3f:e0:a6:e0:5b:39:27:f5:c4:5d:8e:8b:93:51:33:00:
         fa:33:ca:04:04:fe:00:cb:6a:17:c7:e0:12:f4:51:29:a6:d8:
         ca:80:9a:06:13:f3:62:e0:3a:da:7a:4b:fc:e8:0f:cb:15:fb:
         09:ba:c0:9f:77:25:e4:bb:b4:13:6f:5a:e3:8b:71:74:6f:b1:
         af:b1:15:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:13:14 2026 by rpki-client