Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
File:                     E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft (raw, json)
Hash identifier:          B1/sw+Xt3GeskMqYahF+vOc/Ek2UGaknAgP8rvNnjmY=
Subject key identifier:   D8:D3:02:00:7E:DC:73:4E:15:24:F4:D7:18:77:77:75:5E:6C:B8:91
Authority key identifier: E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
Certificate issuer:       /CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
Certificate serial:       2CE703C5A73B09DB3056C7E3FA89C27E8E8D4CC4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
Manifest number:          8D
Signing time:             Tue 21 Jul 2026 08:08:23 +0000
Manifest this update:     Tue 21 Jul 2026 08:03:23 +0000
Manifest next update:     Wed 22 Jul 2026 08:33:23 +0000
Files and hashes:         1: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl (hash: GfNXc/y83sz4Ru6zcmC/ygGYYDW9ZnF69fbLznXzJ7s=)
                          2: 3134342e37392e342e302f32332d3233203d3e2030.roa (hash: M8n/GFHsH32a0OY3vILdVtqD1jQGc9Vzjf0kfgZ0TxQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 08:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e7:03:c5:a7:3b:09:db:30:56:c7:e3:fa:89:c2:7e:8e:8d:4c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
        Validity
            Not Before: Jul 21 08:03:23 2026 GMT
            Not After : Jul 22 08:33:23 2026 GMT
        Subject: CN=D8D302007EDC734E1524F4D7187777755E6CB891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c2:18:37:2b:05:14:e8:98:b4:ba:3d:64:ca:
                    b6:ba:6c:93:cf:f3:23:ca:40:8b:06:dc:94:00:ab:
                    f0:24:ac:07:25:b7:34:18:eb:93:06:59:78:3b:00:
                    45:ea:bb:0d:ba:6c:66:d1:36:99:4e:41:a5:b7:47:
                    4d:11:e4:f1:e3:ab:28:d0:1b:a4:e8:18:52:36:70:
                    28:dc:fc:95:0f:91:b3:94:a5:52:18:b3:73:2d:fd:
                    f6:0f:65:18:cf:ee:92:53:d0:e7:f8:58:21:1a:8d:
                    ee:1e:bd:bf:d7:45:0e:d2:02:f4:f3:40:0d:5f:e5:
                    20:6e:7e:77:3b:9d:97:12:ff:6b:d6:f6:4d:c4:54:
                    b3:b0:f2:99:f9:37:59:79:43:3a:f5:5a:62:07:21:
                    5e:ad:c7:c2:71:9d:ec:03:6b:06:a1:f0:70:fe:e6:
                    01:32:e7:44:e0:10:89:dc:7e:a5:67:b7:68:bf:20:
                    32:87:6b:c0:3c:d9:1d:ef:9f:8f:df:ce:da:cb:df:
                    75:c9:f7:bb:aa:7c:62:d9:d1:83:05:56:ba:9b:1b:
                    48:b6:6f:88:f0:21:62:42:62:0d:0f:61:9d:f4:02:
                    aa:58:b3:69:e1:6c:c2:a7:a1:dd:17:fc:33:9b:7d:
                    ad:ec:82:9e:54:cc:ad:d9:bd:22:5f:9f:f8:4c:03:
                    bd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D3:02:00:7E:DC:73:4E:15:24:F4:D7:18:77:77:75:5E:6C:B8:91
            X509v3 Authority Key Identifier:
                keyid:E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:5c:df:66:d5:34:72:64:76:f1:c5:62:be:11:b4:72:7c:8c:
         f2:61:3b:7d:2b:43:d4:75:f9:6d:ca:d0:b2:0b:34:82:ae:30:
         d7:b3:78:df:a8:c0:e6:2b:90:b8:90:0b:5a:27:b3:bd:b8:35:
         b2:20:09:d2:c1:d8:cb:d6:db:68:b9:3b:20:d3:bb:f9:b1:4c:
         ec:6e:9c:d2:6a:6a:1e:00:0e:7e:38:bc:de:c0:c6:84:66:fe:
         8a:f4:54:b9:7f:d4:4c:64:c8:1f:ea:9d:41:02:1a:8d:0c:12:
         51:25:13:67:4b:45:0a:f1:b3:b8:f2:c9:1f:c2:93:bd:f6:73:
         24:98:27:f7:73:17:d5:44:9c:c1:f3:33:0a:e8:72:30:4f:08:
         bc:8f:13:cf:2f:5a:fc:57:73:62:59:1e:63:79:fa:9f:c3:af:
         e6:8b:25:ad:d2:91:2d:76:1d:27:c8:8d:d0:c4:73:99:a8:cf:
         f1:68:30:70:e6:c2:12:c6:1c:99:c2:67:b2:77:a7:e5:27:90:
         ce:cc:ec:5e:ff:c5:78:63:6f:51:c8:ae:ea:9c:7d:49:16:3d:
         0c:a8:09:4a:0e:22:ab:13:b4:8f:af:fa:26:08:94:78:2d:33:
         a6:14:f8:05:67:bb:c2:59:78:71:ce:4d:d0:1c:66:ec:63:8c:
         4b:f4:58:8e
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIULOcDxac7CdswVsfj+onCfo6NTMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlFRDhBOUJFODQ1MzEyOEJDREEzRkRBMkEyRjk4ODQz
ODQ3QkMyRjAeFw0yNjA3MjEwODAzMjNaFw0yNjA3MjIwODMzMjNaMDMxMTAvBgNV
BAMTKEQ4RDMwMjAwN0VEQzczNEUxNTI0RjRENzE4Nzc3Nzc1NUU2Q0I4OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRwhg3KwUU6Ji0uj1kyra6bJPP
8yPKQIsG3JQAq/AkrAcltzQY65MGWXg7AEXquw26bGbRNplOQaW3R00R5PHjqyjQ
G6ToGFI2cCjc/JUPkbOUpVIYs3Mt/fYPZRjP7pJT0Of4WCEaje4evb/XRQ7SAvTz
QA1f5SBufnc7nZcS/2vW9k3EVLOw8pn5N1l5Qzr1WmIHIV6tx8JxnewDawah8HD+
5gEy50TgEIncfqVnt2i/IDKHa8A82R3vn4/fztrL33XJ97uqfGLZ0YMFVrqbG0i2
b4jwIWJCYg0PYZ30AqpYs2nhbMKnod0X/DObfa3sgp5UzK3ZvSJfn/hMA72FAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU2NMCAH7cc04VJPTXGHd3dV5suJEwHwYDVR0j
BBgwFoAU6e2Km+hFMSi82j/aKi+YhDhHvC8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDQ4ODg3NDk4NzU1Mjc2OS8wL0U5RUQ4QTlCRTg0NTMxMjhCQ0RBM0ZEQTJBMkY5
ODg0Mzg0N0JDMkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRTlFRDhBOUJFODQ1MzEyOEJDREEzRkRBMkEyRjk4ODQzODQ3QkMyRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ0ODg4NzQ5ODc1NTI3NjkvMC9FOUVEOEE5QkU4NDUz
MTI4QkNEQTNGREEyQTJGOTg4NDM4NDdCQzJGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlzfZtU0cmR2
8cVivhG0cnyM8mE7fStD1HX5bcrQsgs0gq4w17N436jA5iuQuJALWiezvbg1siAJ
0sHYy9bbaLk7INO7+bFM7G6c0mpqHgAOfji83sDGhGb+ivRUuX/UTGTIH+qdQQIa
jQwSUSUTZ0tFCvGzuPLJH8KTvfZzJJgn93MX1UScwfMzCuhyME8IvI8Tzy9a/Fdz
YlkeY3n6n8Ov5oslrdKRLXYdJ8iN0MRzmajP8WgwcObCEsYcmcJnsnen5SeQzszs
Xv/FeGNvUciu6px9SRY9DKgJSg4iqxO0j6/6JgiUeC0zphT4BWe7wll4cc5N0Bxm
7GOMS/RYjg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:47:10 2026 by rpki-client