Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
File:                     B361C757B6D70C317FD018CE921CC13F568B00D8.mft (raw, json)
Hash identifier:          1AxGvCOxg48fQfuWdj2eSdg0G+UcLDu8v17zWlfybkQ=
Subject key identifier:   A2:63:1E:62:35:31:64:9F:FC:DE:AA:24:0C:74:AA:BA:76:39:85:EC
Authority key identifier: B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8
Certificate issuer:       /CN=B361C757B6D70C317FD018CE921CC13F568B00D8
Certificate serial:       259F2792509F99B0993E911D32B771F7E044543D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
Manifest number:          012B
Signing time:             Fri 28 Aug 2026 06:48:00 +0000
Manifest this update:     Fri 28 Aug 2026 06:43:00 +0000
Manifest next update:     Mon 31 Aug 2026 10:10:00 +0000
Files and hashes:         1: 323430323a326536303a3a2f33322d3438203d3e20313531323331.roa (hash: bgR/NVrBsnz+F/Uqm+DFCd1LSczUrvNifQljXjBX0Cw=)
                          2: B361C757B6D70C317FD018CE921CC13F568B00D8.crl (hash: FAVweBa2ILYWnS9kXknULi9HMixU/uHTz4XJwP0qZrY=)
                          3: 3130332e3130342e3135322e302f32322d3234203d3e20313531323331.roa (hash: UU8+VwXx5kLXE1vREUzKeaHXeDerUJ/54dl+hLa2H6g=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 10:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9f:27:92:50:9f:99:b0:99:3e:91:1d:32:b7:71:f7:e0:44:54:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B361C757B6D70C317FD018CE921CC13F568B00D8
        Validity
            Not Before: Aug 28 06:43:00 2026 GMT
            Not After : Aug 31 10:10:00 2026 GMT
        Subject: CN=A2631E623531649FFCDEAA240C74AABA763985EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d2:ab:53:ac:1a:d4:fa:5d:93:5e:c6:2c:9a:
                    24:15:de:b8:f8:06:29:52:62:0d:9c:0a:96:a9:10:
                    2b:c6:e3:0d:41:ce:fa:f4:56:bb:7e:d1:a0:c2:88:
                    cf:98:63:6f:81:16:59:c8:51:03:19:d6:05:b8:73:
                    eb:56:da:78:4f:a9:8e:82:77:67:aa:56:9f:f0:ec:
                    10:d8:9a:77:7b:fd:04:65:d8:92:66:0b:a8:8b:b5:
                    f0:d2:ed:64:12:5d:d3:df:f0:83:33:c3:79:bc:87:
                    00:57:4d:e1:dc:3e:c7:ec:5f:01:25:44:b8:35:af:
                    35:b3:1d:df:d8:54:d3:34:a0:3b:98:1d:5a:ab:60:
                    91:d3:e7:8b:f7:d4:83:f0:14:30:38:1d:09:2a:a2:
                    1e:f5:15:19:20:dd:35:59:a2:12:08:07:99:0a:d4:
                    01:33:d6:28:7a:d5:73:2d:49:6d:31:d7:77:17:43:
                    2c:e9:b0:d0:48:da:83:f6:fd:8f:aa:0e:25:01:de:
                    29:01:86:44:02:b1:d7:64:06:7e:fe:cf:7b:43:b5:
                    58:8f:f2:6d:47:c8:5a:cd:b8:27:1e:5d:af:6f:a4:
                    bc:d4:8e:47:e9:ea:87:73:69:3f:5f:74:a5:89:d6:
                    2f:89:1e:a9:4d:c8:cf:12:25:ce:36:dc:1a:33:38:
                    88:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:63:1E:62:35:31:64:9F:FC:DE:AA:24:0C:74:AA:BA:76:39:85:EC
            X509v3 Authority Key Identifier:
                keyid:B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d4:ba:da:31:24:74:8c:72:56:f7:c6:f0:0b:86:d6:67:6f:
         7c:a5:4b:d4:45:6f:cc:d6:9c:d9:3b:9a:c6:21:19:7e:27:6f:
         2e:ec:7f:3b:91:a5:9a:ce:4e:96:10:26:d9:e5:08:16:f1:64:
         09:01:86:15:b1:e2:fd:c1:6e:c8:a0:64:00:d4:98:1f:c1:85:
         4d:77:60:6d:f8:5e:0b:0d:7f:f9:aa:0e:94:46:22:ce:34:66:
         63:a6:b3:b5:7a:c7:37:7b:46:53:ee:8c:83:05:d6:07:de:2c:
         a3:08:c2:27:89:5f:0a:84:0a:c0:d4:ee:35:3b:bc:53:f6:6c:
         63:a6:a3:8d:b8:e5:e6:df:71:cc:e6:27:62:4f:5f:36:3b:35:
         24:5f:c3:94:f3:45:19:36:37:18:80:63:bf:87:99:32:2e:43:
         b6:85:49:38:d9:3b:9d:43:2a:ca:87:ec:ce:4d:c1:0c:ce:c1:
         fa:87:18:b8:f1:0b:9d:6d:c9:27:b7:6d:c0:98:71:dd:3a:8b:
         ec:cc:ca:98:15:4d:f3:09:b5:c0:0c:74:0b:ec:b2:27:53:9a:
         e2:59:ba:3a:b3:60:f8:2b:14:6c:65:f9:cc:77:6b:c6:ff:fc:
         05:d2:2b:26:8d:07:b9:de:06:c6:91:f2:0e:51:16:82:a1:c7:
         3e:36:3c:16
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUJZ8nklCfmbCZPpEdMrdx9+BEVD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM2MUM3NTdCNkQ3MEMzMTdGRDAxOENFOTIxQ0MxM0Y1
NjhCMDBEODAeFw0yNjA4MjgwNjQzMDBaFw0yNjA4MzExMDEwMDBaMDMxMTAvBgNV
BAMTKEEyNjMxRTYyMzUzMTY0OUZGQ0RFQUEyNDBDNzRBQUJBNzYzOTg1RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS0qtTrBrU+l2TXsYsmiQV3rj4
BilSYg2cCpapECvG4w1Bzvr0Vrt+0aDCiM+YY2+BFlnIUQMZ1gW4c+tW2nhPqY6C
d2eqVp/w7BDYmnd7/QRl2JJmC6iLtfDS7WQSXdPf8IMzw3m8hwBXTeHcPsfsXwEl
RLg1rzWzHd/YVNM0oDuYHVqrYJHT54v31IPwFDA4HQkqoh71FRkg3TVZohIIB5kK
1AEz1ih61XMtSW0x13cXQyzpsNBI2oP2/Y+qDiUB3ikBhkQCsddkBn7+z3tDtViP
8m1HyFrNuCceXa9vpLzUjkfp6odzaT9fdKWJ1i+JHqlNyM8SJc423BozOIgTAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUomMeYjUxZJ/83qokDHSqunY5hewwHwYDVR0j
BBgwFoAUs2HHV7bXDDF/0BjOkhzBP1aLANgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MzIyMTk3MjAwODk2My8wL0IzNjFDNzU3QjZENzBDMzE3RkQwMThDRTkyMUND
MTNGNTY4QjAwRDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjM2MUM3NTdCNkQ3MEMzMTdGRDAxOENFOTIxQ0MxM0Y1NjhCMDBEOC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwMDg5NjMvMC9CMzYxQzc1N0I2RDcw
QzMxN0ZEMDE4Q0U5MjFDQzEzRjU2OEIwMEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNS62jEkdIxy
VvfG8AuG1mdvfKVL1EVvzNac2TuaxiEZfidvLux/O5Glms5OlhAm2eUIFvFkCQGG
FbHi/cFuyKBkANSYH8GFTXdgbfheCw1/+aoOlEYizjRmY6aztXrHN3tGU+6MgwXW
B94sowjCJ4lfCoQKwNTuNTu8U/ZsY6ajjbjl5t9xzOYnYk9fNjs1JF/DlPNFGTY3
GIBjv4eZMi5DtoVJONk7nUMqyofszk3BDM7B+ocYuPELnW3JJ7dtwJhx3TqL7MzK
mBVN8wm1wAx0C+yyJ1Oa4lm6OrNg+CsUbGX5zHdrxv/8BdIrJo0Hud4GxpHyDlEW
gqHHPjY8Fg==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:19:32 2026 by rpki-client