Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
File:                     F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft (raw, json)
Hash identifier:          OplmwSE69qWsLMm6OLLSgwxKFi2Jtg29mqBEHTtoUUU=
Subject key identifier:   AB:C5:C0:BC:58:6B:E3:97:42:1B:50:3F:78:42:EA:EB:54:32:31:A4
Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52
Certificate issuer:       /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
Certificate serial:       13FD14E86F77A79F4D275D908E3B166F0977B294
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
Manifest number:          82
Signing time:             Mon 27 Apr 2026 04:23:40 +0000
Manifest this update:     Mon 27 Apr 2026 04:18:40 +0000
Manifest next update:     Tue 28 Apr 2026 06:05:40 +0000
Files and hashes:         1: 3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa (hash: nhsI3SM0BNooBXteXRdYRb2HoI3GqN8f+FtM6cmmIjM=)
                          2: 3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa (hash: OFW+AyUk6AajEk+Y+/6xYlyX7Q9q/Cg4YSR5op5MuDw=)
                          3: 3136352e3130312e37312e302f32342d3332203d3e203136353039.roa (hash: 0mFHqtJ99+cpwKS5wgk/Li+bTLSi+1gBBAboHWvN4rw=)
                          4: 3136352e3130312e37312e302f32342d3332203d3e203134363138.roa (hash: JioU5n5ZADFZKbSBYkGEmdb6Cgmb19+pW7ZaL4VWgxE=)
                          5: 3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa (hash: CKV8MpGE2SB7rvrp/kk1nwjUyU7uYGhV5IglQ/G9LRo=)
                          6: 3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa (hash: sv3cZRqsmsIMhTUh+jVQts191O/MilJM7fEF6fodozg=)
                          7: 3136352e3130312e37302e302f32342d3332203d3e2034383337.roa (hash: kDv6iwPAf1ZieValA95kBNEQSe+g9yEnqUGtirExvJk=)
                          8: F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl (hash: sU7W4htNSdzdhEbrgwNP9SO7iknim/B22DXaQkwfrHQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fd:14:e8:6f:77:a7:9f:4d:27:5d:90:8e:3b:16:6f:09:77:b2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
        Validity
            Not Before: Apr 27 04:18:40 2026 GMT
            Not After : Apr 28 06:05:40 2026 GMT
        Subject: CN=ABC5C0BC586BE397421B503F7842EAEB543231A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:94:a2:04:50:09:a9:6b:95:e9:71:00:42:ae:
                    9d:88:a2:f8:13:1c:99:57:b6:c0:f2:7d:49:bc:8e:
                    0e:78:48:6f:5c:37:2b:2c:ee:1d:e8:28:0b:ca:78:
                    ff:d0:d9:d4:22:45:e4:32:31:eb:e8:fe:f2:ca:37:
                    1a:84:26:f4:e2:bb:ae:3e:14:02:15:8f:24:09:83:
                    ec:33:97:df:b9:99:c6:32:cb:a1:ed:7c:ca:a4:88:
                    d5:9d:3f:a6:e0:7a:67:48:02:a1:b1:91:bd:c9:70:
                    7b:2a:5c:b1:76:11:ac:18:da:74:1b:6f:1b:e0:4f:
                    02:f2:ea:57:93:ee:a0:3b:ad:fd:5f:22:1b:9e:de:
                    06:5b:7a:83:7b:d8:de:60:5e:ed:d7:63:02:8d:22:
                    a1:73:ad:4e:52:c7:2d:61:30:48:04:2b:68:b5:88:
                    e9:b0:af:ba:49:78:fc:dc:c1:c2:2e:65:3d:89:5a:
                    13:28:61:a6:97:bd:d6:f8:4d:23:e0:8a:af:41:83:
                    01:f5:ba:ed:0a:35:a0:51:82:fa:63:02:5b:8f:68:
                    61:20:7f:92:b9:fc:b9:eb:9f:ec:b3:0f:b3:bf:94:
                    b7:79:6e:4a:5f:fc:64:41:bf:bd:73:18:75:30:9c:
                    ff:17:e0:19:79:6a:7e:42:54:a7:12:a5:67:e4:32:
                    59:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C5:C0:BC:58:6B:E3:97:42:1B:50:3F:78:42:EA:EB:54:32:31:A4
            X509v3 Authority Key Identifier:
                keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ea:c9:2a:ba:c4:5e:45:33:70:33:57:79:a7:30:52:cb:1f:
         a2:35:d3:8d:60:ce:1a:fd:8c:ba:76:2e:84:77:12:8f:ff:f6:
         50:9c:a1:5b:b5:ad:55:cb:44:ce:5b:33:0d:7e:bc:7a:c7:5a:
         bb:97:7d:6f:50:35:a5:dc:1a:43:b0:f4:41:8f:21:73:6b:e9:
         63:e0:40:b8:b1:a1:60:94:39:38:2d:40:43:68:76:1a:e7:8e:
         39:a1:ff:52:c0:44:db:dc:5a:ea:14:4b:7e:7d:f5:c1:78:03:
         ca:8e:45:5c:18:af:2c:80:5e:6e:72:a2:77:77:1e:00:e9:0c:
         98:1e:27:e4:b7:1f:b1:bf:26:f6:13:e7:0f:f9:92:35:6c:71:
         48:17:57:8c:3a:e1:a4:89:e4:af:ca:f4:8a:5d:ef:cd:7c:4e:
         94:97:99:3a:dc:1d:36:7c:f8:93:32:2f:22:c3:88:51:19:04:
         f2:6f:65:e5:98:fe:48:18:67:96:47:2c:67:e7:b0:9f:4c:fc:
         80:51:ae:18:83:78:86:c2:b1:1a:c2:08:20:5b:9d:9c:f7:8f:
         41:b0:ed:b6:d3:13:30:96:02:80:3d:fe:b9:bb:66:b3:fa:9b:
         89:47:80:77:68:94:5c:2b:74:95:f3:3e:62:04:7a:b7:91:5a:
         9e:b5:f7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:10:23 2026 by rpki-client