Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
File:                     D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft (raw, json)
Hash identifier:          hBt8vdXjahkVO7GFeZqWZ24eIMHtWNmIduOTHJum+lM=
Subject key identifier:   48:14:35:C7:B8:8E:29:66:D2:48:83:FA:77:79:E8:A5:D4:AB:28:2F
Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
Certificate issuer:       /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Certificate serial:       386503D7B40D33E6B8DF3B1653C49EF59DBDBA20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
Manifest number:          0169
Signing time:             Thu 20 Aug 2026 08:16:41 +0000
Manifest this update:     Thu 20 Aug 2026 08:11:41 +0000
Manifest next update:     Fri 21 Aug 2026 08:30:41 +0000
Files and hashes:         1: AS4808.roa (hash: //nKQNAjooI9erX4CO+1oGcixsTIJNw6HHMIvfL9IMQ=)
                          2: AS14618.roa (hash: +Wv/2HA8AVUSNnadO5hz5VeeFjAexzBSpavN7fMFXGc=)
                          3: AS131486.roa (hash: hv3NrWI7qndb9pwRQZGa9lhEKMv487gLxwAMSFSJIMw=)
                          4: AS618.roa (hash: R+C8Vc8lMDFPCjUBt8RrWNDpfiQzOxRJZjPH8n6RrH8=)
                          5: AS141679.roa (hash: QsBxvlTVUwKrMZj2U6EcyVvBhZjwk3O6PdTggf+BNR0=)
                          6: AS16509.roa (hash: ZMwXvE4dHyIcjXmR+aleISP8m7PnxVmHxH9TxqYuPjw=)
                          7: AS58466.roa (hash: kSF22yBAy8SUSPPV8/o7H9vyPUoVyme9wGOZprZ2rcM=)
                          8: D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl (hash: 0CMP9C+Gr2xce7oII6J5d87VV35nIPUDEYmKQ/2Te/g=)
                          9: AS136958.roa (hash: XwAwuw4m2OENSikj/rtTtQsqWwas7qpS239Aq1SA7eE=)
                          10: AS23724.roa (hash: 8krRNne+KRTBey0q0TJzCVIFcEgDHE+LzZ9++xzsw7Q=)
                          11: AS137753.roa (hash: 4+RHeerb+nMVnV6wUIKmstQv6v3WIzsDcvJF0B7glsg=)
                          12: AS4837.roa (hash: fhYEL03qpRt46XUMS7A41XahZN88wXQKA1YPtuoTlhw=)
                          13: AS137699.roa (hash: D0pnZlgzIum966fqLaKQBVafP4tAhNdkkWQtNVZ7QXg=)
                          14: AS138421.roa (hash: 2wlstcl5tFV+5E8jvfptqjBcmgeaje3X7oXtiJyA3WY=)
                          15: AS4811.roa (hash: 7/9rXmm3PTJE28aFP6e8Mej2tpluIiRvbq9OgQ78+fE=)
                          16: AS9808.roa (hash: nIrH1Plwi2PhCTPH5t4ZrR1yXUO+K6EewsCL9PEsI3s=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Aug 2026 08:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:65:03:d7:b4:0d:33:e6:b8:df:3b:16:53:c4:9e:f5:9d:bd:ba:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
        Validity
            Not Before: Aug 20 08:11:41 2026 GMT
            Not After : Aug 21 08:30:41 2026 GMT
        Subject: CN=481435C7B88E2966D24883FA7779E8A5D4AB282F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:38:24:27:95:31:06:a1:fd:9b:f9:77:ef:
                    24:0d:68:1e:b9:d7:84:17:28:07:7f:80:59:3e:e4:
                    dd:23:01:de:05:85:95:13:38:5d:5f:4b:b7:84:ac:
                    a9:2a:7f:8d:c9:d0:78:45:e6:04:78:80:fd:94:50:
                    07:16:01:7f:55:f0:c7:30:b2:85:43:d2:45:c6:07:
                    0d:b3:d8:37:57:10:1d:5c:2d:10:82:03:0e:38:f6:
                    f8:70:bb:a3:fa:34:82:a4:7a:61:a4:5e:41:9d:02:
                    40:1e:ab:8e:f9:d7:90:0d:13:a8:89:5b:ba:54:f5:
                    84:5c:ff:b3:f2:7b:1a:34:b0:09:ee:d3:c9:75:b2:
                    d2:00:fc:3f:ba:b7:f2:18:a1:57:e1:f1:9c:62:ca:
                    39:72:06:d7:1b:88:ab:23:11:38:6b:07:fe:8d:72:
                    2c:10:3e:22:c7:a0:68:7d:4a:1e:39:b8:b6:9b:ec:
                    70:dc:01:7d:ca:54:dd:a4:d6:7d:81:67:d3:4a:03:
                    8f:09:c1:d0:15:35:49:3c:e9:1b:b4:7c:85:4f:bf:
                    47:2d:d8:f5:14:3f:bf:87:39:9d:85:da:72:15:3b:
                    bf:37:74:6f:50:5c:cc:39:88:ba:57:45:9c:12:d0:
                    03:fa:19:1b:93:84:42:66:0d:9e:38:6b:40:e7:ae:
                    cd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:14:35:C7:B8:8E:29:66:D2:48:83:FA:77:79:E8:A5:D4:AB:28:2F
            X509v3 Authority Key Identifier:
                keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e3:d5:e6:4e:2b:2c:12:d2:3f:71:f1:65:94:1c:b5:9a:fb:
         a7:64:b1:44:89:b3:25:0c:cc:f4:67:4f:38:d8:16:4a:f7:3e:
         fa:69:50:b1:00:65:19:44:97:86:df:78:36:91:4e:d8:99:32:
         cb:8b:99:74:c2:26:28:d7:d4:95:a0:9d:9e:b7:89:f7:bd:33:
         72:30:16:71:6b:0b:c5:f6:84:d4:78:98:29:ac:04:23:c8:c4:
         59:26:12:69:bd:fe:86:14:4e:a5:bb:ee:56:b2:6f:e9:c9:e7:
         dd:91:92:00:79:e1:49:62:65:03:49:77:78:51:b5:7a:a1:d7:
         78:45:56:cc:74:2b:91:ca:67:b1:e1:af:71:0f:99:fb:18:e0:
         74:38:d7:8e:e4:1a:de:c9:66:fa:a7:57:5b:da:1f:bb:cf:ad:
         8e:97:7d:9c:50:d8:ca:b3:62:fb:38:db:74:45:9b:21:e9:6d:
         38:8b:08:f3:bc:b5:32:09:5e:a6:32:5d:64:ee:2c:01:42:ea:
         e2:25:c1:5c:4b:fc:a8:f3:82:91:61:28:6f:15:14:35:b0:9e:
         f4:94:90:a9:54:96:1c:db:79:96:80:ba:f7:8e:61:7b:3c:68:
         44:7d:4c:dc:27:0b:27:d0:d0:90:32:a4:3f:cf:d6:0e:16:54:
         00:30:7b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:37:53 2026 by rpki-client