Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
File:                     D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft (raw, json)
Hash identifier:          nTIqLDuQEvKXBJk6tAumUgKf0vZmH2Pyow0Erpqr0XA=
Subject key identifier:   09:93:39:B2:0B:39:C5:21:D6:76:91:FB:41:BF:F7:06:FE:DC:C4:D7
Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
Certificate issuer:       /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Certificate serial:       21A3E256821103DF776B0642B87072DBB54F7E91
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
Manifest number:          0187
Signing time:             Wed 07 Oct 2026 06:55:44 +0000
Manifest this update:     Wed 07 Oct 2026 06:50:44 +0000
Manifest next update:     Sat 10 Oct 2026 09:12:44 +0000
Files and hashes:         1: D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl (hash: jfFMzWauRLyaAliqxHnCi3vD8ox4bSQZiWFe5cb9X3U=)
                          2: AS23724.roa (hash: 8krRNne+KRTBey0q0TJzCVIFcEgDHE+LzZ9++xzsw7Q=)
                          3: AS14618.roa (hash: +Wv/2HA8AVUSNnadO5hz5VeeFjAexzBSpavN7fMFXGc=)
                          4: AS4837.roa (hash: fhYEL03qpRt46XUMS7A41XahZN88wXQKA1YPtuoTlhw=)
                          5: AS134761.roa (hash: w5YmgeeaRW3UFo5vKDEeCdFJ0RO0OpTyeDGF2J35ZUk=)
                          6: AS131486.roa (hash: hv3NrWI7qndb9pwRQZGa9lhEKMv487gLxwAMSFSJIMw=)
                          7: AS58466.roa (hash: kSF22yBAy8SUSPPV8/o7H9vyPUoVyme9wGOZprZ2rcM=)
                          8: AS137699.roa (hash: D0pnZlgzIum966fqLaKQBVafP4tAhNdkkWQtNVZ7QXg=)
                          9: AS138421.roa (hash: 2wlstcl5tFV+5E8jvfptqjBcmgeaje3X7oXtiJyA3WY=)
                          10: AS618.roa (hash: R+C8Vc8lMDFPCjUBt8RrWNDpfiQzOxRJZjPH8n6RrH8=)
                          11: AS137753.roa (hash: 4+RHeerb+nMVnV6wUIKmstQv6v3WIzsDcvJF0B7glsg=)
                          12: AS9808.roa (hash: nIrH1Plwi2PhCTPH5t4ZrR1yXUO+K6EewsCL9PEsI3s=)
                          13: AS4808.roa (hash: //nKQNAjooI9erX4CO+1oGcixsTIJNw6HHMIvfL9IMQ=)
                          14: AS141679.roa (hash: QsBxvlTVUwKrMZj2U6EcyVvBhZjwk3O6PdTggf+BNR0=)
                          15: AS4811.roa (hash: 7/9rXmm3PTJE28aFP6e8Mej2tpluIiRvbq9OgQ78+fE=)
                          16: AS136958.roa (hash: XwAwuw4m2OENSikj/rtTtQsqWwas7qpS239Aq1SA7eE=)
                          17: AS16509.roa (hash: ZMwXvE4dHyIcjXmR+aleISP8m7PnxVmHxH9TxqYuPjw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a3:e2:56:82:11:03:df:77:6b:06:42:b8:70:72:db:b5:4f:7e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
        Validity
            Not Before: Oct  7 06:50:44 2026 GMT
            Not After : Oct 10 09:12:44 2026 GMT
        Subject: CN=099339B20B39C521D67691FB41BFF706FEDCC4D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:73:52:4f:4b:39:4a:de:bd:31:67:49:1b:
                    d0:81:b3:0c:aa:81:b2:15:c6:1e:b7:42:fb:7f:7a:
                    d6:fe:cc:a2:b9:a0:38:7f:c0:a6:ea:21:c6:b5:00:
                    f2:29:10:fb:31:ca:d4:ab:3f:8c:8a:02:bc:46:58:
                    bc:69:39:79:3b:7b:69:ef:4f:66:5a:3f:e7:56:5f:
                    f5:c4:4e:9b:ae:72:dd:1e:25:aa:95:43:03:9a:76:
                    a3:e5:af:6a:cc:4f:0a:e5:2a:59:1e:64:00:6b:60:
                    f2:f6:97:c4:bb:d1:97:ff:a1:14:41:d0:61:51:42:
                    27:95:63:02:c6:0c:f2:79:ad:db:c9:5e:cf:fd:5a:
                    00:08:cd:99:01:1a:71:39:8a:09:99:0e:5c:cb:80:
                    2b:4f:07:10:b9:f4:b6:fe:21:33:c1:ea:50:78:94:
                    3a:d8:c9:75:41:08:92:c6:ca:f8:83:4a:50:30:cf:
                    72:cb:91:ae:ea:85:2e:50:e1:19:b2:d5:2b:b4:86:
                    ea:40:42:04:0e:ff:f3:75:90:08:74:0f:2d:bc:d5:
                    2c:45:63:61:e1:46:25:ba:7c:e9:82:ec:71:52:df:
                    dd:4e:7d:ff:a5:fb:db:7f:44:c3:f9:f9:f4:cb:ea:
                    cc:fe:b4:b7:a4:5c:09:9a:47:80:9f:db:74:cb:0b:
                    50:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:93:39:B2:0B:39:C5:21:D6:76:91:FB:41:BF:F7:06:FE:DC:C4:D7
            X509v3 Authority Key Identifier:
                keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:81:70:15:a4:0d:77:c2:62:53:9d:f0:53:06:b6:ad:23:8f:
         ed:12:f7:62:72:b1:5b:d9:ce:2c:e8:70:e2:bc:0f:8d:f7:96:
         4f:dc:2e:c8:55:67:ed:e6:5e:d9:c3:41:a4:cd:54:15:65:ca:
         da:e3:0e:b1:7a:db:70:cb:2d:e8:05:97:43:c2:dc:e8:e6:f6:
         c8:ba:40:bc:6a:65:a0:d2:b3:12:b0:0b:ea:25:ae:16:1b:9a:
         90:9c:d3:45:c6:fa:b8:c3:6c:ea:02:0e:90:4e:10:38:c7:91:
         f3:e6:83:3d:56:eb:72:f1:f7:e8:f4:96:48:b8:16:ac:fe:06:
         f9:89:9d:19:5d:70:71:cd:99:20:5f:0d:49:63:d1:89:1b:41:
         17:a6:0a:3a:57:b7:6f:fa:eb:7b:66:6e:8f:c5:2e:94:b8:a1:
         68:87:a1:0e:e0:4f:3b:38:cc:28:16:ba:79:ab:24:a8:fc:32:
         bc:e3:32:78:8b:11:82:d1:f5:bf:31:f4:7a:f2:df:b3:18:83:
         45:97:7a:ce:89:99:c0:34:69:03:02:ba:b7:c5:b0:44:5c:ae:
         07:8f:99:82:87:87:8b:b0:55:72:15:fb:37:f6:b0:6c:61:e8:
         96:e7:39:a1:6e:78:7e:15:8a:13:25:37:07:b2:be:01:28:07:
         af:84:55:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 08:21:16 2026 by rpki-client