Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft
File:                     89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft (raw, json)
Hash identifier:          wu606uZakOB9oBmt6JRCtrYzSao9OG77t9zzVHklHKk=
Subject key identifier:   8F:9B:07:5D:2C:D2:2A:CE:7D:F2:AB:62:66:D7:BC:AC:43:14:5D:58
Authority key identifier: 89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC
Certificate issuer:       /CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC
Certificate serial:       07C8766DC1458E57799F083E12973455C4005AAB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft
Manifest number:          E6
Signing time:             Tue 13 Oct 2026 09:42:54 +0000
Manifest this update:     Tue 13 Oct 2026 09:37:54 +0000
Manifest next update:     Fri 16 Oct 2026 11:18:54 +0000
Files and hashes:         1: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl (hash: 0ePr1v4A61Fwut51jWvSonVgZsGAwE5iEtGpG6JQQNk=)
                          2: AS0.roa (hash: KIHAu+71SBGOjZy0+m+b+9Y+nNYA3SsGqBm2BhYlMk0=)
                          3: AS4816.roa (hash: Iul7zwOvNaYW5khbgmnadlB8+QqgxtIUtvm4m1VptM8=)
                          4: AS134762.roa (hash: eSYTzkJ8JGMz0GlshaE/rwlFL4yUx+ZzZxHFoXYyPiw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 11:18:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c8:76:6d:c1:45:8e:57:79:9f:08:3e:12:97:34:55:c4:00:5a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC
        Validity
            Not Before: Oct 13 09:37:54 2026 GMT
            Not After : Oct 16 11:18:54 2026 GMT
        Subject: CN=8F9B075D2CD22ACE7DF2AB6266D7BCAC43145D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2b:38:46:9d:1c:a6:37:6a:00:17:f0:e8:d1:
                    c1:43:28:88:6b:1b:5e:b9:09:3c:23:28:c8:01:64:
                    38:68:0b:0e:76:bf:c7:57:be:58:0f:40:1d:c5:53:
                    94:29:6c:f0:d8:49:af:68:75:14:65:9e:9a:8e:76:
                    23:a8:9a:35:3a:e0:9d:78:e7:48:f2:1c:72:a7:a4:
                    81:c4:e8:2b:2e:3d:d0:06:66:c5:60:a3:ea:6c:1f:
                    10:fa:67:f6:51:e7:5c:85:59:60:f3:c1:ae:89:d9:
                    42:67:81:22:dd:53:c7:4f:f5:eb:a4:0b:c7:3c:a1:
                    e4:77:e4:79:36:6f:0a:0e:f9:45:e3:8f:8b:a7:62:
                    3c:5a:fc:11:f7:11:f3:02:46:4c:56:38:8c:32:00:
                    7d:08:41:c4:39:e0:b5:ba:28:d2:83:12:a3:c4:a2:
                    9f:3b:a2:9a:7d:e8:80:8b:04:8b:54:d0:59:79:eb:
                    b8:46:cc:f3:f9:cf:95:ef:18:4e:e7:7d:ef:62:ed:
                    62:17:1c:95:2f:b0:82:8f:5a:bb:00:13:69:23:a6:
                    be:20:42:4a:78:8b:08:0e:b1:8d:11:2b:c4:93:3d:
                    00:55:22:8d:bd:28:7b:17:32:14:2b:c9:8e:4e:20:
                    05:c3:9f:6f:f5:39:0d:52:8a:83:71:3a:d0:3c:70:
                    ba:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9B:07:5D:2C:D2:2A:CE:7D:F2:AB:62:66:D7:BC:AC:43:14:5D:58
            X509v3 Authority Key Identifier:
                keyid:89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:7a:94:43:f1:f7:0f:19:01:62:cc:91:3a:97:c0:03:3a:76:
         d6:2b:de:35:ac:20:39:53:63:59:95:4a:ff:a7:10:9e:65:0f:
         28:98:a8:78:68:17:b2:c6:20:7f:6c:9e:61:26:65:9e:1f:a2:
         c9:6b:90:b4:c0:9a:3f:bd:55:78:73:df:d7:08:cd:06:90:85:
         91:b9:87:18:89:60:92:e1:fb:b3:d8:10:fb:0f:90:5d:b3:e7:
         74:ea:4c:84:0c:a4:0c:5e:09:27:23:09:c6:9b:64:18:e3:07:
         3e:b4:75:4c:53:67:b8:44:25:a8:8e:96:40:62:c1:94:0d:65:
         e8:d9:cb:17:08:b4:ff:0f:c4:53:32:f8:c2:20:4e:48:a4:96:
         40:ce:60:ea:f3:07:98:81:93:57:13:02:76:97:2a:a5:5d:f0:
         73:21:71:5d:31:7e:61:6c:8e:08:ad:60:f8:df:e2:dd:05:3a:
         48:7a:17:46:e8:9f:88:9c:0b:94:14:8c:b2:59:4a:44:ef:de:
         8c:13:18:eb:25:ca:ed:87:fe:d6:75:67:ca:1f:f4:c6:9c:6a:
         01:88:02:c4:71:6b:1f:59:87:8e:75:af:4b:cc:74:43:a1:2e:
         78:3b:45:44:ea:fa:dd:14:a6:5f:76:a9:64:5c:8e:62:dc:52:
         be:e4:23:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:09:55 2026 by rpki-client