Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
File:                     E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft (raw, json)
Hash identifier:          hXIo/QWp1icuzRHlBN4m7Dsm3NenBsnzQPkH/a5iY3k=
Subject key identifier:   1F:85:2E:F8:2E:B9:84:BC:D6:9A:10:13:C3:F3:07:33:D3:35:06:90
Authority key identifier: E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
Certificate issuer:       /CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
Certificate serial:       144CE72669FE44586FB86553A64CDC9A8E11A29F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
Manifest number:          C3
Signing time:             Fri 04 Sep 2026 03:29:48 +0000
Manifest this update:     Fri 04 Sep 2026 03:24:48 +0000
Manifest next update:     Mon 07 Sep 2026 12:05:48 +0000
Files and hashes:         1: 3134342e37392e342e302f32332d3233203d3e2030.roa (hash: M8n/GFHsH32a0OY3vILdVtqD1jQGc9Vzjf0kfgZ0TxQ=)
                          2: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl (hash: 6NNX70o3zMGOGLitzeQHVd6Ms2TcXOLx7C1jeoilSGQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 10:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4c:e7:26:69:fe:44:58:6f:b8:65:53:a6:4c:dc:9a:8e:11:a2:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
        Validity
            Not Before: Sep  4 03:24:48 2026 GMT
            Not After : Sep  7 12:05:48 2026 GMT
        Subject: CN=1F852EF82EB984BCD69A1013C3F30733D3350690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:88:f7:13:e9:cd:0a:ee:2a:ce:28:41:2c:8a:
                    fa:60:d2:6e:e8:00:68:ba:db:7e:07:1f:30:e6:b1:
                    dc:9e:2c:c0:ad:b9:48:47:51:6c:a4:35:50:3f:6e:
                    4d:ec:6a:79:76:73:84:cc:69:4d:ea:2e:f9:3c:00:
                    2e:a3:77:4b:9c:b4:07:63:42:87:1c:3d:77:89:cd:
                    ac:a8:8b:48:f5:64:05:86:10:94:91:73:fe:2e:fd:
                    12:16:50:dc:bd:3a:c4:2d:e6:a4:d6:17:6d:7f:9a:
                    45:a0:8a:0a:38:48:60:be:3e:2b:62:4f:f2:1b:89:
                    23:e0:7f:bf:66:c3:cb:1f:e8:fd:38:c9:f2:cb:b7:
                    05:a5:17:cb:cf:77:9b:c9:0a:3f:2f:27:44:bf:ca:
                    88:8f:9f:9d:a6:c0:43:fe:fc:91:5d:e8:01:85:2a:
                    a4:f9:ed:ab:05:16:2b:35:a6:92:5e:e6:aa:ec:8b:
                    36:18:84:59:e3:b2:c8:5b:bc:b9:cf:aa:92:d8:22:
                    3a:27:65:73:2a:48:bc:04:f8:60:34:ad:38:70:91:
                    80:c4:de:78:fb:24:22:a7:d2:a1:46:bf:df:92:f3:
                    67:a0:27:66:a4:77:d3:c8:36:4b:79:e3:92:d4:6b:
                    61:30:8e:b3:82:84:8a:57:4c:8d:ab:ba:7d:32:ea:
                    02:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:85:2E:F8:2E:B9:84:BC:D6:9A:10:13:C3:F3:07:33:D3:35:06:90
            X509v3 Authority Key Identifier:
                keyid:E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f8:c3:80:ae:b1:9a:b5:20:d0:d3:dc:07:67:1a:e2:e0:70:
         fd:fb:5d:8f:42:87:12:11:4c:d0:c2:7f:d7:b8:7c:91:d0:fc:
         ca:fe:e9:a5:9a:dc:9e:ca:73:fb:63:0e:79:24:51:c0:19:38:
         de:66:0a:e6:ef:75:22:24:b3:1d:9b:c2:02:dd:1f:13:8d:a8:
         1d:6f:42:7c:20:80:19:f2:c9:b3:d3:84:c3:b9:11:d6:8c:cf:
         68:06:f4:c0:d7:1b:a3:b6:20:9c:ff:75:a4:e7:8a:d5:47:fd:
         32:2f:ba:a8:27:9e:60:d2:74:42:2e:ef:2d:4a:d9:b4:33:bf:
         73:f1:52:96:da:24:de:68:f9:25:48:4e:91:e7:11:7e:ff:73:
         ec:de:fa:3a:cf:af:eb:1c:13:55:75:09:e1:06:80:ff:b9:da:
         b8:f3:83:ef:85:37:e2:c7:9e:8f:00:2b:37:f7:30:be:e7:8d:
         ab:67:2c:5f:13:79:bb:6f:60:7e:d0:ad:cb:09:bb:2e:6c:a5:
         da:d0:ba:37:91:78:97:60:b9:33:c3:1f:97:c7:41:3c:bf:a7:
         c6:15:aa:ef:9a:9e:b0:6c:4c:36:69:e9:b5:a2:46:0e:44:48:
         8e:27:6c:87:62:d3:9b:c2:60:5f:2a:39:38:d4:c3:c4:ea:62:
         77:48:b3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:09:19 2026 by rpki-client