Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
File:                     CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft (raw, json)
Hash identifier:          PBbgYKWdnUnXel7TAwB2nla0wGX5XPnTiuTJFwWjT18=
Subject key identifier:   13:BD:F4:33:D5:80:1C:F8:94:21:50:D8:F9:E7:4F:6D:9C:D0:82:DB
Authority key identifier: CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
Certificate issuer:       /CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Certificate serial:       628F6D1080D6231B585DD1169D0F30ED72C86B75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
Manifest number:          C2
Signing time:             Fri 28 Aug 2026 06:48:04 +0000
Manifest this update:     Fri 28 Aug 2026 06:43:04 +0000
Manifest next update:     Mon 31 Aug 2026 07:06:04 +0000
Files and hashes:         1: 323430323a666634303a3a2f33322d3634203d3e2039393339.roa (hash: Irg076e/60wxxAFs8LaU705EfiMKolswU73/51uxVbY=)
                          2: 3230332e3134382e35322e302f32322d3232203d3e2039393339.roa (hash: qZKa/jOVYlo9uS2Vt0Or+U6S/Vnqbjf2yeKPK/nwqwc=)
                          3: 3231382e39372e3136342e302f32322d3232203d3e2039393339.roa (hash: PBNodTPl2AQfEfxCKqc43cm79vB2LI0bukvEOlFG2Gw=)
                          4: 3230332e3134382e32332e302f32342d3234203d3e2039393339.roa (hash: zxNue3N6Ii1kq1sQ2dACNt5zmLBjM4gYYzd57rbrXUk=)
                          5: 3230332e3134382e32302e302f32322d3232203d3e2039393339.roa (hash: kdaeAr7E0r/rkHkUkUn/GRQDVO3ansN771tR0fE4xHs=)
                          6: CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl (hash: 3u6VMSYLXv7xum2w9x9j1SDhC2hCKBrz/9NWK75Ju1I=)
                          7: 3230332e3134382e302e302f31392d3139203d3e2039393339.roa (hash: m+B7KbUv15oqmrPM/7Hn8fXNpheglxGVjvTi/GjgkNQ=)
                          8: 3230332e3134382e32372e302f32342d3234203d3e2039393339.roa (hash: Fl6UP4ZZO9vo8+nuqb6TjfEh0/CghLfBlNcy4SZFmPE=)
                          9: 3130332e34392e3138302e302f32322d3234203d3e2030.roa (hash: Fnc+/A9b+fc0SndNXMwIwEmMSqi9YrT9wNRumwqY/is=)
                          10: 3231382e39372e3136302e302f31392d3234203d3e2039393339.roa (hash: k4+fg8C2hbwNPzLmG4G+qvi1WLKh32ah+UEl/BbuCoY=)
                          11: 3230332e3134382e31322e302f32322d3232203d3e2039393339.roa (hash: 9UAex7M8k/LCSl+W4FCwhSEXW4AjjxNySCYkIWy78OA=)
                          12: 3231382e39372e3137322e302f32322d3232203d3e2039393339.roa (hash: P277/T4eGGrFGV8jZUfaWSd1zYvJIrtME/DL6maRQ+Y=)
                          13: 3230332e3134382e33352e302f32342d3234203d3e2039393339.roa (hash: ZZgewr8RVh/+Twq6QUA6ON8snGHwxRMYNX6zih97I/s=)
                          14: 3231382e39372e3136302e302f32302d3230203d3e2039393339.roa (hash: o3TjiUZNVyrVXjI2HiIadR4I4RmHSIDY+Hq9fYkNR5Q=)
                          15: 3231382e39372e3138382e302f32322d3232203d3e2039393339.roa (hash: +G6lCsgfk7uWMzBw4ImLzEgulhmE/NNciG8WMfAwxqA=)
                          16: 3231382e39372e3137362e302f32302d3230203d3e2039393339.roa (hash: 7PSW0tMNyGrnbrrCaZmNRJ5IAXyNScpk2tdB1ptCA68=)
                          17: 3230332e3134382e33322e302f31392d3139203d3e2039393339.roa (hash: ds/z4tGsVLWNrcQFMR24ubAuo21XVQEoJuoDCDC+GH8=)
                          18: 3230332e3134382e302e302f31382d3234203d3e2039393339.roa (hash: OfFByel+DCFzurA0eWoD4UO4ZoHls3g26hE+8MfUOek=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 07:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8f:6d:10:80:d6:23:1b:58:5d:d1:16:9d:0f:30:ed:72:c8:6b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
        Validity
            Not Before: Aug 28 06:43:04 2026 GMT
            Not After : Aug 31 07:06:04 2026 GMT
        Subject: CN=13BDF433D5801CF8942150D8F9E74F6D9CD082DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:db:a7:06:66:1b:2e:6d:52:eb:61:f8:11:fb:
                    8f:91:9e:1f:68:e0:c3:5d:cd:34:d0:7f:c4:dc:dc:
                    cc:aa:35:ea:46:7e:15:c2:91:f1:b5:23:2c:08:2c:
                    b6:20:3a:bd:fd:6c:31:e7:3b:22:6d:f6:f1:d9:fc:
                    e6:af:8b:25:cf:42:fe:e8:2c:3d:8c:6a:59:03:53:
                    2e:b1:cb:a4:d4:42:62:14:88:93:ca:11:e5:e0:6f:
                    5d:87:54:f5:65:8b:79:78:90:c0:99:ee:89:82:98:
                    a5:2a:03:aa:67:40:62:1f:8e:79:88:f2:9f:bd:f6:
                    5f:ae:ce:b8:fc:49:ca:c6:85:78:57:66:1b:1b:ea:
                    40:1a:6e:25:32:dd:0a:9c:65:e8:af:0b:6c:8d:49:
                    6c:20:74:c3:e1:ff:95:ce:4b:20:15:fa:74:23:d7:
                    fd:b8:03:4a:23:ea:01:70:76:aa:b0:0c:ab:3d:bd:
                    ed:b3:51:67:d9:92:d4:3c:b3:49:20:52:33:b4:ce:
                    ed:22:df:6d:b8:28:f8:39:83:ae:8c:9b:8a:82:58:
                    98:5f:62:85:c6:a4:7d:49:10:23:c3:cf:a3:48:52:
                    9b:f1:ab:0d:d0:38:2b:d6:7d:fc:65:b0:a3:d8:da:
                    21:2d:84:46:7a:1b:94:56:81:29:a4:34:da:d6:bc:
                    c9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BD:F4:33:D5:80:1C:F8:94:21:50:D8:F9:E7:4F:6D:9C:D0:82:DB
            X509v3 Authority Key Identifier:
                keyid:CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:95:a8:ff:8c:15:66:0a:18:1b:a7:69:85:00:95:ef:ef:46:
         e3:88:61:6a:e8:83:d1:c4:eb:13:67:75:ad:70:9a:77:a0:e9:
         e1:f5:be:26:7c:45:6c:c1:53:57:b2:3e:aa:f9:1a:ad:9b:dc:
         e3:53:c0:a3:5b:13:e9:83:a2:9a:a4:ec:ef:f7:9a:56:e0:86:
         0c:20:fb:4b:6b:53:64:09:76:64:3a:ba:5a:c5:24:c5:0f:f7:
         e2:ed:9f:25:ac:a6:09:75:b4:a0:ba:b9:69:2f:fc:b4:fd:6a:
         36:aa:dd:4e:41:c6:a4:78:c3:16:2a:70:16:ab:d2:6d:eb:6c:
         30:2f:1f:27:86:d6:a8:21:f1:a0:bb:ff:cf:29:a0:36:b1:3a:
         0b:50:36:39:d1:26:81:d7:11:b4:e4:eb:66:27:46:45:91:ee:
         fe:76:8f:1a:a2:7e:31:ff:59:6b:c2:b7:45:1d:6f:ba:ea:51:
         1c:d2:76:13:dc:d8:2a:da:51:21:dd:32:5e:53:d7:ec:fc:e5:
         37:72:91:70:13:f2:4b:82:50:b0:fd:ec:ca:fd:cc:e9:11:eb:
         5a:e9:0d:50:27:2d:45:44:08:2e:33:aa:a1:3e:59:6f:53:fa:
         59:db:31:98:26:f4:bd:eb:c2:81:cc:02:66:7e:96:73:bb:70:
         fd:8a:ce:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:05:57 2026 by rpki-client