Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
File:                     CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft (raw, json)
Hash identifier:          ddHcJQdZNlVtYozD5xHuVLN2g6Kvu2DxxN4vg2dkGlE=
Subject key identifier:   45:0B:AD:F4:32:6A:A3:8C:F6:3F:11:E7:90:03:F9:2F:2B:80:5D:02
Authority key identifier: CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
Certificate issuer:       /CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Certificate serial:       3B3D7B6F03693AE882EA6A78FE06589C82AE514B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
Manifest number:          D7
Signing time:             Tue 13 Oct 2026 04:37:43 +0000
Manifest this update:     Tue 13 Oct 2026 04:32:43 +0000
Manifest next update:     Fri 16 Oct 2026 12:19:43 +0000
Files and hashes:         1: 3230332e3134382e32332e302f32342d3234203d3e2039393339.roa (hash: zxNue3N6Ii1kq1sQ2dACNt5zmLBjM4gYYzd57rbrXUk=)
                          2: 3231382e39372e3138382e302f32322d3232203d3e2039393339.roa (hash: +G6lCsgfk7uWMzBw4ImLzEgulhmE/NNciG8WMfAwxqA=)
                          3: 3230332e3134382e302e302f31382d3234203d3e2039393339.roa (hash: OfFByel+DCFzurA0eWoD4UO4ZoHls3g26hE+8MfUOek=)
                          4: 3231382e39372e3136342e302f32322d3232203d3e2039393339.roa (hash: PBNodTPl2AQfEfxCKqc43cm79vB2LI0bukvEOlFG2Gw=)
                          5: 3231382e39372e3137362e302f32302d3230203d3e2039393339.roa (hash: 7PSW0tMNyGrnbrrCaZmNRJ5IAXyNScpk2tdB1ptCA68=)
                          6: 3230332e3134382e32302e302f32322d3232203d3e2039393339.roa (hash: kdaeAr7E0r/rkHkUkUn/GRQDVO3ansN771tR0fE4xHs=)
                          7: 3230332e3134382e302e302f31392d3139203d3e2039393339.roa (hash: m+B7KbUv15oqmrPM/7Hn8fXNpheglxGVjvTi/GjgkNQ=)
                          8: 3231382e39372e3136302e302f31392d3234203d3e2039393339.roa (hash: k4+fg8C2hbwNPzLmG4G+qvi1WLKh32ah+UEl/BbuCoY=)
                          9: 3230332e3134382e32372e302f32342d3234203d3e2039393339.roa (hash: Fl6UP4ZZO9vo8+nuqb6TjfEh0/CghLfBlNcy4SZFmPE=)
                          10: 3230332e3134382e33352e302f32342d3234203d3e2039393339.roa (hash: ZZgewr8RVh/+Twq6QUA6ON8snGHwxRMYNX6zih97I/s=)
                          11: 3231382e39372e3137322e302f32322d3232203d3e2039393339.roa (hash: P277/T4eGGrFGV8jZUfaWSd1zYvJIrtME/DL6maRQ+Y=)
                          12: 3230332e3134382e31322e302f32322d3232203d3e2039393339.roa (hash: 9UAex7M8k/LCSl+W4FCwhSEXW4AjjxNySCYkIWy78OA=)
                          13: 323430323a666634303a3a2f33322d3634203d3e2039393339.roa (hash: Irg076e/60wxxAFs8LaU705EfiMKolswU73/51uxVbY=)
                          14: 3231382e39372e3136302e302f32302d3230203d3e2039393339.roa (hash: o3TjiUZNVyrVXjI2HiIadR4I4RmHSIDY+Hq9fYkNR5Q=)
                          15: 3130332e34392e3138302e302f32322d3234203d3e2030.roa (hash: Fnc+/A9b+fc0SndNXMwIwEmMSqi9YrT9wNRumwqY/is=)
                          16: 3230332e3134382e33322e302f31392d3139203d3e2039393339.roa (hash: ds/z4tGsVLWNrcQFMR24ubAuo21XVQEoJuoDCDC+GH8=)
                          17: CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl (hash: K2Dmh4kX1xTuMBf0qPBHOKvSeMGKk/pBeYNtuqbqweo=)
                          18: 3230332e3134382e35322e302f32322d3232203d3e2039393339.roa (hash: qZKa/jOVYlo9uS2Vt0Or+U6S/Vnqbjf2yeKPK/nwqwc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 12:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3d:7b:6f:03:69:3a:e8:82:ea:6a:78:fe:06:58:9c:82:ae:51:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
        Validity
            Not Before: Oct 13 04:32:43 2026 GMT
            Not After : Oct 16 12:19:43 2026 GMT
        Subject: CN=450BADF4326AA38CF63F11E79003F92F2B805D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:71:5d:5f:14:c0:13:ba:37:46:27:6e:bd:1f:
                    31:4b:82:6f:37:7a:5d:b4:8c:36:f9:37:81:cb:1d:
                    06:1a:fd:77:8b:30:a7:3f:82:ac:38:09:e7:f1:e1:
                    d9:44:22:bc:74:48:ef:68:a8:5f:57:63:da:10:95:
                    a6:6b:e7:c7:50:a2:4e:0e:27:40:85:dd:41:58:62:
                    c0:b3:21:66:34:19:da:34:80:72:86:87:6c:af:5c:
                    fa:a6:27:c1:0b:a8:a4:7c:e7:1a:07:f8:a8:a9:3c:
                    4f:a5:62:b9:a4:39:24:f9:c5:f7:f2:8e:d4:7d:13:
                    c9:a2:00:36:7e:ab:c0:a8:0b:a1:06:25:d7:56:ca:
                    d7:91:91:27:fe:36:20:fb:99:68:19:25:a0:21:1e:
                    d8:cb:70:eb:eb:81:a6:2b:f7:74:e5:7e:f1:65:a3:
                    06:53:b2:c9:24:d2:66:40:e7:f3:4b:a6:40:9f:d0:
                    68:b1:64:5c:ec:02:68:56:ef:12:a2:da:49:c0:64:
                    3e:d3:f7:5e:72:63:3d:de:9e:fa:e6:34:1a:5d:a7:
                    9b:1c:d5:f7:f7:54:15:f6:05:73:36:8f:3f:2f:7d:
                    af:85:18:a5:3d:80:ea:4d:38:4c:9a:51:80:54:df:
                    2b:13:1e:e0:68:83:2f:79:d8:cf:d6:b1:7a:85:b7:
                    7e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0B:AD:F4:32:6A:A3:8C:F6:3F:11:E7:90:03:F9:2F:2B:80:5D:02
            X509v3 Authority Key Identifier:
                keyid:CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:e3:5d:25:7e:e2:10:6a:85:09:f1:19:69:e6:87:58:ff:53:
         9b:bc:6f:7b:43:c4:c4:c5:e8:29:47:e9:b2:fe:65:34:e8:16:
         4b:78:9c:fe:3a:b6:04:c5:66:62:8c:00:7b:39:98:54:29:ef:
         69:6f:b1:b4:47:13:06:44:2e:f1:99:7e:29:35:79:4f:51:70:
         af:5e:8f:84:45:9c:4c:47:82:2c:54:9d:8a:70:97:46:34:b9:
         48:5e:cd:48:ed:15:3c:42:f1:66:dd:7f:4e:1b:ec:a5:99:e5:
         f8:41:e6:52:a4:17:37:69:27:22:aa:6c:f1:56:12:22:26:80:
         1c:62:f9:6f:e0:05:55:51:a8:99:44:81:d2:c1:b1:03:36:2a:
         23:8f:12:89:c5:5d:97:b4:d6:83:3b:2a:26:aa:cc:d5:2b:83:
         30:7c:05:65:2d:3e:88:d2:91:0f:79:4c:28:01:07:d2:41:e4:
         49:68:cb:c6:01:ac:8a:40:35:ba:97:76:7d:51:53:da:2e:9d:
         d8:b2:e8:57:96:3c:78:f3:6a:4f:f3:25:3f:d5:7d:5b:bd:05:
         4a:26:f1:06:5e:96:e8:61:5f:a4:ca:f4:73:f0:48:fa:99:98:
         cf:9d:a7:b3:8e:82:9d:55:0a:e9:85:5c:cd:74:8d:22:8f:76:
         c9:a8:7d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:57:25 2026 by rpki-client