Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
File:                     379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft (raw, json)
Hash identifier:          jMbKWF4SoisbrtgPo3r5pg1Qvcx2cGGIe5PHibFYpJc=
Subject key identifier:   5A:B9:73:C4:09:DE:E8:46:6F:2A:30:EB:38:6B:1E:07:53:E2:CB:7B
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       0939EA70563A76E2A5CA0D23A5B549CB56A5692E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
Manifest number:          ED
Signing time:             Mon 12 Oct 2026 22:22:27 +0000
Manifest this update:     Mon 12 Oct 2026 22:17:27 +0000
Manifest next update:     Fri 16 Oct 2026 09:36:27 +0000
Files and hashes:         1: AS45062.roa (hash: JwpCqLwnstcdpQxihbA4tskKfI5Yknin5rFcdxDti2k=)
                          2: AS4837.roa (hash: PSrtVxpi26hNqHMhLR1owZy3r9A9ax7WlKodFyCEOUE=)
                          3: AS23724.roa (hash: Y3qEhB43CJZrmhjZnPqwmuJr8CCGz2Q8BFki4mMZ6IQ=)
                          4: 379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl (hash: FB8HjGrlBO9yUVBW8NyHlc46VXZHsAoaoG0/8Ct/BDs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 09:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:39:ea:70:56:3a:76:e2:a5:ca:0d:23:a5:b5:49:cb:56:a5:69:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Oct 12 22:17:27 2026 GMT
            Not After : Oct 16 09:36:27 2026 GMT
        Subject: CN=5AB973C409DEE8466F2A30EB386B1E0753E2CB7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8a:c8:39:a9:5c:63:07:81:2a:69:c0:61:f0:
                    20:c7:0b:dd:13:60:de:0e:16:cd:b0:7c:fa:05:c0:
                    2a:08:e4:d5:eb:f7:78:d9:c0:38:d8:eb:8a:b4:73:
                    23:a0:11:a9:5a:6e:e7:43:3a:52:c1:d9:07:67:17:
                    8b:74:1e:73:c6:31:94:93:e3:64:1a:a5:0a:0a:9e:
                    1d:a0:0b:55:70:2b:3f:2f:fd:b8:58:cc:88:a3:06:
                    40:e0:b6:aa:4c:ce:98:c4:cc:a2:6c:40:1f:c6:09:
                    55:88:23:63:7c:1e:70:44:77:9d:6d:84:b1:73:6c:
                    28:5a:b0:8d:93:63:24:58:a8:22:9f:25:7f:76:21:
                    3e:d0:7e:ad:f5:0c:0a:9a:25:84:b9:4e:52:2e:b2:
                    a1:61:eb:6f:0e:76:14:31:c6:f9:ce:f2:08:79:14:
                    89:74:36:c3:a1:43:2a:b1:5e:60:71:10:b4:40:89:
                    68:cd:95:17:1c:ff:52:c1:c7:96:cf:fc:74:25:d3:
                    cc:38:f8:8e:78:75:b3:95:d0:16:f3:f5:69:91:bf:
                    7f:a7:bd:1a:50:3d:93:af:81:08:82:4d:10:34:02:
                    d9:6f:7a:16:7a:ac:b2:ca:bd:64:7c:e6:78:3a:8a:
                    20:e0:b8:b3:c8:d0:b9:58:1c:77:63:2c:04:ea:76:
                    e4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B9:73:C4:09:DE:E8:46:6F:2A:30:EB:38:6B:1E:07:53:E2:CB:7B
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b4:bf:5b:e2:06:d8:a9:c2:54:17:69:c7:e5:46:52:a6:23:
         4b:40:a0:3c:46:0f:8d:3c:42:24:e5:22:d4:89:bc:a7:55:bb:
         82:b8:d7:84:02:05:ff:d3:d7:ab:96:cd:87:81:4b:9e:4e:bd:
         eb:f4:04:d7:69:a1:cd:65:4a:4a:ed:b6:c1:04:cf:56:2e:69:
         13:21:4a:ad:a5:d4:1d:f8:40:29:8d:34:9b:ea:88:84:6b:73:
         5a:45:a5:0b:cb:c3:ff:2b:e1:28:fe:41:0f:d2:df:03:36:fd:
         04:45:a8:de:ff:1c:ed:4d:ef:e3:ce:91:fa:91:37:33:ae:59:
         c1:ac:24:f4:12:56:78:1b:ec:27:f4:c2:40:a7:d9:20:e0:38:
         6d:57:90:94:e1:27:a7:7e:2c:0d:9b:46:e7:e9:45:7a:c5:37:
         20:75:0b:66:8d:a5:47:4f:e4:1b:3e:60:20:25:2f:a9:3d:18:
         66:ea:44:ef:b9:3e:19:42:14:55:7a:11:b4:ed:72:11:44:2f:
         7e:72:94:9a:19:ed:4f:33:f7:5c:a4:50:e6:0c:bf:d1:6f:4e:
         30:ea:88:3d:8a:87:8c:36:b7:8d:5b:25:3e:d3:5d:41:97:72:
         c7:b2:e1:d4:e8:32:cf:cd:74:81:be:4c:3d:a6:95:c7:6f:95:
         7a:44:0e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:04:15 2026 by rpki-client