Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
File:                     F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft (raw, json)
Hash identifier:          ythJgs38krvSBGXgzKMITT/iIFwlmFzC9nqgDupFzK4=
Subject key identifier:   EE:20:F0:7E:0B:5C:78:09:AB:C6:77:C3:22:8B:1E:4A:D1:18:8D:07
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Certificate issuer:       /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial:       4EE6DA1E53972E76C3F0C313E6EF8EDBED22334C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
Manifest number:          ED
Signing time:             Sat 24 Oct 2026 07:51:28 +0000
Manifest this update:     Sat 24 Oct 2026 07:46:28 +0000
Manifest next update:     Tue 27 Oct 2026 15:20:28 +0000
Files and hashes:         1: 3131342e3131342e3132382e302f31372d3234203d3e203231383539.roa (hash: TvprcYp8fQ7VaasMW02+bn5WNN6zIFcA0VFszax2RFE=)
                          2: 3131342e3131342e302e302f31382d3234203d3e2034383337.roa (hash: zQmY5XoxEgFfEocFlMn7zYUhUWjw1W1jR7h66vVfXRg=)
                          3: 3131342e3131342e3132382e302f31372d3234203d3e203536303436.roa (hash: FWWMCAx1W0KCQG5LZnRL2X3DIQBk/s6lX410aw4wRiM=)
                          4: 323430343a333730303a3a2f33322d3634203d3e2034383337.roa (hash: zuCmu28tlc/6Dxb5FY/JmG6mSgbcxgNnqnOntLlSdwo=)
                          5: 3131342e3131342e3131322e302f32302d3234203d3e203536303436.roa (hash: UyvVI1qV2GuzweCMNqtEtPn8qvUYEiO6ioVdsraU5O8=)
                          6: 3131342e3131342e3131322e302f32302d3234203d3e2034383337.roa (hash: FuAefi2k+MxwWEA1e6EeFXVUaieSOTb8VmLKkzGo0uU=)
                          7: 3131342e3131342e3131322e302f32302d3234203d3e20313337373032.roa (hash: PkCwWnw3PHTq+vYK1KUV313Oht0v/DXlfYx5SoIP84M=)
                          8: 3131342e3131342e3131322e302f32302d3234203d3e203231383539.roa (hash: HRMXKfc+EpXqjefGAqI2D0frnesKyXTLaWckWOelSRU=)
                          9: 3131342e3131342e39362e302f32302d3234203d3e203231383539.roa (hash: Ah1hAptQgQx/TDu32iuzbvTZnvkTCVkVVLy9/9WPaaU=)
                          10: 3131342e3131342e39362e302f32302d3234203d3e20313337373032.roa (hash: muvu6CQMqTuNlfNzK3PNDYlQpfEfxnnrgjlIM12wZFs=)
                          11: 3131342e3131342e36342e302f31392d3234203d3e203231383539.roa (hash: /UPLNtJyBw1bgK76/hFyIRStLrGQRkZjpwXFOle6bEA=)
                          12: 3131342e3131342e36342e302f31392d3234203d3e203536303436.roa (hash: aF3GG9ClQmKfqqoms2b8ZBWCHJr//2BMFFxxL7swPtg=)
                          13: 3131342e3131342e36342e302f31392d3234203d3e20313337373032.roa (hash: pEKwX9Ft0ck+emjCFmodH06AapcEO9wPvQT5NdDyWVI=)
                          14: 3131342e3131342e302e302f31382d3234203d3e203231383539.roa (hash: pIt4b7xnDcf/2bsqo3Gx9aNls8ZbD3maIVn+Eh0MmrM=)
                          15: 3131342e3131342e39362e302f32302d3234203d3e203536303436.roa (hash: ezCUIC9VcjeRK2+GTssm4PV96+Ina4oiGh1Ju4wnOtE=)
                          16: 3131342e3131342e302e302f31382d3234203d3e20313337373032.roa (hash: nLm7pgJsZIIGPL2vx/lrEFek1uPCaLKs4C53MBfr6vs=)
                          17: 3131342e3131342e39362e302f32302d3234203d3e2034383337.roa (hash: eZtOjO7I2MepkQbn85egh1Lnu1i+4JgpVaoIbcoDMcY=)
                          18: 323430343a333730303a3a2f33322d3634203d3e20313337373032.roa (hash: qs2qxnTmOlEyVS6Qau2xA7nlczXR/QB+A2OlVAzfu34=)
                          19: 3131342e3131342e36342e302f31392d3234203d3e2034383337.roa (hash: uZR3/1/4YF72OuVTrOxRu4XvI1rHNO9/mv3P+UxzZfs=)
                          20: 3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa (hash: SfeGMuqHWzoAv9iGacYRYzdpfa3BDEWC2CuQowRuJd4=)
                          21: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl (hash: u590IxuUfLl6I9wpbzMZeu7wiCgrObgollBaX3TIN2M=)
                          22: 3131342e3131342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7mISZsZ4HIxbAs3JkW8PttavON7sghcgz5ug1T/w3Jk=)
                          23: 3131342e3131342e302e302f31382d3234203d3e203536303436.roa (hash: wyOP2OkcK0RyKhtQQ5BY1J2XPn5SwDwaHoFghxO5Lgo=)
                          24: 323430343a333730303a3a2f33322d3634203d3e203231383539.roa (hash: Sn+tT3R7FUIVQa1TjOf+NsbHTswr92j/YhOMUuFNzYg=)
                          25: 323430343a333730303a3a2f33322d3634203d3e203536303436.roa (hash: pOPse9BV3gn6djAX7ecHkFVIUgN70stV1LcDDmPTYl8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 17:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e6:da:1e:53:97:2e:76:c3:f0:c3:13:e6:ef:8e:db:ed:22:33:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
        Validity
            Not Before: Oct 24 07:46:28 2026 GMT
            Not After : Oct 27 15:20:28 2026 GMT
        Subject: CN=EE20F07E0B5C7809ABC677C3228B1E4AD1188D07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:56:05:5a:8c:4b:57:03:ea:4d:77:c6:29:
                    3a:b1:83:ff:4e:11:29:0e:c3:fd:b3:17:14:82:98:
                    d5:85:9c:68:36:3e:4d:62:77:51:eb:28:11:d8:46:
                    e5:81:7b:e9:1b:c8:b5:3d:9a:23:43:27:66:f7:d6:
                    dd:5b:8a:1e:0f:46:96:9f:0e:e4:e5:e3:23:cc:79:
                    0b:93:e4:4e:61:74:b8:a3:6a:e2:03:2b:c6:b5:1b:
                    46:97:70:8c:c1:54:1c:74:12:84:e0:64:95:d8:6a:
                    e3:f3:d7:b6:1e:ab:a6:28:17:fd:35:a3:68:ea:24:
                    9e:19:df:8f:4e:65:21:51:8b:a6:38:45:6a:25:9a:
                    88:c3:44:4f:83:be:f3:91:94:61:9b:1c:3f:97:81:
                    2b:b3:92:15:12:99:09:fb:03:5f:ab:f6:0d:a3:54:
                    41:57:b8:08:b1:32:6c:04:23:51:85:1e:f7:d0:15:
                    6c:c5:df:03:6b:62:e4:25:93:03:77:bc:2a:98:4c:
                    30:fa:2f:19:cc:33:eb:21:e1:34:bd:60:63:db:62:
                    fd:ed:b6:af:83:78:93:e3:d8:42:ca:53:49:a0:1e:
                    26:32:64:14:e1:b8:76:f4:f5:37:21:b3:91:df:15:
                    2f:6a:99:f3:b5:0d:4d:f4:90:02:88:c0:fc:27:0a:
                    43:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:20:F0:7E:0B:5C:78:09:AB:C6:77:C3:22:8B:1E:4A:D1:18:8D:07
            X509v3 Authority Key Identifier:
                keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:14:18:0a:08:66:67:4a:8c:ad:bc:b6:04:f4:39:6c:97:d8:
         4a:2a:35:25:73:87:e2:23:af:ea:00:92:02:73:03:d1:c7:7e:
         e9:5a:61:9a:01:05:e3:a3:09:44:9d:6b:00:7c:bb:4a:c3:59:
         10:d4:92:3d:7e:7f:08:8d:88:99:29:9d:11:79:6d:f9:db:aa:
         45:8d:8f:5a:6d:25:4b:63:15:17:e8:63:68:8e:6c:2b:fd:18:
         63:5a:77:c6:54:19:59:e2:30:e3:a4:50:86:3b:cb:f5:3d:c8:
         74:d4:f7:6e:d9:54:1c:e2:ef:99:53:5c:0b:d7:76:04:c9:ed:
         7e:59:e1:e6:14:82:49:f3:e6:f9:0e:c4:eb:f3:92:d0:58:c9:
         68:68:a8:25:0e:6b:b8:9e:8e:07:fa:a7:72:db:a3:b4:95:1a:
         9c:26:3d:d4:0b:38:12:d5:d8:ac:67:fe:4a:f2:4f:16:45:97:
         61:a4:fa:3c:25:a2:34:49:45:a7:b5:b8:92:ae:99:a3:5d:ef:
         bc:a5:d6:6e:f2:d4:e3:7e:7f:6f:e4:a6:ec:6f:ad:d2:fc:92:
         c2:6f:ca:6b:8b:a1:06:56:44:c4:b4:62:1c:6c:d0:8d:df:81:
         da:ef:29:47:34:2b:a0:d5:1d:50:7b:03:83:a3:f3:1f:1f:02:
         b3:98:c2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:29 2026 by rpki-client