Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft
File:                     9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft (raw, json)
Hash identifier:          gPGuE6s6UVr7QZuukU4W9cwEVwis+Ps2F71zqwOw+g0=
Subject key identifier:   00:09:4E:D5:7E:5B:F9:65:F8:BC:4F:53:8C:75:EE:76:37:36:61:AB
Authority key identifier: 9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22
Certificate issuer:       /CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22
Certificate serial:       0DD290E22D38310C62552513EC79CAC96BF62814
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft
Manifest number:          C5
Signing time:             Tue 06 Oct 2026 15:00:15 +0000
Manifest this update:     Tue 06 Oct 2026 14:55:15 +0000
Manifest next update:     Sat 10 Oct 2026 02:12:15 +0000
Files and hashes:         1: 3131302e3137322e3234302e302f32302d3230203d3e2030.roa (hash: BlJQFtwEe239oiLFMf7gt0MKpGM3ZXb59VD8C+ezkpg=)
                          2: 3130332e37372e39332e302f32342d3234203d3e203633363331.roa (hash: l9lYMijExsEU6NOEmPBoiGOt5T+EE2c0OzAeZGL6wkU=)
                          3: 3130332e37372e39342e302f32342d3234203d3e203633363331.roa (hash: s1Zc5Zb3GnYauiIaS3jT5T29oAYmt04fC9ePhuJxPUE=)
                          4: 3130332e37372e39352e302f32342d3234203d3e203633363331.roa (hash: NsElr4y8RK7qoiuMUOtcT2AvRJzlIyPNTYuFs3jDxYA=)
                          5: 3131302e3137322e3232382e302f32322d3232203d3e2030.roa (hash: a1oUsyAvQL4WYW3ySM/NPmmAkiHTv+gn4YkINCBdJwE=)
                          6: 323430373a393138303a3a2f33322d3332203d3e2030.roa (hash: 3NmcDbpjTnffqOtrfI15amacSrhcqJHAdKVsMfTU3oQ=)
                          7: 3130332e37372e39322e302f32322d3232203d3e203633363331.roa (hash: 8k18b9UmMwaiqCJMX8l3zGW/TLMchsxqXUw44jQlNx0=)
                          8: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl (hash: aykZ0jvxX4mpMiono9bfgV+hgtZnJEY0dskDzyzyVrQ=)
                          9: 3131302e3137322e3233322e302f32312d3231203d3e2030.roa (hash: u5IzgjxOsryVW3JdG8EHZIdGmTAxBJCkGwpoKpCvuaw=)
                          10: 3130332e37372e39322e302f32342d3234203d3e203633363331.roa (hash: ADw6qnP/A+ORdKk9K2tbJM0cq0oMe2oxLQDRPiM4J/I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d2:90:e2:2d:38:31:0c:62:55:25:13:ec:79:ca:c9:6b:f6:28:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22
        Validity
            Not Before: Oct  6 14:55:15 2026 GMT
            Not After : Oct 10 02:12:15 2026 GMT
        Subject: CN=00094ED57E5BF965F8BC4F538C75EE76373661AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:76:9b:bf:74:fb:5e:33:32:bb:99:04:cc:0c:
                    6e:9c:65:35:63:67:5d:4a:37:35:ae:c9:bc:6d:6d:
                    f0:cb:85:aa:03:32:3c:23:82:f4:04:f4:60:3c:6e:
                    35:bf:d0:2c:a9:9f:5b:7d:b5:3f:d4:6b:5d:96:7b:
                    98:47:38:3a:5b:be:83:9c:5b:c9:ab:ff:b0:83:52:
                    19:d5:b9:be:19:dc:37:3a:74:32:8f:60:dc:2e:f3:
                    59:d4:49:f7:bd:58:c0:06:d6:8e:b8:95:d2:c8:9b:
                    eb:56:e5:20:bb:20:e4:a3:49:30:33:3e:42:3e:0e:
                    c2:a9:5c:5f:20:8e:41:4e:df:ee:82:4c:18:40:53:
                    2b:b9:9b:02:74:75:41:f9:d3:07:0b:f0:f1:b5:2b:
                    56:f1:1c:96:6f:39:5b:a6:8d:7a:92:94:be:d6:11:
                    57:5e:74:e8:59:29:06:67:61:10:9b:c0:74:53:26:
                    aa:62:75:d5:4b:72:18:c4:98:78:6f:f2:59:c5:fa:
                    40:8f:6c:14:9e:e5:93:ba:01:de:3c:de:92:81:22:
                    ff:fb:7a:74:ab:50:32:7b:a9:ee:5e:08:6c:a5:c6:
                    97:7b:9a:29:f6:dd:74:eb:4c:c2:bb:41:8c:04:61:
                    26:14:5c:e5:f3:1e:69:24:1d:59:80:bd:33:8b:e5:
                    a7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:09:4E:D5:7E:5B:F9:65:F8:BC:4F:53:8C:75:EE:76:37:36:61:AB
            X509v3 Authority Key Identifier:
                keyid:9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7a:df:03:c1:eb:3c:30:ac:a2:c2:53:83:b2:94:77:b3:08:
         97:00:c7:96:f7:f1:35:1a:4d:a7:8c:8b:ca:cd:71:36:3c:24:
         52:01:50:1c:2e:d2:e1:29:22:5c:49:70:47:43:70:63:7b:f9:
         26:39:60:45:c3:86:14:84:b4:62:51:ab:48:69:2f:f7:42:0b:
         61:39:7a:c8:e8:24:54:f6:d4:fc:b2:07:b4:31:4c:06:d4:2a:
         e5:b2:11:7a:d2:07:43:03:3c:37:fb:b3:1d:36:fe:26:c1:8f:
         de:e6:aa:4b:1f:bc:04:ed:2a:96:e0:69:68:55:37:b5:ca:cd:
         e1:2c:35:0f:94:48:ba:c6:cc:56:0a:52:63:72:7c:79:47:12:
         cc:8a:a5:67:27:c9:98:87:ca:d6:ec:c1:e8:81:8c:43:4b:71:
         98:1f:2f:78:18:db:56:ca:83:69:b8:90:6c:cd:d7:82:3b:a5:
         f9:bb:25:01:6a:6a:06:cb:87:1e:24:fd:c9:d2:e2:dd:07:23:
         29:3b:92:d0:da:ad:d1:43:73:cd:44:52:b9:f8:a3:b7:7b:49:
         17:c5:d2:45:35:3d:36:8d:0c:85:78:12:f4:5b:d1:b5:c0:c5:
         67:33:e0:42:55:9a:3a:6e:b3:fd:ce:41:34:63:4c:71:00:0b:
         71:00:ec:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:34:43 2026 by rpki-client