Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft
File:                     92BE3D6E46236FC37D6006D602F1002225EABE46.mft (raw, json)
Hash identifier:          cJxbk3GhsjIJU0uz1zOfFCis7uv+ff7ketQz76Sm43Y=
Subject key identifier:   FF:D7:CB:D2:F2:47:47:43:D5:3B:97:58:12:EA:CC:D1:38:D6:AF:0F
Authority key identifier: 92:BE:3D:6E:46:23:6F:C3:7D:60:06:D6:02:F1:00:22:25:EA:BE:46
Certificate issuer:       /CN=92BE3D6E46236FC37D6006D602F1002225EABE46
Certificate serial:       2793F03AF84B7B15E4FB055309809015F9DD5CEA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/92BE3D6E46236FC37D6006D602F1002225EABE46.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft
Manifest number:          D0
Signing time:             Thu 29 Oct 2026 07:12:03 +0000
Manifest this update:     Thu 29 Oct 2026 07:07:03 +0000
Manifest next update:     Sun 01 Nov 2026 14:51:03 +0000
Files and hashes:         1: 3130332e3136342e33322e302f32342d3234203d3e203137363231.roa (hash: +rL++UMhSg5p47ORwwdTADe44ENBYq7EPXO17vkQoiQ=)
                          2: 3130332e3136342e33332e302f32342d3234203d3e2030.roa (hash: 5/G9aQdoU9G0ysVYae+vwOznLyG3KHsIuIIEyt2t9ak=)
                          3: 92BE3D6E46236FC37D6006D602F1002225EABE46.crl (hash: RDLmbrMCwcjTpVWs4e0uy4eWq6YQStSotnq631BaPN4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/92BE3D6E46236FC37D6006D602F1002225EABE46.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 14:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:93:f0:3a:f8:4b:7b:15:e4:fb:05:53:09:80:90:15:f9:dd:5c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE3D6E46236FC37D6006D602F1002225EABE46
        Validity
            Not Before: Oct 29 07:07:03 2026 GMT
            Not After : Nov  1 14:51:03 2026 GMT
        Subject: CN=FFD7CBD2F2474743D53B975812EACCD138D6AF0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5a:c6:53:b5:c9:bd:84:1d:6b:28:b2:5b:1d:
                    1e:9c:14:21:22:7f:e8:d5:7f:27:25:69:fd:d2:5a:
                    47:e9:01:2e:90:77:b0:97:97:cb:3f:ad:a2:a9:4b:
                    4c:12:db:5f:50:0b:21:72:4a:d5:29:cc:6d:e9:c6:
                    21:d3:5f:7a:60:de:8d:27:8b:25:17:c4:bc:08:85:
                    5c:28:b3:fe:a7:ca:51:9f:d3:af:f7:16:cb:fb:d3:
                    13:2e:ce:bf:9a:09:56:23:42:75:35:a2:79:70:e5:
                    26:e7:e3:89:6f:2b:52:9e:34:f0:b5:55:ff:02:7d:
                    ff:af:0c:7c:11:f0:fa:ef:98:0c:89:e4:cc:ae:39:
                    32:d3:30:3f:ef:43:d8:ac:69:df:7a:84:04:9d:c8:
                    5f:37:7e:9b:76:e5:68:53:5c:07:eb:62:ff:fa:11:
                    e8:c1:57:98:bb:78:21:9a:fd:68:aa:df:ee:a1:de:
                    35:d4:d6:b2:60:0a:66:40:a7:d1:01:00:bf:d3:4f:
                    88:70:c4:38:da:cc:39:99:6b:8d:ee:ab:1b:b0:b2:
                    9a:18:4f:a3:f2:82:a4:f8:19:6c:38:cf:12:09:65:
                    b8:4e:d2:f5:36:02:7c:c2:2a:4c:1a:ec:c9:8b:52:
                    15:5e:1b:65:3a:a2:ad:0e:93:ab:6b:ac:dd:ff:e9:
                    32:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D7:CB:D2:F2:47:47:43:D5:3B:97:58:12:EA:CC:D1:38:D6:AF:0F
            X509v3 Authority Key Identifier:
                keyid:92:BE:3D:6E:46:23:6F:C3:7D:60:06:D6:02:F1:00:22:25:EA:BE:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/92BE3D6E46236FC37D6006D602F1002225EABE46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7f:3e:ed:2a:af:7b:25:ea:8d:52:45:ea:59:ff:85:86:64:
         70:71:73:1d:74:1a:9d:dc:97:ef:07:64:c4:07:60:e0:8f:c3:
         1f:aa:c1:34:88:f0:89:44:89:48:af:cc:7d:38:ce:e3:28:c9:
         a5:f9:09:49:cc:3f:9b:a3:d5:a9:65:20:bf:b9:07:33:1e:b4:
         9c:7c:2b:86:bf:f6:06:27:3a:2a:b5:72:ab:ac:c2:9e:20:60:
         bd:fc:17:5d:29:5b:0f:2f:e9:2d:9a:7f:da:f2:15:db:53:c1:
         33:32:51:a4:c0:00:2a:fe:5c:03:c3:89:6c:df:80:d7:c8:0f:
         b4:18:4b:63:19:dc:31:36:71:3a:6d:fc:08:e7:9b:64:a4:7a:
         f1:00:c4:75:a5:10:9b:50:dc:2e:cf:04:f2:8f:3e:40:b3:7e:
         6b:e7:2b:0e:d4:02:f4:c4:71:36:5a:66:16:09:ae:98:57:1a:
         87:be:91:83:78:19:91:42:40:26:e6:be:f1:2f:7f:4b:03:a2:
         07:51:c3:e2:72:06:2e:df:62:6c:ce:04:ab:40:63:93:b4:81:
         db:2b:28:c8:80:b3:db:cf:0e:d9:b1:1a:52:25:0a:49:d2:67:
         8d:ec:bd:56:55:a6:64:1b:ee:2d:cd:85:38:ea:aa:56:a5:28:
         4c:92:11:6f
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUJ5PwOvhLexXk+wVTCYCQFfndXOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJCRTNENkU0NjIzNkZDMzdENjAwNkQ2MDJGMTAwMjIy
NUVBQkU0NjAeFw0yNjEwMjkwNzA3MDNaFw0yNjExMDExNDUxMDNaMDMxMTAvBgNV
BAMTKEZGRDdDQkQyRjI0NzQ3NDNENTNCOTc1ODEyRUFDQ0QxMzhENkFGMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcWsZTtcm9hB1rKLJbHR6cFCEi
f+jVfyclaf3SWkfpAS6Qd7CXl8s/raKpS0wS219QCyFyStUpzG3pxiHTX3pg3o0n
iyUXxLwIhVwos/6nylGf06/3Fsv70xMuzr+aCVYjQnU1onlw5Sbn44lvK1KeNPC1
Vf8Cff+vDHwR8PrvmAyJ5MyuOTLTMD/vQ9isad96hASdyF83fpt25WhTXAfrYv/6
EejBV5i7eCGa/Wiq3+6h3jXU1rJgCmZAp9EBAL/TT4hwxDjazDmZa43uqxuwspoY
T6PygqT4GWw4zxIJZbhO0vU2AnzCKkwa7MmLUhVeG2U6oq0Ok6trrN3/6TLNAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU/9fL0vJHR0PVO5dYEurM0TjWrw8wHwYDVR0j
BBgwFoAUkr49bkYjb8N9YAbWAvEAIiXqvkYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzM0NzIzNjIzMDA3MDI3NC8wLzkyQkUzRDZFNDYyMzZGQzM3RDYwMDZENjAyRjEw
MDIyMjVFQUJFNDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTJCRTNENkU0NjIzNkZDMzdENjAwNkQ2MDJGMTAwMjIyNUVBQkU0Ni5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTczNDcyMzYyMzAwNzAyNzQvMC85MkJFM0Q2RTQ2MjM2
RkMzN0Q2MDA2RDYwMkYxMDAyMjI1RUFCRTQ2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYX8+7SqveyXq
jVJF6ln/hYZkcHFzHXQandyX7wdkxAdg4I/DH6rBNIjwiUSJSK/MfTjO4yjJpfkJ
Scw/m6PVqWUgv7kHMx60nHwrhr/2Bic6KrVyq6zCniBgvfwXXSlbDy/pLZp/2vIV
21PBMzJRpMAAKv5cA8OJbN+A18gPtBhLYxncMTZxOm38COebZKR68QDEdaUQm1Dc
Ls8E8o8+QLN+a+crDtQC9MRxNlpmFgmumFcah76Rg3gZkUJAJua+8S9/SwOiB1HD
4nIGLt9ibM4Eq0Bjk7SB2ysoyICz288O2bEaUiUKSdJnjey9VlWmZBvuLc2FOOqq
VqUoTJIRbw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 13:53:09 2026 by rpki-client