Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
File:                     AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft (raw, json)
Hash identifier:          f4IIzzV4zgK8Q2RDPKDCXSs5JNFS8JZSUu/M4KpadGs=
Subject key identifier:   3D:3C:1E:73:F3:8A:89:EC:1B:F2:3D:03:09:1E:00:A4:6B:B2:26:6A
Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
Certificate issuer:       /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Certificate serial:       0198B934DD270636ADF7CD95418D1AB741386414
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
Manifest number:          B2
Signing time:             Tue 08 Sep 2026 12:09:11 +0000
Manifest this update:     Tue 08 Sep 2026 12:04:11 +0000
Manifest next update:     Fri 11 Sep 2026 20:09:11 +0000
Files and hashes:         1: 3232312e3133332e3234342e302f32342d3234203d3e2034383132.roa (hash: /xsrM0t7gazGxT8vu8S20afPJ+/R7tTwrJw9ipbCbuY=)
                          2: 3131362e36362e33362e302f32342d3234203d3e2034383132.roa (hash: 9PZcNDwOFM1W+HqkIe4mT1Xoe9v6VAm30cLnLhC5Dxg=)
                          3: 3232312e3133332e3233352e302f32342d3234203d3e2034383132.roa (hash: a2VfsMsZhsvGAUUY1Ndu97RvKL9qo+FoR0ehHhF29YY=)
                          4: 3232312e3133332e3233302e302f32332d3233203d3e2034383132.roa (hash: d98CvU56OAX7rtIY8aOAQjNFJ5nL1C3K1MePIYbNFnA=)
                          5: 3131362e36362e39362e302f32302d3230203d3e2030.roa (hash: MqrW8ck2y9ByUyAqAmNpkYC3kLSHt1wbYRwpKGGG0Jo=)
                          6: 3232312e3133332e3234302e302f32312d3231203d3e2030.roa (hash: wa6+lFTaePy6KwEnyhKCGrbQLm0Z3dbhjkj2JdaOPuM=)
                          7: 3232312e3133332e3233322e302f32332d3233203d3e2034383132.roa (hash: QqHw6UnjAmZaF6ZKGYjDcxL5eEwCirmJLq8wCW5ccfU=)
                          8: 3232312e3133332e3232352e302f32342d3234203d3e2034383132.roa (hash: oSxen+avH3yqnVUcHFHfBxSONh2HEHoFvmKh9qAM9WI=)
                          9: 3131362e36362e302e302f31392d3139203d3e2030.roa (hash: f2cz2JzSUuLpJdbOQ1lpXQ6pQJh4CE9buuubTfFQl5o=)
                          10: 3131362e36362e36342e302f31392d3139203d3e2030.roa (hash: iXic9QsPCgNhQwzKKNPoIkJAYXI9V9gKXFUDqaHrlF4=)
                          11: 3131362e36362e39382e302f32342d3234203d3e2034383132.roa (hash: 0WcQhOacv893u6+dnq1uiCvKvpO1wG8GhBFYPj0MqeM=)
                          12: 3232312e3133332e3232362e302f32342d3234203d3e2034383132.roa (hash: fZP84wU8PI7wcGhsSPIodw7AFzy8mHQUVVGTGntl5c4=)
                          13: 3232312e3133332e3232342e302f32302d3230203d3e2030.roa (hash: nHvu/7uCsbClyS8g05j2ZhgLdmx83hkxQxwIo964IPY=)
                          14: 3131362e36362e33322e302f32302d3230203d3e2030.roa (hash: wNT1DQAFsp8Zs52N3h30+NLAy/kRLoWVPBBLRjJSqcQ=)
                          15: 3232312e3133332e3234352e302f32342d3234203d3e2034383132.roa (hash: E8J6ehCAVQBTTL4nluJ8TryKPdaQtCV6x7AzifZmEoU=)
                          16: 3232312e3133332e3232382e302f32332d3233203d3e2034383132.roa (hash: Y1HiM+KumJNDeDYPLakmSQoLeW7lH5fsmPDT4ZzwnTw=)
                          17: AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl (hash: wJKXFJtFrp86QM2dZKB0ss8erNdJkwOa0IJHnAcqrZE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:b9:34:dd:27:06:36:ad:f7:cd:95:41:8d:1a:b7:41:38:64:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
        Validity
            Not Before: Sep  8 12:04:11 2026 GMT
            Not After : Sep 11 20:09:11 2026 GMT
        Subject: CN=3D3C1E73F38A89EC1BF23D03091E00A46BB2266A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:d8:49:86:04:d8:3a:ee:e3:4b:3b:6c:28:
                    e8:26:04:aa:59:96:df:f1:4d:48:45:11:44:4d:ce:
                    c5:46:5a:09:66:c4:18:f6:fa:b6:d3:af:30:f2:44:
                    5e:27:23:bb:ab:c7:b3:34:87:da:0e:2e:31:21:c2:
                    d7:77:d4:43:f9:71:88:07:e0:1a:39:72:29:9e:fb:
                    99:fb:73:db:cd:b4:3d:7c:cd:75:a6:b7:33:20:d1:
                    64:a8:11:f8:67:b3:b2:c9:d6:3f:fc:9e:a7:48:c0:
                    94:9d:3a:49:95:43:42:04:b8:e9:aa:1c:2d:6c:fc:
                    1c:df:4d:2b:72:39:79:c9:ca:a5:d0:38:1e:50:32:
                    80:9a:36:5d:2b:80:c3:83:02:56:37:c4:8e:f8:a8:
                    25:97:d6:eb:50:8f:23:3e:09:a6:41:43:8c:8f:fb:
                    af:68:46:f9:92:3a:e4:cf:87:ff:d3:59:cc:b0:da:
                    66:25:25:c2:9a:39:b4:41:2e:92:ec:7e:e0:c9:03:
                    67:83:b5:9e:aa:d7:e0:e9:41:cc:ae:84:e9:88:ca:
                    08:fc:6d:1b:c3:7a:ac:b4:f9:07:ca:1e:9e:d7:e4:
                    d8:f7:fa:60:20:67:41:06:78:59:47:da:d1:e2:2a:
                    0a:07:07:99:22:a5:c9:86:18:58:df:69:6f:66:fc:
                    34:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3C:1E:73:F3:8A:89:EC:1B:F2:3D:03:09:1E:00:A4:6B:B2:26:6A
            X509v3 Authority Key Identifier:
                keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:be:b4:5f:17:31:67:be:dd:98:44:54:42:60:39:b7:0c:60:
         b6:ab:cd:b4:a5:e3:c3:3b:84:05:82:9e:3a:b5:57:fe:41:bf:
         f2:8e:e3:cf:f3:9d:a7:5c:9a:06:d0:64:00:7a:07:c9:bd:08:
         d4:f9:28:1a:e4:d5:28:42:fb:9a:84:30:6c:c1:59:87:39:9e:
         01:9d:17:22:54:03:75:8c:49:b4:aa:be:f9:fa:e0:05:4e:dc:
         bc:b7:4c:65:0b:b3:0c:44:ee:39:56:ed:94:5b:e0:76:78:29:
         e5:9c:97:c4:88:25:92:2f:d5:6e:6b:18:5b:cc:ba:1a:be:f7:
         4c:73:4a:bd:7b:56:ac:d5:56:a3:19:86:0f:83:4b:23:03:f1:
         3e:f3:63:7a:13:e1:6f:eb:0b:17:07:55:28:19:91:6c:4d:53:
         5e:bf:49:08:ed:e1:98:95:1d:79:99:c4:c8:7d:bd:fa:71:10:
         f9:b0:cc:ba:0d:2b:0c:5e:a2:45:f1:8b:0b:ab:f8:39:68:b3:
         6a:25:81:f1:1f:6e:9c:1f:27:6d:d2:30:5b:41:50:48:ef:75:
         a2:89:bb:c0:60:c8:ac:4d:c4:c7:11:05:ee:a0:66:11:a8:45:
         5f:d5:6c:61:7d:59:d3:e9:99:73:fa:07:d2:16:48:39:8d:df:
         2f:be:d0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:21:41 2026 by rpki-client