Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft
File:                     0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft (raw, json)
Hash identifier:          RYR8MPMiD5eTzyEXKU+eZdKBE7c8SutKjnwJePJZlzU=
Subject key identifier:   0A:AB:DF:76:CC:C7:4A:D6:D3:A9:31:92:6B:28:B2:F8:23:D2:D3:6D
Authority key identifier: 0B:4E:B7:88:77:28:9F:D7:2E:96:BA:EC:F1:BB:DF:F6:C6:D7:A1:64
Certificate issuer:       /CN=0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164
Certificate serial:       4A59DFE89FED2E60B58038A312221BC24FEC5350
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft
Manifest number:          C0
Signing time:             Mon 05 Oct 2026 01:38:27 +0000
Manifest this update:     Mon 05 Oct 2026 01:33:27 +0000
Manifest next update:     Thu 08 Oct 2026 08:15:27 +0000
Files and hashes:         1: 0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl (hash: qYZJHD4l/vSEqfr0J8FpC8kMaLTcvmliXlqiPHWfqJg=)
                          2: 3130332e3139382e32302e302f32322d3232203d3e2030.roa (hash: e6hTGBhyacWvz5ZBxIlb+wH+74wFHyksuzPVaP5ExnQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 14:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:59:df:e8:9f:ed:2e:60:b5:80:38:a3:12:22:1b:c2:4f:ec:53:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164
        Validity
            Not Before: Oct  5 01:33:27 2026 GMT
            Not After : Oct  8 08:15:27 2026 GMT
        Subject: CN=0AABDF76CCC74AD6D3A931926B28B2F823D2D36D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:58:93:18:f7:40:56:c0:36:3b:63:1e:75:66:
                    c6:27:cd:02:97:12:ca:8e:8a:cb:b3:2f:df:56:bb:
                    51:df:b2:43:90:1e:87:76:15:68:94:01:7a:57:8b:
                    6b:12:6e:46:80:f9:dd:d7:ab:57:3c:0b:90:97:14:
                    ac:5c:dc:0f:35:46:73:22:6a:fc:ec:9b:79:43:fe:
                    94:1c:75:48:ad:91:a3:a8:9e:47:9f:ec:2f:1d:77:
                    41:8e:9e:35:35:96:8d:5b:6f:aa:6c:b6:85:d7:32:
                    56:f6:62:54:dd:51:64:7a:71:5e:01:db:ab:26:a7:
                    93:88:22:cd:05:a5:8f:93:76:d2:61:17:60:c7:35:
                    b7:fa:91:24:a5:ef:7d:65:ea:5b:fe:43:ca:04:6a:
                    d0:eb:37:ce:6f:b6:fa:fd:db:c3:33:9e:23:79:98:
                    94:a6:88:d8:93:28:c4:87:14:d8:6e:6c:63:cd:e4:
                    58:e3:66:ed:e0:81:06:e8:54:e8:c4:64:ce:9e:ae:
                    95:39:29:58:0f:cf:7a:47:1e:d6:bd:89:d9:c0:9e:
                    15:eb:86:cc:5b:39:dc:fb:34:89:01:20:51:98:be:
                    ce:0c:42:d1:06:9e:6a:d0:a7:9b:fe:a6:82:8a:9e:
                    49:6c:ee:a9:eb:e8:87:ba:1b:dd:77:5c:d9:0a:60:
                    5a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AB:DF:76:CC:C7:4A:D6:D3:A9:31:92:6B:28:B2:F8:23:D2:D3:6D
            X509v3 Authority Key Identifier:
                keyid:0B:4E:B7:88:77:28:9F:D7:2E:96:BA:EC:F1:BB:DF:F6:C6:D7:A1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:47:e8:2f:f6:b2:dd:b8:55:b4:6d:e2:bc:9f:7b:e0:ad:3d:
         c6:4b:c2:15:cc:01:e4:7e:ea:9c:f8:3c:34:98:4e:8f:25:3b:
         cf:88:e0:f7:dd:2b:4a:84:22:33:b7:36:56:5a:a4:66:be:f6:
         f1:af:c1:11:81:63:04:b1:77:9f:b5:95:bb:d8:d2:d0:46:58:
         6d:ae:ad:01:f5:15:dc:d7:55:25:27:1d:d0:df:6f:39:d3:f6:
         02:8d:c5:ee:00:39:6d:15:1d:86:56:d7:69:a9:8c:9a:52:d4:
         15:52:f1:f4:44:9e:15:e5:26:78:2c:a1:07:af:53:12:00:86:
         0f:11:23:fb:3b:a0:83:b4:34:61:42:f8:0e:9d:f8:15:8c:0a:
         90:80:a3:aa:fe:4f:33:17:70:a8:26:74:d9:bf:45:16:e4:c1:
         5b:c0:a7:2a:e2:73:c9:a9:86:a6:44:d3:67:d6:5c:b9:05:0d:
         1c:eb:85:93:04:33:66:fe:f3:0c:fe:2c:ad:3c:5f:09:cb:c2:
         4a:cd:c5:e0:b0:89:a6:ab:10:8b:91:e9:5e:ba:43:af:4d:29:
         eb:10:4b:e5:58:02:09:7b:e6:0a:9f:6d:83:97:66:e5:a1:c5:
         c4:4f:56:18:2c:29:16:d0:e9:4b:9f:8f:da:ca:20:1d:ea:84:
         b8:a6:b2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:42:22 2026 by rpki-client