Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
File:                     14F2AE289734C6F9223A15F482EED7503BB5C42B.mft (raw, json)
Hash identifier:          b7Ti0EWpiXXMAlaXzSIdMbWWF40ZdQC1DcbgFqit0v4=
Subject key identifier:   E9:64:9B:28:6A:D0:FE:19:96:36:83:49:C7:7A:13:63:92:DF:62:BB
Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B
Certificate issuer:       /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
Certificate serial:       585551E6629C786A99131CA320AE6ED2FC624C10
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
Manifest number:          0118
Signing time:             Sat 24 Oct 2026 16:41:49 +0000
Manifest this update:     Sat 24 Oct 2026 16:36:49 +0000
Manifest next update:     Tue 27 Oct 2026 18:26:49 +0000
Files and hashes:         1: 14F2AE289734C6F9223A15F482EED7503BB5C42B.crl (hash: ygmnt4FKcJ9Jeu4RePNSf8VNtr/MHSyr0rBPwOcNxzA=)
                          2: AS140717.roa (hash: F4vKDqd+oRuW+dD54h6Z5jvEABTrqdWIPSBZ4SXxlOc=)
                          3: AS4837.roa (hash: kaEOXHZ7gIhA8ZFL/Oz9k85AhlXsPEgPXsDitwFjc2s=)
                          4: AS4808.roa (hash: z2TYzvlcywDhL0dWprMULk+6uLpj22l1z9RTTmZtv9E=)
                          5: AS56046.roa (hash: wQaqBuQrNgi2Ezg6k6Tc0z3rRSK0zo5E90jO2sXzVVE=)
                          6: AS9808.roa (hash: iZ56dlkspGmh1ahvcPF/GFXsutuOvohlkxlEb5OgMA8=)
                          7: AS58466.roa (hash: LM9JbG7lyreiz1D+ixqDOBz5SUXAnqgEmr0CR4xkMW4=)
                          8: AS140292.roa (hash: wtC9Q7BhiYUo1Gn7JyysCgjfucI9tOaarVKcHpoqhxw=)
                          9: AS59089.roa (hash: ZTGG8hi/6ZD5YswkILRzPPrQMQwDyrtkUiOkaThWQjk=)
                          10: AS136958.roa (hash: 1lLdYSrnIRbEu4dxKFeTEI02kvxqoyt4CS47V2g0UBk=)
                          11: AS56040.roa (hash: S03Z930RtSoH79KDzS2k8drefwtjoeI56VCdlze2G38=)
                          12: AS23724.roa (hash: bXSOnuLFHwQ6WEShOo71xL2UuGOMqnSeoYRb0VKmFcM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 18:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:55:51:e6:62:9c:78:6a:99:13:1c:a3:20:ae:6e:d2:fc:62:4c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
        Validity
            Not Before: Oct 24 16:36:49 2026 GMT
            Not After : Oct 27 18:26:49 2026 GMT
        Subject: CN=E9649B286AD0FE1996368349C77A136392DF62BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6f:49:42:8d:8d:dc:4d:ff:22:af:23:7b:f3:
                    d1:27:0e:86:a9:6b:28:d4:61:4a:c2:11:d3:e5:24:
                    aa:e5:dd:d1:3a:2f:e6:bd:9c:5b:f8:8f:b0:57:89:
                    19:db:09:cd:d2:95:8f:78:7a:37:9c:3d:5f:10:64:
                    73:38:49:2f:5f:34:13:15:4e:e6:94:ba:3b:20:13:
                    7e:01:5b:fb:e1:b1:9e:8d:e6:43:38:73:97:4d:c4:
                    45:a9:49:ad:9e:e7:e6:4b:83:e0:fa:e0:fd:d1:29:
                    35:85:9c:8f:ee:1b:3e:ae:52:ec:48:6a:1a:87:56:
                    50:69:9e:3e:5e:be:f5:72:9b:a0:5d:79:a4:75:70:
                    05:05:a1:49:88:c0:24:f8:7a:04:e8:2e:52:a7:86:
                    97:cf:ed:e2:28:55:20:3f:ae:c5:66:b8:8d:c5:25:
                    b7:c8:4f:eb:82:2d:f3:8a:30:b8:4f:5f:56:dc:cd:
                    69:2a:6f:b5:f0:61:11:04:59:37:03:c8:3d:a9:e0:
                    59:df:8c:ad:8e:30:dc:68:c4:a0:d9:45:99:b1:d7:
                    24:32:c3:91:af:ae:b5:33:14:07:f7:17:17:f8:0e:
                    33:1c:65:50:7a:ed:3c:06:43:ac:a4:a2:d0:03:24:
                    f6:c2:80:d5:05:ce:c4:0d:d4:27:7a:5e:10:92:35:
                    1f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:64:9B:28:6A:D0:FE:19:96:36:83:49:C7:7A:13:63:92:DF:62:BB
            X509v3 Authority Key Identifier:
                keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5d:63:34:78:6d:e8:c8:4f:4a:06:79:b6:61:58:dc:cf:21:
         75:0d:25:b4:24:a4:b3:96:2c:48:c2:ac:5b:56:8e:49:bb:64:
         74:4f:02:17:fc:4a:40:77:23:4c:a5:e5:55:96:3d:87:22:28:
         2a:7c:9d:b0:cd:ef:92:38:69:3e:8b:ee:7f:dd:15:56:dd:b4:
         60:f9:45:aa:32:35:72:49:73:65:04:b1:15:5d:ab:4d:d5:a9:
         ea:80:65:69:bd:72:01:75:2d:5e:69:96:94:35:27:8b:1e:90:
         c1:41:8e:46:41:09:41:39:9d:42:22:bd:c9:76:a2:9b:9d:c5:
         59:37:f1:21:8c:97:33:7a:a6:1b:f3:a1:a1:ce:8e:ee:48:ce:
         e6:3c:d7:78:c9:93:fd:f4:56:94:ca:a4:70:1c:c1:a6:86:c5:
         94:ac:4f:28:d3:9c:70:27:f0:d0:c1:22:90:77:54:1c:ca:5b:
         2e:a3:96:a1:78:d5:ee:c1:be:73:8f:c7:c9:a7:59:72:63:2a:
         7c:a1:bb:11:ce:53:bd:41:b8:7d:b4:bd:68:1f:a0:f3:cd:16:
         be:8f:ff:5d:6d:2c:91:e9:7a:ae:c7:ea:f3:50:0b:fa:5f:cb:
         9e:5b:db:db:93:28:ea:0d:61:04:71:24:4e:02:bc:4c:a6:9b:
         34:ee:24:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:45:56 2026 by rpki-client