Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft
File:                     5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft (raw, json)
Hash identifier:          VJFjF3DPdOgh2msITbwY+LZdH+ZCmxdL0vuQoorW6/U=
Subject key identifier:   3C:6D:68:82:CA:DE:1F:F7:A8:66:E4:24:D1:A0:06:83:59:45:B3:FF
Authority key identifier: 5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF
Certificate issuer:       /CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF
Certificate serial:       61B3216BDA6744A529D41707E1882C06533CA293
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft
Manifest number:          C1
Signing time:             Tue 13 Oct 2026 19:38:13 +0000
Manifest this update:     Tue 13 Oct 2026 19:33:13 +0000
Manifest next update:     Fri 16 Oct 2026 21:23:13 +0000
Files and hashes:         1: 5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl (hash: ihb8XHj7RqIpS5R9QCn6wJf0jryiK/BTWUPBkze+WNA=)
                          2: 323430363a636163303a3a2f34302d3430203d3e2034383337.roa (hash: gxfaw1dKY2Q6qP+Id0fg+A7WgGq55ytTLa6OoTsm1Xw=)
                          3: 323430363a636163303a3230303a3a2f34302d3430203d3e2034383337.roa (hash: pAykhPIfYRHqnOno6qjefm8mNfKydtfwIInu7z0tmp4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 21:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b3:21:6b:da:67:44:a5:29:d4:17:07:e1:88:2c:06:53:3c:a2:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF
        Validity
            Not Before: Oct 13 19:33:13 2026 GMT
            Not After : Oct 16 21:23:13 2026 GMT
        Subject: CN=3C6D6882CADE1FF7A866E424D1A006835945B3FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0c:d8:72:80:07:7f:1e:18:aa:b9:96:4a:89:
                    72:72:50:3f:17:20:5b:91:5f:2a:b1:a9:ea:82:44:
                    62:4b:7a:b9:ec:ab:9d:56:0a:f3:c9:35:56:fb:c0:
                    55:dc:34:f8:65:4a:d4:6b:ec:a1:c8:4f:64:08:4c:
                    15:c3:14:dd:11:9a:ba:25:ea:fd:68:97:3d:f4:61:
                    66:88:9b:b3:fc:f5:c8:85:0d:68:b6:1d:6e:bd:c8:
                    a8:af:c9:c6:72:8a:fc:d8:d5:1e:e1:dd:cd:68:8e:
                    bb:7a:2c:6f:2e:83:03:98:30:c0:b6:a9:a9:fc:50:
                    96:4a:4c:f9:de:b3:85:82:43:4f:05:e8:48:d4:fd:
                    46:e6:1b:75:8f:cc:16:29:b6:dc:bb:9b:03:90:60:
                    d8:e7:03:6b:dc:87:40:d8:75:ce:72:24:44:68:b6:
                    2c:cf:89:61:6c:a7:62:b6:10:dc:4a:64:23:d6:ba:
                    c3:e5:10:bb:8e:b5:3f:8e:04:2c:2a:db:15:33:b5:
                    e0:c3:7d:e9:73:78:b9:9c:69:89:c6:d8:45:af:b7:
                    ab:e4:48:17:13:2a:be:64:41:ec:02:30:80:05:9a:
                    9f:06:16:08:b6:c2:34:de:56:a3:71:1c:52:ac:03:
                    41:66:46:a2:c9:1f:3b:f1:73:06:d2:21:1f:85:94:
                    78:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6D:68:82:CA:DE:1F:F7:A8:66:E4:24:D1:A0:06:83:59:45:B3:FF
            X509v3 Authority Key Identifier:
                keyid:5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e1:fe:05:7b:55:3e:15:c5:0c:4f:8c:cd:eb:3e:82:df:56:
         e1:e9:95:86:12:39:ae:8a:41:e5:f7:73:d0:e9:6a:0b:1b:a0:
         1d:3e:ab:1d:ad:d8:29:b4:40:19:31:7c:41:58:e1:5b:b8:f2:
         68:6c:a4:4a:be:ca:79:d4:46:d3:9c:0f:a7:54:2e:87:a7:58:
         46:92:27:08:ba:c1:21:fb:9e:64:00:55:4e:d3:f1:13:2e:92:
         23:bc:c7:41:67:e9:f2:f6:bc:1d:57:eb:28:af:71:31:82:d6:
         1c:ac:e9:72:a0:05:dd:3c:e3:1c:25:63:4b:4b:38:1b:6b:15:
         36:91:90:03:f0:04:1b:90:15:ce:10:91:4f:0b:77:eb:d6:9a:
         b2:e4:7f:5d:aa:47:b1:5a:fb:eb:f0:3b:04:dd:74:93:74:dc:
         61:44:58:ea:26:93:89:0e:77:e2:f5:cc:31:b8:72:93:8d:13:
         fb:a0:ab:19:4c:10:5e:f3:9d:18:04:9b:23:89:25:46:d6:06:
         51:02:dd:aa:50:94:c1:31:6b:ad:e3:5e:60:26:ba:7d:19:31:
         8b:31:53:e1:7d:fc:b4:61:3b:44:09:02:32:63:73:99:93:00:
         40:26:dc:ee:cd:47:0a:f9:52:d5:f1:9a:f7:b7:28:f1:ea:d8:
         f0:40:99:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 16:22:59 2026 by rpki-client