Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft
File:                     B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft (raw, json)
Hash identifier:          DtSXHheRy+EoSnfDrW0ku/gAXo9vDJIz69j3yFrWq6k=
Subject key identifier:   F8:77:FC:FF:5B:B7:70:39:C2:EE:2E:34:4E:93:CD:73:30:B9:06:D0
Authority key identifier: B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72
Certificate issuer:       /CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172
Certificate serial:       700F3ABC3F6871A53E8A6A13D656F7B70477B8A9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft
Manifest number:          B3
Signing time:             Fri 28 Aug 2026 06:48:21 +0000
Manifest this update:     Fri 28 Aug 2026 06:43:21 +0000
Manifest next update:     Mon 31 Aug 2026 16:16:21 +0000
Files and hashes:         1: 3230332e3137352e3133372e302f32342d3234203d3e203233383432.roa (hash: A9OF+LYDehr6q1VSW8RvE7BSot6C4lLWA5bD1r+geMI=)
                          2: 3230332e39312e35322e302f32342d3234203d3e203233383432.roa (hash: BnR9tde6g4JR7s+u2o2QtkVnknrXtCl8GjZCZV9iNhI=)
                          3: B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl (hash: G/anUXX4ISGCifyUnK2IpANiaGM1l0K/yIeEu5VKpK0=)
                          4: 3230332e3137352e3133332e302f32342d3234203d3e203233383432.roa (hash: AlGk3Gjnc1it8DaDJwzzaa6Lz3S7VWaXMCWafM/0c28=)
                          5: 3230332e39312e35312e302f32342d3234203d3e203233383432.roa (hash: uIbjQjR2A2bqo/dxkWbU5Bw/TQzIU7lTSy+MSJAp7ow=)
                          6: 3230332e3137352e3133322e302f32342d3234203d3e203233383432.roa (hash: G61Vnl3NFhiopHNvt8syVAgPV6nOy+o1jchqfaqLE9k=)
                          7: 3230332e3137352e3133342e302f32342d3234203d3e203233383432.roa (hash: +D2YJXhi7gkd5ruX2Q97ZdkQnhtzpkhpP5Bhit0l6oQ=)
                          8: 3230332e3137352e3132382e302f32342d3234203d3e203233383432.roa (hash: XQccSce6jCVjp9IhoZfR0ihzWQ6r0oB8bbRQKHnlpXU=)
                          9: 3230332e3137352e3132392e302f32342d3234203d3e203233383432.roa (hash: RU2xtjw/Txm3GYZrp74VxjkWhliptSYkSQCNosJydnE=)
                          10: 3230332e39312e33322e302f31392d3139203d3e203233383432.roa (hash: ErQU8yFT8y24jJytx9oiI+jAe3QgFI6/xnW3QQs1M28=)
                          11: 3230332e3137352e3133352e302f32342d3234203d3e203233383432.roa (hash: cvLyDMila5E87YiOAgD8i7fuOPnJ5FsauY2mlvB/Acs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 15:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0f:3a:bc:3f:68:71:a5:3e:8a:6a:13:d6:56:f7:b7:04:77:b8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172
        Validity
            Not Before: Aug 28 06:43:21 2026 GMT
            Not After : Aug 31 16:16:21 2026 GMT
        Subject: CN=F877FCFF5BB77039C2EE2E344E93CD7330B906D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fa:f5:e6:23:9b:06:e0:6d:21:6f:a9:23:7e:
                    a0:cd:c6:4a:81:29:dd:39:45:91:2e:29:b2:17:7a:
                    20:71:c5:47:e7:b4:24:f6:1a:08:95:73:3e:ba:96:
                    99:6d:43:74:bc:f2:45:4e:47:e4:21:8d:1c:e4:1d:
                    7c:85:e2:39:c3:70:c5:b4:ba:3e:e6:b9:8a:c5:a0:
                    9b:fc:12:99:aa:c9:0c:22:ed:27:35:b7:13:bc:54:
                    2d:4c:c4:12:43:1f:c4:bf:1b:4a:3c:03:91:a5:87:
                    f3:52:28:69:6f:c6:c4:f7:31:34:b3:fd:80:00:00:
                    54:d0:85:a8:75:79:4e:1e:cf:2b:c1:9d:b7:84:86:
                    44:f2:43:84:59:bb:63:0b:2d:d0:21:f5:ca:df:d9:
                    c5:9f:e0:18:6e:49:c6:1b:65:a5:0f:92:aa:31:b6:
                    85:19:25:af:91:48:8a:b2:f5:8c:77:3c:f2:5e:95:
                    67:ac:f3:68:5f:68:08:10:a9:a1:5b:62:5a:13:2f:
                    83:e1:42:7b:b7:0f:95:5e:b4:09:2e:f4:a6:d6:49:
                    c9:fc:0a:a4:f2:dd:b9:69:37:ab:39:86:78:3d:a9:
                    3e:25:be:26:34:66:16:26:73:03:84:ae:f7:cd:30:
                    f2:48:5a:af:25:97:99:04:d8:4b:45:b6:6a:b3:23:
                    7a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:77:FC:FF:5B:B7:70:39:C2:EE:2E:34:4E:93:CD:73:30:B9:06:D0
            X509v3 Authority Key Identifier:
                keyid:B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:21:f8:d3:cf:17:6e:86:2f:73:cd:3d:5a:95:d4:47:25:09:
         4a:ff:75:5b:aa:6d:96:0d:81:d6:21:18:50:24:ff:be:c4:03:
         af:15:a3:33:8e:3a:92:3b:f7:d8:87:26:12:31:2c:9b:9d:30:
         d0:f1:3b:0d:9d:9e:d4:7c:47:1f:43:cf:e4:d7:1e:77:d2:f9:
         49:91:e1:2a:d1:41:4a:52:e6:6e:ea:fe:72:ad:96:6f:2b:b3:
         85:ea:46:d6:b9:65:80:83:f5:0a:ec:31:c7:65:1d:c6:62:04:
         45:9b:cf:e9:ff:ed:af:6b:e5:bb:15:18:65:08:83:f2:6a:26:
         30:26:f7:c6:fa:6b:47:14:89:c8:ce:ee:a7:5f:05:93:87:55:
         6c:29:54:47:65:3c:ad:c6:52:1d:67:85:f2:42:c5:86:24:89:
         b6:d3:bc:7d:44:56:35:02:66:80:2d:57:38:ed:1d:1e:8d:80:
         b8:84:7e:ea:51:2c:7b:d2:22:e0:ee:74:88:e6:cf:c6:f8:06:
         9b:d8:2f:78:4a:99:94:7e:42:c5:3d:30:03:13:ed:c6:ed:d5:
         e2:c2:e0:af:c6:65:2d:46:f6:52:b2:c4:37:f3:c3:ab:fd:53:
         db:bd:c8:7b:fc:43:6f:65:ac:bd:42:6d:c1:45:53:6e:df:e1:
         9f:69:19:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:07:02 2026 by rpki-client