Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft
File:                     81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft (raw, json)
Hash identifier:          BF/CbXRteqS47F7ZH01E7dFpZ0RWxkV0xn17uB2pV+4=
Subject key identifier:   62:E2:FF:AA:75:7C:53:02:DE:97:C6:0C:B7:D4:4A:5A:08:E0:F5:17
Authority key identifier: 81:C6:11:9E:6A:4D:F7:B7:5E:15:7E:48:A1:36:35:B1:E0:5E:7B:B6
Certificate issuer:       /CN=81C6119E6A4DF7B75E157E48A13635B1E05E7BB6
Certificate serial:       70749F9827EC30A03D7680042B24C16B541E5A19
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft
Manifest number:          AE
Signing time:             Sun 18 Oct 2026 14:09:52 +0000
Manifest this update:     Sun 18 Oct 2026 14:04:52 +0000
Manifest next update:     Wed 21 Oct 2026 14:51:52 +0000
Files and hashes:         1: 81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.crl (hash: QBJB4pq7RUqmm3rMXWjQ2afdzWEw5glyBDSfKywqgL8=)
                          2: 3230322e36332e3136302e302f32302d3230203d3e2034383337.roa (hash: 8hu7dNrKt5Kh0Gug+I9Kc/1oeTX6FuZLquGE19/vspY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 14:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:74:9f:98:27:ec:30:a0:3d:76:80:04:2b:24:c1:6b:54:1e:5a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81C6119E6A4DF7B75E157E48A13635B1E05E7BB6
        Validity
            Not Before: Oct 18 14:04:52 2026 GMT
            Not After : Oct 21 14:51:52 2026 GMT
        Subject: CN=62E2FFAA757C5302DE97C60CB7D44A5A08E0F517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a8:b3:c6:b3:56:2b:5f:cb:0d:5b:5f:4c:49:
                    57:cf:8f:e0:ad:e2:0e:35:32:5b:1c:39:3c:4e:0b:
                    a4:f0:e0:94:64:76:ad:9e:6e:c0:1f:2a:25:53:13:
                    40:d1:67:bc:3d:80:a9:04:81:8d:06:13:30:4b:ce:
                    a2:7d:b3:96:80:26:ee:fe:b5:8d:54:b1:34:43:f5:
                    91:16:9f:d5:0f:75:d5:2d:17:a9:40:4e:cc:9f:8c:
                    bd:0d:ce:ca:50:63:80:26:ac:51:2e:47:5b:15:03:
                    83:74:ba:6c:02:1e:d5:be:2c:c2:41:72:f7:0f:9a:
                    90:96:12:ed:0d:31:77:46:f3:bd:07:5b:42:d6:9a:
                    71:5f:ed:0a:63:fc:03:a7:a6:e6:19:a5:6b:e2:8c:
                    2f:60:81:6f:72:1e:75:10:73:0e:8d:1f:2e:c8:23:
                    b3:0e:3a:bd:c5:22:c3:39:72:07:31:79:bf:c2:a3:
                    58:66:46:cd:ed:50:c3:f2:d3:2c:a0:89:0c:29:7f:
                    7d:9d:30:fe:6f:c4:63:2e:a2:98:04:aa:0a:b4:84:
                    97:9b:f5:f4:fb:d3:77:c7:61:a7:ee:24:76:05:0a:
                    23:20:23:ee:05:cc:b2:67:a2:4a:c7:f1:56:4f:21:
                    bf:30:73:7e:2e:85:ad:7e:9f:dd:fd:9a:e1:83:d1:
                    ca:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E2:FF:AA:75:7C:53:02:DE:97:C6:0C:B7:D4:4A:5A:08:E0:F5:17
            X509v3 Authority Key Identifier:
                keyid:81:C6:11:9E:6A:4D:F7:B7:5E:15:7E:48:A1:36:35:B1:E0:5E:7B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ee:f8:53:10:e3:4c:b2:6b:f4:43:7e:f2:f6:d7:34:1f:d0:
         a0:38:50:59:d3:47:27:1e:66:48:54:2c:0e:e3:f3:d1:21:d3:
         95:56:3c:9a:cd:f5:02:09:c8:9e:41:c3:f3:72:b4:c0:ee:80:
         e3:ca:db:f1:bf:c0:8b:ed:57:9b:f6:88:dc:64:75:77:62:cd:
         81:43:00:32:2b:20:e0:b0:eb:d7:d0:c7:76:b9:88:67:b9:4c:
         58:72:7d:93:9c:f5:a4:76:72:84:f5:21:94:2b:b9:e2:16:81:
         98:e7:0e:64:f7:36:9b:73:b7:f2:40:d5:c6:70:74:0d:9d:f6:
         cc:fb:cf:01:d7:98:9c:71:61:13:dc:26:52:ec:ac:67:22:00:
         c6:90:0a:51:05:7c:19:41:89:df:dd:66:a3:dd:d0:6f:4e:84:
         3e:65:22:26:76:16:71:50:7f:19:3c:d0:bb:ed:fe:09:61:76:
         59:24:5c:78:32:da:c8:39:d4:37:d2:04:07:5b:23:b3:49:ef:
         33:86:51:23:ca:27:90:51:ec:5f:44:45:0f:af:0e:cd:8c:6c:
         3c:83:b7:ef:7a:52:24:64:a1:a6:61:22:4c:c5:dd:8a:41:c1:
         af:9b:db:e4:1d:bc:77:4e:8f:83:8f:71:ce:47:6b:61:c9:72:
         76:3f:c2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 17:47:51 2026 by rpki-client