Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.mft
File:                     C82C40F45E62C70EAF5B663FC69919FEE497C232.mft (raw, json)
Hash identifier:          ZgZRr13iPW4fCDyGwOsP9SfJURGy5J/QYr51yJyDOrk=
Subject key identifier:   AC:8A:B0:45:86:D3:CA:68:C4:0D:FD:9A:A2:C3:61:2C:1B:E4:90:4E
Authority key identifier: C8:2C:40:F4:5E:62:C7:0E:AF:5B:66:3F:C6:99:19:FE:E4:97:C2:32
Certificate issuer:       /CN=C82C40F45E62C70EAF5B663FC69919FEE497C232
Certificate serial:       083643B12EAD1361E34141EF6DFF06FB0D32049A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82C40F45E62C70EAF5B663FC69919FEE497C232.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.mft
Manifest number:          A2
Signing time:             Mon 05 Oct 2026 15:14:07 +0000
Manifest this update:     Mon 05 Oct 2026 15:09:07 +0000
Manifest next update:     Thu 08 Oct 2026 19:53:07 +0000
Files and hashes:         1: 3130332e3139392e3139362e302f32322d3232203d3e2030.roa (hash: KbskMLMNoQgPiikLyhepYWH6Nj+6SK5AaW5w9e2tIDg=)
                          2: C82C40F45E62C70EAF5B663FC69919FEE497C232.crl (hash: iXbBh+bFRvr82gF+BJMQR34qgBam7dSuMaugpgPyVB4=)
                          3: 3230322e3136382e38302e302f32322d3232203d3e2030.roa (hash: IqqBQckHO5E/yVvuNZgJNvWULCHHlM9yFYbXo6IS9E8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82C40F45E62C70EAF5B663FC69919FEE497C232.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 19:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:36:43:b1:2e:ad:13:61:e3:41:41:ef:6d:ff:06:fb:0d:32:04:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C82C40F45E62C70EAF5B663FC69919FEE497C232
        Validity
            Not Before: Oct  5 15:09:07 2026 GMT
            Not After : Oct  8 19:53:07 2026 GMT
        Subject: CN=AC8AB04586D3CA68C40DFD9AA2C3612C1BE4904E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:69:7f:14:b5:d2:ab:f3:44:ac:9a:e5:a9:
                    3f:0a:65:94:24:b1:ef:7e:bc:cd:bf:ce:58:de:e2:
                    57:5c:83:db:df:e5:b1:3b:b0:6c:7c:c7:9d:66:bd:
                    c3:d2:24:e7:3d:a5:73:5e:e7:00:ad:f6:cf:8f:db:
                    8f:3c:73:b6:96:ea:44:e3:aa:48:95:2e:14:a8:48:
                    b1:fb:ea:79:f4:fc:19:a6:53:23:94:f0:db:0b:da:
                    1d:79:1c:ab:f0:2b:0e:fb:58:f8:0f:df:4b:92:d6:
                    d3:f8:a7:02:4d:94:9e:05:40:4c:d5:8e:67:44:ad:
                    a9:d2:8b:50:ab:5a:a3:e9:ae:f3:28:62:d2:5f:d0:
                    32:94:52:03:c3:da:27:be:85:50:16:d2:3c:ac:6a:
                    57:d2:24:0d:3e:7a:61:3c:bf:23:5e:5f:85:be:51:
                    f1:13:19:da:24:06:5f:6f:0d:b8:6c:27:00:ac:77:
                    4c:93:8a:8b:1d:fe:e8:d7:56:64:9b:01:fe:ff:cc:
                    88:c7:26:ab:ae:13:d4:ef:e3:5a:df:33:4c:a7:75:
                    35:c8:08:d9:b4:cd:92:f2:f0:56:df:60:56:fb:f5:
                    3e:d2:34:92:85:7a:f8:9c:af:30:ee:db:62:a9:79:
                    bc:37:a4:dd:91:7a:b0:7a:39:ce:c6:da:1d:8b:22:
                    5c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8A:B0:45:86:D3:CA:68:C4:0D:FD:9A:A2:C3:61:2C:1B:E4:90:4E
            X509v3 Authority Key Identifier:
                keyid:C8:2C:40:F4:5E:62:C7:0E:AF:5B:66:3F:C6:99:19:FE:E4:97:C2:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82C40F45E62C70EAF5B663FC69919FEE497C232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ac:82:eb:50:b1:de:6f:5c:75:7b:0c:bd:c9:f4:e7:56:13:
         6d:0f:8c:4e:26:1a:2c:aa:ff:bc:50:ef:fd:3a:f0:a3:7d:0e:
         71:96:a3:ad:7a:09:68:5e:e5:46:29:0e:50:af:2a:bb:73:48:
         8f:9a:df:9d:ff:75:c6:ff:bc:b8:b3:c0:8c:1a:f0:68:c5:f8:
         26:6d:17:d0:98:7c:e4:9a:ec:c9:7b:1f:36:2e:82:08:46:fe:
         97:93:7a:3f:ed:e9:60:9c:4c:8e:e7:35:5c:78:46:a3:81:5a:
         25:9c:b0:0f:8d:37:fa:77:a8:f6:34:06:8f:1f:c2:b7:c1:f1:
         5a:54:6d:b5:47:c8:18:8b:4d:c3:4e:e0:91:73:32:7e:56:b3:
         bd:1d:4f:09:e0:a1:21:48:21:56:31:9c:d7:f1:0d:ba:a6:60:
         15:60:0c:5f:f5:bf:93:05:48:ad:62:97:b3:ff:22:e8:09:98:
         5c:a7:c9:e9:26:4b:af:0a:64:ff:a7:5b:f0:90:57:35:33:d8:
         a5:db:ee:58:b0:4b:a8:ac:18:d6:6c:21:c6:58:03:14:2d:22:
         58:39:d4:4a:5f:c9:bd:df:2c:7d:6f:2e:79:bd:60:1f:d3:fd:
         e9:e9:9d:ec:25:d6:ae:66:0c:a1:fb:d0:ac:c7:fd:30:67:63:
         91:cd:bb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:25:17 2026 by rpki-client