Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
File:                     EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft (raw, json)
Hash identifier:          eAJVICCikJz8xZf0OVX6ESWiuF/8dL2iRDW5gdEFWnc=
Subject key identifier:   97:13:4D:47:BB:6F:25:B1:5F:D8:55:41:44:C6:14:F0:80:ED:8F:C3
Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
Certificate issuer:       /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Certificate serial:       11A00D2DE6539FB6CF1209867C3882CAC9BA1A3A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
Manifest number:          8E
Signing time:             Fri 28 Aug 2026 06:48:02 +0000
Manifest this update:     Fri 28 Aug 2026 06:43:02 +0000
Manifest next update:     Mon 31 Aug 2026 18:39:02 +0000
Files and hashes:         1: 34332e3232392e3138362e302f32342d3234203d3e2034383038.roa (hash: OU4d1XrxVWrge7GzfV+WPEL0nCQEursBPS5TeT7CJmI=)
                          2: 323430333a653763303a333a3a2f34382d3438203d3e2034383038.roa (hash: 5Cssj0oD+zq7BYXS/ITi5VE8H5pPSZbUy+Vkm3Mrsh8=)
                          3: 3130332e38332e34362e302f32342d3234203d3e2034383437.roa (hash: mdSscBSM9XKJNkb7F/9rJNPLkHKycB/dFizvvcw5fCs=)
                          4: 34332e3232392e3138352e302f32342d3234203d3e2034383437.roa (hash: Mk1ZRjdXSKbl1/uFe7FLy9RQ8B0w6L8obQIaBkMJHl8=)
                          5: 323430333a653763303a313a3a2f34382d3438203d3e2034383437.roa (hash: Qzmbn7+BiqPdX+/uBh1aA5bogjMd1mjMZMN2yWhJeCc=)
                          6: 34352e3131332e3230352e302f32342d3234203d3e2030.roa (hash: BD64OSACeGxAeO4KURjOtf7p0Hi9TEXugn1QNLI3BW0=)
                          7: EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl (hash: gpbo/dGWCjMsViGbQKxVjAMYZnMw81/+9kCGQp7UI8A=)
                          8: 3130332e38332e34352e302f32342d3234203d3e2034383437.roa (hash: +MbSziKgPrPl1SsyN4rJPpOURE3gwv64hE9pCH5hC7M=)
                          9: 3130332e38332e34342e302f32342d3234203d3e2034383437.roa (hash: HO5MmtYJt5XtkkC6oFdIZjx3K0y//CdRIISyid2o6JE=)
                          10: 34332e3232392e3138362e302f32342d3234203d3e2034383437.roa (hash: lu4vogcuvhM57mFxv78YqTlqKjpnM4ATCJM3qXrRxuo=)
                          11: 34332e3232392e3138372e302f32342d3234203d3e2034383437.roa (hash: xMI16+K1Gz9Axy9BUqR6H93tK+fzxf3wumq2nZUQslk=)
                          12: 34352e3131332e3230372e302f32342d3234203d3e2030.roa (hash: CVagD8Z9yMPAdysjmCoIAoVUBTyn6Sqbck57pfmRU50=)
                          13: 3130332e38332e34372e302f32342d3234203d3e2034383437.roa (hash: Y10Vqyb0XJ0HNTfHx0Vvch3nLgELGfJsukHkkTDyvyQ=)
                          14: 34332e3235342e32342e302f32342d3234203d3e2034383038.roa (hash: ZAMX0/tAb+nwZhAw4xAuQz3sFyhvrglPoAtPXFxaiOA=)
                          15: 34332e3232392e3138372e302f32342d3234203d3e2034383038.roa (hash: mQ/yWNZmDUQo9Pngz7MlnXAExe/cEgg0ErqD67vpet0=)
                          16: 34352e3131332e3230342e302f32342d3234203d3e2030.roa (hash: azwF4QxJ4o7RUv11JVeJn4yL6J0MCJE7wPtk5VKUtmc=)
                          17: 34352e3131332e3230362e302f32342d3234203d3e2034383038.roa (hash: zcRmo63dclxgiZ3nFyKCKGrLFhXcY5p/S+EzqtAO7J0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 15:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a0:0d:2d:e6:53:9f:b6:cf:12:09:86:7c:38:82:ca:c9:ba:1a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
        Validity
            Not Before: Aug 28 06:43:02 2026 GMT
            Not After : Aug 31 18:39:02 2026 GMT
        Subject: CN=97134D47BB6F25B15FD8554144C614F080ED8FC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:2f:1e:91:0d:cd:7b:f5:4c:f0:a3:d3:d7:
                    38:fb:29:8e:6d:81:6a:bb:0c:08:d9:f2:38:c1:7b:
                    34:9d:1b:ce:6c:02:d2:b1:83:9f:97:44:52:92:f2:
                    ad:fd:da:93:62:78:93:41:6b:2a:a0:c1:19:8a:fa:
                    fb:91:0f:ce:46:8f:87:38:72:eb:1a:bf:93:63:3e:
                    90:7c:83:16:20:8e:a0:8c:d6:b5:3a:26:9a:32:b0:
                    37:ce:e8:6e:68:5a:fb:a2:67:a6:48:6d:32:47:d4:
                    6c:50:47:ca:42:f5:ab:8b:21:b7:8a:72:4d:ca:65:
                    49:eb:74:35:de:0b:a2:6b:19:9a:cb:7d:24:ee:9b:
                    48:f1:20:b6:d6:f0:5e:5a:6c:e1:22:14:92:ec:a8:
                    af:1f:bb:f2:3c:6b:0f:fc:2b:fe:79:ab:24:dd:8a:
                    6f:59:72:53:af:18:fb:28:95:53:92:88:a6:89:c5:
                    db:b1:56:71:88:a4:d7:dc:dd:50:97:13:fd:f3:76:
                    0e:ab:a2:57:6b:0a:43:da:ce:d8:b4:18:78:f3:c5:
                    a5:fd:76:76:82:1b:a5:8e:c1:d5:01:a8:37:2a:13:
                    f2:9a:e7:ca:c1:1c:7b:5f:66:28:b4:a0:a3:ca:74:
                    2d:65:81:d5:fe:fc:59:67:b4:74:86:bf:1c:14:95:
                    e8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:13:4D:47:BB:6F:25:B1:5F:D8:55:41:44:C6:14:F0:80:ED:8F:C3
            X509v3 Authority Key Identifier:
                keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:33:76:4b:34:2e:10:41:fe:cd:b1:9e:17:c2:cb:0c:12:9f:
         25:cd:4a:83:cc:ae:bf:2e:d1:d8:10:b0:9e:39:fe:11:90:f5:
         10:51:3f:0c:73:9b:49:45:21:59:32:74:db:3c:2e:b8:01:b9:
         ab:d1:37:47:22:23:71:f6:24:a5:bd:64:6b:26:71:17:c9:3e:
         d6:8f:26:73:52:28:6c:f9:21:18:ff:72:3c:80:5f:db:73:c1:
         eb:c8:5c:79:53:94:14:a7:c6:84:d0:19:2d:24:2f:07:82:a0:
         5a:c0:e2:b6:b5:2a:bf:6d:b1:b7:5c:b3:d9:d6:db:ad:53:75:
         fb:a4:a6:83:34:31:bc:5a:06:85:37:cc:1d:f9:44:40:1c:26:
         5e:b3:23:ad:09:5d:bd:24:34:9a:94:64:e0:da:5a:0c:18:a3:
         80:99:8b:af:35:54:71:a7:48:54:fc:0b:b9:2d:8f:65:94:78:
         6a:3a:05:3e:a1:45:81:c2:8b:c0:de:26:65:09:5b:74:b2:93:
         7a:0a:d9:9d:80:a2:6c:ee:14:be:59:ac:4f:db:b5:b4:ee:10:
         fa:4b:15:cc:76:c2:ab:c7:26:fc:9b:2b:be:bc:60:fc:b9:99:
         2b:a7:4e:f3:14:a4:0d:d1:b4:7c:4b:75:ef:57:fe:7a:a0:18:
         67:a1:ae:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:19:25 2026 by rpki-client