Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
File:                     EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft (raw, json)
Hash identifier:          ev+M2jZqnD1+TONuu8H3ispcQTwD8GT9CkCAssRqkFg=
Subject key identifier:   B6:E9:B5:B9:36:55:18:8B:8F:E1:8C:3A:EC:CE:80:05:80:10:8F:9C
Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
Certificate issuer:       /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Certificate serial:       2E8E9E6E99785C5D530F35B77F69EC408EBBE934
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
Manifest number:          A2
Signing time:             Mon 12 Oct 2026 21:37:24 +0000
Manifest this update:     Mon 12 Oct 2026 21:32:24 +0000
Manifest next update:     Fri 16 Oct 2026 08:44:24 +0000
Files and hashes:         1: 34352e3131332e3230362e302f32342d3234203d3e2034383038.roa (hash: zcRmo63dclxgiZ3nFyKCKGrLFhXcY5p/S+EzqtAO7J0=)
                          2: 34352e3131332e3230372e302f32342d3234203d3e2030.roa (hash: CVagD8Z9yMPAdysjmCoIAoVUBTyn6Sqbck57pfmRU50=)
                          3: 3130332e38332e34372e302f32342d3234203d3e2034383437.roa (hash: Y10Vqyb0XJ0HNTfHx0Vvch3nLgELGfJsukHkkTDyvyQ=)
                          4: 34352e3131332e3230342e302f32342d3234203d3e2030.roa (hash: azwF4QxJ4o7RUv11JVeJn4yL6J0MCJE7wPtk5VKUtmc=)
                          5: 3130332e38332e34352e302f32342d3234203d3e2034383437.roa (hash: +MbSziKgPrPl1SsyN4rJPpOURE3gwv64hE9pCH5hC7M=)
                          6: 34332e3232392e3138372e302f32342d3234203d3e2034383437.roa (hash: xMI16+K1Gz9Axy9BUqR6H93tK+fzxf3wumq2nZUQslk=)
                          7: 34332e3232392e3138372e302f32342d3234203d3e2034383038.roa (hash: mQ/yWNZmDUQo9Pngz7MlnXAExe/cEgg0ErqD67vpet0=)
                          8: EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl (hash: 8gvpX4Gx5Q1WoatXIbg+EGmfT7sepsQwc+rOThGr3NA=)
                          9: 323430333a653763303a313a3a2f34382d3438203d3e2034383437.roa (hash: Qzmbn7+BiqPdX+/uBh1aA5bogjMd1mjMZMN2yWhJeCc=)
                          10: 34332e3232392e3138362e302f32342d3234203d3e2034383437.roa (hash: lu4vogcuvhM57mFxv78YqTlqKjpnM4ATCJM3qXrRxuo=)
                          11: 3130332e38332e34342e302f32342d3234203d3e2034383437.roa (hash: HO5MmtYJt5XtkkC6oFdIZjx3K0y//CdRIISyid2o6JE=)
                          12: 3130332e38332e34362e302f32342d3234203d3e2034383437.roa (hash: mdSscBSM9XKJNkb7F/9rJNPLkHKycB/dFizvvcw5fCs=)
                          13: 323430333a653763303a333a3a2f34382d3438203d3e2034383038.roa (hash: 5Cssj0oD+zq7BYXS/ITi5VE8H5pPSZbUy+Vkm3Mrsh8=)
                          14: 34332e3235342e32342e302f32342d3234203d3e2034383038.roa (hash: ZAMX0/tAb+nwZhAw4xAuQz3sFyhvrglPoAtPXFxaiOA=)
                          15: 34352e3131332e3230352e302f32342d3234203d3e2030.roa (hash: BD64OSACeGxAeO4KURjOtf7p0Hi9TEXugn1QNLI3BW0=)
                          16: 34332e3232392e3138362e302f32342d3234203d3e2034383038.roa (hash: OU4d1XrxVWrge7GzfV+WPEL0nCQEursBPS5TeT7CJmI=)
                          17: 34332e3232392e3138352e302f32342d3234203d3e2034383437.roa (hash: Mk1ZRjdXSKbl1/uFe7FLy9RQ8B0w6L8obQIaBkMJHl8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 08:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8e:9e:6e:99:78:5c:5d:53:0f:35:b7:7f:69:ec:40:8e:bb:e9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
        Validity
            Not Before: Oct 12 21:32:24 2026 GMT
            Not After : Oct 16 08:44:24 2026 GMT
        Subject: CN=B6E9B5B93655188B8FE18C3AECCE800580108F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:99:d3:b6:15:69:41:bb:b8:6f:ba:0a:66:0b:
                    bd:a7:2e:a9:99:8b:3e:b8:9e:7e:fc:1e:4b:ae:e6:
                    ef:1d:4b:f4:12:13:04:2e:fc:e0:15:a4:45:95:cf:
                    51:00:54:0e:9b:35:68:93:2a:f6:27:c6:bd:f5:fb:
                    fd:92:6b:c6:4b:0d:f8:5f:17:68:86:a1:d0:50:a7:
                    11:7e:ad:84:01:f5:f0:96:36:e4:8d:4a:0d:f4:a4:
                    d6:6f:13:cc:7b:b8:9d:5d:6d:38:13:31:84:db:7b:
                    d1:c9:fb:d3:9a:d0:40:57:fd:88:b3:94:ab:e4:d7:
                    7c:fa:89:37:d9:11:c5:62:14:83:12:6f:dc:25:eb:
                    a4:2a:12:e7:9e:94:af:af:45:83:70:18:b4:c9:4d:
                    02:ff:09:48:26:b9:2a:20:26:0f:5d:ef:d5:35:7d:
                    b6:13:a1:64:67:2c:68:26:18:8b:cc:19:4c:2b:45:
                    47:4f:18:04:a8:75:1c:81:8f:20:2c:b1:32:9f:51:
                    2f:e1:60:76:1a:ad:69:9f:1a:50:aa:69:ec:1c:07:
                    e9:dc:ee:a9:a7:25:46:68:d9:35:6e:e5:96:cb:10:
                    4c:0b:94:87:09:5f:2d:98:60:e6:63:97:28:44:e0:
                    08:41:04:e6:3b:31:42:0c:39:8b:4d:ea:7b:c1:a5:
                    bb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E9:B5:B9:36:55:18:8B:8F:E1:8C:3A:EC:CE:80:05:80:10:8F:9C
            X509v3 Authority Key Identifier:
                keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6e:ec:08:3a:4f:47:40:7f:2c:fd:a8:0d:48:e5:17:16:43:
         5c:fc:8a:6b:fd:15:1e:81:5f:fd:f4:d1:a1:50:56:3b:40:5a:
         0f:c5:89:10:c4:48:1b:d9:93:9b:10:ad:30:7d:af:a5:3f:52:
         77:ee:fc:1b:02:a6:bb:18:77:e1:25:f6:a0:16:f9:8f:00:6c:
         4b:b7:2c:94:44:d9:fe:5e:e7:13:b2:48:87:dd:50:2a:16:5c:
         d4:7d:1f:d3:7b:99:fd:52:e2:02:50:29:b3:34:65:b4:4c:d1:
         fc:2f:ca:26:3a:4a:e8:62:d7:a2:58:8c:64:24:8f:77:90:13:
         14:da:bc:55:55:07:e1:0a:74:2a:e2:b5:28:ea:da:8f:1f:61:
         cf:3e:a1:c8:ef:e0:e4:7b:ce:a2:0c:33:01:94:c0:c4:db:cb:
         4d:43:cf:03:e0:cf:c9:69:2b:e6:cc:b1:fe:85:20:db:36:f2:
         59:b7:5d:4e:7b:c8:c3:e0:0e:2a:cf:f6:c3:0e:64:53:80:1d:
         0d:1c:f4:33:a8:f8:1e:6a:6a:3b:ca:7d:0b:63:36:b4:a4:75:
         da:12:10:72:b9:c5:e2:2d:c9:1e:9d:90:ce:6a:b2:56:a3:40:
         40:a6:25:95:c0:14:e6:7f:76:52:d3:cf:e5:ae:46:28:ec:78:
         93:26:0b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:29:49 2026 by rpki-client