Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
File:                     FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft (raw, json)
Hash identifier:          k7sCvfA5F7nnel+XTOxaPjtmUrJl+zD14F7jyh86wTg=
Subject key identifier:   99:DA:8A:0A:8A:F3:9F:F1:F1:B2:C7:9D:08:A8:D1:79:2E:FC:72:03
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Certificate issuer:       /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial:       0A47BDA21C4947FE4648DC21DCF38CB6C3BEC15D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
Manifest number:          89
Signing time:             Fri 28 Aug 2026 06:48:20 +0000
Manifest this update:     Fri 28 Aug 2026 06:43:20 +0000
Manifest next update:     Mon 31 Aug 2026 07:41:20 +0000
Files and hashes:         1: 3131392e33322e36342e302f31382d3138203d3e203137363232.roa (hash: jKfxVhNNT6q0cpEYF93zmLiMbOSKh0oXiNm82GT3K3U=)
                          2: 3131392e33332e33322e302f31392d3139203d3e203137363232.roa (hash: 9WTpeEF2/KH37g3fLMUN2l5C6F/axXfQhzANNQt8P94=)
                          3: 3131392e33332e36342e302f31382d3138203d3e203137363232.roa (hash: RrxRT5J0eKHrEdN99FDnLqAMDg9M8PUwkDNUJPdWfJw=)
                          4: 3131392e33332e3139322e302f31392d3139203d3e203137363232.roa (hash: xsfAN/00Qyu6OIIcw8N6b0JL7DfI8F45S6/i1EVsVEw=)
                          5: 3131392e33332e302e302f31392d3139203d3e203137363232.roa (hash: u+gWpRI9eicZlVpRaW4WEV9H57Z22tSECgRLuqP2zDI=)
                          6: 3131362e3139392e3131302e302f32332d3233203d3e20313334373733.roa (hash: yTvFlHcYheTMFXGOcsBkespml59gj2ls3jBdrulY9x4=)
                          7: 3131392e33342e302e302f31372d3137203d3e203137363232.roa (hash: 6a0kCpqvmTcCHAk70cOiVXkH5lnydlHCESpUC0C3wXA=)
                          8: 3131392e33332e3132382e302f31382d3138203d3e203137363232.roa (hash: adXscUguLI+RUh2Uk6+/iSfavYg0ENBnOnXH/TRiflE=)
                          9: FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl (hash: phZZDL1H6PU+HejOyuuWW4nYSqgHQeF97OIXHgI5h0I=)
                          10: 3132342e34302e3132382e302f31382d3138203d3e203538343636.roa (hash: gEd7xpgMtNDRVKEso3Cg/VgGhJsmy0tACMyeZ6RUHBM=)
                          11: 3131392e33342e3132382e302f31372d3137203d3e20313334373733.roa (hash: 2g5Xdw9KQvYArzBtOyilCKmilMxYKl2a14GkgGu9LbI=)
                          12: 3131392e33322e3132382e302f31372d3137203d3e203137363232.roa (hash: AdBUZj+Vfol3oxbptI2SvuNijPyuuwsIW2Ru1GDdd/Y=)
                          13: 3131362e3139392e36342e302f31382d3138203d3e203137363232.roa (hash: Ab3mbR+nsYksyMo8NYIdSU8Jg6oJ3rvP9EcATNaXFgA=)
                          14: 3131392e33332e3232342e302f31392d3139203d3e203137363232.roa (hash: uByqxyAe5GJR+F6Mw0XylxMVR4O+KDqkum1c/8LevrI=)
                          15: 3131362e3139392e36362e302f32332d3233203d3e20313334373733.roa (hash: VJt5X7GkwrmL5FHGlPW4Mfs+20np0izWyQKqAH2/jK4=)
                          16: 3131392e33332e3139342e302f32332d3233203d3e20313334373733.roa (hash: ebeLpTwDF2XNn6DzHRkfPjl8tA0mJS9S+ucPzhiymRM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 07:41:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:47:bd:a2:1c:49:47:fe:46:48:dc:21:dc:f3:8c:b6:c3:be:c1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
        Validity
            Not Before: Aug 28 06:43:20 2026 GMT
            Not After : Aug 31 07:41:20 2026 GMT
        Subject: CN=99DA8A0A8AF39FF1F1B2C79D08A8D1792EFC7203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:e2:94:b2:17:46:0a:db:f6:0f:9e:c4:67:
                    d6:05:d8:34:22:24:67:dc:76:ca:f3:0d:be:d8:90:
                    2d:d3:85:3a:e6:3c:01:fe:ba:05:dc:1e:c0:cc:15:
                    e8:0d:b5:5e:27:f3:5f:cd:69:63:44:39:4f:c4:4b:
                    3a:2e:13:70:fc:9d:cf:22:a6:96:e1:9b:4a:a9:0a:
                    f3:5f:b7:f1:df:29:aa:9d:71:d9:d2:69:0a:bf:1e:
                    d1:d5:3d:68:2f:ad:56:f1:9a:dd:b4:20:58:9a:4f:
                    02:e2:88:fe:b4:af:22:7d:6f:30:a5:92:ba:c1:0c:
                    8f:46:0e:37:b9:14:70:ef:e4:77:83:20:0c:d5:9c:
                    ba:7d:10:c7:88:05:ce:c2:d9:2e:ec:00:83:b7:48:
                    68:22:65:49:4b:db:e7:a0:af:c2:73:2a:78:91:ce:
                    f1:10:96:3d:05:04:f4:e6:86:b5:de:11:23:cb:ba:
                    a1:16:bc:95:66:c3:83:15:c3:49:52:ca:32:d6:af:
                    9c:3e:67:c9:55:7d:ce:75:e5:11:04:c6:bd:b5:77:
                    d0:a9:f0:0d:23:fa:06:15:58:49:b5:34:4a:21:21:
                    1c:da:fa:f1:39:8c:f1:5b:df:75:b7:86:c9:0b:9a:
                    5b:e3:c2:3d:72:4d:e2:a2:c1:fd:b8:e4:f1:4a:09:
                    e6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DA:8A:0A:8A:F3:9F:F1:F1:B2:C7:9D:08:A8:D1:79:2E:FC:72:03
            X509v3 Authority Key Identifier:
                keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6d:41:50:f4:d1:28:ff:45:66:7b:d7:46:a3:a2:fc:c4:63:
         78:1f:7a:be:92:76:d5:5e:6f:3e:e4:b6:a8:46:ee:83:cf:28:
         f1:68:18:71:05:fb:01:a3:41:fd:98:fc:f2:9e:26:9d:98:d9:
         69:bd:57:f8:53:43:d7:c5:43:3a:fd:9e:a1:5d:81:6a:4a:93:
         a7:9e:0a:ce:19:96:34:01:f7:b4:d8:6d:dc:db:3b:39:38:38:
         74:bf:7a:03:dd:07:71:34:0c:44:95:dc:e7:13:ac:4d:4f:17:
         63:00:9f:e9:70:ab:94:38:4d:39:66:b1:46:fc:68:17:52:9d:
         48:7a:b2:bc:c0:ea:49:c9:47:ef:06:d9:20:1e:63:f0:06:88:
         fc:eb:53:fe:1d:7f:eb:49:89:32:7a:62:fa:57:2e:26:6e:68:
         db:7e:c1:18:63:fe:79:39:1a:07:88:be:ef:cb:d9:25:64:93:
         38:85:08:f7:cb:0b:4c:e0:e6:f2:68:90:da:ce:6d:07:eb:46:
         ce:22:57:cc:13:31:f0:7d:3e:86:83:39:bd:a4:41:10:0c:a2:
         03:18:69:80:c1:87:73:2c:01:77:a1:59:34:45:71:fa:11:8d:
         a4:d2:fc:5d:88:51:14:32:a2:41:e0:c0:95:6f:18:bd:97:f5:
         b9:b5:a9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:32:40 2026 by rpki-client