Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
File:                     FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft (raw, json)
Hash identifier:          qRJv5SDq1a6sGbdzVxNiU3Nsm2GnVAqW0rBmYrVbTfA=
Subject key identifier:   00:45:FD:C2:E5:D6:AD:E7:F3:8D:A9:76:20:C2:C1:6E:C5:7D:C9:77
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Certificate issuer:       /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial:       20605307DBEA300A283397E247AAAE058798F6A7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
Manifest number:          9D
Signing time:             Mon 12 Oct 2026 10:56:52 +0000
Manifest this update:     Mon 12 Oct 2026 10:51:52 +0000
Manifest next update:     Thu 15 Oct 2026 21:33:52 +0000
Files and hashes:         1: 3131392e33332e36342e302f31382d3138203d3e203137363232.roa (hash: RrxRT5J0eKHrEdN99FDnLqAMDg9M8PUwkDNUJPdWfJw=)
                          2: 3131392e33332e3139342e302f32332d3233203d3e20313334373733.roa (hash: ebeLpTwDF2XNn6DzHRkfPjl8tA0mJS9S+ucPzhiymRM=)
                          3: 3131362e3139392e36362e302f32332d3233203d3e20313334373733.roa (hash: VJt5X7GkwrmL5FHGlPW4Mfs+20np0izWyQKqAH2/jK4=)
                          4: 3131362e3139392e36342e302f31382d3138203d3e203137363232.roa (hash: Ab3mbR+nsYksyMo8NYIdSU8Jg6oJ3rvP9EcATNaXFgA=)
                          5: 3131392e33332e302e302f31392d3139203d3e203137363232.roa (hash: u+gWpRI9eicZlVpRaW4WEV9H57Z22tSECgRLuqP2zDI=)
                          6: 3131392e33332e3139322e302f31392d3139203d3e203137363232.roa (hash: xsfAN/00Qyu6OIIcw8N6b0JL7DfI8F45S6/i1EVsVEw=)
                          7: 3131392e33332e3232342e302f31392d3139203d3e203137363232.roa (hash: uByqxyAe5GJR+F6Mw0XylxMVR4O+KDqkum1c/8LevrI=)
                          8: 3131392e33332e33322e302f31392d3139203d3e203137363232.roa (hash: 9WTpeEF2/KH37g3fLMUN2l5C6F/axXfQhzANNQt8P94=)
                          9: 3132342e34302e3132382e302f31382d3138203d3e203538343636.roa (hash: gEd7xpgMtNDRVKEso3Cg/VgGhJsmy0tACMyeZ6RUHBM=)
                          10: 3131392e33322e36342e302f31382d3138203d3e203137363232.roa (hash: jKfxVhNNT6q0cpEYF93zmLiMbOSKh0oXiNm82GT3K3U=)
                          11: 3131392e33332e3132382e302f31382d3138203d3e203137363232.roa (hash: adXscUguLI+RUh2Uk6+/iSfavYg0ENBnOnXH/TRiflE=)
                          12: 3131362e3139392e3131302e302f32332d3233203d3e20313334373733.roa (hash: yTvFlHcYheTMFXGOcsBkespml59gj2ls3jBdrulY9x4=)
                          13: 3131392e33342e3132382e302f31372d3137203d3e20313334373733.roa (hash: 2g5Xdw9KQvYArzBtOyilCKmilMxYKl2a14GkgGu9LbI=)
                          14: 3131392e33322e3132382e302f31372d3137203d3e203137363232.roa (hash: AdBUZj+Vfol3oxbptI2SvuNijPyuuwsIW2Ru1GDdd/Y=)
                          15: FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl (hash: pxL4kUYf6uva8Glj+8ITCMgyDuzxTdH6rfKgkQDEN4I=)
                          16: 3131392e33342e302e302f31372d3137203d3e203137363232.roa (hash: 6a0kCpqvmTcCHAk70cOiVXkH5lnydlHCESpUC0C3wXA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 01:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:60:53:07:db:ea:30:0a:28:33:97:e2:47:aa:ae:05:87:98:f6:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
        Validity
            Not Before: Oct 12 10:51:52 2026 GMT
            Not After : Oct 15 21:33:52 2026 GMT
        Subject: CN=0045FDC2E5D6ADE7F38DA97620C2C16EC57DC977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:33:59:2f:ea:51:35:87:bc:a4:3e:fd:91:ea:
                    ad:88:82:65:f4:f8:b9:4a:8d:19:44:b8:9a:0c:fb:
                    cf:a3:b8:55:3d:aa:bd:2d:61:0a:fa:e6:25:66:d3:
                    af:7d:5c:ec:0b:b2:ae:c2:2e:f7:6c:5f:39:3c:00:
                    1b:01:7d:04:7a:bb:1c:9c:a1:45:52:6f:b0:42:c2:
                    40:5c:c0:d5:3b:dd:a5:48:29:f5:40:26:40:95:9d:
                    07:d4:c7:4a:21:ed:2e:ae:b2:a2:1d:cb:50:6c:e8:
                    a1:0e:ee:ed:17:49:db:a4:18:7d:1f:fa:92:37:1d:
                    a5:0b:49:c0:a5:01:9e:86:04:bc:82:a8:72:5a:f4:
                    92:67:c8:fa:ca:70:ea:62:76:e5:df:db:0c:b0:94:
                    fb:bb:46:b9:35:cd:21:d4:f1:7b:c5:8c:45:0a:2b:
                    ab:0a:ea:82:40:71:b2:6a:03:da:a2:32:aa:fb:ff:
                    12:ce:db:c0:c4:e2:14:d3:a8:b9:3c:ca:46:5b:15:
                    4b:67:23:51:a9:bf:df:c5:ac:a0:91:51:96:b6:05:
                    70:9a:a9:34:e8:9f:19:5e:85:d9:83:3b:1f:9a:d0:
                    16:c5:d9:e2:74:11:12:e8:29:51:9a:80:5d:eb:db:
                    fd:9a:8f:ee:53:2e:ef:fc:0b:2e:16:29:76:3c:9d:
                    3c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:45:FD:C2:E5:D6:AD:E7:F3:8D:A9:76:20:C2:C1:6E:C5:7D:C9:77
            X509v3 Authority Key Identifier:
                keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ee:41:c0:23:9d:2d:e9:f1:92:0d:cc:2d:b9:ab:cc:74:3b:
         d0:7c:27:26:e7:e8:8a:5b:8a:99:9b:50:6a:4e:f9:5e:ac:0f:
         1f:bb:26:f2:b7:9b:19:26:91:c0:89:c7:81:45:db:40:a2:a4:
         93:bc:39:f0:b7:74:9f:c8:03:84:69:19:ec:6a:f8:9b:73:83:
         08:f4:9e:b7:85:91:fe:e7:66:60:ed:09:84:68:96:7b:fe:17:
         6e:30:df:e3:ab:44:03:23:86:6b:d6:ec:54:b7:70:df:08:24:
         5f:fe:29:09:4f:29:70:5e:12:fe:64:59:97:58:fc:10:22:a9:
         a3:23:c0:0b:d8:da:7b:58:3d:e5:83:5f:9b:a7:87:e2:fd:0a:
         c3:4a:f1:e0:20:be:ba:ec:0a:2c:7a:b5:fc:2c:a7:60:31:6e:
         58:a0:a8:c2:c1:a3:af:ca:55:24:48:2a:68:ec:c8:1b:a0:9d:
         13:10:5b:94:f7:04:33:e5:4f:df:8d:1b:ba:6a:21:34:be:d0:
         ef:19:1c:d9:8f:42:20:9a:57:f4:82:12:06:c5:61:b3:99:4a:
         f5:e6:ba:da:1b:bc:99:3a:f2:61:84:6d:fc:b4:89:cf:18:29:
         17:94:e1:dd:9c:89:06:64:5c:dc:bb:7c:e5:a4:0d:58:af:3f:
         85:58:00:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:50:27 2026 by rpki-client