Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
File:                     AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft (raw, json)
Hash identifier:          SF/TJmg2xFEwdNBAKZutPNQDuFNaf+LCsDOXuNASxv0=
Subject key identifier:   91:43:82:EC:D7:2C:83:74:26:14:A1:CB:FA:56:2C:34:B4:9E:16:98
Authority key identifier: AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5
Certificate issuer:       /CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5
Certificate serial:       32DB028FF827E6ADC9F934B180514C127B4B3214
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
Manifest number:          91
Signing time:             Mon 26 Oct 2026 11:58:41 +0000
Manifest this update:     Mon 26 Oct 2026 11:53:41 +0000
Manifest next update:     Thu 29 Oct 2026 18:04:41 +0000
Files and hashes:         1: 3130332e3130372e3232302e302f32322d3232203d3e203435313135.roa (hash: UjzzAVTAPjmbxCOqtX5OnTgoTMEPz4NjCFbWABjcjYU=)
                          2: 323430323a356634303a3a2f33322d3430203d3e203535393632.roa (hash: J8V4fC0EcnnEJAvudK1CUUz+Anxis8iYxXNE/PbJCkw=)
                          3: 323430323a356634303a3a2f33322d3430203d3e2034383038.roa (hash: hEdpxSyQhKq8Tt6+4mX4pbyGXdjKHqDZ4gkvGobLPvk=)
                          4: 323430323a356634303a3a2f33322d3430203d3e203233373234.roa (hash: BYhl8Kes59vhOWYPWklbb97wfjM9JLHk+KCCzyARPMo=)
                          5: 3130332e3130372e3232302e302f32322d3232203d3e2034383038.roa (hash: lUxvbUf3vyf4fNMsQgH2jFFsF7urmoVrC7TTHQeV5x8=)
                          6: 3130332e3130372e3232302e302f32322d3232203d3e203535393632.roa (hash: JjhOnvBAbyhHj25SJk42Z/mWkYT2CJtKWOeuYdrDSEM=)
                          7: AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl (hash: 495rPCrvh0a6S6qjKHhOrLlTH8kzjTSEhhABcjVBktc=)
                          8: 323430323a356634303a3a2f33322d3430203d3e20313331353433.roa (hash: Fr7SJF8nS/QnvygXHIyiT1ifZlb4UClCGvRUFGJ/Wbg=)
                          9: 323430323a356634303a3a2f33322d3430203d3e203435313135.roa (hash: ZN27c9UzjJ3wdK64dTmHf5rjrWHM5T8TdThVNyywHCg=)
                          10: 3130332e3130372e3232302e302f32322d3232203d3e20313331353433.roa (hash: vZBk5SOJuUm559ZMaJN8pTKtV568qUIjt4RbuicJAVo=)
                          11: 3130332e3130372e3232302e302f32322d3232203d3e203233373234.roa (hash: M89JPpic5CUnz+XG6ZBO4FH5rzyVxYok5bjRrf4SiqU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 03:49:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:db:02:8f:f8:27:e6:ad:c9:f9:34:b1:80:51:4c:12:7b:4b:32:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5
        Validity
            Not Before: Oct 26 11:53:41 2026 GMT
            Not After : Oct 29 18:04:41 2026 GMT
        Subject: CN=914382ECD72C83742614A1CBFA562C34B49E1698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2d:79:f3:f2:ad:58:f7:89:fd:3d:e7:99:b2:
                    61:76:6f:32:e6:8f:81:3f:5b:dd:9f:d6:a5:68:df:
                    e4:8b:48:a4:1d:54:56:59:00:10:39:02:9a:cf:10:
                    74:dd:ff:a8:ab:ad:14:a6:da:1b:a9:ca:24:e8:66:
                    03:ff:e6:62:7d:e6:30:41:b0:fc:92:30:34:2f:c7:
                    9e:99:53:ae:4e:fd:06:be:91:c9:ff:8c:1f:14:82:
                    a1:87:fc:7e:b2:85:b2:18:0a:55:a3:06:bd:79:cc:
                    00:8b:74:c9:96:4c:40:f0:c3:b6:89:02:2b:5c:bf:
                    46:ef:cc:2c:84:b0:68:d9:74:00:7f:7e:eb:88:6c:
                    02:8c:19:35:1a:15:08:9f:b8:db:f5:2b:61:d5:a3:
                    94:cc:44:b2:13:d1:ef:12:0d:51:65:a6:ae:87:bf:
                    ac:a2:bc:3a:51:52:87:26:e8:f6:65:15:6b:26:d2:
                    bc:80:77:39:e9:40:c7:4f:41:ff:f3:0e:7b:61:93:
                    13:72:4f:3f:ef:88:62:bd:9d:06:33:7f:b1:a8:aa:
                    a6:74:f1:24:24:f3:24:4c:f0:d4:41:af:b4:bd:97:
                    37:e9:a9:cf:47:d4:d0:d2:c9:11:09:3e:04:29:b8:
                    2d:cc:9d:ca:8f:ce:78:5f:0e:f2:e0:ff:3f:a6:aa:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:43:82:EC:D7:2C:83:74:26:14:A1:CB:FA:56:2C:34:B4:9E:16:98
            X509v3 Authority Key Identifier:
                keyid:AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b5:31:4d:e3:e8:ef:ce:a3:cd:b1:99:1e:75:ea:b1:65:60:
         54:28:ef:78:f7:d2:b2:8f:5f:c6:4b:a3:11:a4:73:d3:0d:0d:
         4e:cc:66:4e:4a:b8:29:73:23:03:8d:1b:1d:7a:1b:b5:f1:97:
         0c:97:bb:08:8d:0d:f7:59:59:56:37:6e:4a:8a:b0:6c:6b:c0:
         aa:31:13:64:f7:82:64:2f:4e:0c:65:6c:d2:4c:4a:2a:ff:e5:
         2e:b5:26:46:35:02:9f:5c:09:5b:11:d6:d5:a3:3d:85:80:52:
         d8:30:f6:c1:dc:42:d2:bf:e8:44:f6:5a:e2:2c:97:c5:72:46:
         81:57:b6:a3:0d:fe:f2:47:3a:67:11:2f:49:bd:e1:4b:e3:4d:
         6b:a2:47:c4:e9:1b:85:d9:e1:5e:7e:a8:11:ba:fa:1b:b0:fb:
         12:fe:87:62:b5:b3:e8:f7:55:4e:a6:e4:86:a4:a3:05:ac:fc:
         9c:97:ca:c2:b7:80:ee:1f:cc:d4:ab:17:d7:03:ff:46:74:3b:
         ea:18:a6:a3:d5:b2:fe:a8:95:4b:7f:02:d1:6f:b2:9d:98:60:
         e3:8f:29:68:ea:0d:66:be:c2:87:b6:fb:86:e3:d4:c2:dd:ae:
         d0:e7:ef:78:9c:a5:a2:e9:0e:e3:29:cb:d1:b7:93:60:33:6f:
         15:fa:d2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:11:08 2026 by rpki-client