Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft
File:                     FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft (raw, json)
Hash identifier:          S/DbrDD8EwWBTm6+nR7ca/rCHGeCD5psqAPTzRHqJUI=
Subject key identifier:   5C:A7:21:79:2B:11:F3:71:A1:71:48:D4:D3:59:87:79:53:48:BA:66
Authority key identifier: FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E
Certificate issuer:       /CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E
Certificate serial:       700EA61ABCD2741714E524AF30C5FE2356AE4257
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft
Manifest number:          7C
Signing time:             Thu 10 Sep 2026 15:36:49 +0000
Manifest this update:     Thu 10 Sep 2026 15:31:49 +0000
Manifest next update:     Mon 14 Sep 2026 03:16:49 +0000
Files and hashes:         1: 3230322e39332e3235322e302f32322d3332203d3e2034383038.roa (hash: kK/ACVhxw+EM5uNXfp+kpIl6rn/PuCSg8zqiCgwErdA=)
                          2: 3230322e39312e3138342e302f32332d3332203d3e2034383038.roa (hash: x5BW1+RlHPJ1eIaJoW8xLLmvZjNlyPZpGHm7mjrN2v4=)
                          3: 3230322e39312e3137362e302f32312d3332203d3e2034383038.roa (hash: PIwjB7Cm/PHG2yK99D3XAoIfIN92y706TJvBiQ2oqzs=)
                          4: FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl (hash: XpPIh7h14QvK3xPc7WGNCcyRtKwJH3yce9b7qhPgGAc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Sep 2026 00:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0e:a6:1a:bc:d2:74:17:14:e5:24:af:30:c5:fe:23:56:ae:42:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E
        Validity
            Not Before: Sep 10 15:31:49 2026 GMT
            Not After : Sep 14 03:16:49 2026 GMT
        Subject: CN=5CA721792B11F371A17148D4D35987795348BA66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:07:eb:f9:c8:01:f5:e1:2a:5f:59:3e:31:96:
                    4f:f8:48:5b:74:3a:2d:79:48:a1:fd:7f:d5:bd:84:
                    62:44:4b:03:5e:10:b3:38:5a:e7:30:f0:ce:69:c0:
                    ac:72:28:42:3f:a6:b2:22:6f:87:db:3a:9d:d2:59:
                    3e:5f:a1:a1:62:99:2a:0c:f4:cc:f5:d4:ee:3c:15:
                    8a:58:fa:ef:37:d5:9f:d0:2c:fa:59:8b:bd:3c:3a:
                    b2:bc:67:63:41:25:ea:07:dc:8a:ec:e7:c4:d0:ab:
                    a8:a2:b7:e3:2a:36:27:0b:30:19:96:e3:4a:f8:18:
                    36:52:00:dd:85:5e:63:46:c5:91:d2:49:6b:1b:bf:
                    bf:e4:51:ed:ea:5d:7e:da:b8:eb:eb:7f:ed:c5:bf:
                    e7:68:de:0f:d1:37:39:5f:cd:7f:71:96:54:f0:d2:
                    b8:3f:8f:ba:7e:67:9c:e2:dc:5b:3e:09:13:66:fa:
                    1f:33:4b:11:58:72:af:28:4a:8d:f5:84:b1:52:10:
                    0b:ec:05:7a:3a:c0:44:5a:c7:68:ba:d5:e0:a7:df:
                    e6:11:ca:e6:d9:55:7d:10:c0:c9:71:20:e7:c0:e8:
                    a3:46:3c:6e:53:a1:e0:b1:24:b1:64:1f:24:b7:9b:
                    0d:53:e0:6c:7e:c2:dd:e6:2c:c5:e4:0b:be:91:07:
                    f9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A7:21:79:2B:11:F3:71:A1:71:48:D4:D3:59:87:79:53:48:BA:66
            X509v3 Authority Key Identifier:
                keyid:FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:fd:ec:2d:37:b8:27:35:5a:b9:e9:c2:65:83:bd:a7:9c:3b:
         78:87:ba:aa:5a:d6:44:41:df:f3:92:20:15:c7:b4:3b:e1:91:
         3c:d7:34:72:06:22:d7:4a:d7:83:5d:08:91:ac:e3:8b:61:84:
         d4:1d:b5:d6:76:ce:af:c3:65:e6:0f:97:e7:4e:2d:d0:d6:d5:
         9d:6f:1f:17:a5:e7:a7:d1:e8:47:47:cf:f6:fd:01:6b:e8:49:
         15:d2:c8:27:77:d1:35:42:2c:23:3b:36:bf:47:4d:ad:21:94:
         80:2c:61:cd:5c:e6:8a:44:65:96:6d:ff:e8:ee:0f:e2:82:74:
         ac:55:b4:b0:a3:1e:ab:fd:bd:91:5f:2a:87:30:6f:2b:f6:ae:
         c7:87:3b:76:cc:e5:a1:35:7e:9e:5a:ce:e1:f8:43:31:f5:61:
         26:fe:be:68:03:ce:6d:8b:00:54:98:b7:d8:b6:96:49:20:bd:
         0f:40:7a:be:cc:45:85:03:97:b1:27:a8:49:a2:d6:24:13:58:
         14:61:fa:7b:6a:ff:e9:fc:df:46:a6:d1:a7:c0:71:4e:be:c0:
         d4:73:25:97:1c:21:6c:0c:3e:99:b3:60:57:6f:54:0e:83:9e:
         f1:92:d5:70:96:d1:f7:3a:6e:38:d0:9b:90:9d:ec:68:63:0f:
         df:dc:1e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:55:56 2026 by rpki-client