Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft
File:                     A0C998BFCCAE8946353EA73912CB7156A19A818C.mft (raw, json)
Hash identifier:          LKqLRwFafAjSJYvy+ZGRhon+MXN6cAjCYWcrmOh909U=
Subject key identifier:   DA:C2:63:46:E3:17:E1:7A:82:A4:20:4F:98:82:1C:55:05:16:D3:A1
Authority key identifier: A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C
Certificate issuer:       /CN=A0C998BFCCAE8946353EA73912CB7156A19A818C
Certificate serial:       3C2D6575EDB80C26CC7C15D045E5B787EC7F13E5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft
Manifest number:          6A
Signing time:             Fri 21 Aug 2026 14:14:52 +0000
Manifest this update:     Fri 21 Aug 2026 14:09:52 +0000
Manifest next update:     Sat 22 Aug 2026 16:44:52 +0000
Files and hashes:         1: 3130332e34332e3130302e302f32322d3232203d3e2030.roa (hash: Zb/Yg48+x4Z5AdQJry8Ao1d91TJrxggZPUisKeQCA1w=)
                          2: 34332e3232342e37322e302f32322d3232203d3e2030.roa (hash: Z7n2GETvz6qdxJjD+2JtNEFlMdPoKyod/n6PeMXops8=)
                          3: A0C998BFCCAE8946353EA73912CB7156A19A818C.crl (hash: 1vAhyIy/640dX6OWnPoz9DSzo7sF+4zJhJtRouIhunY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Aug 2026 15:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2d:65:75:ed:b8:0c:26:cc:7c:15:d0:45:e5:b7:87:ec:7f:13:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0C998BFCCAE8946353EA73912CB7156A19A818C
        Validity
            Not Before: Aug 21 14:09:52 2026 GMT
            Not After : Aug 22 16:44:52 2026 GMT
        Subject: CN=DAC26346E317E17A82A4204F98821C550516D3A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:33:ca:68:5d:02:8f:b3:67:7f:84:51:7a:a3:
                    1d:e3:e9:d8:6f:57:e1:4c:41:c9:46:b6:31:35:f9:
                    74:e2:11:7a:6a:02:f4:9e:ed:42:da:3c:9d:d9:bd:
                    20:19:d3:a3:ee:00:d7:ad:54:8d:2d:53:b7:e2:14:
                    d9:70:c1:ba:0f:49:67:63:85:fe:90:25:b7:9c:cd:
                    57:bb:6e:b3:25:b7:04:04:c9:6b:53:ff:5b:23:81:
                    c1:d5:6c:41:25:d9:be:30:60:c6:6d:6a:e8:b6:99:
                    bc:0a:00:04:b0:b5:c2:1b:b8:fa:3d:1a:09:5c:df:
                    1e:fd:d0:cf:bd:2d:38:86:32:c5:30:ac:d3:b9:ab:
                    60:45:aa:e7:98:70:13:92:a0:47:fe:3c:4e:fa:62:
                    67:f0:11:96:08:f7:cd:d9:5c:6d:bc:49:5f:72:28:
                    a5:ae:8c:23:c8:39:1c:a0:26:59:4d:06:52:77:7f:
                    48:bf:ba:7c:15:54:e3:ea:4c:c0:d8:46:c8:d8:cd:
                    e6:fd:06:11:35:1b:9d:7b:b2:4c:1f:97:e4:86:d4:
                    ab:d9:d6:a3:aa:8c:5a:65:1a:3d:61:04:fe:12:29:
                    22:8e:bc:cb:ed:69:83:89:da:3c:88:b7:93:b2:eb:
                    bc:c1:3a:43:5b:5c:8d:93:29:cb:b6:f9:f5:06:30:
                    1d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C2:63:46:E3:17:E1:7A:82:A4:20:4F:98:82:1C:55:05:16:D3:A1
            X509v3 Authority Key Identifier:
                keyid:A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:42:2e:2e:44:6e:09:79:dd:41:89:ab:f5:aa:4e:6a:0b:fa:
         fc:8a:df:fe:7b:67:17:89:f3:02:2c:7d:b7:73:eb:2d:75:db:
         ff:96:11:93:e8:85:a1:71:b4:bf:82:f4:11:c4:53:6b:18:26:
         9e:b5:36:01:d0:73:d3:32:5e:59:94:85:d4:86:f4:71:60:b5:
         7c:d5:e0:46:86:d7:d8:b0:72:55:06:18:33:53:da:ad:75:8a:
         bc:6a:3a:fe:d5:5c:78:c0:e1:21:19:a9:ad:2a:c4:5b:57:6c:
         c2:bd:cd:f0:b8:92:b1:c3:16:16:43:82:8b:8a:99:b1:4c:9e:
         d5:55:d1:1a:8b:38:64:7a:71:06:d7:49:54:76:f9:2d:57:db:
         81:b7:e4:27:39:12:7f:f3:b8:d2:77:58:48:ea:09:08:f4:2a:
         b2:1d:13:5d:b7:31:59:d6:90:fd:95:23:cc:9b:fa:73:b7:a1:
         a8:e1:03:2b:68:ce:d7:16:9c:19:8f:11:95:fb:20:83:6d:18:
         4d:31:24:be:d8:01:5d:dd:2c:82:cc:d8:d3:a7:f9:f6:bb:5d:
         c5:41:fc:dc:db:6f:41:58:15:24:cf:4d:40:65:81:bf:e3:40:
         ae:ea:88:74:a3:4a:ea:b8:75:2f:07:a0:1f:96:f8:e9:c1:fc:
         ca:80:93:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:35:29 2026 by rpki-client