Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft
File:                     823A9D24802AB10026095D92952BEC936120C9F0.mft (raw, json)
Hash identifier:          bLbZleVIjFUbEXORgN2er2snqXIxQIpuZBHdpAFWsn8=
Subject key identifier:   37:E7:95:F4:FF:92:FD:56:64:7D:C9:CE:88:30:78:FE:29:CB:69:D5
Authority key identifier: 82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0
Certificate issuer:       /CN=823A9D24802AB10026095D92952BEC936120C9F0
Certificate serial:       4B8346843C0362114532FB85E074A78B37EF525E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft
Manifest number:          71
Signing time:             Fri 28 Aug 2026 06:47:57 +0000
Manifest this update:     Fri 28 Aug 2026 06:42:57 +0000
Manifest next update:     Mon 31 Aug 2026 14:06:57 +0000
Files and hashes:         1: 323430323a663134303a666630323a3a2f34382d3438203d3e203538343636.roa (hash: HqXlvSUowM8l9/o35C7EeP1fsjfyNy+C2drlUeUL4+w=)
                          2: 323430323a663134303a666631343a3a2f34382d3438203d3e2034383337.roa (hash: 5YFwBo/iyC0NCYe2fUQRMepGEYQTAVopWqjxpwpGlYs=)
                          3: 823A9D24802AB10026095D92952BEC936120C9F0.crl (hash: cgh6eCFj/vAm+WdHf8QZhLLVUP/vN6Z6Aowrrw4oYuo=)
                          4: 323430323a663134303a666630303a3a2f34382d3438203d3e203233373234.roa (hash: 9yVGqA3r0m6Cw9MsGwxxYMb5n5CK4oWFB+NiW+b0/ZQ=)
                          5: 323430323a663134303a666631303a3a2f34382d3438203d3e2034383038.roa (hash: 9bGFD9HHavl9e02Jjpm7l9kROKPFls7dr+YzU90e5Gs=)
                          6: 323430323a663134303a666630333a3a2f34382d3438203d3e203338323833.roa (hash: JPasNsDug0W5Rn92K6EqWBzIP/Agm6A9fVDgf+UVINo=)
                          7: 323430323a663134303a666631313a3a2f34382d3438203d3e20313338343231.roa (hash: 6I5dCiQ1WXXdAyQE5mVGMmBaVm3iJExp8C+wBxugLC0=)
                          8: 323430323a663134303a666630343a3a2f34382d3438203d3e203538353633.roa (hash: RDrRnpeXL02LfYBtu1Rzk0qsfCVRDCWrAsnr4P79d78=)
                          9: 323430323a663134303a666631323a3a2f34382d3438203d3e20313336393538.roa (hash: bCL03YG87TLLs/GAH5OMoR4G1zVvmobwxjT7k1rWeZo=)
                          10: 323430323a663134303a666630313a3a2f34382d3438203d3e2034383131.roa (hash: MmKHcvIlqA5q5tYLzb7CR3bSXT4jOLcAnOsXDr7mbkk=)
                          11: 323430323a663134303a666631333a3a2f34382d3438203d3e2034383337.roa (hash: C4vjh9oC6KZ/UwdEbBnBmLKe4TfS4Ep6Dsiv1fgoPyA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 14:06:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:83:46:84:3c:03:62:11:45:32:fb:85:e0:74:a7:8b:37:ef:52:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823A9D24802AB10026095D92952BEC936120C9F0
        Validity
            Not Before: Aug 28 06:42:57 2026 GMT
            Not After : Aug 31 14:06:57 2026 GMT
        Subject: CN=37E795F4FF92FD56647DC9CE883078FE29CB69D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:e0:ab:45:ad:98:18:df:47:44:56:cb:a1:
                    5e:91:f0:3f:f3:3e:91:56:37:fc:78:f0:d4:08:e5:
                    ec:e9:d3:f0:85:fb:80:d8:34:f8:a0:fc:51:56:20:
                    95:65:ff:e3:9a:9b:9d:4d:1c:0a:52:02:b8:14:17:
                    3a:38:aa:e9:3d:60:66:69:3f:be:25:27:af:d5:6c:
                    b2:00:95:56:a7:95:7d:b0:88:70:45:9b:18:0b:95:
                    4c:06:b6:a6:6c:4d:62:3b:9d:ad:69:3d:50:c1:e2:
                    96:bf:dc:47:86:4d:a9:e7:72:13:08:40:d9:de:d2:
                    29:46:1d:23:ef:2e:53:6d:c4:f6:8c:b7:12:66:98:
                    a5:a5:a0:59:8d:7b:23:38:f3:2c:67:f4:a9:6a:4e:
                    63:ff:67:de:3e:3d:6d:fb:d7:5e:8a:4f:67:0d:05:
                    da:49:a0:ad:00:6c:89:c5:5f:95:12:9f:84:ae:4b:
                    af:77:7a:dc:ea:3e:42:3d:c1:8c:93:16:b6:a3:3d:
                    a4:17:e1:0d:e0:d9:6f:9e:6e:7d:dd:b2:61:0e:63:
                    6e:d9:80:5a:20:fc:5e:cb:c9:0b:f1:1e:e8:e0:6e:
                    c4:6c:78:31:1a:08:5b:df:f2:94:d6:55:1f:14:c7:
                    77:c5:c0:e1:9f:ca:5e:09:6a:b6:27:67:db:e8:6e:
                    1a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E7:95:F4:FF:92:FD:56:64:7D:C9:CE:88:30:78:FE:29:CB:69:D5
            X509v3 Authority Key Identifier:
                keyid:82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b0:b6:57:78:96:cb:ce:66:f7:8a:d7:f5:0d:23:ed:01:79:
         07:82:f6:6c:d6:3f:cc:10:34:73:5e:04:f0:d1:d3:fc:ef:9e:
         c3:be:f2:03:7f:36:a8:1b:e3:dd:6d:81:76:ad:f3:cd:79:ba:
         b1:08:30:83:d6:83:cf:3e:b5:28:af:7d:03:52:03:20:2a:b4:
         06:92:57:39:fb:72:96:e6:5a:6f:e0:ba:d7:8f:ca:5e:3c:a2:
         fa:fe:d0:70:85:69:a5:ca:6e:8c:5d:08:b1:c4:d7:0c:ed:f0:
         41:d6:38:57:b2:85:37:76:fa:b8:2d:2c:50:4e:3b:a8:2a:54:
         cc:f1:47:7c:f8:7a:66:0e:29:01:33:26:33:81:69:bb:7c:96:
         a8:d4:72:b6:17:f1:41:36:1b:56:fe:96:ba:fc:73:5a:e5:e3:
         0c:01:84:3a:09:49:ed:29:bb:b6:c3:5b:f6:7c:42:21:8c:b5:
         9a:a8:74:43:f9:37:1c:6d:1e:27:d3:b8:a1:32:f1:73:41:97:
         23:ed:5b:3f:9d:3a:86:34:8d:71:0f:f6:a3:e8:59:fc:b4:be:
         71:60:df:ea:3d:3c:d6:14:94:0c:16:30:7b:2c:4d:b2:e5:e8:
         80:04:a2:44:be:85:a0:c3:e2:16:fd:ca:70:73:cb:8d:6e:eb:
         50:dc:04:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:54:42 2026 by rpki-client