Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
File:                     F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft (raw, json)
Hash identifier:          z9x4dgwck3wAY0zb6OdJ0e6wHD4Ni2WwP8x0VrEve9Y=
Subject key identifier:   4F:F8:E2:C1:B4:85:5A:27:FA:D7:C6:89:24:D4:ED:21:5B:ED:60:54
Authority key identifier: F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04
Certificate issuer:       /CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
Certificate serial:       1DD6CD754C9CB0F65C12C4C922D514A78252DC79
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
Manifest number:          70
Signing time:             Wed 14 Oct 2026 13:54:13 +0000
Manifest this update:     Wed 14 Oct 2026 13:49:13 +0000
Manifest next update:     Sat 17 Oct 2026 22:30:13 +0000
Files and hashes:         1: 3130332e3130322e3230302e302f32322d3232203d3e2034383038.roa (hash: aICy3mIoaEDJQmrqEG0IE867054dMdqJ/o4bvRyAVBQ=)
                          2: 3130332e3130322e3230302e302f32322d3232203d3e203535393632.roa (hash: c8jjxIi8CH63wJ12K3sB0prVBnsSnwpi2eFfNLqLjFw=)
                          3: 323430313a653863303a3a2f33322d3332203d3e20313331353433.roa (hash: fhO8xv5YeuFXsTmWcf3g6eCB7geoHhnareGKLib1qKQ=)
                          4: 3130332e3130322e3230302e302f32322d3232203d3e203233373234.roa (hash: OFN0/HSCxNGj5m2gdLpfpQA9epBLP+waALaE3vyBbiU=)
                          5: 323430313a653863303a3a2f33322d3332203d3e203233373234.roa (hash: aD8ky+OQsNAahsNYEb7MXzkuCDy//KNW3bWvYGoKOEU=)
                          6: 3130332e3130322e3230302e302f32322d3232203d3e203435313135.roa (hash: CTbYCo7hAu8I+seSzLsaFLROYv0JZYWU9BozgK3neTo=)
                          7: F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl (hash: ioMiuMPpui/mboSdsKcBCyVGgQ9ndh2joxWCvNM5SfI=)
                          8: 323430313a653863303a3a2f33322d3332203d3e203435313135.roa (hash: 3BrreT8i36qAt2MIWXnC13PI5MS+em9kgVN+qjQVe1E=)
                          9: 3130332e3130322e3230302e302f32322d3232203d3e20313331353433.roa (hash: XrF5JqpAMSOeMSr77bRoc0U3Hjuqu4oziCuI1lFXQck=)
                          10: 323430313a653863303a3a2f33322d3332203d3e203535393632.roa (hash: Uzqp2qS3WNfWamooG/PJu5GW6P5+HJ+DmabsgSMIPa0=)
                          11: 323430313a653863303a3a2f33322d3332203d3e2034383038.roa (hash: XPvKj68ZZK7cAp5zw+E8F2hCg10wzktRpwnHqOBbXRc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 12:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d6:cd:75:4c:9c:b0:f6:5c:12:c4:c9:22:d5:14:a7:82:52:dc:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
        Validity
            Not Before: Oct 14 13:49:13 2026 GMT
            Not After : Oct 17 22:30:13 2026 GMT
        Subject: CN=4FF8E2C1B4855A27FAD7C68924D4ED215BED6054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:90:0a:cd:c6:9c:16:0f:39:8c:be:e6:f8:88:
                    a3:c1:8f:c6:6c:01:df:9f:e9:4e:fc:91:33:51:6b:
                    1f:2d:b5:ea:c3:99:c2:e1:09:da:3d:e4:38:e9:83:
                    30:2f:d3:29:a0:d5:c6:c2:02:44:cb:e0:3b:60:34:
                    8b:e0:0b:d2:95:be:7c:ce:c3:53:8d:3f:b8:32:35:
                    bd:14:52:9c:1b:bd:7a:3d:66:5a:bc:cc:7c:a3:62:
                    01:24:70:8f:d2:9e:00:7d:c9:61:ff:44:f8:b3:36:
                    a2:c7:6e:4f:6e:52:d0:7d:70:5d:4f:f1:ec:8d:a9:
                    da:a0:55:ac:af:fc:88:7a:44:bb:ad:c5:c5:37:84:
                    cb:bc:db:b2:67:42:d3:03:61:6c:40:4e:b0:7a:91:
                    98:dc:5c:11:f8:c9:b5:bf:5d:58:6b:4b:c6:16:a3:
                    97:45:1e:6a:f4:ab:1c:61:b9:4a:1e:26:92:39:ae:
                    fb:63:61:63:76:7f:3a:73:24:4c:ca:a2:32:14:44:
                    b3:84:e9:89:85:b2:b7:31:4c:d8:7f:75:56:c5:7e:
                    a6:0f:b8:a5:02:b1:bb:c9:85:7b:4d:42:d8:36:55:
                    2c:e3:88:66:55:12:c5:bf:bf:be:70:a3:e9:1c:c3:
                    e4:da:3c:4a:78:50:8c:02:1c:f6:2d:5e:20:cd:6d:
                    b9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F8:E2:C1:B4:85:5A:27:FA:D7:C6:89:24:D4:ED:21:5B:ED:60:54
            X509v3 Authority Key Identifier:
                keyid:F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:b7:3f:c3:6a:37:4f:4a:68:db:9f:95:30:93:c4:7e:a2:5c:
         30:80:87:2b:8a:92:92:ef:73:ee:e7:04:55:a6:90:15:1b:60:
         29:d6:95:02:fd:68:10:f0:0c:a0:c7:ae:a3:e8:98:23:79:25:
         99:df:57:34:a6:d1:ee:ef:bb:88:2a:b8:ef:bd:8e:52:b5:7b:
         d3:ce:ee:6e:3f:73:e2:82:30:01:d7:f9:a9:95:1f:5e:cf:0c:
         67:67:a6:8a:8d:b0:3f:4c:18:d5:4f:67:0d:b2:6c:1c:d1:69:
         01:6a:16:ce:c3:0e:7e:b1:7d:55:c5:bd:8a:09:79:41:73:3e:
         49:c7:51:61:9e:90:38:1e:22:b3:e9:cb:05:9c:21:2d:c8:d5:
         da:23:c9:45:fe:5e:9d:ab:f9:0d:a3:55:73:30:75:db:c2:bb:
         92:ba:01:1f:6f:b6:a3:5d:88:3f:db:24:fc:63:e7:b8:d7:81:
         ff:06:72:ed:74:b8:49:90:9f:6a:b7:36:8f:ae:92:ee:09:67:
         c0:b0:42:fa:d1:84:2e:60:0d:dd:a3:0f:b5:68:dd:39:77:93:
         ad:8e:9d:93:f6:92:0d:ea:99:9f:c4:e9:69:4d:ce:6f:18:e3:
         b6:11:e3:83:43:42:41:3a:90:89:92:ab:2c:d0:95:60:8a:83:
         07:be:31:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:46:47 2026 by rpki-client