Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft
File:                     12BD80FB666E9FF3B78C5257CB80604CE466A620.mft (raw, json)
Hash identifier:          9dtvaHTZR/Q/4spIwbf0zjh4ARSpdHeZa2VXPPWQcJc=
Subject key identifier:   8F:18:11:6E:86:BF:86:DC:65:3F:2D:01:C1:2F:C8:D9:25:CB:2D:C6
Authority key identifier: 12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20
Certificate issuer:       /CN=12BD80FB666E9FF3B78C5257CB80604CE466A620
Certificate serial:       50F882EEEAFC88483A398D10FC534208188B905E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft
Manifest number:          51
Signing time:             Fri 28 Aug 2026 06:48:17 +0000
Manifest this update:     Fri 28 Aug 2026 06:43:17 +0000
Manifest next update:     Mon 31 Aug 2026 15:47:17 +0000
Files and hashes:         1: 323430323a366538303a3a2f33322d3332203d3e20313339313030.roa (hash: vwm0wFYdrshqVC19O/olyhuC+X7rA1oBdsrwCje/4V0=)
                          2: 12BD80FB666E9FF3B78C5257CB80604CE466A620.crl (hash: z/FhVF/R2nkoX4rOD1L0XERORHf8Jj3m4iNMZxPBSWg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 15:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f8:82:ee:ea:fc:88:48:3a:39:8d:10:fc:53:42:08:18:8b:90:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12BD80FB666E9FF3B78C5257CB80604CE466A620
        Validity
            Not Before: Aug 28 06:43:17 2026 GMT
            Not After : Aug 31 15:47:17 2026 GMT
        Subject: CN=8F18116E86BF86DC653F2D01C12FC8D925CB2DC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2c:24:a0:e3:7f:9f:01:91:22:af:6d:e5:aa:
                    ac:76:3f:75:f8:8c:b7:2b:15:b4:29:20:e5:c7:4d:
                    61:13:b1:ed:96:4c:99:04:39:ae:83:c3:b6:3e:3b:
                    53:7c:e2:78:fb:fa:9d:cf:6b:b8:d2:f7:e8:13:7d:
                    cb:e6:de:6c:59:db:35:ab:c7:48:7d:b2:b5:4d:c4:
                    7d:93:85:f5:99:9f:68:c3:f5:e3:ca:7f:12:7f:ae:
                    e8:1b:88:21:04:8f:b5:09:b5:07:a2:52:a6:b2:51:
                    8d:0b:84:b6:83:95:e4:4d:ac:8e:d0:48:bf:76:67:
                    f7:8b:30:26:44:f0:ca:f3:3e:f4:e3:db:7b:b0:62:
                    1d:a2:a2:2f:ae:f5:c7:07:47:de:c8:b7:a1:b3:37:
                    8b:99:87:61:e4:d6:93:03:f7:85:35:0e:20:96:8b:
                    23:b6:c5:e5:65:9a:80:03:dc:dc:7f:d9:92:2c:5e:
                    0b:8d:d4:d5:1a:98:d5:34:d2:bc:f7:ce:a2:d9:7e:
                    e2:81:42:68:b9:4a:f2:43:1b:df:9f:da:64:aa:75:
                    f1:f5:4a:b8:9e:9c:27:e3:1c:a6:77:2e:1d:26:97:
                    80:ee:7c:6c:93:7d:41:74:c6:ab:cb:44:ba:03:cb:
                    a7:a0:56:b9:d4:84:d1:4d:9f:9f:9f:32:95:36:df:
                    89:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:18:11:6E:86:BF:86:DC:65:3F:2D:01:C1:2F:C8:D9:25:CB:2D:C6
            X509v3 Authority Key Identifier:
                keyid:12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e6:bb:22:36:c4:e1:ac:a9:cf:d9:0a:1e:79:1c:33:40:61:
         6d:d2:a5:c6:75:2f:2c:a9:a2:69:95:0d:b4:0b:13:35:b6:a6:
         83:3d:2e:79:be:af:6b:ad:d9:10:3e:77:72:6e:f3:fe:fb:7c:
         42:40:97:4d:41:80:7e:e8:82:fa:a1:2d:13:67:69:0a:7d:ac:
         81:2d:84:8b:e6:46:a8:32:7c:dc:b4:fa:77:49:2d:62:e4:cb:
         0d:b9:50:2a:58:b1:10:d1:39:b5:77:7e:07:b5:cf:60:a9:ae:
         5b:9c:81:c2:42:0a:6a:88:93:a1:76:ab:36:cc:a8:ba:2d:d6:
         d6:fe:6b:fc:4b:de:55:80:b6:e1:17:97:7b:3a:c6:53:d0:d5:
         8e:db:38:c0:e1:78:93:c9:0e:62:45:d7:5f:a0:7e:ca:68:0a:
         bf:73:03:e9:a7:c5:aa:4c:84:72:79:9c:31:33:14:48:73:01:
         ff:e3:d4:aa:b9:89:e1:4b:92:a7:b3:8e:6b:55:96:19:58:94:
         55:a8:ff:16:7b:45:c6:bf:fe:87:b8:59:1c:ea:00:e1:bf:f2:
         4f:43:d1:ae:bd:c3:d3:80:ce:3f:42:c8:58:be:c2:c5:08:c7:
         15:a1:f6:ee:c8:1b:11:9b:69:fe:71:a2:cf:cf:98:3f:57:30:
         24:1a:a1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:07:33 2026 by rpki-client