Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
File:                     F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft (raw, json)
Hash identifier:          IPu4KlK8UcDEYX/ZobEjZJRB8B10/R/cQXIReMyk7nM=
Subject key identifier:   D9:AD:3B:75:B5:42:D2:BB:C4:08:A2:F3:AA:CD:26:F5:46:51:0A:05
Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52
Certificate issuer:       /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
Certificate serial:       11A19BC6E2DE741DA48C7D5DDAA291DBEEB5823F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
Manifest number:          C1
Signing time:             Sat 13 Jun 2026 01:51:01 +0000
Manifest this update:     Sat 13 Jun 2026 01:46:01 +0000
Manifest next update:     Sun 14 Jun 2026 04:17:01 +0000
Files and hashes:         1: 3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa (hash: CKV8MpGE2SB7rvrp/kk1nwjUyU7uYGhV5IglQ/G9LRo=)
                          2: 3136352e3130312e37312e302f32342d3332203d3e203136353039.roa (hash: 0mFHqtJ99+cpwKS5wgk/Li+bTLSi+1gBBAboHWvN4rw=)
                          3: 3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa (hash: nhsI3SM0BNooBXteXRdYRb2HoI3GqN8f+FtM6cmmIjM=)
                          4: F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl (hash: irmZQspzyVgtqGt5hfeoOc01nb19bnQT5Nlqxn3Te1E=)
                          5: 3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa (hash: sv3cZRqsmsIMhTUh+jVQts191O/MilJM7fEF6fodozg=)
                          6: 3136352e3130312e37312e302f32342d3332203d3e203134363138.roa (hash: JioU5n5ZADFZKbSBYkGEmdb6Cgmb19+pW7ZaL4VWgxE=)
                          7: 3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa (hash: OFW+AyUk6AajEk+Y+/6xYlyX7Q9q/Cg4YSR5op5MuDw=)
                          8: 3136352e3130312e37302e302f32342d3332203d3e2034383337.roa (hash: kDv6iwPAf1ZieValA95kBNEQSe+g9yEnqUGtirExvJk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 04:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a1:9b:c6:e2:de:74:1d:a4:8c:7d:5d:da:a2:91:db:ee:b5:82:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
        Validity
            Not Before: Jun 13 01:46:01 2026 GMT
            Not After : Jun 14 04:17:01 2026 GMT
        Subject: CN=D9AD3B75B542D2BBC408A2F3AACD26F546510A05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ec:7d:5d:73:a2:cf:38:48:1a:93:c7:a4:83:
                    c2:a2:81:55:21:57:18:d8:ec:21:b6:39:b1:ca:7c:
                    04:8f:e0:6e:4e:83:39:d5:f3:17:30:cd:41:cf:0c:
                    e2:43:87:8d:1c:d1:16:44:78:fd:d5:26:6f:42:f4:
                    e3:75:7e:a8:62:60:40:82:07:9c:0b:a2:6d:e2:41:
                    33:8e:93:ec:f8:8d:ec:84:a1:2b:73:78:80:df:c2:
                    85:fa:93:53:13:6a:8c:79:62:a6:58:55:9c:77:ff:
                    44:6a:3a:82:7b:00:10:a7:70:25:d4:7d:1d:f5:69:
                    58:f0:2a:92:0f:f6:42:47:8d:e5:fa:42:82:2f:1f:
                    a1:3a:93:cc:3e:57:08:17:71:2b:29:a0:ec:b3:bd:
                    d6:08:b7:b4:8e:2c:c7:9a:c0:03:27:bd:b3:f5:bc:
                    58:c2:8e:8e:97:58:72:91:87:c3:bd:e6:de:77:68:
                    49:f6:d7:31:a3:cf:b9:de:ab:c8:a6:48:e0:21:04:
                    f7:5b:b2:52:bf:fd:bd:de:61:6c:b6:1e:da:97:70:
                    5b:b6:0e:56:d3:d3:8e:05:40:e0:44:1e:3b:56:95:
                    26:e7:7c:68:f5:4f:90:d1:3e:98:3a:7e:4b:8b:24:
                    b3:09:08:5a:f7:75:f5:91:17:d9:3a:25:da:13:2c:
                    df:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AD:3B:75:B5:42:D2:BB:C4:08:A2:F3:AA:CD:26:F5:46:51:0A:05
            X509v3 Authority Key Identifier:
                keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f3:fb:91:36:27:62:0d:c6:cc:f6:1d:80:62:7a:21:ad:80:
         f8:21:22:43:af:4f:6a:e4:1c:ac:ba:62:11:47:aa:1e:55:7d:
         b7:12:3c:f6:31:68:2a:c8:9e:f2:f6:64:6e:1b:c1:f6:1a:db:
         b3:b2:49:7a:a3:fb:7b:69:1b:9c:a5:b7:3c:1b:ee:6c:a8:6b:
         9b:bf:37:9b:fb:10:f9:54:b5:b2:70:4d:26:aa:2a:42:35:1e:
         94:bc:e7:fa:07:e2:44:af:77:7e:5d:58:a7:8e:0e:93:b4:83:
         ce:58:85:3f:41:7e:0b:bf:82:17:ee:66:05:55:d1:bf:e3:52:
         ad:12:2f:ff:29:7b:8b:32:9e:98:77:87:75:15:1e:37:97:6c:
         a6:56:58:37:f6:4f:a6:3f:68:bc:43:d1:57:6a:fe:b0:ab:14:
         9b:bf:fa:2b:ca:96:46:0c:4f:62:2a:d0:9e:17:8e:61:0f:e9:
         54:9c:4c:24:2b:7b:91:01:df:6f:6e:7e:e3:c5:c8:73:0d:ec:
         0e:dc:b0:de:40:18:ec:de:d2:ec:95:92:96:52:84:ed:cc:21:
         05:65:26:9b:d0:82:bd:46:7e:a5:46:79:fd:27:9b:8a:30:88:
         77:39:af:ad:60:b2:85:ce:1a:35:1b:e6:f9:bc:a9:1e:71:75:
         fb:70:97:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:12:43 2026 by rpki-client