Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
File:                     F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft (raw, json)
Hash identifier:          CZU7YAH0ZwmYYq2DW6A5xvqelr+cCjcn4RE0UYgioHk=
Subject key identifier:   F7:DD:8C:A3:2C:D6:6B:AB:D8:7C:4A:28:E6:9C:2F:8F:05:F0:C1:6B
Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52
Certificate issuer:       /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
Certificate serial:       59CFA6EA774F418CD9AC363BC7E16D638631A980
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
Manifest number:          013B
Signing time:             Sun 11 Oct 2026 13:30:40 +0000
Manifest this update:     Sun 11 Oct 2026 13:25:40 +0000
Manifest next update:     Wed 14 Oct 2026 23:41:40 +0000
Files and hashes:         1: F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl (hash: PXboMMrSStwY+NqiI0m2tsS0E8ZPXQI1avMSB97SCGk=)
                          2: 3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa (hash: OFW+AyUk6AajEk+Y+/6xYlyX7Q9q/Cg4YSR5op5MuDw=)
                          3: 3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa (hash: nhsI3SM0BNooBXteXRdYRb2HoI3GqN8f+FtM6cmmIjM=)
                          4: 3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa (hash: sv3cZRqsmsIMhTUh+jVQts191O/MilJM7fEF6fodozg=)
                          5: 3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa (hash: CKV8MpGE2SB7rvrp/kk1nwjUyU7uYGhV5IglQ/G9LRo=)
                          6: 3136352e3130312e37312e302f32342d3332203d3e203134363138.roa (hash: JioU5n5ZADFZKbSBYkGEmdb6Cgmb19+pW7ZaL4VWgxE=)
                          7: 3136352e3130312e37302e302f32342d3332203d3e2034383337.roa (hash: kDv6iwPAf1ZieValA95kBNEQSe+g9yEnqUGtirExvJk=)
                          8: 3136352e3130312e37312e302f32342d3332203d3e203136353039.roa (hash: 0mFHqtJ99+cpwKS5wgk/Li+bTLSi+1gBBAboHWvN4rw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 23:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:cf:a6:ea:77:4f:41:8c:d9:ac:36:3b:c7:e1:6d:63:86:31:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
        Validity
            Not Before: Oct 11 13:25:40 2026 GMT
            Not After : Oct 14 23:41:40 2026 GMT
        Subject: CN=F7DD8CA32CD66BABD87C4A28E69C2F8F05F0C16B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b5:c3:e4:e1:49:61:d7:99:64:62:85:70:97:
                    24:bd:bd:b7:90:0b:a8:19:94:14:d4:c3:0d:9f:97:
                    9e:bf:af:c9:de:cc:cf:d2:4f:60:c6:aa:a4:2e:eb:
                    fd:73:8a:c5:93:26:29:8c:89:12:55:56:38:c5:a7:
                    11:9f:99:9b:01:b1:a8:50:12:79:f3:dd:9a:c0:db:
                    28:54:ac:3d:b9:14:e7:09:7a:0f:c6:29:4c:da:0c:
                    d3:06:44:62:bb:b5:83:30:8f:17:75:af:95:4e:d1:
                    96:aa:fa:7b:83:c7:34:8a:b4:c3:8a:ee:9c:d3:35:
                    97:6b:34:b8:c4:40:a0:70:16:d7:4b:49:1d:5e:3d:
                    98:d7:59:07:41:45:af:e0:92:14:05:2b:14:79:6e:
                    7e:e8:13:46:0b:8a:1b:e4:a6:f5:94:a4:ed:db:a4:
                    87:b3:1f:5f:3a:da:8c:90:2c:aa:55:11:5f:90:9e:
                    a6:62:33:6d:47:6c:07:5a:2b:13:f4:1e:41:c9:69:
                    4e:88:4a:eb:5d:cb:24:60:1b:58:5f:a3:2c:f2:05:
                    04:b5:bd:a4:06:43:57:07:30:a9:ad:64:5a:c8:13:
                    3f:ba:2b:c5:01:8e:cf:fc:53:0f:9b:78:c8:a9:f3:
                    d8:e3:ea:c1:19:db:60:ab:fe:a4:8f:02:8b:c6:33:
                    d3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DD:8C:A3:2C:D6:6B:AB:D8:7C:4A:28:E6:9C:2F:8F:05:F0:C1:6B
            X509v3 Authority Key Identifier:
                keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a5:46:b2:91:a0:ba:18:d9:dc:54:39:96:0e:02:93:38:f8:
         0e:7a:a9:43:9e:7e:b1:ff:2f:f1:77:ce:f1:8a:65:6b:18:2c:
         24:0a:bc:d7:b4:8a:6b:8d:66:63:02:26:c6:8b:bd:9b:89:6e:
         1a:58:0d:89:62:9d:b3:c4:d9:e1:d3:65:6f:56:06:44:23:fa:
         9b:0e:2c:94:f2:78:e4:1b:9a:74:85:8f:db:7a:76:ac:4c:27:
         cc:39:e9:bf:89:d9:2e:f5:91:6b:25:bc:41:11:8a:96:a1:61:
         25:9a:76:0c:24:59:6e:5e:cc:66:41:77:e1:4e:b8:79:79:e4:
         e7:cf:b9:e4:ba:c8:05:e2:06:3d:a5:a8:35:3f:5d:41:47:df:
         4e:cb:38:34:ac:0c:ef:90:80:aa:6b:fc:c1:f8:1e:25:f6:53:
         88:89:a6:80:65:75:8b:dd:2d:13:c4:11:1a:cc:fa:f2:65:aa:
         5a:07:ce:43:91:5d:8a:2c:53:6d:3f:43:b3:0f:c5:5d:80:04:
         3b:f3:ec:09:e6:cb:f9:08:77:e5:c6:0d:19:ea:d8:99:a1:5d:
         5c:75:3f:d2:3f:0b:d9:3c:34:7f:d5:04:28:8f:00:fd:33:c6:
         14:f1:f3:6a:42:43:62:98:04:d6:17:09:2b:35:99:02:0a:e7:
         1e:1e:fc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:04:51 2026 by rpki-client