Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft
File:                     027E626491D467F2D967FA80361028FA06A786F4.mft (raw, json)
Hash identifier:          4RUCSAV5UKvcgCEVVjhQid8LNddk9tg1wNy3+FYbgXw=
Subject key identifier:   76:21:EE:65:B3:5E:14:17:8D:0B:B5:A7:A7:83:AE:8F:3F:EB:2B:FA
Authority key identifier: 02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4
Certificate issuer:       /CN=027E626491D467F2D967FA80361028FA06A786F4
Certificate serial:       29F171EED22D2EF63C1E4F14B0FA896FFAC6BCDE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft
Manifest number:          013E
Signing time:             Fri 16 Oct 2026 07:22:18 +0000
Manifest this update:     Fri 16 Oct 2026 07:17:18 +0000
Manifest next update:     Mon 19 Oct 2026 10:27:18 +0000
Files and hashes:         1: 3130332e392e3135322e302f32342d3234203d3e203338333434.roa (hash: wdok/70+OGrA3z2KyLH5lq3UCizPf7CJzdwVC8v8n6w=)
                          2: 027E626491D467F2D967FA80361028FA06A786F4.crl (hash: neqx/LIx+277dDpxsH8JW2zdME7usdg7U2bQ/XpqZ/k=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 10:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f1:71:ee:d2:2d:2e:f6:3c:1e:4f:14:b0:fa:89:6f:fa:c6:bc:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027E626491D467F2D967FA80361028FA06A786F4
        Validity
            Not Before: Oct 16 07:17:18 2026 GMT
            Not After : Oct 19 10:27:18 2026 GMT
        Subject: CN=7621EE65B35E14178D0BB5A7A783AE8F3FEB2BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:e6:a0:b6:97:07:34:db:1a:3b:2b:b5:a1:
                    aa:ab:fe:ef:fa:2c:7f:6d:00:25:e6:33:22:08:bd:
                    cb:29:66:40:e9:92:b4:1f:f7:a9:53:b8:7a:ec:0d:
                    2b:84:44:45:59:e6:0f:63:03:88:e7:e3:1d:aa:03:
                    63:6f:e1:c7:cc:ba:33:5f:04:29:0e:b8:09:2e:22:
                    c0:06:75:d5:41:ef:9b:fc:e5:fa:b0:c8:45:41:d2:
                    e2:6b:c5:98:62:15:79:00:a8:75:89:ab:07:2a:23:
                    1f:f9:4e:f3:34:f2:5f:97:ea:10:dc:d6:bc:49:97:
                    8c:5c:96:54:72:7a:77:9a:f4:36:9c:63:d4:84:ce:
                    0b:39:41:49:c0:e9:e1:44:be:7b:5b:d2:b7:8d:ca:
                    a1:47:f3:43:56:66:fa:26:10:1f:35:18:f2:d3:d5:
                    4d:4e:8e:24:98:6c:84:fa:64:e8:ea:9c:b2:c7:79:
                    70:d9:a6:63:d5:a4:19:59:a6:04:05:18:f3:82:83:
                    99:f8:98:85:fb:45:2e:30:ef:2b:b0:7b:35:a0:7e:
                    51:82:80:cd:50:9b:dc:0a:2d:2c:f0:de:07:dd:2e:
                    6e:bc:97:44:f6:48:0e:49:8f:d7:98:34:0b:9b:d5:
                    d0:61:a1:23:15:c2:7f:d0:58:5e:c8:07:04:fb:43:
                    e2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:21:EE:65:B3:5E:14:17:8D:0B:B5:A7:A7:83:AE:8F:3F:EB:2B:FA
            X509v3 Authority Key Identifier:
                keyid:02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:41:2b:b1:e5:d0:7e:a6:8b:a2:c2:25:f8:ea:d9:79:0f:67:
         49:0b:41:89:9e:51:30:1f:ff:04:6d:18:7b:05:98:8d:5e:a1:
         8b:32:8a:de:98:4f:2c:2b:44:7c:45:3b:98:6d:ec:dd:fe:68:
         61:cd:28:79:ce:15:0e:2e:7a:50:ad:a9:58:97:6c:2b:dc:e0:
         77:c0:bb:81:d4:7d:7f:f1:61:ec:3d:7c:91:79:4d:eb:17:79:
         d2:ac:1f:6d:ef:27:80:0f:37:a8:f9:92:d6:4e:99:c6:80:af:
         64:e6:c6:d4:9f:80:b9:94:d5:dd:c9:c9:19:bb:fb:7f:52:e8:
         00:70:05:0d:57:70:8d:df:07:7d:f0:7b:a1:52:3c:8e:d7:47:
         e5:78:ce:f6:89:ac:61:36:e1:c3:df:f6:bc:a1:51:0e:09:98:
         df:9e:b7:8c:c6:1a:67:da:39:e9:26:1a:77:c2:36:38:cb:01:
         5e:d5:51:eb:9f:16:52:2b:50:4f:1c:db:5d:48:fa:22:e5:a2:
         c2:60:36:8b:f1:f3:d1:31:01:9b:a8:c0:57:9c:51:9c:c0:79:
         cd:1c:69:26:77:e5:38:2d:78:37:bf:ff:9c:81:60:9d:fc:5c:
         8b:99:e2:31:98:33:9e:8f:c8:58:c4:36:40:b8:34:f9:c9:07:
         f8:09:67:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:25:30 2026 by rpki-client