Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
File:                     601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft (raw, json)
Hash identifier:          KuwNh4q8RbEwP/qMQkWLF533Ln3kDAVab+IyDGVV4Ug=
Subject key identifier:   25:5C:7B:E9:24:9D:CB:7C:C3:9D:5C:D0:76:5F:8A:41:FF:AF:C1:DF
Authority key identifier: 60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E
Certificate issuer:       /CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E
Certificate serial:       6F6AE79A4068A029CD35DBF259366B4B3DFC93B4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
Manifest number:          D0
Signing time:             Sat 10 Oct 2026 04:19:13 +0000
Manifest this update:     Sat 10 Oct 2026 04:14:13 +0000
Manifest next update:     Tue 13 Oct 2026 10:00:13 +0000
Files and hashes:         1: 323430353a393938303a3a2f33322d3332203d3e2030.roa (hash: GA+g1A5a2HBFT7Hhy5u0IBn7+mkbJWeKKCXdtRL2bVU=)
                          2: 3130332e3235322e3130342e302f32322d3232203d3e2030.roa (hash: LbvUNBbkkW0aewjviCw2bvPKR6Kgliws3ypDPVSBx14=)
                          3: 323430353a393730303a3a2f33322d3332203d3e2030.roa (hash: b+fcHzb/W5/fimiES+nchVhDT38rC5UajNjNb4ZygPk=)
                          4: 3130332e3232302e3130382e302f32322d3232203d3e2030.roa (hash: eweMT2DqhbhsogWgs3Ls5JTkhPjH5PVagqQGefKB424=)
                          5: 34332e3234372e3135322e302f32322d3232203d3e2030.roa (hash: 1pk6tiEHf9kNqPoegfgckkczUu2VR2BfY6u9CKdeHko=)
                          6: 323430353a393838303a3a2f33322d3332203d3e2030.roa (hash: /XSBz2YauMRg8MSFkadncF+Xb/VKcdTSZjiZ3GisOqo=)
                          7: 34332e3234372e3233322e302f32322d3232203d3e2030.roa (hash: HvknGg3jtHTLMLRmwKj2Fju4EA01k6DXU/KhVvFuIHQ=)
                          8: 34352e3235312e3134342e302f32322d3232203d3e2030.roa (hash: UHhl5vIywlR9EF1SuP2tWpZscGg6dt5K75MIQmmozxM=)
                          9: 3130332e3232302e3131362e302f32322d3232203d3e2030.roa (hash: if/xm2ZmxEWHRHPBv5cvIrLrrTMi5u7rlBXqn+knNDE=)
                          10: 601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl (hash: 1mKV0ghDxdTITseOLwFEXxG8y5rTfKGeCsi5Iete3bA=)
                          11: 3130332e33302e39362e302f32322d3232203d3e2030.roa (hash: wZLSzYpHhbp1Z9qyC1a2LGCTkcXv5D87rPj068v2abM=)
                          12: 34352e3235312e3134382e302f32322d3232203d3e2030.roa (hash: hgzzmAJZR3a6NXzfmlpD1wxFTR8mhcdKXPB/DalEBzY=)
                          13: 3138322e34392e302e302f31362d3136203d3e2030.roa (hash: VcnWubwyz4XXsy5ib4o3aMuT/7BWYwmSEQsMbdX4oJM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 09:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6a:e7:9a:40:68:a0:29:cd:35:db:f2:59:36:6b:4b:3d:fc:93:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E
        Validity
            Not Before: Oct 10 04:14:13 2026 GMT
            Not After : Oct 13 10:00:13 2026 GMT
        Subject: CN=255C7BE9249DCB7CC39D5CD0765F8A41FFAFC1DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dc:5a:da:ec:e7:ec:13:38:62:61:2b:3f:a2:
                    b2:fc:3a:63:67:42:d0:e4:95:15:73:93:06:79:e4:
                    d9:b2:b7:bc:39:96:72:c3:55:be:e7:cd:c2:74:09:
                    c4:99:c3:17:32:be:c3:b0:c4:d2:5d:08:08:48:88:
                    87:74:b3:3d:62:56:20:38:81:be:76:17:b4:b8:b9:
                    1d:3b:f4:70:48:d0:d3:80:ae:46:06:b3:a9:ae:c0:
                    08:f6:0e:6f:d5:5a:4d:8d:03:3b:5d:6d:a9:dd:2c:
                    45:50:4b:73:5d:9a:9c:cc:91:b5:31:71:ae:1e:17:
                    0a:60:92:09:80:d0:f0:73:2c:c6:f9:9c:83:a9:1c:
                    8c:7d:d9:0c:6c:2c:a5:7d:27:2a:7a:5d:ee:84:ee:
                    be:ec:2f:0d:f0:1c:af:0d:fe:32:a4:99:26:be:a6:
                    c5:b8:d2:ae:e4:25:4d:5f:a2:61:19:c6:ea:e6:80:
                    79:96:0f:31:ca:a8:6b:b6:7e:ea:25:ac:8f:81:88:
                    bc:12:95:50:02:50:c1:71:34:e7:7b:ca:98:5d:0a:
                    b7:03:78:83:e9:db:61:72:79:1a:1a:93:e9:db:56:
                    48:d9:a0:fe:82:3e:1f:11:dd:b6:60:25:ec:c6:62:
                    5b:a9:04:1f:43:38:7b:82:93:8c:99:79:4c:e5:ba:
                    be:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5C:7B:E9:24:9D:CB:7C:C3:9D:5C:D0:76:5F:8A:41:FF:AF:C1:DF
            X509v3 Authority Key Identifier:
                keyid:60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:29:53:3b:fa:90:a3:25:29:89:2d:0d:56:17:c6:b6:6e:54:
         1a:70:5c:12:39:af:2f:a7:14:2f:65:2d:8a:b3:c9:09:e0:59:
         bf:d7:e4:9b:e0:83:fa:68:a2:39:f3:fe:37:e1:c7:25:bc:fe:
         36:b8:7f:8c:90:aa:60:35:f3:22:cc:28:dc:f2:8e:a6:6b:d6:
         6e:17:5c:5c:0a:a9:d8:0d:ff:24:2e:9b:e2:d2:80:a8:a9:ee:
         e6:9e:e8:30:1c:d6:a8:43:5f:ae:66:27:a7:7a:63:bc:22:a6:
         ff:af:fe:3f:18:4c:ff:61:41:b6:77:af:46:b1:bd:84:57:4b:
         ff:e7:fc:6c:fa:d6:01:da:85:23:fd:21:60:93:e1:aa:f9:72:
         7e:93:cc:58:3d:e0:fb:da:cb:45:06:9b:c8:69:2f:6a:7b:3a:
         31:25:d0:4c:05:0d:79:f4:3f:00:7b:5d:36:8a:e7:87:0d:5d:
         09:84:bf:5f:92:b3:04:a3:d9:af:5a:34:7e:53:bc:08:ef:19:
         dc:4f:b0:ce:38:cf:91:01:ba:e0:a6:11:89:68:b2:f1:f5:bf:
         89:57:d6:c8:c5:14:46:96:98:94:a9:2e:dd:6e:86:cd:fe:78:
         b2:d6:8a:ea:af:68:89:4c:23:b4:9c:c2:83:8a:52:0f:98:bf:
         56:96:6d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:43:13 2026 by rpki-client