Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft
File:                     36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft (raw, json)
Hash identifier:          CUjHcMxD01OXNhEv33DWRgBmEi8lvyFAYcP3/Tyq9O0=
Subject key identifier:   71:69:49:52:DC:EF:25:5D:A6:30:53:BD:3C:AC:23:70:BC:DE:F9:CB
Authority key identifier: 36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D
Certificate issuer:       /CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D
Certificate serial:       088D167DDA45FCDF5C9A1A322CC78392C51510FF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft
Manifest number:          C9
Signing time:             Sat 10 Oct 2026 09:29:30 +0000
Manifest this update:     Sat 10 Oct 2026 09:24:30 +0000
Manifest next update:     Tue 13 Oct 2026 19:19:30 +0000
Files and hashes:         1: 3130332e3231352e3134302e302f32322d3232203d3e203538353139.roa (hash: rxlfotPYclusuNHWGDhdy78Jx7VJ8aQNKRsyn8w1wxE=)
                          2: 3130332e37392e3133362e302f32322d3232203d3e2030.roa (hash: YVxEOO9XO2MmyHqD3Ceyf3SLPC873UJ1DWWky7Vnl30=)
                          3: 3135372e3131392e32382e302f32322d3232203d3e203538353139.roa (hash: +V7Vd50CrLhAnyJKXkDEE7s1Gt8Bw5Z6WA1KeI/AeLs=)
                          4: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl (hash: ncVlVMIaxeiYHK5NZVNljK17sU45zGAx+7jXDTJ8ueE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 09:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8d:16:7d:da:45:fc:df:5c:9a:1a:32:2c:c7:83:92:c5:15:10:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D
        Validity
            Not Before: Oct 10 09:24:30 2026 GMT
            Not After : Oct 13 19:19:30 2026 GMT
        Subject: CN=71694952DCEF255DA63053BD3CAC2370BCDEF9CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a7:9e:bb:1c:29:0f:2d:43:8d:fd:fe:44:9d:
                    1c:55:17:0c:05:76:6c:6e:3c:ad:16:42:c3:20:6b:
                    7f:51:f6:05:37:b4:9a:5b:ab:79:8e:b3:db:35:87:
                    e0:5c:c2:73:91:d9:a4:40:82:6b:e0:49:f8:e2:41:
                    0a:0a:d8:00:f9:f8:e0:fb:d0:43:84:84:03:9d:06:
                    02:a5:65:da:c5:4a:05:7b:b6:61:29:26:95:78:1b:
                    98:b2:33:93:7e:b7:af:5e:7a:2d:c3:d2:59:b9:28:
                    e7:5a:b3:f4:d5:05:3c:7c:6c:4d:2c:53:bf:94:e9:
                    ab:16:33:64:db:44:24:2d:5b:32:f9:b9:1a:cc:13:
                    75:a0:ee:df:d4:fd:f5:fd:fe:e9:9d:c7:ef:81:7c:
                    bf:a3:7e:34:08:4e:fc:d1:d5:e2:46:1b:92:cb:1b:
                    36:b0:be:90:be:9b:2c:b4:50:38:9f:e3:7d:6b:39:
                    1f:03:2a:c3:15:a9:a1:74:21:f8:01:46:51:df:e4:
                    8a:81:8d:a5:70:bc:25:9d:08:14:39:ce:14:11:85:
                    3d:f2:35:68:38:e5:14:77:cc:e2:d8:c0:e8:ed:f4:
                    aa:15:4f:4d:55:7e:93:b3:05:af:22:86:8a:1a:0d:
                    7f:36:fa:a9:1d:f2:a0:7e:97:b4:97:ec:98:6e:cc:
                    84:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:69:49:52:DC:EF:25:5D:A6:30:53:BD:3C:AC:23:70:BC:DE:F9:CB
            X509v3 Authority Key Identifier:
                keyid:36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:fb:60:03:89:63:99:85:b2:2f:2f:a7:cf:43:d4:2e:96:07:
         53:ac:0d:6b:1c:52:e1:14:bf:9c:a8:cd:3d:8a:49:a0:4f:34:
         e4:76:f9:4f:1e:dc:79:1b:89:07:00:8a:09:79:d8:6e:91:f6:
         a5:c3:07:a2:1e:0c:da:36:5b:ec:13:be:46:33:3d:b8:b5:d9:
         c1:30:6b:28:49:24:34:f6:ad:47:04:b2:0f:02:dd:dd:6a:bd:
         65:c9:0c:51:0b:9a:35:88:52:84:07:30:18:dc:c3:ae:70:07:
         f8:a5:a2:35:33:b0:e7:67:38:e9:3c:ea:fc:31:4a:1c:c6:1a:
         71:94:09:b1:9e:1e:a8:97:90:de:20:15:eb:d4:28:f8:02:e1:
         9a:61:cf:ce:51:34:36:4c:8a:a9:c0:67:7f:f1:5e:18:4a:a7:
         82:0e:25:1b:a2:7a:87:e4:02:87:bb:2d:b0:62:6e:3a:98:12:
         61:bc:01:7b:72:5d:db:8e:f8:e7:3c:13:32:d1:ac:21:be:08:
         5c:82:f8:c1:f1:86:6e:be:9c:a7:b4:fd:73:05:e8:12:09:b4:
         00:86:af:55:b4:7f:eb:94:c3:2b:c0:07:a3:dc:74:d8:a8:d6:
         0d:65:f6:1a:e4:15:b2:c1:5a:b2:5b:f4:73:9e:10:a5:5c:72:
         0d:f4:28:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:04:14 2026 by rpki-client