Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
File:                     AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft (raw, json)
Hash identifier:          iFjZfpn94Uwb66QyrllagiMoyOyz70iSDSGqhpIX+YM=
Subject key identifier:   3B:19:E3:37:38:10:67:56:27:42:3E:DA:25:8D:6D:15:04:CE:5C:CB
Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
Certificate issuer:       /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Certificate serial:       20A06E0E5ED76D14F973DBAC4184DC8E350C1C14
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
Manifest number:          B8
Signing time:             Mon 21 Sep 2026 20:48:37 +0000
Manifest this update:     Mon 21 Sep 2026 20:43:37 +0000
Manifest next update:     Fri 25 Sep 2026 06:22:37 +0000
Files and hashes:         1: 3232312e3133332e3234352e302f32342d3234203d3e2034383132.roa (hash: E8J6ehCAVQBTTL4nluJ8TryKPdaQtCV6x7AzifZmEoU=)
                          2: 3131362e36362e33362e302f32342d3234203d3e2034383132.roa (hash: 9PZcNDwOFM1W+HqkIe4mT1Xoe9v6VAm30cLnLhC5Dxg=)
                          3: 3131362e36362e39382e302f32342d3234203d3e2034383132.roa (hash: 0WcQhOacv893u6+dnq1uiCvKvpO1wG8GhBFYPj0MqeM=)
                          4: 3131362e36362e33322e302f32302d3230203d3e2030.roa (hash: wNT1DQAFsp8Zs52N3h30+NLAy/kRLoWVPBBLRjJSqcQ=)
                          5: 3131362e36362e39362e302f32302d3230203d3e2030.roa (hash: MqrW8ck2y9ByUyAqAmNpkYC3kLSHt1wbYRwpKGGG0Jo=)
                          6: 3131362e36362e302e302f31392d3139203d3e2030.roa (hash: f2cz2JzSUuLpJdbOQ1lpXQ6pQJh4CE9buuubTfFQl5o=)
                          7: 3232312e3133332e3232342e302f32302d3230203d3e2030.roa (hash: nHvu/7uCsbClyS8g05j2ZhgLdmx83hkxQxwIo964IPY=)
                          8: 3232312e3133332e3234342e302f32342d3234203d3e2034383132.roa (hash: /xsrM0t7gazGxT8vu8S20afPJ+/R7tTwrJw9ipbCbuY=)
                          9: 3232312e3133332e3233302e302f32332d3233203d3e2034383132.roa (hash: d98CvU56OAX7rtIY8aOAQjNFJ5nL1C3K1MePIYbNFnA=)
                          10: AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl (hash: 4TG20Z2rDpMHKkrD1lDFKyBzi61mNiSn1/PlLS+ffF0=)
                          11: 3131362e36362e36342e302f31392d3139203d3e2030.roa (hash: iXic9QsPCgNhQwzKKNPoIkJAYXI9V9gKXFUDqaHrlF4=)
                          12: 3232312e3133332e3233352e302f32342d3234203d3e2034383132.roa (hash: a2VfsMsZhsvGAUUY1Ndu97RvKL9qo+FoR0ehHhF29YY=)
                          13: 3232312e3133332e3232352e302f32342d3234203d3e2034383132.roa (hash: oSxen+avH3yqnVUcHFHfBxSONh2HEHoFvmKh9qAM9WI=)
                          14: 3232312e3133332e3232382e302f32332d3233203d3e2034383132.roa (hash: Y1HiM+KumJNDeDYPLakmSQoLeW7lH5fsmPDT4ZzwnTw=)
                          15: 3232312e3133332e3234302e302f32312d3231203d3e2030.roa (hash: wa6+lFTaePy6KwEnyhKCGrbQLm0Z3dbhjkj2JdaOPuM=)
                          16: 3232312e3133332e3233322e302f32332d3233203d3e2034383132.roa (hash: QqHw6UnjAmZaF6ZKGYjDcxL5eEwCirmJLq8wCW5ccfU=)
                          17: 3232312e3133332e3232362e302f32342d3234203d3e2034383132.roa (hash: fZP84wU8PI7wcGhsSPIodw7AFzy8mHQUVVGTGntl5c4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 09:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a0:6e:0e:5e:d7:6d:14:f9:73:db:ac:41:84:dc:8e:35:0c:1c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
        Validity
            Not Before: Sep 21 20:43:37 2026 GMT
            Not After : Sep 25 06:22:37 2026 GMT
        Subject: CN=3B19E3373810675627423EDA258D6D1504CE5CCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2c:74:9d:87:ce:bf:e3:58:da:38:35:fa:11:
                    e7:9b:90:be:e0:59:6c:1c:aa:4c:23:f3:50:a7:23:
                    fb:5c:fd:04:04:1f:b4:cc:fa:fb:35:ac:bd:32:5d:
                    15:1b:04:95:06:46:a7:49:83:2f:c2:42:98:0e:70:
                    ef:3c:e4:d9:59:b6:46:18:c9:d8:ac:6a:eb:62:bc:
                    a6:83:18:c9:b5:7b:60:9f:b8:ff:01:82:9c:04:4f:
                    cf:ea:94:2e:bf:67:f1:c7:4f:95:b4:d2:b1:4b:bc:
                    9d:ad:27:8d:bd:13:3d:76:ed:32:5a:1e:c5:44:18:
                    75:bf:f7:09:b4:e2:ae:9d:72:f5:00:4d:53:ee:93:
                    75:92:e2:6a:45:71:68:92:49:33:29:54:e0:2b:ce:
                    6e:19:39:ca:e1:75:9c:06:24:21:f1:37:b9:da:75:
                    df:fa:04:4c:d4:02:36:63:6d:e7:0d:50:e8:6c:0e:
                    40:c9:37:3c:40:40:93:62:a8:89:aa:2d:d6:93:b2:
                    6e:42:10:c2:81:7e:73:75:db:4e:16:df:c3:80:4f:
                    c8:4e:82:a9:13:69:9e:1c:76:cf:94:6d:b5:e9:18:
                    16:1a:61:6c:ee:e7:30:d7:1f:40:04:0c:0e:b3:84:
                    a3:16:0a:63:06:da:12:ab:ed:e1:46:d0:e3:f9:97:
                    bc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:19:E3:37:38:10:67:56:27:42:3E:DA:25:8D:6D:15:04:CE:5C:CB
            X509v3 Authority Key Identifier:
                keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:32:41:a1:22:56:c4:10:c2:17:63:41:2b:13:c2:a9:a2:f1:
         94:fc:ab:f0:c1:be:04:30:fd:af:0c:4a:e8:5b:5a:9b:e2:2c:
         57:59:d8:ff:5f:c0:f6:f3:63:dc:08:20:d7:d1:2d:f3:9e:d5:
         2a:84:28:e9:6c:70:31:0e:f8:87:a3:2f:84:94:24:7d:94:40:
         a0:0c:32:ae:4c:4d:be:a7:f3:ea:06:58:b2:95:e9:21:2a:70:
         e0:34:cf:2c:16:4c:aa:d2:a5:49:8a:de:4e:b2:8d:45:f2:c2:
         b9:8e:2f:61:dc:4e:57:35:63:7a:43:39:12:6a:5a:b3:2b:d0:
         fc:52:6f:a3:7b:e3:83:0c:72:e0:5d:28:92:29:89:39:40:74:
         ce:13:f1:fa:8b:62:6e:f6:df:71:d1:1e:92:1c:99:11:3a:5e:
         53:dc:cd:66:93:51:49:f5:59:9f:31:72:e0:6e:b7:d9:d2:24:
         12:7a:38:f8:08:7e:fc:e0:18:90:a4:31:d3:45:bc:92:e7:67:
         91:7e:88:0c:96:9a:a9:63:65:43:61:6a:d0:7a:68:31:05:33:
         0b:46:c4:05:c9:4a:0f:2c:a1:b3:2e:21:29:35:65:6a:08:59:
         e1:d5:cc:7b:24:25:39:e6:d0:2d:38:1a:f2:d3:86:18:5e:8b:
         95:63:d3:d9
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUIKBuDl7XbRT5c9usQYTcjjUMHBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVCNjE0QzI0RkZDMkE2QkUwRTJEQjFDN0EzRTBBQUY2
NDFFNkE4QTAeFw0yNjA5MjEyMDQzMzdaFw0yNjA5MjUwNjIyMzdaMDMxMTAvBgNV
BAMTKDNCMTlFMzM3MzgxMDY3NTYyNzQyM0VEQTI1OEQ2RDE1MDRDRTVDQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSLHSdh86/41jaODX6EeebkL7g
WWwcqkwj81CnI/tc/QQEH7TM+vs1rL0yXRUbBJUGRqdJgy/CQpgOcO885NlZtkYY
ydisautivKaDGMm1e2CfuP8BgpwET8/qlC6/Z/HHT5W00rFLvJ2tJ429Ez127TJa
HsVEGHW/9wm04q6dcvUATVPuk3WS4mpFcWiSSTMpVOArzm4ZOcrhdZwGJCHxN7na
dd/6BEzUAjZjbecNUOhsDkDJNzxAQJNiqImqLdaTsm5CEMKBfnN1204W38OAT8hO
gqkTaZ4cds+UbbXpGBYaYWzu5zDXH0AEDA6zhKMWCmMG2hKr7eFG0OP5l7xjAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUOxnjNzgQZ1YnQj7aJY1tFQTOXMswHwYDVR0j
BBgwFoAUrrYUwk/8Kmvg4tscej4Kr2QeaoowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTE5MjU1MjM5NDg1MDMwNy8wL0FFQjYxNEMyNEZGQzJBNkJFMEUyREIxQzdBM0Uw
QUFGNjQxRTZBOEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUVCNjE0QzI0RkZDMkE2QkUwRTJEQjFDN0EzRTBBQUY2NDFFNkE4QS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTkxOTI1NTIzOTQ4NTAzMDcvMC9BRUI2MTRDMjRGRkMy
QTZCRTBFMkRCMUM3QTNFMEFBRjY0MUU2QThBLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazJBoSJWxBDC
F2NBKxPCqaLxlPyr8MG+BDD9rwxK6Ftam+IsV1nY/1/A9vNj3Agg19Et857VKoQo
6WxwMQ74h6MvhJQkfZRAoAwyrkxNvqfz6gZYspXpISpw4DTPLBZMqtKlSYreTrKN
RfLCuY4vYdxOVzVjekM5EmpasyvQ/FJvo3vjgwxy4F0okimJOUB0zhPx+otibvbf
cdEekhyZETpeU9zNZpNRSfVZnzFy4G632dIkEno4+Ah+/OAYkKQx00W8kudnkX6I
DJaaqWNlQ2Fq0HpoMQUzC0bEBclKDyyhsy4hKTVlaghZ4dXMeyQlOebQLTga8tOG
GF6LlWPT2Q==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:59:35 2026 by rpki-client