Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft
File:                     FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft (raw, json)
Hash identifier:          7cSwjHI1kIJt+0w3diiZ3/b8yAasAna6NGmDqhriEmo=
Subject key identifier:   2D:06:73:02:5D:14:18:7B:80:16:E5:B2:5D:C7:50:3C:E8:B3:3C:EC
Authority key identifier: FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA
Certificate issuer:       /CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA
Certificate serial:       0690C38462064DF57A39E27330DE643548AB407C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft
Manifest number:          A7
Signing time:             Tue 06 Oct 2026 18:25:21 +0000
Manifest this update:     Tue 06 Oct 2026 18:20:21 +0000
Manifest next update:     Sat 10 Oct 2026 06:21:21 +0000
Files and hashes:         1: 323430333a363734303a3a2f34382d3438203d3e2034383038.roa (hash: xVjIIll3PePJXngcsv3lCke4SgWX61LJmNnDtNzxkZU=)
                          2: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl (hash: 5o+aCeXpjza/LVWuei0wn7IR8haCeVGin3q4BviXfP4=)
                          3: 3130332e3133352e3136342e302f32332d3233203d3e2034383038.roa (hash: pCJukIqUYrgHCj5Ju2oMUnrFjBuF4DtRmejZ+EtNDu0=)
                          4: 3130332e3133352e3136302e302f32322d3232203d3e2034383038.roa (hash: WbMaWG6apBa3pSCbnJ8kgOTdT0aFXm7oFZYtZD4puOQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 22:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:90:c3:84:62:06:4d:f5:7a:39:e2:73:30:de:64:35:48:ab:40:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA
        Validity
            Not Before: Oct  6 18:20:21 2026 GMT
            Not After : Oct 10 06:21:21 2026 GMT
        Subject: CN=2D0673025D14187B8016E5B25DC7503CE8B33CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7f:e5:8d:3d:18:35:c6:0e:e1:98:6e:9c:62:
                    58:21:1b:db:c5:ea:15:8f:3a:63:8e:62:f6:e4:97:
                    a5:64:1a:d9:30:03:7a:08:68:86:99:45:8c:e2:00:
                    76:5d:f7:22:58:87:e7:ed:2f:d3:d7:d8:4a:e1:7d:
                    f6:f0:a2:5c:37:68:5e:71:a8:53:b3:02:cf:f7:5f:
                    f8:dd:e5:91:5d:85:65:ec:65:7c:0e:ef:92:49:98:
                    91:f8:43:c5:a4:86:78:c7:8a:a3:42:dd:2a:58:61:
                    92:d3:b6:13:23:fa:3a:5a:0e:66:8b:b5:66:55:67:
                    e2:93:cf:b2:61:c0:93:18:66:e9:6a:2e:3c:d8:3a:
                    2e:72:b6:a5:71:4f:54:0d:ad:a8:b2:2a:d9:1a:83:
                    c0:52:3b:df:b4:ae:96:15:e6:9d:d3:86:b1:a8:19:
                    20:1c:a9:6e:d5:b4:b1:fd:f8:f0:18:83:de:82:ee:
                    14:ec:59:d6:4f:ec:91:b0:ba:a6:49:65:b1:92:0e:
                    b2:3c:78:26:df:e0:87:ec:e7:3f:e2:4a:d4:05:a3:
                    7c:92:1f:dc:3b:8a:76:97:22:fe:07:8b:c1:f8:91:
                    a7:84:2b:21:10:c9:f3:6f:6f:e6:e8:30:21:03:97:
                    3c:60:b9:56:46:d5:c1:4a:a9:2c:21:7a:1f:52:10:
                    93:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:06:73:02:5D:14:18:7B:80:16:E5:B2:5D:C7:50:3C:E8:B3:3C:EC
            X509v3 Authority Key Identifier:
                keyid:FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:2f:3c:57:6d:90:0c:43:84:ff:28:e3:6b:67:41:ba:a6:dc:
         99:99:10:c0:1b:71:75:b9:ed:7c:5a:be:ff:10:b2:3e:24:fb:
         67:97:53:68:e4:22:d3:58:ae:f9:07:76:d0:56:b4:f4:90:cb:
         0f:37:57:8d:03:ca:6d:78:68:8a:9c:2a:11:9e:86:a5:c8:83:
         44:43:02:9b:ab:b0:05:b4:a4:15:1c:54:e3:80:23:cb:24:46:
         87:fb:1d:3d:c8:b6:fd:ea:20:66:6b:d5:cc:51:04:e8:f1:d7:
         a8:c3:00:ca:b0:57:d9:89:e0:cf:51:a3:48:27:2d:5f:5b:49:
         2b:11:d2:fa:fe:51:0b:55:7f:1b:ec:37:ca:7a:15:5b:d6:55:
         e7:7f:7c:78:96:37:2d:c6:f0:2e:97:88:5e:f2:55:a0:f6:f3:
         7f:da:ff:74:29:e4:f8:5c:85:35:b2:63:ba:52:6f:a0:f3:a7:
         73:6b:4f:bc:4d:59:a7:f7:54:88:84:3d:7f:20:36:cb:de:61:
         6d:bf:f0:17:64:1c:e6:31:02:a8:d9:74:c0:9b:4d:62:16:a4:
         06:2f:4a:17:c3:3a:ae:04:31:62:aa:30:cd:e1:56:25:ab:a7:
         61:f4:0b:f3:72:65:1f:a4:be:79:3d:df:0a:6f:5c:aa:d0:04:
         15:c9:32:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 00:43:12 2026 by rpki-client