Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.mft
File:                     C82C40F45E62C70EAF5B663FC69919FEE497C232.mft (raw, json)
Hash identifier:          wNGde5ApXIZfKdEod1HwHLFWILM1ZmYFuWEIJOYFE1w=
Subject key identifier:   9A:5D:1A:89:F5:86:9C:9A:46:79:FB:AD:D6:86:DD:77:BE:57:6E:90
Authority key identifier: C8:2C:40:F4:5E:62:C7:0E:AF:5B:66:3F:C6:99:19:FE:E4:97:C2:32
Certificate issuer:       /CN=C82C40F45E62C70EAF5B663FC69919FEE497C232
Certificate serial:       02F41C5B4E7887736104ADC357DF6A845E40001E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82C40F45E62C70EAF5B663FC69919FEE497C232.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.mft
Manifest number:          A4
Signing time:             Sat 10 Oct 2026 06:09:21 +0000
Manifest this update:     Sat 10 Oct 2026 06:04:21 +0000
Manifest next update:     Tue 13 Oct 2026 09:44:21 +0000
Files and hashes:         1: 3230322e3136382e38302e302f32322d3232203d3e2030.roa (hash: IqqBQckHO5E/yVvuNZgJNvWULCHHlM9yFYbXo6IS9E8=)
                          2: C82C40F45E62C70EAF5B663FC69919FEE497C232.crl (hash: Mv5RvvS+xgfCioJPNWgs92QrlA+ho3qcGdFWTqNoSFg=)
                          3: 3130332e3139392e3139362e302f32322d3232203d3e2030.roa (hash: KbskMLMNoQgPiikLyhepYWH6Nj+6SK5AaW5w9e2tIDg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82C40F45E62C70EAF5B663FC69919FEE497C232.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 09:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f4:1c:5b:4e:78:87:73:61:04:ad:c3:57:df:6a:84:5e:40:00:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C82C40F45E62C70EAF5B663FC69919FEE497C232
        Validity
            Not Before: Oct 10 06:04:21 2026 GMT
            Not After : Oct 13 09:44:21 2026 GMT
        Subject: CN=9A5D1A89F5869C9A4679FBADD686DD77BE576E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:1e:cc:f5:bd:c8:23:08:58:bf:a3:17:e4:
                    d6:32:d9:22:95:78:48:50:06:ea:d2:8b:31:e6:70:
                    6e:b1:34:14:0f:14:fd:5c:85:68:82:99:80:2c:9f:
                    63:2b:6b:d0:14:97:54:6d:7a:e5:53:de:6c:2a:d3:
                    fd:ca:06:e7:92:4f:c4:a5:f0:9a:60:5f:64:f6:e2:
                    ab:0a:ff:3b:d2:59:33:c8:87:b5:ea:6b:79:1f:60:
                    5e:dd:7c:1a:cf:50:7a:82:a5:ee:4d:7b:41:47:d3:
                    72:32:6c:9c:c6:32:b4:42:8d:96:f5:46:05:a7:bf:
                    21:d1:13:e3:6d:3c:ef:18:a1:ec:45:b4:31:3a:6f:
                    80:77:c9:57:f7:7b:81:07:57:81:71:06:43:8e:69:
                    d2:33:a9:63:60:86:4f:bb:7e:4e:b8:0f:47:59:e8:
                    4b:ac:e6:68:6a:19:54:02:6f:fe:54:1c:59:3b:af:
                    e7:7a:f8:dc:b0:78:ad:ea:dc:0e:cc:25:ef:8b:9a:
                    e7:6e:8e:3d:56:8f:47:8b:cd:61:a7:cf:5a:32:e2:
                    6e:45:77:c0:95:50:14:70:f7:2e:16:52:77:01:89:
                    a0:ed:c8:cf:63:9e:cd:29:8c:9c:6d:c8:ae:b2:fe:
                    16:0e:b5:ff:47:2d:34:38:32:fb:b7:07:4b:18:93:
                    a6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5D:1A:89:F5:86:9C:9A:46:79:FB:AD:D6:86:DD:77:BE:57:6E:90
            X509v3 Authority Key Identifier:
                keyid:C8:2C:40:F4:5E:62:C7:0E:AF:5B:66:3F:C6:99:19:FE:E4:97:C2:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82C40F45E62C70EAF5B663FC69919FEE497C232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a2:b7:c3:f4:79:64:91:9a:ed:82:04:fe:3d:7c:98:00:85:
         38:d7:bf:13:ac:2e:bd:ed:d8:01:0c:f8:43:1d:dd:d8:e4:05:
         b3:90:e3:b3:81:8f:59:d3:b8:87:a3:63:71:0c:ca:a5:5a:47:
         78:68:2f:ab:34:c5:31:e5:2d:94:52:d9:14:8f:00:76:7f:16:
         95:92:10:23:a2:0f:6c:74:2c:e2:a6:bd:7d:86:06:0b:f5:88:
         9d:6c:06:d9:4f:87:33:d3:57:81:46:c9:dc:fc:28:14:a0:dc:
         24:59:5f:1d:81:7c:a1:ae:6d:d0:1f:63:47:9b:95:f3:9d:f5:
         3c:38:04:eb:62:a3:23:ab:32:c3:d4:8a:c2:50:af:89:98:67:
         15:fc:a0:c7:b3:f8:e2:55:88:0c:da:8b:30:9f:85:95:bb:a6:
         17:e8:d1:fa:4f:9e:f7:2e:04:d3:f6:58:62:cd:63:3d:01:10:
         15:db:87:dc:52:8a:c5:61:05:43:40:16:81:ef:c9:69:be:2e:
         6b:77:22:c9:6b:65:cc:58:56:a7:29:4b:e0:eb:a4:26:37:71:
         3a:d7:6a:89:73:fb:26:71:02:a9:12:73:7d:d0:c3:d7:c5:34:
         97:c9:a6:30:c4:dd:91:d6:b3:e2:71:cd:fe:aa:ab:c5:c0:49:
         6b:e3:2b:6b
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUAvQcW054h3NhBK3DV99qhF5AAB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzgyQzQwRjQ1RTYyQzcwRUFGNUI2NjNGQzY5OTE5RkVF
NDk3QzIzMjAeFw0yNjEwMTAwNjA0MjFaFw0yNjEwMTMwOTQ0MjFaMDMxMTAvBgNV
BAMTKDlBNUQxQTg5RjU4NjlDOUE0Njc5RkJBREQ2ODZERDc3QkU1NzZFOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvkh7M9b3IIwhYv6MX5NYy2SKV
eEhQBurSizHmcG6xNBQPFP1chWiCmYAsn2Mra9AUl1RteuVT3mwq0/3KBueST8Sl
8JpgX2T24qsK/zvSWTPIh7Xqa3kfYF7dfBrPUHqCpe5Ne0FH03IybJzGMrRCjZb1
RgWnvyHRE+NtPO8YoexFtDE6b4B3yVf3e4EHV4FxBkOOadIzqWNghk+7fk64D0dZ
6Eus5mhqGVQCb/5UHFk7r+d6+NyweK3q3A7MJe+Lmudujj1Wj0eLzWGnz1oy4m5F
d8CVUBRw9y4WUncBiaDtyM9jns0pjJxtyK6y/hYOtf9HLTQ4Mvu3B0sYk6a7AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUml0aifWGnJpGefut1obdd75XbpAwHwYDVR0j
BBgwFoAUyCxA9F5ixw6vW2Y/xpkZ/uSXwjIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjQ3NjMxMDU5NjY4MTc0Ny8wL0M4MkM0MEY0NUU2MkM3MEVBRjVCNjYzRkM2OTkx
OUZFRTQ5N0MyMzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzgyQzQwRjQ1RTYyQzcwRUFGNUI2NjNGQzY5OTE5RkVFNDk3QzIzMi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDY0NzYzMTA1OTY2ODE3NDcvMC9DODJDNDBGNDVFNjJD
NzBFQUY1QjY2M0ZDNjk5MTlGRUU0OTdDMjMyLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqK3w/R5ZJGa
7YIE/j18mACFONe/E6wuve3YAQz4Qx3d2OQFs5Djs4GPWdO4h6NjcQzKpVpHeGgv
qzTFMeUtlFLZFI8Adn8WlZIQI6IPbHQs4qa9fYYGC/WInWwG2U+HM9NXgUbJ3Pwo
FKDcJFlfHYF8oa5t0B9jR5uV8531PDgE62KjI6syw9SKwlCviZhnFfygx7P44lWI
DNqLMJ+FlbumF+jR+k+e9y4E0/ZYYs1jPQEQFduH3FKKxWEFQ0AWge/Jab4ua3ci
yWtlzFhWpylL4OukJjdxOtdqiXP7JnECqRJzfdDD18U0l8mmMMTdkdaz4nHN/qqr
xcBJa+Mraw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 09:58:50 2026 by rpki-client