Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft
File:                     D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft (raw, json)
Hash identifier:          PkYrMxDzLVpzhNcsZ/1YLFidiXqZbkjx4nhNuan3dko=
Subject key identifier:   5F:74:06:7F:D4:22:AC:82:DD:B0:81:D2:C1:6E:7B:8B:ED:B0:36:10
Authority key identifier: D0:EA:0A:A8:C3:46:FE:67:3C:68:67:F2:B9:CA:06:81:9F:58:C4:72
Certificate issuer:       /CN=A9120CDE0000/serialNumber=D0EA0AA8C346FE673C6867F2B9CA06819F58C472
Certificate serial:       7880A69255BF90171D8B6838586455B29B7E02C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft
Manifest number:          8B
Signing time:             Fri 09 Oct 2026 14:38:53 +0000
Manifest this update:     Fri 09 Oct 2026 14:33:53 +0000
Manifest next update:     Mon 12 Oct 2026 14:54:53 +0000
Files and hashes:         1: 3130332e3132332e342e302f32332d3233203d3e2034383337.roa (hash: k74aKc9hrGjjKtFfU03UFmb5lbVypa9TVHs7t7K9DFc=)
                          2: 3130332e3132332e342e302f32322d3232203d3e2034383337.roa (hash: uzVKo4gitP7RigvC6WVexzNZzL0YYShPIrlVbSuh1Mw=)
                          3: D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl (hash: yjgJ1HY85XzO19CD3v3hcPQcBHu09XX/MMp3pcdsgrk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 14:54:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:80:a6:92:55:bf:90:17:1d:8b:68:38:58:64:55:b2:9b:7e:02:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120CDE0000, serialNumber=D0EA0AA8C346FE673C6867F2B9CA06819F58C472
        Validity
            Not Before: Oct  9 14:33:53 2026 GMT
            Not After : Oct 12 14:54:53 2026 GMT
        Subject: CN=5F74067FD422AC82DDB081D2C16E7B8BEDB03610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f9:a2:a1:a4:87:47:32:6c:5c:1d:60:a8:b8:
                    46:7a:aa:44:af:83:60:00:a6:fb:5f:3b:ec:43:b2:
                    5d:8d:8f:4f:73:ce:75:77:69:32:36:ce:ed:47:16:
                    c7:48:4c:c0:ad:93:20:f0:3b:14:b6:e4:6f:e8:74:
                    64:9a:fa:72:38:cb:bd:b0:71:93:94:49:23:e1:42:
                    7b:8e:c8:b3:bf:2f:dd:02:5a:33:89:2f:b8:32:f4:
                    08:8d:7e:4b:a6:05:c6:70:16:ef:67:62:ec:d8:61:
                    f2:64:84:1a:7a:cf:a9:c9:d5:86:d2:d1:b4:58:27:
                    d8:c8:4d:00:3b:48:11:f1:14:ad:91:75:45:03:a1:
                    52:07:62:87:1a:e2:4a:24:10:b4:20:7f:72:b7:3f:
                    3d:df:9c:bc:12:52:0f:b8:7a:78:f1:c5:ad:c6:9e:
                    db:53:c5:07:34:16:aa:9c:07:dd:46:a2:b4:9b:09:
                    bd:61:b2:ad:be:d0:53:a1:3d:52:f6:0c:60:7e:52:
                    4e:37:c7:a7:87:7a:9c:65:fe:5d:41:29:ef:96:e2:
                    23:01:ab:d1:53:06:c1:47:46:33:2a:52:71:5a:f9:
                    94:52:0c:0c:65:6b:30:3e:1b:65:55:36:a0:ff:17:
                    25:01:c9:06:e8:5d:1b:e5:26:4b:9c:32:64:3c:97:
                    af:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:74:06:7F:D4:22:AC:82:DD:B0:81:D2:C1:6E:7B:8B:ED:B0:36:10
            X509v3 Authority Key Identifier:
                keyid:D0:EA:0A:A8:C3:46:FE:67:3C:68:67:F2:B9:CA:06:81:9F:58:C4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d5:71:06:8d:41:75:65:0a:83:bb:0a:96:0e:fc:ef:2f:c6:
         31:e7:b1:0a:ca:3c:ed:e7:37:86:4d:57:51:43:2b:f7:f2:99:
         38:6e:ed:d2:df:9f:94:32:d9:d1:a6:2a:df:7f:9f:2c:c5:4f:
         2f:32:e0:29:48:a4:2f:40:86:9b:bc:61:56:ee:e5:36:c2:ea:
         9b:01:99:58:3a:a1:22:c6:d0:3f:92:c9:f5:40:cd:18:cf:c2:
         8d:d5:b9:00:10:6c:99:15:ff:30:b4:5f:51:39:89:af:12:64:
         37:8b:c1:aa:b3:46:0d:f6:42:ec:9a:0e:32:cd:77:37:3f:a9:
         87:23:8a:e1:7f:78:83:61:b4:8f:ae:88:fe:cf:22:a1:b4:73:
         46:90:73:f3:6d:f2:95:ca:fa:1e:89:2d:c8:9d:d7:ec:16:e6:
         d1:4c:52:fe:fb:21:9d:31:9f:3f:64:c6:7b:23:bb:c5:e9:f8:
         e0:1e:89:83:77:6d:2d:be:5f:d7:2d:3d:3b:06:3f:cf:9a:b3:
         03:fc:3b:45:cf:2d:de:79:3f:13:83:39:8f:0f:c0:d1:e2:38:
         d9:d3:52:36:0b:58:d1:70:6f:0a:26:84:89:ac:02:f4:ce:00:
         93:30:45:64:1b:39:7d:7f:3f:cc:d0:76:a8:46:a9:d4:b5:1c:
         b8:35:fb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:19:33 2026 by rpki-client