Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
File:                     718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft (raw, json)
Hash identifier:          mxeuTrX0aAVbXqIjQHK0TJddgDQoGGIMgZrDrUt9CvI=
Subject key identifier:   15:98:15:66:D4:AC:4A:8D:36:A2:AF:6F:D4:94:59:10:C8:F2:C0:1B
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Certificate issuer:       /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial:       2372072C5A5E55D1063C33049F40F68AC31A0889
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
Manifest number:          99
Signing time:             Fri 09 Oct 2026 21:23:49 +0000
Manifest this update:     Fri 09 Oct 2026 21:18:49 +0000
Manifest next update:     Mon 12 Oct 2026 22:27:49 +0000
Files and hashes:         1: 3231392e38332e3138382e302f32342d3234203d3e203233363530.roa (hash: LQ7prM72n5yu4uS1upZt+/E3ODQamTHnOJqwQ71088Q=)
                          2: 3231392e38332e3139312e302f32342d3234203d3e203233363530.roa (hash: 8NuZXi0EHIN+qnZaEpg9A31HfLk6hLVl7bfya1vCfAs=)
                          3: 3231392e38332e3139302e302f32342d3234203d3e203233363530.roa (hash: izFCR23u4mb5j+f3oVrtd9SUOAQmIFTHBwv3D6hKX60=)
                          4: 3231392e38332e3136392e302f32342d3234203d3e203233363530.roa (hash: OWpD/Mi61F9nYcHnHv9UgSa+CD12LWJf/zOivbmv9bk=)
                          5: 3231392e38332e3137322e302f32342d3234203d3e203233363530.roa (hash: d8x5vr3+orwxBWwgq6nL/21hqmW+OlELLGJgSN5MG3U=)
                          6: 3231392e38332e3137312e302f32342d3234203d3e203233363530.roa (hash: 8u4lP2VFXs147x2QCMaGTl7bYIxEqCKz6arROb3jQl8=)
                          7: 3231392e38332e3138392e302f32342d3234203d3e203233363530.roa (hash: EuSb1SvhOxbGcvgvDBLNRs+zk+33Zrbz1oS9TWpTLKQ=)
                          8: 3231392e38332e3137302e302f32342d3234203d3e203233363530.roa (hash: 8OGarA3rt5HgnGAC4ALgZfMHdzuO7l1EfnYbV7Y5Wmw=)
                          9: 718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl (hash: uvBFqYvRGdYTq8l8lvu9cwjvgPMwM1UcyKl5WXuZ9aw=)
                          10: 3231392e38332e3136382e302f32342d3234203d3e203233363530.roa (hash: +pbh05ttcOvI0bZd+yfcL9FgOrL/gG0Igz+9SGJljQ4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 22:27:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:72:07:2c:5a:5e:55:d1:06:3c:33:04:9f:40:f6:8a:c3:1a:08:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
        Validity
            Not Before: Oct  9 21:18:49 2026 GMT
            Not After : Oct 12 22:27:49 2026 GMT
        Subject: CN=15981566D4AC4A8D36A2AF6FD4945910C8F2C01B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:35:5a:f6:31:3c:52:e5:ce:b3:7a:82:79:36:
                    7e:05:57:92:49:74:90:c2:2e:a5:5f:d4:74:1c:5b:
                    8f:53:e9:e0:52:bd:9f:7d:d1:44:2d:d2:a3:37:1e:
                    94:9c:42:8b:a2:09:1a:64:40:95:90:e1:45:d0:3a:
                    2f:e6:d8:28:74:79:9a:ec:62:7c:79:7d:b5:a3:2e:
                    26:45:75:15:26:b9:24:aa:cd:26:6b:c8:f6:07:80:
                    da:9f:c1:89:a0:82:e8:04:e3:53:ba:05:45:17:90:
                    dc:95:a3:de:e8:59:eb:0c:5f:b2:bc:93:45:f7:0f:
                    5a:0a:ca:d6:15:02:dd:df:3e:eb:75:f5:86:53:3d:
                    f8:23:5d:45:27:60:77:87:ad:8d:30:bf:cf:ad:f5:
                    74:14:40:0d:dc:46:17:b8:5f:a4:c7:06:e4:7c:32:
                    6d:6a:6a:38:f7:e3:cf:80:5b:f4:54:74:fa:91:68:
                    64:9f:45:ee:a8:4b:19:24:1b:0a:99:97:72:76:64:
                    33:9d:ff:60:e5:fc:41:2f:c6:5e:87:09:45:d0:c9:
                    b1:5b:2c:a6:88:24:08:7c:90:40:e2:07:50:35:cb:
                    35:03:03:55:30:f6:d0:a6:97:0e:b8:10:0e:f6:2a:
                    f6:51:30:a3:b6:fe:b2:f8:71:1c:0a:18:d6:1f:a3:
                    ca:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:98:15:66:D4:AC:4A:8D:36:A2:AF:6F:D4:94:59:10:C8:F2:C0:1B
            X509v3 Authority Key Identifier:
                keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:40:ec:b4:10:52:83:71:4c:4b:f0:50:76:9d:e9:74:d9:e2:
         72:90:2d:32:11:0e:20:04:b9:53:e2:a3:8d:9f:9d:69:e3:10:
         b4:f2:38:17:ee:9c:b1:6e:5a:42:e1:78:54:00:85:6d:c9:c6:
         06:e3:90:20:69:05:63:41:f2:cd:29:9b:de:90:27:c2:28:fa:
         f1:bd:4b:44:67:03:8a:27:4c:f9:61:a9:fd:46:13:8a:3c:cf:
         f1:2d:4f:6f:a9:7c:8a:6b:12:b3:e6:fc:38:c3:73:36:23:a2:
         67:32:3b:d8:90:b9:7b:7e:ac:26:80:f5:6e:71:82:19:2a:c6:
         c9:b9:87:1a:29:9e:2f:ca:2d:4f:4b:c8:4c:41:31:ff:e0:99:
         e6:ec:04:62:f0:a0:20:db:01:ec:5d:f0:4b:db:48:03:83:d9:
         1f:a3:28:54:08:6e:d9:da:0c:9c:83:20:65:e2:1b:5c:34:27:
         ed:e7:f9:d6:bd:fd:cb:f2:89:c0:18:0c:5e:61:7e:42:10:29:
         b5:87:79:96:99:da:47:bf:33:03:f2:b9:38:e1:77:b1:3b:4a:
         44:19:26:67:ad:ca:ce:ae:33:23:d6:fa:36:41:50:57:47:c4:
         47:11:21:bd:ab:fd:9a:55:c8:38:55:12:14:e9:bb:53:4f:a5:
         93:9a:23:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:23:38 2026 by rpki-client