Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
File:                     AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft (raw, json)
Hash identifier:          SigLxTpcvYR5W6uPn4w39XcB1RfS3zY+QzQWR2dRfSA=
Subject key identifier:   5C:42:A1:8E:6B:6F:6E:5C:A4:6A:D2:FE:35:91:EF:EC:F6:69:D6:97
Authority key identifier: AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5
Certificate issuer:       /CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5
Certificate serial:       31C0EDD9D3D328B9B992B1A7377EFF87DDE70004
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
Manifest number:          81
Signing time:             Sun 20 Sep 2026 19:12:46 +0000
Manifest this update:     Sun 20 Sep 2026 19:07:46 +0000
Manifest next update:     Thu 24 Sep 2026 03:49:46 +0000
Files and hashes:         1: 3130332e3130372e3232302e302f32322d3232203d3e203535393632.roa (hash: JjhOnvBAbyhHj25SJk42Z/mWkYT2CJtKWOeuYdrDSEM=)
                          2: 323430323a356634303a3a2f33322d3430203d3e203535393632.roa (hash: J8V4fC0EcnnEJAvudK1CUUz+Anxis8iYxXNE/PbJCkw=)
                          3: 3130332e3130372e3232302e302f32322d3232203d3e2034383038.roa (hash: lUxvbUf3vyf4fNMsQgH2jFFsF7urmoVrC7TTHQeV5x8=)
                          4: 3130332e3130372e3232302e302f32322d3232203d3e20313331353433.roa (hash: vZBk5SOJuUm559ZMaJN8pTKtV568qUIjt4RbuicJAVo=)
                          5: 323430323a356634303a3a2f33322d3430203d3e203435313135.roa (hash: ZN27c9UzjJ3wdK64dTmHf5rjrWHM5T8TdThVNyywHCg=)
                          6: 3130332e3130372e3232302e302f32322d3232203d3e203233373234.roa (hash: M89JPpic5CUnz+XG6ZBO4FH5rzyVxYok5bjRrf4SiqU=)
                          7: 323430323a356634303a3a2f33322d3430203d3e20313331353433.roa (hash: Fr7SJF8nS/QnvygXHIyiT1ifZlb4UClCGvRUFGJ/Wbg=)
                          8: AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl (hash: 0fUBy89TthvA6Txe1/41Xfx8+74YaDbFyXLASdslaNQ=)
                          9: 323430323a356634303a3a2f33322d3430203d3e2034383038.roa (hash: hEdpxSyQhKq8Tt6+4mX4pbyGXdjKHqDZ4gkvGobLPvk=)
                          10: 323430323a356634303a3a2f33322d3430203d3e203233373234.roa (hash: BYhl8Kes59vhOWYPWklbb97wfjM9JLHk+KCCzyARPMo=)
                          11: 3130332e3130372e3232302e302f32322d3232203d3e203435313135.roa (hash: UjzzAVTAPjmbxCOqtX5OnTgoTMEPz4NjCFbWABjcjYU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 09:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c0:ed:d9:d3:d3:28:b9:b9:92:b1:a7:37:7e:ff:87:dd:e7:00:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5
        Validity
            Not Before: Sep 20 19:07:46 2026 GMT
            Not After : Sep 24 03:49:46 2026 GMT
        Subject: CN=5C42A18E6B6F6E5CA46AD2FE3591EFECF669D697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:2f:71:af:df:a8:eb:6f:13:a1:9d:bc:ef:
                    7f:15:b8:f4:d8:6a:d2:02:59:bf:6c:5b:ab:f0:4f:
                    0c:e7:de:07:f1:50:ef:48:c3:71:b9:48:71:49:d5:
                    5c:6a:50:e6:ea:0d:5e:58:42:30:83:34:9b:7e:61:
                    d5:ba:a3:20:29:b4:f0:59:6c:2b:6a:90:ef:9c:ba:
                    f3:33:94:35:36:79:2b:55:e4:39:26:c2:aa:97:39:
                    1e:e5:50:0c:51:b6:a4:49:fb:e0:54:fe:63:c7:73:
                    ab:b0:d1:46:4a:d0:64:0e:5f:05:18:57:d0:c3:92:
                    cb:33:e2:ab:0b:af:00:20:c3:19:86:c1:04:bc:70:
                    aa:d4:15:97:0d:d4:4e:55:e0:6c:48:99:13:91:f1:
                    f3:56:37:a4:ae:7a:72:91:11:06:93:d1:86:4a:5d:
                    35:01:d6:e6:e3:08:01:13:09:24:3f:56:53:b7:34:
                    92:94:f5:dc:a1:b2:34:a6:ac:77:b4:9e:85:46:98:
                    10:4f:15:f9:d8:41:89:19:5d:c3:c5:2d:9f:10:5d:
                    04:19:34:06:8c:b2:95:bb:cd:11:2e:3b:03:3f:cc:
                    e2:23:e0:9d:06:f2:84:04:cb:8b:fc:41:de:69:62:
                    80:c3:78:72:80:ef:ce:0a:b8:26:e6:b8:5c:aa:45:
                    7f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:42:A1:8E:6B:6F:6E:5C:A4:6A:D2:FE:35:91:EF:EC:F6:69:D6:97
            X509v3 Authority Key Identifier:
                keyid:AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:90:2a:cc:3a:0a:cc:52:7c:9d:a1:78:3b:c1:21:1c:a5:09:
         ea:44:43:d6:b8:27:23:5d:21:3f:25:31:ae:e2:36:98:9f:7c:
         5a:69:82:43:0d:b1:13:6f:42:8e:e7:3f:63:da:54:31:2a:c0:
         7e:7d:04:14:47:88:b4:1d:a1:54:2e:a7:9c:24:48:5a:7c:2b:
         16:46:e5:53:be:21:9d:b3:05:ae:9a:2b:10:80:53:2b:fa:98:
         31:5c:b2:f4:1f:51:08:32:8b:41:d1:69:1c:9b:13:68:94:f2:
         a4:48:ee:d5:af:7f:ba:9e:0a:63:fe:52:3a:96:30:5a:3c:07:
         93:a5:4b:a1:61:79:f8:f7:87:3b:a1:46:f5:23:a3:8d:8e:80:
         26:ae:b2:5e:52:d3:0e:d0:f2:26:3e:b0:3b:a3:f4:c6:77:91:
         c5:f0:a9:49:22:c4:fe:32:39:9f:46:f6:75:2f:91:31:14:14:
         84:37:a4:4d:a1:8f:6f:f4:65:5b:90:1b:d9:5c:e8:94:1f:a4:
         34:7a:d2:07:6f:61:b9:94:11:6f:77:be:06:29:2e:5e:db:84:
         08:b9:a9:42:64:19:36:f6:a8:cb:a2:bf:7c:f6:32:e4:c9:67:
         b3:4c:ce:c6:b0:2a:54:44:21:c8:11:8c:b9:f6:88:24:c0:5b:
         93:d0:97:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:11:35 2026 by rpki-client