Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft
File:                     1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft (raw, json)
Hash identifier:          Ef8hzhHOn9s8wA4IdNyBE925zLm66+gOJY/J+Utjpk8=
Subject key identifier:   CD:26:AB:91:48:A6:CF:3B:86:F8:C5:9F:8A:EF:F5:61:60:70:A8:8B
Authority key identifier: 1C:0A:7C:94:4D:B9:9C:44:19:C3:E2:89:FF:A9:80:FF:82:2B:8B:71
Certificate issuer:       /CN=1C0A7C944DB99C4419C3E289FFA980FF822B8B71
Certificate serial:       60B02BE9057A9F337F0C95BF0304F2AD96DDFA0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft
Manifest number:          80
Signing time:             Sat 17 Oct 2026 03:13:25 +0000
Manifest this update:     Sat 17 Oct 2026 03:08:25 +0000
Manifest next update:     Tue 20 Oct 2026 07:01:25 +0000
Files and hashes:         1: 1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl (hash: dr/FGj0RuoVxVrV7QTphWw1hckz/IE6YRPuszGA6MOY=)
                          2: 3131372e3130332e3132382e302f32302d3234203d3e203338333537.roa (hash: u7LzJQwy+fgwt4WDTFIyv8MHQBC/pA/j8q1mwwgHXuo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 11:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b0:2b:e9:05:7a:9f:33:7f:0c:95:bf:03:04:f2:ad:96:dd:fa:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C0A7C944DB99C4419C3E289FFA980FF822B8B71
        Validity
            Not Before: Oct 17 03:08:25 2026 GMT
            Not After : Oct 20 07:01:25 2026 GMT
        Subject: CN=CD26AB9148A6CF3B86F8C59F8AEFF5616070A88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:1f:a3:9c:5a:0e:34:92:4a:8d:a4:e2:fc:
                    02:75:4d:67:af:2b:83:01:20:32:aa:3b:5d:be:14:
                    8a:3d:e4:70:71:a0:54:b4:6a:68:b3:dc:86:47:c6:
                    2f:3d:6c:d9:fb:5a:22:db:77:0a:8a:a4:eb:f4:f5:
                    2f:34:88:7e:30:7c:d9:8d:7e:6f:fa:97:5e:bf:ea:
                    84:43:13:b3:d1:fb:af:96:b2:58:5d:52:94:c4:20:
                    a6:6f:f3:b7:87:92:02:bb:55:b3:2b:31:b7:0a:78:
                    b4:15:ce:08:13:c4:c5:17:19:59:f2:fa:52:5a:9b:
                    f2:f1:37:12:3d:67:08:c4:7e:c2:47:2f:9e:53:e5:
                    9a:75:22:fe:61:e0:25:96:ae:6a:0b:09:5b:a8:78:
                    70:bc:0c:89:68:a6:11:0b:85:1f:c6:01:f4:ac:9e:
                    1d:e2:10:94:53:08:96:5d:4e:32:30:c3:39:30:2b:
                    58:6c:a5:c5:fa:ec:ee:3f:1a:c0:4e:e9:27:94:9d:
                    88:b9:3e:17:47:41:9c:18:b8:97:19:55:7d:ec:5d:
                    57:74:76:66:0a:32:4b:11:c9:c9:38:ae:53:eb:7e:
                    88:d5:e5:b0:15:ad:17:66:bc:b7:32:e1:3b:59:97:
                    ae:3a:0f:90:04:68:61:9d:f1:db:50:14:41:10:1c:
                    85:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:26:AB:91:48:A6:CF:3B:86:F8:C5:9F:8A:EF:F5:61:60:70:A8:8B
            X509v3 Authority Key Identifier:
                keyid:1C:0A:7C:94:4D:B9:9C:44:19:C3:E2:89:FF:A9:80:FF:82:2B:8B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:b2:f7:84:40:e0:2d:76:5c:16:9a:43:b2:5c:c8:ea:d6:85:
         9d:bb:cc:cf:5e:fa:89:d6:f5:34:42:73:f0:19:30:80:7a:97:
         4f:55:fd:0b:25:5d:ee:2d:a4:3f:25:d6:61:99:a3:25:47:f6:
         82:29:ee:e3:4a:5d:eb:90:81:79:69:7c:46:b3:a8:78:84:2f:
         a6:f6:38:3a:f7:82:93:50:eb:79:0a:61:80:fb:44:2c:8d:03:
         e2:52:8a:b8:75:d9:b4:d3:12:81:b8:a3:1e:6c:c8:64:66:d9:
         af:b0:f4:b4:2a:31:64:23:b4:6a:7a:33:e6:74:3d:95:cc:c8:
         c6:f2:d3:08:42:18:4b:97:69:c0:e5:2d:46:90:00:18:6b:ce:
         d3:9b:69:75:23:c2:20:e6:bc:3f:09:20:2f:48:4a:1c:5d:f6:
         ad:1f:52:f4:8e:1a:3d:48:13:7a:c7:03:ba:2b:ff:76:99:b6:
         77:bf:38:f8:b1:1a:47:94:02:1f:a1:c4:cf:dd:b5:af:2a:c1:
         e9:1c:4a:0c:ff:6e:6c:5b:83:68:a8:84:89:3e:96:07:bc:28:
         5c:f0:1d:b9:44:a7:61:7b:cc:32:64:a0:7c:4a:e0:03:b5:4d:
         52:40:f1:17:b8:29:db:f1:8c:e1:e5:09:ca:2f:fe:47:48:d6:
         d9:81:a5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:57:18 2026 by rpki-client