Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
File:                     B0B537B0747D6013B06152AEE77D15203B1916FA.mft (raw, json)
Hash identifier:          BkQ7JRoK/REIUlfU/UgmnL3SA5bGPNHHclIw22ickGg=
Subject key identifier:   97:14:12:5A:72:38:E0:13:C8:A8:4D:60:78:4A:43:A8:05:CD:33:D7
Authority key identifier: B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
Certificate issuer:       /CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Certificate serial:       042CA8231F2E4C257C4286D44391F016DE8CFC37
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
Manifest number:          6D
Signing time:             Fri 09 Oct 2026 17:53:39 +0000
Manifest this update:     Fri 09 Oct 2026 17:48:39 +0000
Manifest next update:     Tue 13 Oct 2026 04:54:39 +0000
Files and hashes:         1: 3231302e37362e3137322e302f32322d3232203d3e20313334373632.roa (hash: EKUBeXes+M1jDCe7e1kc1oCmCgsBM6tO5sag3Ry34yY=)
                          2: 3231302e37362e3138342e302f32322d3232203d3e20313334373632.roa (hash: KBOVI2UBdbeXRbsHVeTV6sbjrU6doYtA6rDMtJTlq1U=)
                          3: 3231302e37362e3138382e302f32322d3232203d3e20313334373632.roa (hash: zI6ePoI0y2Fm1sSqrrUkSajPorMwE/xAmExyk0kFlus=)
                          4: 3231302e37362e3136342e302f32322d3232203d3e20313334373632.roa (hash: S4Xiq+tsebEtfsCJHFrLqedmnsBo40vyHoPs4f0RABE=)
                          5: 3231302e37362e3136302e302f32322d3232203d3e20313334373632.roa (hash: SrpaphldTts5AcZEbZ+7FmR5HxvlWebU1eK0VABiMKY=)
                          6: 3231302e37362e3137362e302f32322d3232203d3e20313334373632.roa (hash: uCOWXNMePOZa/iksUWzRBEjUWdyxzN11zhwz3y1U4Ek=)
                          7: 3231302e37362e3136382e302f32322d3232203d3e20313334373632.roa (hash: WkFPiKlYJz6jmeh4Y+K4Zer0JOq+QHQvGMcujzWOVz0=)
                          8: B0B537B0747D6013B06152AEE77D15203B1916FA.crl (hash: K/53WK6MhstPpiA+p5+xqG3AcA9Bz5zjNUC3pb7i5jE=)
                          9: 3231302e37362e3138302e302f32322d3232203d3e20313334373632.roa (hash: ncGJvfVZz1aXP6VWJdrIhLgknTdYP6bRFVSX0ogc/kg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 04:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2c:a8:23:1f:2e:4c:25:7c:42:86:d4:43:91:f0:16:de:8c:fc:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B537B0747D6013B06152AEE77D15203B1916FA
        Validity
            Not Before: Oct  9 17:48:39 2026 GMT
            Not After : Oct 13 04:54:39 2026 GMT
        Subject: CN=9714125A7238E013C8A84D60784A43A805CD33D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:4b:ff:c2:1c:ff:95:de:7d:22:a2:e8:1e:
                    34:d6:7d:0c:4a:cc:c5:74:b1:2a:f4:c0:81:3e:a6:
                    15:9a:b1:b7:b7:59:01:00:c2:86:41:47:0f:1a:08:
                    6e:70:48:7b:f7:04:54:79:dd:88:0f:ac:ce:5c:61:
                    2f:a2:fa:ea:02:a7:97:bd:7c:a6:7f:8c:ea:66:b2:
                    b9:8a:40:12:26:38:25:c7:5a:a6:a0:84:b0:e0:ce:
                    26:6a:8c:5c:c2:14:82:a1:06:b6:76:58:12:3e:ec:
                    c1:0e:1a:0e:50:19:03:52:68:6f:d9:c0:f5:99:78:
                    63:31:10:5b:ae:5c:0c:9b:42:d3:69:21:ba:b4:7f:
                    e7:79:c8:90:f7:e4:cf:dd:94:04:21:b2:af:0f:de:
                    0f:41:55:35:5d:ba:99:fa:6e:aa:ea:f1:a9:d7:47:
                    cd:46:45:75:61:7a:1a:5e:68:0e:4e:3f:fb:49:2e:
                    8b:8f:9b:74:a1:78:54:d6:31:f1:a7:19:9c:58:e9:
                    16:e5:39:cf:e0:7e:e6:79:ca:30:3b:e3:a2:bd:e9:
                    d9:4a:c4:6b:34:81:d0:14:f9:d6:74:72:e0:79:b9:
                    0b:28:e1:39:0f:de:0d:f5:5c:db:92:f1:3b:55:9e:
                    c3:6b:58:d2:66:3a:fb:ed:81:68:12:2f:22:db:49:
                    77:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:14:12:5A:72:38:E0:13:C8:A8:4D:60:78:4A:43:A8:05:CD:33:D7
            X509v3 Authority Key Identifier:
                keyid:B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:50:ad:58:77:73:dc:21:36:dd:41:49:b6:dd:16:8f:89:5d:
         f7:72:3a:7f:f0:8f:33:1b:c6:11:22:f4:e3:aa:06:90:6f:fd:
         5e:a0:f2:71:dc:83:e7:e9:be:b0:86:c4:2a:34:d6:d2:d7:57:
         ad:4d:69:d2:84:af:1c:01:55:57:6a:a3:31:ba:1a:63:e6:aa:
         a0:d7:eb:ea:d6:e6:5c:34:7d:8a:94:9b:a9:47:42:4d:ee:c6:
         42:aa:43:5a:22:01:27:9f:29:f8:a7:cc:4a:09:17:c6:9a:89:
         bc:d3:24:8b:70:b3:ec:eb:e9:f1:71:ea:11:1d:4c:8b:e4:38:
         8e:b2:49:30:b6:95:59:d9:7f:53:51:68:a8:c2:7e:7a:6f:e5:
         3d:3d:9e:9c:08:4f:80:8a:30:cf:6f:b3:18:d2:08:ce:d2:fc:
         79:56:26:a1:f4:b6:de:1c:16:3a:72:b6:96:33:82:cd:51:f0:
         16:18:2a:ff:9f:09:a7:ea:7e:4d:a4:df:89:d3:57:0c:88:4f:
         53:f1:55:7b:25:65:88:a7:64:d6:e9:20:6d:0a:ba:44:43:d2:
         9d:dc:1e:a6:c1:3c:38:b0:49:1a:11:52:66:a7:99:0e:96:ce:
         53:9a:d1:68:c4:9c:e3:21:4d:65:5b:1d:f3:69:71:c0:1a:9b:
         48:82:e4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:48:01 2026 by rpki-client