Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
File:                     BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft (raw, json)
Hash identifier:          DW2j6vGTmcYUfJyg2B5qgIWsiC4I8NLrUPscoy/1GVU=
Subject key identifier:   A5:C2:A2:0C:03:17:06:E8:AE:23:8E:A4:04:47:F3:99:66:8A:4B:68
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Certificate issuer:       /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial:       2052F0FBC6E553556D09D7E4564AA8E4252FF10F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
Manifest number:          0105
Signing time:             Wed 29 Jul 2026 05:33:34 +0000
Manifest this update:     Wed 29 Jul 2026 05:28:34 +0000
Manifest next update:     Thu 30 Jul 2026 08:40:34 +0000
Files and hashes:         1: 36392e3233352e3138342e302f32312d3231203d3e20313334373631.roa (hash: np+j/2H1LcK7mut452khZieuC8xhFqCKScZ+LH57rOQ=)
                          2: 3136312e3138392e302e302f31362d3234203d3e20313335363239.roa (hash: VArv7wtcC799gjidJmBBAegNoq7R1zV2WHiORYAIAis=)
                          3: 35322e38322e302e302f31352d3234203d3e20313335363239.roa (hash: BKfKRfeGnTe+uCfmNH8LGxHMZkSFP82yHfMi+FwAgaw=)
                          4: 36382e37392e302e302f31382d3234203d3e20313335363239.roa (hash: xBimZBgddQkxVZ4hekblEfEIhExEpMzz0u8+4zAsM8o=)
                          5: 36392e3233352e3132382e302f31382d3234203d3e20313335363239.roa (hash: xFWMWs1c6SAwWOInmbWsHWAmEOaJMBB4hoMBTc7gn8c=)
                          6: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl (hash: frtLY/r9WOC1Cez7qRZ2yPP77WV4DJwiVnKsJ94djXU=)
                          7: 36392e3233302e3139322e302f31382d3234203d3e20313335363239.roa (hash: /uf0g79WaYYKp8U6K7QwR/TfIar6CyVBAf2iICVpTWY=)
                          8: 36392e3233342e3139322e302f31382d3234203d3e20313335363239.roa (hash: 2JgPRqzChL6aRN2HHWJ+liAA49OceEMdwqv4mL4g3TA=)
                          9: 36392e3233352e3138342e302f32312d3231203d3e2039383038.roa (hash: YP3gTor7CQAO9/TMt7oBlKkQ5mhEZRk35ZJ848nmL1c=)
                          10: 36392e3233352e3138342e302f32312d3231203d3e203130323036.roa (hash: XdIIytMKeURqugQsIhiCG8921zvCYPpLFXWW/uA/1S4=)
                          11: 36392e3233312e3132382e302f31382d3234203d3e20313335363239.roa (hash: i3tzGoy9z14VYKRZErV4ccYrCvQWVU9YyKnJBvsNCy4=)
                          12: 36392e3233352e3138342e302f32312d3231203d3e20313335363239.roa (hash: bXtRngVO1ZHZloYd3fw60uZkV2dYuwOu5FeJjvbf0DU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:52:f0:fb:c6:e5:53:55:6d:09:d7:e4:56:4a:a8:e4:25:2f:f1:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
        Validity
            Not Before: Jul 29 05:28:34 2026 GMT
            Not After : Jul 30 08:40:34 2026 GMT
        Subject: CN=A5C2A20C031706E8AE238EA40447F399668A4B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b7:15:0c:40:a6:25:4b:70:d1:3a:6e:d8:be:
                    73:75:18:68:f0:c0:aa:84:cf:6b:bb:04:38:17:ab:
                    7c:00:44:91:5e:58:3c:73:b4:06:48:7b:ab:d8:88:
                    0b:1d:1d:ed:cc:29:c6:1f:7b:74:e9:7b:1a:19:d1:
                    4a:99:25:c1:30:23:58:61:4e:1c:d2:db:d1:17:f0:
                    b1:25:54:a2:15:59:ee:60:ec:77:d3:0e:a1:d3:ba:
                    75:ee:74:65:4f:47:82:66:53:6c:81:a3:b3:5e:bd:
                    b3:63:e0:bc:2d:94:5f:92:1f:bf:37:67:27:24:f0:
                    d0:d2:bd:a6:2c:66:f3:35:fe:42:24:f6:0f:6d:35:
                    3e:4e:61:a7:50:2e:34:dc:f7:dc:a1:be:25:e2:6d:
                    24:b6:8a:38:2a:77:8b:ce:89:22:e3:e4:38:7e:2e:
                    b3:a8:18:8b:96:c7:e7:ff:ec:f7:5b:fd:89:37:0c:
                    4d:49:18:43:0f:d5:96:f4:a2:a2:ed:ee:a3:03:03:
                    18:b6:25:f5:ee:01:e5:b1:42:18:80:3b:15:10:83:
                    13:46:54:dc:a7:e9:cf:9b:6b:d2:4e:86:1c:19:d6:
                    46:23:28:37:b6:a5:5f:33:6b:41:02:30:36:06:8b:
                    f6:91:ae:69:36:27:8b:6e:ce:d2:8b:f1:60:fd:af:
                    51:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C2:A2:0C:03:17:06:E8:AE:23:8E:A4:04:47:F3:99:66:8A:4B:68
            X509v3 Authority Key Identifier:
                keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f8:b4:cd:c4:44:05:5a:10:f6:7d:0b:c5:63:39:b3:fa:25:
         2f:41:b2:44:b2:1d:c8:43:cb:1a:b7:03:2e:d5:b0:e2:9f:89:
         f8:48:a9:5b:3a:e0:64:94:97:28:d1:50:f6:7e:01:29:fc:01:
         0d:a3:d8:fd:3b:5f:22:63:86:f1:1d:df:fb:84:7d:fa:70:3a:
         0e:34:28:29:3e:ca:1e:1a:14:94:04:4d:39:c4:15:91:c6:bf:
         e6:40:22:1b:1b:df:4f:4a:30:05:50:68:70:21:a8:83:8b:cd:
         12:8b:2b:f4:52:d0:a6:74:18:6f:a0:7d:98:42:2a:5b:6c:6d:
         06:0c:b4:b2:ca:31:13:47:24:54:cc:5a:48:48:3e:d3:d6:f1:
         4b:1b:e3:d9:66:16:0d:e3:31:59:51:fe:af:89:e2:a4:4b:25:
         72:6c:f4:02:26:ba:34:49:c5:94:cf:c3:02:2b:45:01:7a:7a:
         b6:d3:aa:6e:15:8f:b6:b6:9d:e0:fd:30:46:3e:7f:91:ff:5e:
         24:ab:61:ea:98:0e:5e:70:30:84:61:03:39:a2:b9:04:b6:66:
         f7:ad:20:6a:b7:9b:0b:ee:3a:7e:76:a5:2b:ab:be:a9:96:76:
         89:1d:40:6d:67:c5:49:f5:f5:35:21:30:64:13:7a:42:65:03:
         c9:dd:54:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:30:53 2026 by rpki-client