Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
File:                     50A5171941F715FACDCF9DD46FA674046AC02D04.mft (raw, json)
Hash identifier:          gX8r52Ud1u3ql388OIGAgfLfpVCiaK0owanTP6J6hO4=
Subject key identifier:   F1:C5:34:07:5C:14:94:6B:FE:75:AE:54:1F:36:92:88:A9:A1:29:93
Authority key identifier: 50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04
Certificate issuer:       /CN=50A5171941F715FACDCF9DD46FA674046AC02D04
Certificate serial:       CD1C535A7BEBFB78B3DEDBF52B60F0E76DC643
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
Manifest number:          78
Signing time:             Fri 17 Apr 2026 20:24:48 +0000
Manifest this update:     Fri 17 Apr 2026 20:19:48 +0000
Manifest next update:     Sun 19 Apr 2026 00:13:48 +0000
Files and hashes:         1: 323430343a363338303a3a2f33322d3438203d3e203138323537.roa (hash: e092N5ZIw8NIOzez3Wr2tRokhJN6B0n06OiT8fKrvto=)
                          2: 3131382e3138342e3132382e302f31372d3234203d3e20313338393530.roa (hash: BPTzwC6QNr0mZbMlCDApnpFNWALr7CkeZYYL4jfCJqI=)
                          3: 3131382e3138342e3132382e302f31372d3234203d3e203233363530.roa (hash: M2mhmaVYXohsZSx0mGr2+YhMGZG5m/A4U5wT++q9UVk=)
                          4: 50A5171941F715FACDCF9DD46FA674046AC02D04.crl (hash: ePHIlrzEsV5OHY3zgdZXl9dzAu7jsA4f+8LY0OvwkmA=)
                          5: 3131382e3138342e3132382e302f31372d3234203d3e20313430323933.roa (hash: j5borvIgjotWQ92+vPRSlxUfz7IOQtoG2WJTyai460I=)
                          6: 3131382e3138342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7LPc87hS5rjIOtI6iPGGcyZ23idOROuWnZG/gbZcJmY=)
                          7: 323430343a363338303a3a2f33322d3438203d3e20313430323933.roa (hash: wOEu4s8or2SwQwHND5Q2d5xq0kfsHWiBIQ/WtFCz69A=)
                          8: 323430343a363338303a3a2f33322d3438203d3e203233363530.roa (hash: ZonKZhguTk17nFk21NONrgzeysQRGdLBzTmVOs0FiTI=)
                          9: 3131382e3138342e3132382e302f32312d3231203d3e20313337373032.roa (hash: DNLg5TiXgapWfZOaVGtGTe80zdMoFa/6XxRWNFo+LUM=)
                          10: 3131382e3138342e3132382e302f31372d3234203d3e203138323537.roa (hash: BdhmLC4zgYEiVmndB2HSccET9FqpO3NsVZi11RKwT6Y=)
                          11: 323430343a363338303a3a2f33322d3438203d3e20313338393530.roa (hash: um5xmJsffRW2lIF7biMqE2a2cHsjZcaKv+O4nXwQlmI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            cd:1c:53:5a:7b:eb:fb:78:b3:de:db:f5:2b:60:f0:e7:6d:c6:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50A5171941F715FACDCF9DD46FA674046AC02D04
        Validity
            Not Before: Apr 17 20:19:48 2026 GMT
            Not After : Apr 19 00:13:48 2026 GMT
        Subject: CN=F1C534075C14946BFE75AE541F369288A9A12993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2c:c7:9e:51:bc:29:25:01:af:b2:bc:f7:7c:
                    39:9a:e3:07:74:4a:e6:fa:18:44:16:47:e9:dd:5d:
                    fe:03:eb:3f:78:d0:83:66:af:f4:fc:b6:d5:df:00:
                    bd:f8:ee:48:35:3a:49:a6:d0:0c:80:1b:0e:a0:b3:
                    5e:c9:a4:3f:35:20:cc:e2:65:59:12:ee:9b:b1:9f:
                    06:ac:78:c8:f6:f0:5f:ab:f7:a3:84:5f:8d:e3:04:
                    c6:b5:82:86:53:09:85:ea:cd:62:21:2a:e5:11:32:
                    80:df:ec:a0:71:b2:e0:bd:c4:28:b0:49:99:cd:4d:
                    49:90:35:28:09:60:1f:cf:b5:85:be:e6:8a:55:37:
                    9f:61:8c:18:f4:06:f6:c6:cf:6a:ec:f5:10:c9:30:
                    17:6f:34:8c:2b:5e:b8:72:04:7a:6b:c8:73:8f:08:
                    01:aa:b9:55:18:70:f7:c6:eb:24:9d:f9:07:5d:46:
                    e2:17:67:69:ed:a5:e2:8a:5a:6a:c6:dd:aa:43:58:
                    73:d7:24:88:20:0c:55:91:37:50:ed:2b:cb:16:ad:
                    ae:c9:ec:63:e3:4c:ec:b7:d9:37:bf:76:8d:86:8b:
                    8d:ea:cb:57:03:15:48:a3:3e:0f:8e:af:79:a0:45:
                    58:56:4a:9b:d4:f5:c6:8e:32:32:d7:9e:e3:c0:94:
                    c7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C5:34:07:5C:14:94:6B:FE:75:AE:54:1F:36:92:88:A9:A1:29:93
            X509v3 Authority Key Identifier:
                keyid:50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:de:eb:e9:ff:79:6e:10:e5:4a:2a:bf:83:c6:7d:95:af:fa:
         23:f7:60:52:70:d5:d7:d4:6c:25:59:ea:2b:3b:1e:be:f8:9d:
         47:97:78:32:3c:7f:4b:b2:16:75:b5:e0:e7:61:a6:40:38:e6:
         46:30:fe:99:56:49:bb:e8:58:c3:81:33:7a:39:ff:13:fa:0d:
         f4:d3:43:59:4d:ea:8e:9a:8d:9d:34:d7:6a:e3:7a:0c:fe:6a:
         99:46:2c:d6:78:cd:af:79:72:2c:af:15:9e:d8:cf:d0:ea:64:
         66:fa:ef:49:b5:2e:c8:56:db:6e:52:4b:a3:5f:50:b9:4a:88:
         d5:bf:ee:15:c7:95:98:b5:f1:ba:6a:fa:b8:ca:02:d7:5e:09:
         ff:6d:1f:9c:87:a3:a9:84:3b:dc:a9:6e:0d:03:38:0f:68:5b:
         8c:2c:02:11:2e:2d:92:62:59:df:b8:bf:66:ed:65:12:7d:a2:
         76:1d:8f:0d:04:45:f7:c5:70:6e:4d:4d:d3:6c:3f:c0:2e:ee:
         26:41:f5:0f:9a:78:d6:98:86:ff:50:57:60:33:79:7c:54:f5:
         c6:5a:6d:d0:fc:2b:e5:8a:d8:c7:e2:11:74:e4:38:4c:05:78:
         f7:3c:0c:b3:1e:17:3a:83:dd:0c:5b:de:13:e9:7a:12:ef:46:
         97:9c:74:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:07:51 2026 by rpki-client