Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
File:                     191E76D74421148B42FA2A7F663270AE7FAD25F9.mft (raw, json)
Hash identifier:          LSyKfnOQPQfekFslKloFQWf+U/Mx3a5/X5FdW+8ob58=
Subject key identifier:   56:9E:0D:52:FD:05:4A:AB:8E:E0:3F:14:5D:58:1E:B7:87:6B:4A:4F
Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
Certificate issuer:       /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Certificate serial:       74000787A8179DF75281AEA0AAB4F6DBA9BB7863
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
Manifest number:          C4
Signing time:             Sat 13 Jun 2026 11:26:46 +0000
Manifest this update:     Sat 13 Jun 2026 11:21:46 +0000
Manifest next update:     Sun 14 Jun 2026 13:04:46 +0000
Files and hashes:         1: 3130332e3131362e3132332e302f32342d3234203d3e203633363534.roa (hash: 6OtEuNz2GVGLvEPnp1uI15Y+vgwMkKwikkqR/oRSa24=)
                          2: 3130332e3131362e3132332e302f32342d3234203d3e2034383437.roa (hash: iusd/geGAkaqNqYv0woWsgccBNM+keeMZWKm1FAoOOM=)
                          3: 3130332e3131362e3132312e302f32342d3234203d3e203633363534.roa (hash: vpD7NEE8qzM+eWphvno3vCArBIi9VdE9XjhBRn48b6k=)
                          4: 3130332e3131362e3132302e302f32322d3232203d3e203633363534.roa (hash: fLgddK5a5pen10EIOArIO5eS1Bvv0lSS9vSM6d0T0bw=)
                          5: 3130332e3131362e3132302e302f32342d3234203d3e2034383437.roa (hash: zB7FMCFhHyOWYUyT241bOpU68Hl2jbAwsIx3PIajOso=)
                          6: 191E76D74421148B42FA2A7F663270AE7FAD25F9.crl (hash: +TkZA7canWGYs1zF4NFwiZH2Fw2W5p7PBoHDY8FIPAU=)
                          7: 323430323a663963303a3a2f34382d3438203d3e20313337373937.roa (hash: Xa71V3zlzwJxLxJVMnOGWGmp2Wl6+BqPl/c74CX5nDA=)
                          8: 3130332e3131362e3132302e302f32342d3234203d3e203633363534.roa (hash: sjhYlFRils7TGbe4yrQB1MXoq74ExmSHsG4znfKuu7I=)
                          9: 3130332e3131362e3132312e302f32342d3234203d3e2034383437.roa (hash: bybvQVpDA62zpyPwHa1XWTYZhk2FjGjkQojOKPAlIPY=)
                          10: 3130332e3131362e3132302e302f32332d3233203d3e203633363534.roa (hash: ayiRQLB0vCQOVj4IcpJdzMo4ohtXvgd7waElFg36mCA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 13:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:00:07:87:a8:17:9d:f7:52:81:ae:a0:aa:b4:f6:db:a9:bb:78:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
        Validity
            Not Before: Jun 13 11:21:46 2026 GMT
            Not After : Jun 14 13:04:46 2026 GMT
        Subject: CN=569E0D52FD054AAB8EE03F145D581EB7876B4A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:53:49:39:06:9a:c0:04:6d:d5:ab:d2:89:
                    98:db:a3:88:30:f8:72:c4:63:04:e7:3f:39:ce:01:
                    b4:f4:b1:de:69:56:4b:48:fe:f7:57:8c:53:dc:34:
                    f1:7b:f7:e3:fe:5b:6e:5d:e5:83:28:e2:c0:7e:80:
                    30:39:f7:a3:0f:56:5e:3e:c0:1b:c9:8f:2e:ac:21:
                    c3:82:43:09:5c:00:3c:5b:e3:f7:b2:7e:de:22:7f:
                    83:e7:2d:f1:64:28:3a:24:6b:87:d0:f6:c4:5d:30:
                    d6:a9:13:fb:e0:c2:8c:41:e7:11:82:0e:54:c3:9a:
                    1c:a7:eb:68:28:c3:c0:f2:a5:9c:62:cd:37:2a:d0:
                    0c:ec:9b:db:d9:0a:af:74:5f:4a:40:0c:3f:a2:89:
                    ea:ee:54:4f:73:f4:8f:8e:c5:26:eb:2f:9d:26:e9:
                    23:c9:70:e7:4b:72:90:a3:da:1f:83:cc:cb:66:5e:
                    1c:ff:44:66:b9:f7:6d:be:a3:5d:fa:e0:d8:e1:74:
                    c3:87:aa:04:f8:2c:60:3e:ee:06:89:f9:d3:76:0b:
                    f4:ed:01:3e:e6:a6:32:e0:cf:64:c6:a6:79:3b:10:
                    ac:4c:d4:96:1d:ce:90:4f:fb:18:eb:d3:09:23:67:
                    de:60:66:6d:71:fd:2e:47:b1:d6:ea:56:91:20:b8:
                    06:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9E:0D:52:FD:05:4A:AB:8E:E0:3F:14:5D:58:1E:B7:87:6B:4A:4F
            X509v3 Authority Key Identifier:
                keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:34:1b:34:fc:af:2e:f2:4b:40:d5:ed:32:01:61:09:6e:91:
         8d:37:bf:3c:8d:b0:b1:3f:6c:92:7d:30:49:5a:49:aa:97:df:
         e4:86:b5:38:c9:65:d6:9b:d2:9e:76:16:d4:43:00:6b:30:2f:
         da:0f:2b:5c:53:d6:ec:5e:0c:f1:37:35:19:12:01:7f:10:ff:
         26:1f:65:5c:6e:8a:c5:0c:d5:b2:e0:0f:c4:70:8e:7f:fd:14:
         52:a3:c1:91:b5:c2:eb:05:f7:01:c4:f3:67:e9:a3:88:ce:40:
         7a:60:13:c5:32:68:0e:24:58:7c:94:f5:a2:cf:a1:bb:5f:d5:
         61:be:f8:85:81:b7:e5:7a:6a:77:41:35:4c:d2:d2:e0:d1:a4:
         20:ba:fc:b9:98:09:b5:88:c1:71:6c:6c:df:74:10:b7:9a:03:
         ae:f8:68:9a:e0:66:04:10:80:9d:b1:c2:2e:57:53:59:9e:40:
         b4:dd:3e:7c:15:a7:68:e2:9e:26:1b:65:23:1f:7b:2f:34:e5:
         e0:26:2b:3b:02:26:cd:5d:b9:d4:5b:3c:d2:09:1e:07:33:94:
         ee:b2:de:d7:c4:63:a7:cf:b9:58:1b:e3:7e:92:95:d3:b6:7a:
         95:4d:ef:37:f3:24:51:8d:83:ba:a3:f1:15:2a:f0:0a:8f:3c:
         04:05:b5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:04:54 2026 by rpki-client