Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
File:                     E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft (raw, json)
Hash identifier:          E1T7qCc65ECiq/Rj8v9mxe9+9+GqmwNlOjeFAdMrIQE=
Subject key identifier:   36:6D:E2:D9:11:64:CA:26:CF:78:7A:65:BF:4B:1A:18:19:91:76:CF
Authority key identifier: E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5
Certificate issuer:       /CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5
Certificate serial:       4DA39E4D1F9D06824AD340BD42AE40214EDFCADB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
Manifest number:          0101
Signing time:             Wed 29 Jul 2026 19:10:01 +0000
Manifest this update:     Wed 29 Jul 2026 19:05:01 +0000
Manifest next update:     Thu 30 Jul 2026 19:47:01 +0000
Files and hashes:         1: 323430313a373065303a3a2f33322d313238203d3e203633353338.roa (hash: xsErhEAOwjB/ZA5qSkY2qGpN9u/QeP5cfqWvkHIhTTo=)
                          2: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl (hash: /rIAPnPUqB1JashSZWRBP5d0XyivkR5GpbYlfWPgcxU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 19:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a3:9e:4d:1f:9d:06:82:4a:d3:40:bd:42:ae:40:21:4e:df:ca:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5
        Validity
            Not Before: Jul 29 19:05:01 2026 GMT
            Not After : Jul 30 19:47:01 2026 GMT
        Subject: CN=366DE2D91164CA26CF787A65BF4B1A18199176CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:94:90:35:49:2b:39:0c:dc:0f:ac:b6:a3:
                    4e:1c:c3:7e:13:6c:c0:ff:51:a7:42:3f:12:7d:53:
                    3f:58:df:81:5d:6f:80:c3:7f:76:3a:f1:2f:5e:ab:
                    d2:dc:64:a6:97:9a:5c:6f:de:32:5c:8b:1e:bb:e9:
                    61:a4:dc:a4:e0:28:5c:51:7c:c1:bf:85:aa:d0:88:
                    40:89:9a:6b:43:68:3e:d1:c4:ee:de:16:c5:33:4a:
                    a9:72:ae:c6:93:ea:8d:c4:d5:de:70:be:e2:a2:2b:
                    cd:39:b1:89:53:fc:71:50:c7:ea:fc:89:2f:39:6c:
                    7c:51:9f:d6:57:35:07:b5:ae:79:78:ce:7b:d0:04:
                    09:3d:b5:fb:78:79:1e:4d:14:6d:13:a2:76:c3:bb:
                    11:1f:64:a1:b9:a7:a1:b0:cd:cd:bb:60:e1:62:54:
                    4c:5c:84:8e:f7:e4:22:cc:06:b2:eb:bc:f1:3c:62:
                    8f:4d:21:b9:3e:a2:bf:24:cc:7a:c3:d1:3a:84:3d:
                    54:95:34:64:87:8e:66:f8:7b:c7:d8:0c:09:a8:20:
                    78:55:08:2c:ef:66:11:71:1d:a3:c4:4e:4f:d9:15:
                    7f:80:7f:39:41:51:8a:b4:89:fb:24:13:b8:3f:d7:
                    08:40:7b:a2:4a:88:5f:07:83:82:ee:9f:84:c1:a0:
                    3c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6D:E2:D9:11:64:CA:26:CF:78:7A:65:BF:4B:1A:18:19:91:76:CF
            X509v3 Authority Key Identifier:
                keyid:E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:82:ce:40:77:b7:c0:16:b3:b7:c2:49:b7:4f:42:88:12:b1:
         bf:72:1c:68:f6:8b:43:88:b4:77:07:53:c5:07:56:0a:f9:f7:
         90:e7:14:51:9c:7d:76:7b:f3:5b:7c:b3:6a:86:c6:cf:89:5d:
         5c:6c:b2:3f:94:d6:c0:28:e9:48:62:5a:2f:0d:6a:20:ed:c2:
         ce:be:1f:ac:35:dc:ea:81:bb:05:bc:4c:1e:b2:70:96:3c:ad:
         69:e4:a4:0e:e8:30:68:76:b7:53:3c:5c:f8:f1:7e:8e:67:8b:
         aa:8b:d2:bd:53:20:8a:9a:e2:71:4e:0d:e0:ab:6b:d0:da:b4:
         11:ed:5c:7c:7d:ed:fe:d5:a6:d1:23:47:a4:e1:25:5b:e1:82:
         3c:2e:e0:7e:6c:19:83:3b:be:c6:9c:59:5a:6d:b2:0f:81:d6:
         a4:8d:79:8e:a0:36:66:0c:dd:54:b7:a0:bf:a7:f2:ed:2b:27:
         cf:fe:a5:45:c0:66:37:6f:21:6d:52:5f:69:8e:1d:b3:88:5e:
         e3:c2:1b:21:d0:e2:54:80:d0:9f:74:79:f6:f2:50:9d:75:ae:
         ef:ea:57:52:0d:9a:54:71:ef:ad:48:7b:1e:8e:b1:f9:ae:83:
         a4:b1:96:2a:cf:6c:16:6f:6a:dc:ae:8c:00:9c:d8:f8:2f:65:
         1c:08:2e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:10:25 2026 by rpki-client