Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
File:                     4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft (raw, json)
Hash identifier:          JhJc4/NhQ1nhjNCcv1/OI0GLiYf5J1g4kYWOZwJQbEs=
Subject key identifier:   42:F2:9B:F3:C3:EF:D0:7F:8A:39:B7:0E:C6:C7:40:29:83:8F:39:DE
Authority key identifier: 4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5
Certificate issuer:       /CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
Certificate serial:       6699B78158A02B2EA0A0B40BE13F6DD87AC4F16B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
Manifest number:          77
Signing time:             Fri 17 Apr 2026 01:04:37 +0000
Manifest this update:     Fri 17 Apr 2026 00:59:37 +0000
Manifest next update:     Sat 18 Apr 2026 03:45:37 +0000
Files and hashes:         1: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl (hash: a/Gvv3JmpinxOIOTF46pP0iqHiqL3SVOU6Hj36n607c=)
                          2: 3136302e3235302e38342e302f32332d3234203d3e2034383136.roa (hash: M0wfTR/OAJBje8n+/3S62Tlg2BVD3Kl2zCHWBs3Dqbo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 03:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:99:b7:81:58:a0:2b:2e:a0:a0:b4:0b:e1:3f:6d:d8:7a:c4:f1:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
        Validity
            Not Before: Apr 17 00:59:37 2026 GMT
            Not After : Apr 18 03:45:37 2026 GMT
        Subject: CN=42F29BF3C3EFD07F8A39B70EC6C74029838F39DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:63:2c:6e:b6:84:46:79:95:ca:04:ac:14:
                    b6:9a:6f:e3:dc:2f:e8:d5:87:9c:5e:c1:71:97:a7:
                    e4:76:e4:6f:19:99:77:0e:99:8d:a3:96:ba:a8:c3:
                    a0:44:8b:6c:0f:e2:12:f8:b7:c3:b0:b5:07:32:1f:
                    5c:b6:12:53:e7:c4:c0:4a:04:98:d3:1c:0f:7b:ae:
                    65:92:bb:5e:e9:b3:04:12:36:44:f8:db:ad:26:17:
                    68:44:5a:e8:42:15:7c:db:61:e2:d1:b5:10:52:03:
                    3a:a9:aa:c4:98:9e:4e:f5:ab:5a:f2:64:0f:52:2f:
                    f4:e4:ca:59:e9:ce:68:bc:1e:31:ab:a2:fb:72:96:
                    89:38:0a:b2:ee:b7:26:1e:b7:9c:17:84:f1:28:84:
                    1b:93:61:60:b6:53:10:dc:b9:f7:89:71:81:e9:2e:
                    a8:00:8a:66:22:00:48:c0:e4:4d:ce:43:b3:f0:b2:
                    49:39:dc:28:16:11:4a:57:5f:ea:71:97:9c:7b:3b:
                    07:67:cd:07:b6:bb:86:ce:75:9e:13:8d:09:56:59:
                    58:ef:38:03:bf:fd:a7:48:8c:9c:44:ca:86:57:ad:
                    15:52:43:7a:04:7c:9e:2a:51:d9:29:82:b5:96:4e:
                    2f:74:b8:91:0a:8b:cc:dd:ed:ee:1a:5f:9f:c3:c3:
                    76:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F2:9B:F3:C3:EF:D0:7F:8A:39:B7:0E:C6:C7:40:29:83:8F:39:DE
            X509v3 Authority Key Identifier:
                keyid:4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ff:c6:8e:a3:6c:1b:6e:f1:57:46:f0:cd:92:7f:07:e7:74:
         9a:2b:db:69:a1:f1:94:b8:48:df:c4:30:06:a3:8a:42:79:b7:
         91:49:19:63:f2:4f:68:dc:56:02:4c:54:2d:93:be:da:f1:eb:
         b8:3d:ef:c8:f6:4f:22:e5:30:fb:10:d7:4f:25:37:93:34:7a:
         1b:f9:a5:90:be:12:aa:7e:82:35:13:2f:eb:c4:1d:f2:4a:ae:
         73:6c:5a:f6:65:68:c9:76:ee:b3:19:5e:dc:19:84:8e:65:cc:
         20:7a:a7:be:4b:78:cb:f2:b8:38:94:a1:e4:1c:f7:38:ca:f5:
         58:4e:71:3c:48:a9:08:9a:d3:c1:6b:ef:2e:d7:0d:03:56:f1:
         19:57:31:5b:84:08:45:33:7d:71:6e:64:90:cc:50:a1:c6:3e:
         95:9c:35:65:87:3a:4d:bf:61:5c:bb:59:f9:36:84:f7:28:71:
         57:1d:e6:80:27:d6:ed:96:2a:3b:70:2d:11:33:dc:8c:c4:1c:
         f4:6c:82:1e:fd:5d:7e:9c:3c:20:3a:7f:cc:49:6e:4e:d6:74:
         1f:18:87:ad:a1:25:74:2a:e1:bc:10:b4:fd:be:1a:e9:07:ee:
         97:2f:81:3c:87:48:5b:02:56:e5:e3:1a:48:f6:63:7b:bb:91:
         07:1b:1c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:57 2026 by rpki-client