Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft
File:                     B7CD3069B4897C94D73E4A5156A5BB580263686D.mft (raw, json)
Hash identifier:          Phmwscvhw/JE9Kojw98PCplY1XF7bEohAiQm68LtjA8=
Subject key identifier:   61:65:0E:91:8E:57:2C:34:54:AF:71:4D:4F:7A:37:18:30:7B:D3:92
Authority key identifier: B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D
Certificate issuer:       /CN=B7CD3069B4897C94D73E4A5156A5BB580263686D
Certificate serial:       790973540C2A141CC2375DC135CEE77770265A24
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft
Manifest number:          C4
Signing time:             Sat 13 Jun 2026 23:32:26 +0000
Manifest this update:     Sat 13 Jun 2026 23:27:26 +0000
Manifest next update:     Sun 14 Jun 2026 23:38:26 +0000
Files and hashes:         1: 3130332e36322e38382e302f32342d3234203d3e20313337373331.roa (hash: 8Xb1CHZIDmh88wJbpKG5TbT7TsAK7LQOv8M6QxQppao=)
                          2: 3130332e36322e38392e302f32342d3234203d3e20313337373331.roa (hash: pM31wts4Oaso1hrJBK0dRasFzd5sL5iB5ioXtCHk96o=)
                          3: B7CD3069B4897C94D73E4A5156A5BB580263686D.crl (hash: QEUnQbF2mcsAD20Keisdi5U5fxgzHMUzm7AnPnL4Gwc=)
                          4: 323430323a333465303a3a2f33322d3634203d3e20313337373331.roa (hash: Wbeu0hKMIHoSh2P7VuIFvW2KrEjA7clBu32fGJbvhD0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:09:73:54:0c:2a:14:1c:c2:37:5d:c1:35:ce:e7:77:70:26:5a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7CD3069B4897C94D73E4A5156A5BB580263686D
        Validity
            Not Before: Jun 13 23:27:26 2026 GMT
            Not After : Jun 14 23:38:26 2026 GMT
        Subject: CN=61650E918E572C3454AF714D4F7A3718307BD392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:53:e4:57:2a:6a:dd:a8:38:13:87:08:29:
                    ab:df:94:8a:e2:51:27:54:ae:9d:dc:a1:57:5e:b7:
                    59:59:62:18:14:27:88:29:41:89:7c:f5:69:f8:2e:
                    47:ed:0e:b0:e7:7b:53:88:51:dd:fd:27:60:b9:e0:
                    0b:87:9c:cb:96:9d:da:8c:bf:74:d8:4b:d4:b2:3e:
                    35:f1:fb:ea:17:d2:31:1c:01:fe:eb:cb:55:4f:aa:
                    db:32:41:46:a9:51:ad:3f:a4:3d:b3:4f:f5:65:35:
                    0f:d7:1e:3e:cb:a5:c1:7c:b9:1e:b1:5d:95:55:5f:
                    9d:9f:63:31:1a:23:d9:0a:e9:89:ea:5d:66:06:86:
                    66:da:6a:b0:c0:e9:4c:74:8d:2c:37:05:3a:a6:73:
                    98:85:f2:29:ab:11:1d:aa:64:b6:98:78:cb:9b:a9:
                    03:de:96:43:a1:9d:c2:79:90:b3:08:bb:69:72:0f:
                    3d:90:c4:75:eb:cd:e2:c5:af:43:9e:37:00:ef:47:
                    3a:b8:64:02:cf:60:a5:19:2d:74:54:68:6f:41:11:
                    90:e0:55:48:b4:64:1e:7e:19:b6:27:f1:7d:73:28:
                    09:76:e0:1a:3d:62:b8:cd:2a:ab:98:71:f4:91:df:
                    1f:3b:f7:c5:d4:ee:e5:61:46:e2:b6:93:fd:e8:7e:
                    f3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:65:0E:91:8E:57:2C:34:54:AF:71:4D:4F:7A:37:18:30:7B:D3:92
            X509v3 Authority Key Identifier:
                keyid:B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:cc:ed:0a:45:53:e9:ca:50:c1:bd:9e:7c:e3:6c:0f:9b:1e:
         48:77:af:1d:67:3b:fd:1b:d2:5f:98:c2:29:dc:bc:f3:cb:d9:
         5b:3e:d9:d8:3d:c6:72:c7:fd:27:63:cd:aa:f7:d9:d1:fb:e7:
         51:7e:bb:0c:ae:f9:72:f7:33:33:99:39:76:3e:4e:ba:5d:25:
         b8:58:63:58:5d:25:e4:d2:2b:ae:88:fa:b1:8d:4b:a6:1f:f9:
         40:cf:ea:95:ed:b4:8d:85:ec:2f:0c:e8:6e:8a:2f:58:aa:24:
         b3:d6:09:51:9a:b6:12:a9:dc:14:e3:e2:cd:44:f4:3c:33:85:
         f0:7e:ab:39:90:e2:20:28:79:98:8c:9a:9c:15:04:9c:d9:98:
         62:d7:98:f9:5f:36:12:83:40:7d:e2:fc:5c:1b:fd:2a:6c:63:
         1b:33:58:b6:44:55:0e:5c:4b:df:bf:4b:18:f7:91:7a:b3:fa:
         8b:2d:3e:74:36:43:5a:f7:68:1e:92:4c:cf:df:c9:e7:10:cb:
         b9:5f:d2:57:5f:fc:0a:3f:06:f5:bb:b2:0d:d2:6f:a6:7a:78:
         3e:e1:27:25:53:df:bb:37:3b:5e:ab:1e:5d:4a:5e:25:64:96:
         2f:20:43:ff:12:e9:bd:94:c1:ca:ea:a6:15:de:99:87:8f:1e:
         80:38:25:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:49:09 2026 by rpki-client