Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft
File:                     1A5D93C2B21C390D054872B547EF671BC1112ED5.mft (raw, json)
Hash identifier:          X45p309+tR2rpjV2hHs71BrJehKM/g0Bm99JLCFeHlY=
Subject key identifier:   4C:3B:5F:A6:49:75:24:ED:A4:0B:DA:90:60:97:99:B1:AB:AF:79:D4
Authority key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5
Certificate issuer:       /CN=1A5D93C2B21C390D054872B547EF671BC1112ED5
Certificate serial:       7030FE3AF07478BFEC2444C2F26C67F4C2AC99B1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft
Manifest number:          FF
Signing time:             Wed 29 Jul 2026 07:28:47 +0000
Manifest this update:     Wed 29 Jul 2026 07:23:47 +0000
Manifest next update:     Thu 30 Jul 2026 08:09:47 +0000
Files and hashes:         1: 3130332e34372e38302e302f32322d3232203d3e20313334373635.roa (hash: kU8ZpTrXY6JeDmKQWJ4S005IDbAoloAT2cFKH9NDoa4=)
                          2: 34332e3232382e37362e302f32322d3232203d3e20313334373635.roa (hash: 0QQ3acV5OGPw111O9u72jjimK1i0jbUIJPcTkw6FNnE=)
                          3: 3130332e32332e382e302f32322d3232203d3e20313334373635.roa (hash: ln972wvrzSBEORo9DPPeJbIXLsmgp1iIG1BgLmdr5+g=)
                          4: 34332e3235342e3235322e302f32322d3232203d3e20313334373635.roa (hash: YBGoT8mUzeyt/JC8Sh5jlyNBlqC5ecvmhtvHHC0j9gM=)
                          5: 1A5D93C2B21C390D054872B547EF671BC1112ED5.crl (hash: k2bNLXJzO/JOiqOvstSyyFfNcTIGloeFfUJYa768hKQ=)
                          6: 3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa (hash: ZjwDDfmeHi1TdKdCeuuvzyOYx2ipxq03Vh0SPR2jC34=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:30:fe:3a:f0:74:78:bf:ec:24:44:c2:f2:6c:67:f4:c2:ac:99:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5
        Validity
            Not Before: Jul 29 07:23:47 2026 GMT
            Not After : Jul 30 08:09:47 2026 GMT
        Subject: CN=4C3B5FA6497524EDA40BDA90609799B1ABAF79D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6d:c1:53:9d:22:23:4f:bf:49:31:b0:7a:57:
                    5c:d5:27:2e:65:61:5e:c1:4d:12:b5:ab:12:83:42:
                    bd:f6:64:a7:6c:ec:9f:71:1d:76:3c:00:69:21:b2:
                    f2:dd:b9:78:ae:8c:45:c4:b4:4e:bd:eb:e6:39:b5:
                    b1:23:a1:16:5f:ec:1b:ae:eb:5d:02:8f:d3:a7:06:
                    60:49:f3:cb:8e:1b:e5:49:8c:3d:96:36:79:28:b7:
                    ba:d4:9f:57:19:d9:09:9c:59:ee:59:2a:88:9e:76:
                    80:83:56:45:00:6e:dd:c2:8c:e3:1c:8f:91:a4:d4:
                    37:90:69:e1:b5:5e:60:e6:e6:3c:5f:b8:23:83:c0:
                    8f:2f:27:be:a5:de:e4:ba:ad:f6:86:12:70:40:b9:
                    2d:d0:9d:03:6b:93:fe:77:6d:a7:f0:83:93:ce:bb:
                    b6:8c:08:c6:3d:b6:95:a9:0e:ff:b4:d6:3d:26:89:
                    fb:dc:70:92:ed:93:7a:80:11:56:07:57:27:6c:a1:
                    9b:c8:0a:9a:c1:a5:9d:e9:f8:2d:41:db:29:6a:b9:
                    1e:02:e6:ac:db:91:84:91:b2:65:93:c4:e8:27:ab:
                    82:f5:2b:1d:4b:7f:b4:4c:80:e9:38:e6:b4:c9:7e:
                    64:ba:cf:49:7a:ff:f6:14:a1:54:83:41:f5:00:92:
                    f6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3B:5F:A6:49:75:24:ED:A4:0B:DA:90:60:97:99:B1:AB:AF:79:D4
            X509v3 Authority Key Identifier:
                keyid:1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:57:23:f4:e5:b8:83:d6:31:8e:c5:df:86:c9:11:91:df:76:
         f6:d1:d2:a1:17:6c:8d:95:a7:f4:6b:d9:c4:9c:7b:b8:8c:bb:
         fe:38:7d:f1:e4:2b:c9:79:2d:a8:fb:b4:21:0c:0f:9a:46:91:
         ee:bb:f9:ec:54:67:02:d7:52:b6:a2:f1:15:d2:2b:69:25:ad:
         af:03:22:73:52:5f:ca:90:4b:52:d0:30:e9:52:e9:4a:b0:ea:
         8b:8e:eb:7f:41:46:a4:6c:47:6a:78:bd:10:52:99:5f:0d:27:
         4b:88:94:2f:65:25:7a:6b:e9:25:1d:75:ff:05:67:d6:53:fb:
         ee:34:7a:54:8c:00:71:53:43:af:ea:b4:e0:36:c0:0a:f5:4f:
         c4:d2:75:6d:f1:4e:a1:d0:8f:5d:aa:2f:e1:89:f5:fc:58:ff:
         6d:95:64:49:45:c6:3f:45:67:3a:5c:79:72:7d:ac:bb:fd:34:
         4d:18:6c:9d:9c:a0:ad:0f:cc:70:e2:a1:9b:07:81:ee:f9:05:
         5e:88:fb:13:7c:64:d9:38:ec:8b:59:2e:64:5b:17:6b:01:0f:
         a1:c6:3d:29:bf:b5:1d:7f:8d:27:f4:f7:fb:06:b3:3a:9c:0b:
         08:15:12:fa:5d:e4:e1:bf:bf:bb:6e:24:39:93:a3:d2:4f:c9:
         5b:ae:31:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:04:33 2026 by rpki-client