Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft
File:                     452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft (raw, json)
Hash identifier:          WpiLdIvDvKnyLoNe3siJg3wLB8eVWmkRVDziqvXcV7U=
Subject key identifier:   94:C4:84:EC:1A:1B:F1:87:84:38:F5:87:68:F5:E7:25:BC:E3:E0:A9
Authority key identifier: 45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10
Certificate issuer:       /CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10
Certificate serial:       0F8CCFF3D5621A686354C5F3AA7A023306F34CEB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft
Manifest number:          C2
Signing time:             Sat 13 Jun 2026 21:02:13 +0000
Manifest this update:     Sat 13 Jun 2026 20:57:13 +0000
Manifest next update:     Sun 14 Jun 2026 23:21:13 +0000
Files and hashes:         1: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl (hash: SMOxqhUwOtjJwOzDsKafUfNx6u3R8JbPczuV3eUEaBU=)
                          2: 3136332e36312e36322e302f32342d3234203d3e203138343634.roa (hash: Y/GbqiSHk47nm9kfLmWEQmvyAU1qdTdaRuJrF/5i1gE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8c:cf:f3:d5:62:1a:68:63:54:c5:f3:aa:7a:02:33:06:f3:4c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10
        Validity
            Not Before: Jun 13 20:57:13 2026 GMT
            Not After : Jun 14 23:21:13 2026 GMT
        Subject: CN=94C484EC1A1BF1878438F58768F5E725BCE3E0A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cf:a9:90:ed:34:4b:1c:0d:50:b0:b5:db:61:
                    cc:0c:aa:d7:9f:f6:e3:e0:61:f4:06:32:93:d7:1f:
                    71:c6:37:e9:63:52:dd:88:ac:8e:0a:05:f8:5b:1f:
                    69:94:35:7b:aa:43:0e:f9:68:ea:81:63:bb:fb:db:
                    95:7d:9d:af:41:d6:b0:0b:80:b3:84:e0:6e:fc:e0:
                    0a:4f:78:28:15:a0:d9:c3:1c:0f:b8:ca:a8:c5:c4:
                    ce:9e:7c:ab:88:3f:c4:ed:fe:29:65:b5:69:34:99:
                    e0:f8:80:f3:a5:06:64:b1:81:ef:bf:3e:40:52:d3:
                    1d:b9:5f:8e:66:cc:38:35:c7:16:8a:49:8c:7c:7d:
                    05:cc:ac:c9:99:2e:8e:df:32:42:f7:f5:0f:88:8d:
                    0a:e5:77:ca:eb:aa:f3:b7:e1:36:5f:3c:3a:93:b1:
                    f6:bd:a6:a1:9f:aa:56:30:f4:3f:4c:e4:4a:22:59:
                    e4:a2:ca:ea:d0:69:fc:5e:41:33:1b:0f:6e:47:8d:
                    40:23:11:56:b0:c5:4e:8c:ae:81:71:d6:40:c3:33:
                    e4:4b:af:29:bf:d3:66:3a:ce:ec:5b:ed:eb:c4:8b:
                    2b:af:a5:29:b5:5d:4f:a1:47:c8:23:dd:0e:dd:e3:
                    59:32:2c:75:ce:8d:a2:54:f2:9d:67:cf:b8:d6:67:
                    d2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C4:84:EC:1A:1B:F1:87:84:38:F5:87:68:F5:E7:25:BC:E3:E0:A9
            X509v3 Authority Key Identifier:
                keyid:45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3e:b9:85:78:b4:41:7f:3b:99:22:ee:24:65:39:79:33:d5:
         a0:02:d8:c6:a3:50:dc:bb:82:28:ff:36:7a:63:bd:6c:c2:47:
         b6:b0:85:2b:48:6f:a2:61:f0:44:24:97:4b:7c:7d:3b:e0:98:
         d9:f0:c1:4a:24:98:c5:73:ac:c1:85:20:f2:ea:00:df:f8:2e:
         61:fa:39:4d:32:a6:60:0e:e3:34:29:c8:db:d2:83:74:83:e1:
         e9:01:7b:f7:e0:fb:a4:ef:0b:e8:ab:50:65:aa:84:2e:60:88:
         10:34:a3:d7:f0:9b:dd:60:8e:16:9a:dd:00:99:de:25:46:16:
         7f:e8:71:b2:72:39:50:f2:93:b3:d1:42:d0:61:04:b4:61:72:
         35:39:09:74:65:57:30:ba:e7:0f:c0:cb:0a:12:91:69:c6:0e:
         ec:b7:00:f9:8d:82:ec:3b:39:18:7b:fd:2f:f6:6e:32:12:80:
         2f:dd:f7:dd:a3:b4:d8:11:23:51:67:fa:6c:c0:1e:97:17:be:
         1c:3d:2d:40:66:1b:6a:54:a3:33:7e:c4:8f:89:31:01:f4:f9:
         81:10:3b:87:8c:c8:bb:6f:c5:e8:65:5e:fb:8a:77:57:23:b1:
         9e:d3:9b:d9:33:07:49:3b:49:3b:54:1a:99:46:ae:13:b6:74:
         be:ab:61:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:28:44 2026 by rpki-client