Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft
File:                     98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft (raw, json)
Hash identifier:          bL5VreBD2Ii6WbbhZs4zWN/jucmaMQVhhFDzt4rQALA=
Subject key identifier:   C6:6C:0B:C7:C6:A0:59:A5:C2:9C:41:69:96:93:3C:D0:28:48:6C:99
Authority key identifier: 98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01
Certificate issuer:       /CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601
Certificate serial:       0E1331E2B4698DF7468BA6758F10FBCE064675CC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft
Manifest number:          014C
Signing time:             Wed 29 Jul 2026 08:48:54 +0000
Manifest this update:     Wed 29 Jul 2026 08:43:54 +0000
Manifest next update:     Thu 30 Jul 2026 10:49:54 +0000
Files and hashes:         1: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl (hash: jzx7uFPma8mkoxdkdG9NRR1xFHJFWopV8Zv2oDIY4lY=)
                          2: 3137302e3137392e302e302f31362d3234203d3e20313331343836.roa (hash: qat1H617QJwQjY8jG6LbfzleO4RxVlthXXvF9jpIwLY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:13:31:e2:b4:69:8d:f7:46:8b:a6:75:8f:10:fb:ce:06:46:75:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601
        Validity
            Not Before: Jul 29 08:43:54 2026 GMT
            Not After : Jul 30 10:49:54 2026 GMT
        Subject: CN=C66C0BC7C6A059A5C29C416996933CD028486C99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:8d:6d:a3:1f:fb:c8:b3:d2:21:be:fa:69:
                    f9:b2:e2:7d:f8:ce:97:ed:be:8d:d8:00:8b:b7:5c:
                    15:42:b3:15:ed:d9:02:75:6f:ce:e1:9b:5d:ea:32:
                    f9:be:7d:f3:3e:56:62:99:92:ee:0a:85:ba:9c:96:
                    f0:3d:ab:50:7d:24:59:8a:0c:1e:8b:7b:10:82:c5:
                    d4:ef:33:19:1d:e2:ac:0f:a4:12:63:6e:2e:b9:a9:
                    c2:a3:6c:1a:41:0c:0a:4a:58:80:19:d9:e1:ba:2d:
                    f7:a9:dd:c6:f5:b0:b6:ed:50:d5:31:fb:3c:ef:05:
                    d6:1c:ba:cc:82:1f:65:40:ef:4b:62:21:07:18:34:
                    d1:e0:9b:fb:e0:4f:57:02:ed:2c:59:96:97:82:67:
                    f3:c2:23:69:88:8b:e8:02:f0:f6:0a:79:86:22:2c:
                    7f:d7:ef:5e:f5:ca:9f:2e:d1:f8:fd:18:ab:53:58:
                    b4:71:97:42:3a:3b:21:9c:3a:39:2d:a8:a9:3d:8d:
                    9f:27:5d:86:f1:ef:75:5c:36:66:a6:66:06:bd:03:
                    94:9e:17:4d:07:02:42:56:3e:9c:9a:9e:95:6c:a4:
                    57:e4:9c:ab:0d:43:c8:4c:c1:f8:ff:20:db:81:57:
                    f1:db:5b:9b:8e:28:9a:b2:ac:0a:3d:1f:4e:5e:da:
                    06:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6C:0B:C7:C6:A0:59:A5:C2:9C:41:69:96:93:3C:D0:28:48:6C:99
            X509v3 Authority Key Identifier:
                keyid:98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:3f:6b:d9:e2:50:bc:0e:8b:c9:c8:70:5b:4b:6f:cc:df:a3:
         78:72:aa:04:3c:a5:91:5a:55:5d:ab:e4:59:0b:3f:74:f6:a0:
         d8:9b:cc:6a:be:f7:c5:ac:90:fd:e2:5c:0d:22:3c:97:8f:85:
         2c:a6:ba:02:6f:94:0b:b4:65:14:fb:f3:64:12:4d:33:8e:15:
         95:34:b2:28:61:a9:c5:0c:fa:0c:b7:75:fc:6c:87:10:e0:a7:
         6e:b3:44:60:dc:af:d8:33:ee:62:13:f0:cd:bc:5c:b7:7f:fe:
         a6:85:11:bb:4a:8e:a5:42:43:d3:29:8b:08:be:ec:bf:ac:76:
         19:d4:92:d5:e8:f5:34:01:da:9b:83:c8:ab:5b:f6:30:ee:40:
         b4:b0:3b:30:8e:bf:ca:04:25:77:72:93:38:62:cf:9a:0b:0a:
         20:23:a9:0e:35:76:71:b5:ce:80:59:07:29:8d:d7:b7:fd:e9:
         19:22:ff:b2:8d:91:cb:9b:5b:38:f2:73:ce:89:a6:93:cd:76:
         50:9a:2f:d2:e8:f5:30:60:e2:2e:e5:21:6d:9a:da:55:be:58:
         5e:8f:4f:62:e8:e7:0e:c9:90:42:f7:bf:37:34:a8:02:35:22:
         cc:66:89:3d:22:ed:02:1d:c8:08:c7:79:fc:e7:9c:34:5d:60:
         85:b2:41:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:52:41 2026 by rpki-client