Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
File:                     E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft (raw, json)
Hash identifier:          vejwIULdVmScGNLtz3WBPIaZU0btdIkjjppGDWajcUw=
Subject key identifier:   50:50:7F:0A:31:59:DD:CE:96:39:4C:CC:65:E3:8E:03:90:CF:1D:A1
Authority key identifier: E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
Certificate issuer:       /CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
Certificate serial:       298781FA120974A7204D993FD6E1EB006A9E94D2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
Manifest number:          5A
Signing time:             Sat 13 Jun 2026 06:41:22 +0000
Manifest this update:     Sat 13 Jun 2026 06:36:22 +0000
Manifest next update:     Sun 14 Jun 2026 09:41:22 +0000
Files and hashes:         1: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl (hash: oftpu9UmvvnLrFf1dC2zx4LvASqSd8oRakLjthbcZ2w=)
                          2: 3134342e37392e342e302f32332d3233203d3e2030.roa (hash: M8n/GFHsH32a0OY3vILdVtqD1jQGc9Vzjf0kfgZ0TxQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 21:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:87:81:fa:12:09:74:a7:20:4d:99:3f:d6:e1:eb:00:6a:9e:94:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
        Validity
            Not Before: Jun 13 06:36:22 2026 GMT
            Not After : Jun 14 09:41:22 2026 GMT
        Subject: CN=50507F0A3159DDCE96394CCC65E38E0390CF1DA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:db:0f:b2:d8:bd:56:50:f8:b0:aa:87:b3:
                    ba:5c:11:43:c1:cc:20:f8:74:40:40:af:d2:c8:29:
                    18:ba:c5:7f:36:7f:36:12:00:33:07:1a:83:47:29:
                    be:7f:9b:a8:b5:c7:fa:f0:ff:eb:26:c4:da:7a:08:
                    37:7f:00:4b:10:10:7e:29:18:de:03:12:73:23:45:
                    96:94:65:bb:3b:b2:2e:18:00:e8:f5:73:7e:aa:9f:
                    a7:1b:39:77:47:fd:a1:4b:fc:7d:d9:16:24:0a:19:
                    8a:61:da:0d:bb:3f:bb:b3:02:9c:60:47:8d:4b:ca:
                    9e:26:2a:33:17:fa:14:80:12:bd:b7:70:23:81:b7:
                    9b:71:43:5a:28:2a:09:b0:0f:bc:92:e5:c4:ac:21:
                    10:da:15:59:fb:9f:12:90:a6:74:30:2c:ef:9c:12:
                    4b:04:64:5f:f3:da:4d:10:2b:c0:30:43:a7:ea:53:
                    00:be:0e:ad:e4:b3:76:ed:92:4a:8c:b5:b1:67:63:
                    a8:d4:90:7c:0c:70:ac:8e:1f:2b:b0:09:a9:ea:66:
                    1e:cf:af:91:68:a6:34:67:48:88:70:31:75:47:7e:
                    bd:73:d8:d0:17:8a:c6:83:19:ef:24:e4:6e:21:f6:
                    68:a9:68:84:a1:63:06:0a:c6:e8:f3:55:6f:ba:29:
                    27:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:50:7F:0A:31:59:DD:CE:96:39:4C:CC:65:E3:8E:03:90:CF:1D:A1
            X509v3 Authority Key Identifier:
                keyid:E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:c0:f1:73:a2:8f:c4:d5:77:f7:27:5e:6e:29:94:83:b4:17:
         9c:c0:1b:02:a1:21:f1:05:a3:81:3b:65:3d:aa:7f:ec:ea:79:
         72:52:6b:9a:6f:7a:54:78:1b:36:6e:38:8b:5a:96:0d:8b:1c:
         b5:54:b8:59:7d:88:99:96:37:45:39:1a:c2:49:5c:1f:6c:cb:
         1f:a6:13:a9:ce:2f:58:26:e8:56:93:c2:c9:e2:29:f8:47:82:
         3b:2b:73:c9:15:bb:2a:fa:1b:08:f2:c9:83:aa:ab:3c:52:03:
         51:7a:a7:28:10:b9:fc:14:68:91:75:61:5e:81:f9:46:d6:81:
         86:ab:86:3d:6d:d0:f0:f9:0a:77:9a:a5:b6:aa:39:03:95:a2:
         8e:12:b9:3c:ca:0c:00:a2:e3:58:4d:72:52:29:b4:c8:2a:74:
         86:5e:05:20:6d:c6:6e:fa:78:51:f0:a3:64:01:99:68:6b:9e:
         ea:94:31:f3:e6:be:ee:b5:4b:26:71:98:ab:72:b4:aa:8c:87:
         74:bd:b5:01:7f:c1:cb:06:63:99:a5:84:a7:01:36:f3:ca:9b:
         14:10:4a:d5:8c:f3:50:0f:34:53:e9:10:c7:aa:9c:10:3c:ec:
         f7:da:e1:54:7b:50:07:1e:7e:b6:7a:06:2f:a4:f9:2f:f0:7a:
         42:3b:d8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:01:59 2026 by rpki-client