Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
File:                     601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft (raw, json)
Hash identifier:          CivodqYL6mTzXepoygVReoHZwAtdyRL+gBoyk6M6218=
Subject key identifier:   34:47:75:F1:8D:75:E9:B2:EA:8F:96:1C:AC:4C:86:C8:DF:D7:7A:E6
Authority key identifier: 60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E
Certificate issuer:       /CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E
Certificate serial:       4ED30D0EB8A3FD0FAF9FCFB1E666A5BAFF212F9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
Manifest number:          96
Signing time:             Wed 29 Jul 2026 20:15:10 +0000
Manifest this update:     Wed 29 Jul 2026 20:10:10 +0000
Manifest next update:     Thu 30 Jul 2026 22:04:10 +0000
Files and hashes:         1: 601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl (hash: LAmNlQFXI4tTI7ByekM1JzMxBqTueAoiYmKES5JwHFo=)
                          2: 323430353a393938303a3a2f33322d3332203d3e2030.roa (hash: GA+g1A5a2HBFT7Hhy5u0IBn7+mkbJWeKKCXdtRL2bVU=)
                          3: 323430353a393838303a3a2f33322d3332203d3e2030.roa (hash: /XSBz2YauMRg8MSFkadncF+Xb/VKcdTSZjiZ3GisOqo=)
                          4: 34332e3234372e3135322e302f32322d3232203d3e2030.roa (hash: 1pk6tiEHf9kNqPoegfgckkczUu2VR2BfY6u9CKdeHko=)
                          5: 323430353a393730303a3a2f33322d3332203d3e2030.roa (hash: b+fcHzb/W5/fimiES+nchVhDT38rC5UajNjNb4ZygPk=)
                          6: 34352e3235312e3134382e302f32322d3232203d3e2030.roa (hash: hgzzmAJZR3a6NXzfmlpD1wxFTR8mhcdKXPB/DalEBzY=)
                          7: 3130332e3232302e3130382e302f32322d3232203d3e2030.roa (hash: eweMT2DqhbhsogWgs3Ls5JTkhPjH5PVagqQGefKB424=)
                          8: 3130332e33302e39362e302f32322d3232203d3e2030.roa (hash: wZLSzYpHhbp1Z9qyC1a2LGCTkcXv5D87rPj068v2abM=)
                          9: 3130332e3235322e3130342e302f32322d3232203d3e2030.roa (hash: LbvUNBbkkW0aewjviCw2bvPKR6Kgliws3ypDPVSBx14=)
                          10: 34332e3234372e3233322e302f32322d3232203d3e2030.roa (hash: HvknGg3jtHTLMLRmwKj2Fju4EA01k6DXU/KhVvFuIHQ=)
                          11: 34352e3235312e3134342e302f32322d3232203d3e2030.roa (hash: UHhl5vIywlR9EF1SuP2tWpZscGg6dt5K75MIQmmozxM=)
                          12: 3130332e3232302e3131362e302f32322d3232203d3e2030.roa (hash: if/xm2ZmxEWHRHPBv5cvIrLrrTMi5u7rlBXqn+knNDE=)
                          13: 3138322e34392e302e302f31362d3136203d3e2030.roa (hash: VcnWubwyz4XXsy5ib4o3aMuT/7BWYwmSEQsMbdX4oJM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 22:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d3:0d:0e:b8:a3:fd:0f:af:9f:cf:b1:e6:66:a5:ba:ff:21:2f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E
        Validity
            Not Before: Jul 29 20:10:10 2026 GMT
            Not After : Jul 30 22:04:10 2026 GMT
        Subject: CN=344775F18D75E9B2EA8F961CAC4C86C8DFD77AE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:12:10:e2:35:44:bc:26:14:2f:57:75:5b:d8:
                    0b:a9:5a:94:23:fe:5f:a2:fb:9d:5c:50:c1:82:f8:
                    ae:a5:dc:40:35:f2:bd:53:58:cf:f5:b8:af:f4:89:
                    11:8e:52:06:4a:dd:04:49:4b:f8:04:25:b0:fa:76:
                    e0:95:27:c7:79:01:a9:e0:e2:33:9f:c1:0a:7a:a2:
                    d9:d7:ba:c2:2a:8f:18:47:3f:54:d4:67:62:d9:f5:
                    79:5d:52:5e:e4:29:49:66:f6:6a:e8:11:fe:ed:d9:
                    a7:68:27:c8:af:2e:69:82:33:af:b3:9a:13:de:38:
                    d5:75:8f:45:89:ec:98:55:80:3c:f1:b0:dc:bb:ab:
                    be:3f:85:91:cf:b7:dd:ad:94:68:12:3a:ea:b5:69:
                    ea:69:0d:9f:05:74:d7:fc:9f:ef:71:0e:00:f7:a0:
                    fa:14:9a:8f:99:eb:4c:2a:8c:de:65:67:2a:5f:57:
                    37:53:54:c1:fc:52:3c:57:a4:b5:e6:22:f9:9a:35:
                    25:73:2b:09:11:5d:2a:ce:6f:8a:0a:fd:8f:21:65:
                    36:cf:b2:78:c6:a8:27:91:d5:8e:bd:fa:88:c5:ce:
                    e9:00:8a:27:4c:6c:15:fd:e1:99:93:d0:18:2d:0e:
                    fd:b6:cc:ef:c5:1e:eb:10:29:9a:5e:91:ee:81:96:
                    a2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:47:75:F1:8D:75:E9:B2:EA:8F:96:1C:AC:4C:86:C8:DF:D7:7A:E6
            X509v3 Authority Key Identifier:
                keyid:60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:27:43:94:43:09:4e:8c:49:81:9f:1d:0a:45:1a:3e:23:4a:
         4a:ad:9e:61:d9:b6:6e:94:4c:44:e9:e1:5c:11:e2:5b:62:c3:
         3f:b5:cb:4c:51:16:e3:11:1c:53:34:5c:3b:ea:c4:f0:34:ff:
         7a:b4:36:12:c9:7e:46:e8:a4:fa:b2:55:b3:02:c9:a3:56:6c:
         21:2d:e1:61:cd:73:f7:8d:75:7a:2c:68:8e:97:0e:46:cd:bd:
         04:9e:92:ca:68:93:e5:b7:f3:a3:8b:a5:57:10:d8:80:15:a5:
         41:08:e6:69:e5:29:c5:83:3b:1b:c6:f3:ce:2a:93:84:c9:5d:
         ed:6f:e2:2c:3e:2a:31:21:c7:cf:6d:48:87:23:46:39:23:34:
         ed:3b:48:e0:24:06:7c:3b:b5:48:b2:c8:72:02:ef:c5:02:bc:
         5c:55:e1:5e:21:e7:f8:88:a4:45:ea:55:ad:a7:b8:61:6e:ac:
         b2:e2:72:27:bb:53:b9:bb:22:52:a7:84:91:f4:cd:a9:b3:f8:
         13:ab:75:05:1d:2e:87:88:06:b9:35:42:d8:0c:5f:29:2c:65:
         1b:e2:bf:1d:3f:04:d5:3c:7c:e2:59:5a:1a:f3:19:27:73:83:
         c7:9c:36:2d:af:e7:fc:bb:06:7d:0e:61:d2:08:69:9c:b1:05:
         a1:b9:18:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:04:23 2026 by rpki-client