Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft
File:                     9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft (raw, json)
Hash identifier:          4yl4jR44dnoRdUUiMNYEZnLDb+rQxkA04FfuBOPaLiU=
Subject key identifier:   6B:E8:93:AD:EE:52:87:11:C3:4A:F7:0D:96:17:AA:1A:42:EE:11:08
Authority key identifier: 9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4
Certificate issuer:       /CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4
Certificate serial:       490086A09263353C547EB17A7E81A2E482F44395
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft
Manifest number:          55
Signing time:             Sat 13 Jun 2026 13:26:49 +0000
Manifest this update:     Sat 13 Jun 2026 13:21:49 +0000
Manifest next update:     Sun 14 Jun 2026 13:44:49 +0000
Files and hashes:         1: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl (hash: aGxmhw5c/SZlvebS0WtQymbH22S5ySmLiQ0KnwKoT7c=)
                          2: 3130332e3130302e36362e302f32332d3233203d3e2034383038.roa (hash: /IodutfjnTBMFXuGNjYScNPSFVHOmzKsKTQcsjr+gDI=)
                          3: 3130332e3130302e36342e302f32332d3233203d3e2034383038.roa (hash: VYYZLSjq11bj7VzgAnXDdj86U+XiU3By20gc1rR6C2E=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 13:44:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:00:86:a0:92:63:35:3c:54:7e:b1:7a:7e:81:a2:e4:82:f4:43:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4
        Validity
            Not Before: Jun 13 13:21:49 2026 GMT
            Not After : Jun 14 13:44:49 2026 GMT
        Subject: CN=6BE893ADEE528711C34AF70D9617AA1A42EE1108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4b:f4:ab:37:e2:ee:a7:87:01:2d:67:e4:e5:
                    f7:b8:b4:c2:a5:a1:51:6a:41:1d:e3:f9:39:16:f4:
                    e0:89:34:1e:0a:c0:6e:19:55:de:4d:be:c7:e5:45:
                    54:07:07:1f:40:2b:10:a9:48:bd:be:9b:2e:57:e4:
                    21:98:e3:66:60:59:a1:af:90:91:e0:9a:0f:4e:0c:
                    36:c2:1c:52:7e:6a:ec:94:30:c8:ca:f5:d3:b3:5d:
                    46:a0:d4:f7:2d:73:e2:97:ac:1c:e2:44:38:f5:64:
                    92:67:b4:c4:63:98:ba:3a:ee:38:d0:ff:a5:04:38:
                    54:c0:99:e0:5f:a3:7f:60:1d:98:6b:ee:49:22:d8:
                    70:9b:46:db:98:37:e5:8d:83:1e:5d:e1:65:f3:97:
                    b7:c0:94:ce:5e:20:6c:08:f9:0e:60:fe:4e:47:b0:
                    db:4f:45:a2:53:96:f0:50:cb:f0:08:48:a1:3c:51:
                    bd:d9:a5:2d:81:6c:39:4a:cb:9b:7b:7d:5e:8e:7d:
                    0c:31:4b:24:71:49:fb:82:b4:60:28:13:b0:d2:59:
                    2d:92:a2:35:ce:6c:6a:41:e4:50:63:1f:17:40:c6:
                    7e:f9:f7:8a:30:f5:e6:37:f2:d1:77:3c:05:ba:30:
                    2e:32:b0:00:80:15:cf:77:7d:79:14:5d:4b:ae:34:
                    35:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E8:93:AD:EE:52:87:11:C3:4A:F7:0D:96:17:AA:1A:42:EE:11:08
            X509v3 Authority Key Identifier:
                keyid:9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:13:6e:51:0d:57:c4:b1:9e:cc:9d:ab:36:8d:01:4f:59:58:
         49:bf:eb:ae:ee:0b:26:f9:18:ed:de:38:8e:df:30:1b:76:70:
         2d:e8:ca:1f:d2:c9:65:06:da:fd:d6:68:01:14:dd:4c:5d:ee:
         8c:64:66:7b:4a:c0:1f:4f:6e:8d:f1:ef:f9:c6:f4:74:29:80:
         4e:d3:e8:0d:64:a4:63:34:5c:4a:fa:76:3e:9c:14:57:c5:01:
         b3:7b:f5:60:bd:c3:51:89:34:aa:fe:4c:d1:51:3d:51:1a:77:
         a5:fc:6d:06:21:e2:6d:02:a3:7c:6a:80:5a:96:be:ce:be:cd:
         99:99:ba:eb:c5:90:a2:b4:0e:fe:ec:b8:07:57:e0:40:0e:83:
         d9:9f:67:9f:7a:40:bc:63:f0:2d:c6:c6:26:06:b8:9c:6d:9b:
         d1:74:1e:1e:bf:d7:5a:a9:51:d3:69:f5:d6:75:c4:e5:69:55:
         87:1c:2d:f1:53:0e:b6:7b:c5:c6:aa:0b:ab:74:e8:d6:cf:4b:
         cb:bb:0a:d8:ec:12:d9:e1:60:b0:e5:4a:a7:13:21:a1:4a:7c:
         c5:2c:ad:65:20:ca:8e:28:2e:aa:74:74:71:23:51:7c:de:b7:
         9b:55:09:34:c7:da:3a:21:62:d5:3e:c9:4c:1e:c4:01:c0:a1:
         0a:82:cc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:29:10 2026 by rpki-client