Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft
File:                     342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft (raw, json)
Hash identifier:          xbPzOrspbrGTc1yQAbslRNFMakjG0DijTAVQWo43a5Y=
Subject key identifier:   9A:13:18:BA:72:9F:2C:15:E7:47:CC:0F:3E:A5:BD:66:22:57:C9:29
Authority key identifier: 34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B
Certificate issuer:       /CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B
Certificate serial:       0310D834708F30C95A2970C96144319121CAB828
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft
Manifest number:          52
Signing time:             Sun 14 Jun 2026 04:22:41 +0000
Manifest this update:     Sun 14 Jun 2026 04:17:41 +0000
Manifest next update:     Mon 15 Jun 2026 05:14:41 +0000
Files and hashes:         1: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl (hash: jRGQZil3Ju+pkKZYf9H7eLikdAq8vpFPd3BPldp4Z8k=)
                          2: 3130332e39382e34372e302f32342d3234203d3e2034383337.roa (hash: zhTFjsH+JPU0x4nK+LV7NlnnYyLvQckbF+E2sJc1+7w=)
                          3: 3130332e39382e34362e302f32342d3234203d3e2034383337.roa (hash: pdaxHWdOuRBAWfL/FGtz87TD/hrM06v4KX2lrE9t4Q8=)
                          4: 3130332e39382e34342e302f32332d3233203d3e2034383337.roa (hash: tTKPvO7SOlxvX1io84XyLrLA9rPw8JaSNHbGiEviwd4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:10:d8:34:70:8f:30:c9:5a:29:70:c9:61:44:31:91:21:ca:b8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B
        Validity
            Not Before: Jun 14 04:17:41 2026 GMT
            Not After : Jun 15 05:14:41 2026 GMT
        Subject: CN=9A1318BA729F2C15E747CC0F3EA5BD662257C929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3d:e1:85:6a:d9:b7:60:5e:9c:90:7a:4e:bb:
                    d8:0b:d8:42:81:3d:14:ec:b2:ab:3e:e7:f1:cb:39:
                    fb:ed:45:74:74:d3:de:51:0c:22:c7:e4:8b:8d:fe:
                    6f:f9:00:a2:ea:86:71:77:a0:29:af:bb:e3:3a:04:
                    9b:e3:11:ad:af:44:05:c3:96:c5:b9:3c:24:87:cd:
                    a2:b3:b8:55:df:ae:d1:6d:aa:f8:cf:4c:06:c2:6a:
                    d8:75:4a:ba:c9:af:10:d1:5a:98:f7:4c:9c:f4:5a:
                    b2:61:7d:75:f9:fd:fb:cd:30:0b:65:79:3d:70:60:
                    92:2a:40:6f:2e:89:11:fd:21:b4:75:d8:e0:f2:70:
                    9d:b3:91:59:40:dc:b3:23:37:e9:fc:b8:c1:62:65:
                    b2:2f:55:8c:7d:1b:ba:fe:20:91:ba:be:25:98:95:
                    2a:c5:e2:2c:d0:97:dc:05:42:70:eb:f8:c8:09:13:
                    dc:f8:c7:56:a7:ab:13:6f:1c:8e:e3:28:9c:37:d2:
                    cf:67:70:fc:a6:72:04:1b:a1:74:c3:2a:23:5e:2f:
                    88:24:b3:23:23:f5:0c:ef:4f:38:9d:0c:f4:df:2b:
                    8e:fd:e0:9b:7e:68:c6:63:59:98:85:82:fd:33:6b:
                    60:6f:bf:99:e4:56:2c:ba:5e:08:40:67:23:47:91:
                    d6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:13:18:BA:72:9F:2C:15:E7:47:CC:0F:3E:A5:BD:66:22:57:C9:29
            X509v3 Authority Key Identifier:
                keyid:34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:dc:e8:06:71:9d:a8:ce:76:b3:3c:bd:ad:85:9b:dc:4f:ab:
         72:a4:e4:b3:16:c0:38:bb:86:31:25:a9:50:78:37:c0:06:8e:
         bb:10:dc:9e:82:d9:2a:43:d0:ee:77:30:90:b2:02:bf:01:5b:
         72:b6:37:1a:90:7d:3f:4f:b8:46:10:19:aa:07:95:64:17:bf:
         4e:c1:11:14:06:a8:33:14:6a:ce:46:77:e4:50:e2:7f:1f:03:
         b2:19:a5:b4:72:bc:24:5d:0b:6f:9e:90:69:a7:a2:d7:ef:5f:
         14:a7:b6:d1:a9:6d:6a:d8:78:25:b8:cc:df:52:8c:96:29:eb:
         e6:f2:59:5e:5e:b1:d4:d5:4e:ad:bc:25:40:9d:95:d8:eb:6c:
         37:6e:eb:d4:33:a1:c6:70:bb:6b:af:e3:72:95:80:db:f3:7c:
         dc:fe:66:14:0c:48:bf:19:90:76:73:fe:b6:be:da:aa:f1:76:
         ea:6d:73:e9:de:e6:73:2b:38:a7:91:2a:86:94:fd:60:9d:2a:
         a6:8d:5a:cb:8a:13:3f:8a:3b:48:55:a8:7f:4c:a1:69:a6:ed:
         d7:4c:78:85:1d:cc:c3:36:c9:6a:6b:5b:33:b5:39:7c:04:08:
         9c:61:87:78:f9:e0:c3:84:4f:60:be:02:c7:57:f7:35:e8:c7:
         fd:9b:9c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:45 2026 by rpki-client