Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
File:                     7F04F6FCE22750607E54E558E039E0F551D3135D.mft (raw, json)
Hash identifier:          XTzE1ikQp1UoAWULD/3s0aNhG9MX4xntmhzlw+9tGe4=
Subject key identifier:   F0:2E:88:B2:2C:D6:D4:7E:55:CC:20:37:A1:85:0E:2B:E8:79:3A:74
Authority key identifier: 7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D
Certificate issuer:       /CN=7F04F6FCE22750607E54E558E039E0F551D3135D
Certificate serial:       153001A4F84134F15A5AE8ED002AD16FB16E5E42
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
Manifest number:          05
Signing time:             Fri 17 Apr 2026 05:44:40 +0000
Manifest this update:     Fri 17 Apr 2026 05:39:40 +0000
Manifest next update:     Sat 18 Apr 2026 09:02:40 +0000
Files and hashes:         1: 323430313a636130303a3a2f33322d3332203d3e203233383431.roa (hash: Su8W1ryH6AcZbU5mbEZVZDmU61kG94jGmfhPCm2jvgw=)
                          2: 3130332e312e32302e302f32322d3232203d3e203233383431.roa (hash: VysPkdD4l/g9blPW2SJoFaVCrMMxGsdFC4KZtokwYps=)
                          3: 3231312e3134382e3136302e302f31392d3139203d3e203233383431.roa (hash: bMsjW1jbE0mk/8BJ/0nz3O3UXsGlGA3e6jddE9uPDS4=)
                          4: 7F04F6FCE22750607E54E558E039E0F551D3135D.crl (hash: b+iiCKq9kkvL3AKnLp8KxUm0uRn1dNYicvOlp8KqlEs=)
                          5: 3232312e3132392e302e302f31362d3136203d3e203233383431.roa (hash: LXzAf6+hhsdt/TNw4PFtDGl7SS8I2bBwjZ8Gp200CMo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:30:01:a4:f8:41:34:f1:5a:5a:e8:ed:00:2a:d1:6f:b1:6e:5e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F04F6FCE22750607E54E558E039E0F551D3135D
        Validity
            Not Before: Apr 17 05:39:40 2026 GMT
            Not After : Apr 18 09:02:40 2026 GMT
        Subject: CN=F02E88B22CD6D47E55CC2037A1850E2BE8793A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:50:f5:74:13:7a:ed:96:cb:bd:5f:54:e4:
                    e9:c2:1a:f3:95:97:c9:42:0e:30:c2:02:e9:be:96:
                    be:1e:92:31:8f:1b:5d:7d:da:2b:13:a6:42:43:33:
                    de:72:e9:23:ce:7d:9e:63:b8:72:fb:a8:3d:42:44:
                    64:91:d6:70:de:12:ec:50:fe:e9:c4:08:f4:13:5e:
                    36:5f:45:93:da:86:10:07:01:4f:fb:5d:20:9c:8a:
                    fc:06:6e:d1:3e:2e:a2:d7:58:af:12:89:a3:3c:08:
                    87:2b:93:08:49:16:e3:42:83:a9:c5:31:0a:68:b0:
                    7d:4b:b9:32:6c:7c:bc:22:2e:90:90:a9:41:6f:7b:
                    e3:25:cf:c4:6c:2e:77:37:d0:90:5c:4d:5d:b2:22:
                    31:89:c9:3d:03:f5:f1:ec:be:f8:59:ea:fe:70:22:
                    7e:fa:3b:28:ce:8c:bf:8f:e9:71:1c:8b:f3:67:a8:
                    76:0a:e4:29:a9:79:c7:9e:71:ac:d8:23:53:c7:be:
                    5d:5a:a9:74:d1:f9:2e:54:02:7b:fb:ee:a0:d7:ee:
                    f0:dd:4f:9c:ca:96:55:8b:4a:b5:75:cc:63:97:38:
                    16:75:e0:ef:f1:5d:14:89:91:8f:c4:e3:91:73:56:
                    e8:4f:89:58:23:6a:d0:21:f0:73:52:00:43:92:f9:
                    36:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2E:88:B2:2C:D6:D4:7E:55:CC:20:37:A1:85:0E:2B:E8:79:3A:74
            X509v3 Authority Key Identifier:
                keyid:7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:56:68:39:18:77:06:01:d1:e4:2d:1e:e4:5a:27:5e:4c:ed:
         40:63:ae:31:65:55:31:70:fa:a8:93:43:18:ca:0b:1d:51:fd:
         0c:5b:48:17:4e:b7:14:e4:63:6c:c4:b6:17:30:3c:fc:81:de:
         d7:d9:7e:03:e2:4f:08:1a:d7:4e:f4:c1:75:39:54:31:3d:f1:
         d6:ca:5b:ba:80:36:0b:35:46:e7:ae:55:bc:b8:85:07:b2:77:
         31:da:75:bd:91:10:13:43:a4:74:60:ab:18:6f:70:83:f4:b1:
         95:8c:5b:f1:c3:59:0d:26:07:af:d0:ba:4b:97:17:85:c3:f8:
         ae:0b:19:f6:45:40:a6:41:9a:06:a0:ae:de:54:d0:bf:ac:d6:
         18:a1:ef:da:c3:02:fb:d5:6d:62:29:80:c9:39:71:a9:b3:4f:
         48:70:69:ce:5f:e6:4f:6f:62:b6:c8:0d:42:80:0b:62:f9:4d:
         09:10:24:60:fa:8d:aa:31:76:d7:90:c4:eb:c4:54:fb:e1:3b:
         1f:35:07:d6:86:fd:71:8a:86:6d:f8:56:3f:a4:92:76:c9:c7:
         49:78:81:85:62:a2:a1:de:66:1e:c8:1f:ef:01:44:cd:17:2d:
         98:f2:43:8c:60:c1:7c:d6:41:79:19:3e:6b:31:5e:8f:1a:c4:
         3d:f6:55:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:26:39 2026 by rpki-client