Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft
File:                     0491F42A3990BD60D32248583741F141AC61F0EE.mft (raw, json)
Hash identifier:          yVpQ8jRO4NRs9MUPXgGNjg8nQGbj2IFoOOHMdOUR+yo=
Subject key identifier:   06:11:FA:57:7B:C9:AB:EA:C2:86:4E:18:10:1A:D2:6C:2E:39:60:65
Authority key identifier: 04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE
Certificate issuer:       /CN=0491F42A3990BD60D32248583741F141AC61F0EE
Certificate serial:       0D0C243A6D51CEDAB684B2CE6BE15710B4E96C7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft
Manifest number:          8C
Signing time:             Wed 29 Jul 2026 03:28:18 +0000
Manifest this update:     Wed 29 Jul 2026 03:23:18 +0000
Manifest next update:     Thu 30 Jul 2026 05:07:18 +0000
Files and hashes:         1: 0491F42A3990BD60D32248583741F141AC61F0EE.crl (hash: +SWVHPGfI0vTNAmki8Q3tmLZAB2mDxsDzeWVBROtdRA=)
                          2: 3231302e37352e302e302f31392d3230203d3e20313334373734.roa (hash: hPlQgd/NK5MUVCWEHa77y49/65UnOOayui/e2fINTeM=)
                          3: 3231392e3233352e3232342e302f31392d3234203d3e2039383039.roa (hash: 1kfkm2sdUAQgga34hsBItgn0pFjwybcFlz8POZ49zRc=)
                          4: 3131362e3231342e33322e302f31392d3234203d3e2039383039.roa (hash: htPttDVb0kWX6wnItHN++EBcVc6dyeN811V4YSR37w0=)
                          5: 3230322e3137302e3132382e302f31392d3230203d3e203137363233.roa (hash: RYq7ANwiqA0OP0VLo5jGu73J0A7WVOnB31b45oovMGg=)
                          6: 3131362e3231342e3133322e302f32342d3234203d3e203633393831.roa (hash: BR9DyygvBYnXR1fAh3XW1vDD1d/0G17MHg0VKGRGr/I=)
                          7: 3131362e3231342e3132382e302f31372d3234203d3e2039383039.roa (hash: 30abUNm74g1k8tMKe5T35ZLm+G90Iu7z7sLUeW/Wf0A=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0c:24:3a:6d:51:ce:da:b6:84:b2:ce:6b:e1:57:10:b4:e9:6c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0491F42A3990BD60D32248583741F141AC61F0EE
        Validity
            Not Before: Jul 29 03:23:18 2026 GMT
            Not After : Jul 30 05:07:18 2026 GMT
        Subject: CN=0611FA577BC9ABEAC2864E18101AD26C2E396065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c0:79:af:43:3a:91:e9:98:20:43:12:33:e5:
                    77:64:98:c0:a0:e8:f6:e6:a4:01:08:f6:3f:00:1e:
                    fd:17:eb:71:01:db:16:67:0e:03:03:b9:ba:e3:56:
                    bc:19:66:4d:85:cb:ba:01:a4:8d:b8:82:cb:cc:32:
                    99:85:2c:70:fb:82:d6:be:9a:2c:7a:66:8f:82:6b:
                    23:53:1d:42:94:4e:f5:16:3c:b3:28:5e:75:c1:38:
                    e7:c8:04:29:d5:2c:96:60:97:d4:54:eb:af:fc:6e:
                    22:c1:7f:65:59:fc:2a:3e:ee:db:6b:42:bf:29:66:
                    ac:e9:ea:f6:c6:65:46:32:e2:ba:eb:d0:ed:09:d3:
                    f8:e2:b0:39:ae:b2:d3:f3:e0:59:8d:2f:1a:29:68:
                    56:ef:1a:b7:25:02:66:f8:73:cb:05:fa:54:30:d1:
                    56:95:08:b5:59:e3:ef:74:d9:19:50:c2:69:10:ca:
                    d7:0a:eb:3d:56:12:5f:61:35:37:1d:ed:6e:b9:89:
                    1b:30:0a:84:1c:42:e0:05:f4:6b:c9:10:a0:d9:38:
                    75:87:3a:43:cb:c7:27:93:6b:1d:ce:78:91:ee:7e:
                    f7:09:8a:d0:68:8e:cf:34:1c:2b:ce:e4:55:64:6d:
                    ff:0b:87:06:6a:5d:f7:c1:82:32:f4:e9:4a:08:f2:
                    09:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:11:FA:57:7B:C9:AB:EA:C2:86:4E:18:10:1A:D2:6C:2E:39:60:65
            X509v3 Authority Key Identifier:
                keyid:04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f3:47:47:8b:71:ae:50:69:ae:72:3d:fe:e7:ed:94:a0:84:
         ee:37:cd:98:64:fd:59:63:62:84:a7:fa:b5:35:2e:25:0a:49:
         97:06:06:15:aa:1e:45:14:fb:d9:29:10:ed:52:fd:02:a7:81:
         37:f0:40:5c:07:5c:38:e6:3b:89:6e:a0:8c:49:70:14:e6:46:
         0d:a0:8e:e9:4c:22:b2:81:f6:94:c6:d9:8c:2f:8b:32:82:ff:
         cd:59:36:08:87:a7:54:71:4f:82:4a:94:b1:b3:9b:3e:fe:ba:
         56:6b:ed:b9:b2:47:71:82:82:97:fb:fb:d7:0a:b6:a6:53:1f:
         47:07:0e:e0:0f:2d:5b:81:76:4f:e0:90:50:d8:99:9b:f9:d0:
         7d:54:62:5c:5f:d3:11:72:05:2d:86:08:9c:00:6d:b6:dd:5c:
         da:af:8f:dc:76:dd:d5:a4:a6:70:ba:01:18:dc:73:36:1b:14:
         b7:5d:fb:4b:8e:19:85:b5:75:5f:c9:b7:73:3b:7a:c5:ef:5f:
         0e:05:30:43:23:1f:3d:29:71:2e:a6:98:47:d5:9c:a9:54:4f:
         50:c9:19:0e:9a:45:8c:20:a4:80:0b:f5:76:cc:e8:d2:6b:b2:
         7c:56:2c:7f:bf:4a:4b:32:00:73:f9:e3:31:ad:39:db:43:6d:
         26:01:f9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:36:42 2026 by rpki-client