Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft
File:                     19C56F6C979C215AF864F9E18F7A8F62631A1268.mft (raw, json)
Hash identifier:          PuhoCu01NR44w2rccHRiQdlAkXQ02KCUQqhfhfAs6wg=
Subject key identifier:   B4:49:22:33:C9:24:FE:CE:F1:30:85:33:AA:10:D2:6F:AD:CF:16:5C
Authority key identifier: 19:C5:6F:6C:97:9C:21:5A:F8:64:F9:E1:8F:7A:8F:62:63:1A:12:68
Certificate issuer:       /CN=19C56F6C979C215AF864F9E18F7A8F62631A1268
Certificate serial:       085D0C73144CBC352D18BA11FF630AE7228D57C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft
Manifest number:          8C
Signing time:             Wed 29 Jul 2026 18:59:59 +0000
Manifest this update:     Wed 29 Jul 2026 18:54:59 +0000
Manifest next update:     Thu 30 Jul 2026 22:57:59 +0000
Files and hashes:         1: 3130332e3135342e33302e302f32332d3233203d3e20313339313431.roa (hash: l7ihaAL2K1gp0WFgFaF5vhfWpS9Haphuut9+xh4iEFI=)
                          2: 19C56F6C979C215AF864F9E18F7A8F62631A1268.crl (hash: 9s9/GsIgWHSMszUb3WuDN9hFYRgR81LLEUmIZhxgZ/E=)
                          3: 323430363a353263303a3a2f33322d3332203d3e20313339313431.roa (hash: 0VCs7Br2LEypju+8+bG9yDec+3HSZ8IfNVbmHboPoB4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 22:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:5d:0c:73:14:4c:bc:35:2d:18:ba:11:ff:63:0a:e7:22:8d:57:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19C56F6C979C215AF864F9E18F7A8F62631A1268
        Validity
            Not Before: Jul 29 18:54:59 2026 GMT
            Not After : Jul 30 22:57:59 2026 GMT
        Subject: CN=B4492233C924FECEF1308533AA10D26FADCF165C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:63:9e:d3:83:c0:c0:f8:d9:00:a8:c6:74:9a:
                    3f:4e:bf:6b:0d:44:cd:97:30:18:6c:cb:f6:2c:a4:
                    62:c1:a9:6c:cb:3a:b9:9b:78:d1:b4:32:f0:18:05:
                    be:ae:d5:45:76:f9:b5:2b:e0:eb:6d:f3:3d:8e:e7:
                    55:13:9a:b4:7b:5b:30:db:1f:d3:b5:43:11:da:a1:
                    1a:0c:d9:34:af:f8:11:1e:bd:c4:07:fb:4b:10:49:
                    14:90:e3:b7:df:74:a8:61:4f:bb:9e:9f:5f:55:0f:
                    b5:98:3e:9b:23:5e:4f:fe:a5:ca:e3:76:82:36:da:
                    cb:ad:1b:e5:1b:4f:ed:92:ea:59:18:01:00:9a:96:
                    00:21:27:62:a0:c4:40:33:9c:8d:54:28:70:45:8f:
                    1d:d4:9c:e4:cc:a9:66:63:41:a1:62:6a:37:9a:54:
                    f2:03:87:9c:2c:99:fa:13:ca:d7:6f:5c:3f:79:52:
                    ce:a3:7c:d2:58:72:eb:26:ca:24:4d:49:b0:b4:d0:
                    54:bf:cb:d1:21:9c:d5:06:21:39:4b:c3:0d:a3:b9:
                    68:30:9b:cf:3a:85:7b:3b:32:47:00:c0:ed:03:82:
                    42:e3:b1:b0:2d:c1:88:34:e8:37:a2:4f:ea:45:9a:
                    dc:d8:bf:e6:23:99:1d:32:a2:c9:35:30:11:bf:a0:
                    c2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:49:22:33:C9:24:FE:CE:F1:30:85:33:AA:10:D2:6F:AD:CF:16:5C
            X509v3 Authority Key Identifier:
                keyid:19:C5:6F:6C:97:9C:21:5A:F8:64:F9:E1:8F:7A:8F:62:63:1A:12:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/19C56F6C979C215AF864F9E18F7A8F62631A1268.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097048493643530242/0/19C56F6C979C215AF864F9E18F7A8F62631A1268.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:bc:ed:a5:26:5c:bb:64:f3:b2:c9:31:5f:93:06:c9:27:81:
         98:03:61:7a:9e:67:da:e6:b9:c2:20:68:ec:2f:e3:80:16:cd:
         ef:49:df:7b:c6:36:b6:a6:9e:bd:6d:d8:85:ea:6b:df:7e:d6:
         b9:42:be:a0:0a:7f:8d:ea:fc:e2:9d:45:de:9d:3b:0e:d3:fe:
         8e:af:9c:fd:d9:8a:7f:a6:47:a2:ee:af:e6:54:3f:6d:b7:32:
         b5:f1:9d:c8:2c:c0:7b:22:61:44:59:59:94:1f:90:ca:34:2f:
         40:9a:74:58:06:28:b9:24:d4:78:7a:ad:16:6e:d1:4f:ce:b9:
         79:c1:a6:80:78:9c:74:29:c9:07:59:1e:7a:44:8a:02:10:2e:
         75:1e:03:5b:b4:aa:45:41:2a:4c:3a:90:be:69:2d:05:35:69:
         4d:24:9b:1d:84:f6:0b:e4:6a:03:d1:38:b6:32:49:f5:1d:56:
         17:54:53:48:4c:a4:cd:7b:28:9c:25:df:e0:84:d4:0f:cd:58:
         be:7d:55:f3:18:ae:4c:25:92:30:6a:2c:ed:73:08:bc:97:d4:
         72:20:e9:5b:92:2a:93:a7:12:ab:66:46:17:36:ab:f6:64:88:
         3c:0c:55:57:c2:29:37:56:fb:47:1c:b8:fa:a2:97:eb:67:af:
         23:ae:91:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:07:47 2026 by rpki-client