Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft
File:                     4EC27FCC44D433FABCCB17301446A57C3578CD57.mft (raw, json)
Hash identifier:          /qBJHOANPy0Fl8ItvDs3jIjryJp2ab16LNECtZnccIk=
Subject key identifier:   65:AB:B9:E4:0C:CA:74:78:BC:AE:D8:22:1A:19:AA:D1:1F:CF:47:9D
Authority key identifier: 4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57
Certificate issuer:       /CN=4EC27FCC44D433FABCCB17301446A57C3578CD57
Certificate serial:       0260F60F6547FC7985B62814D89275D6B0D63422
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft
Manifest number:          4C
Signing time:             Sat 13 Jun 2026 17:56:59 +0000
Manifest this update:     Sat 13 Jun 2026 17:51:59 +0000
Manifest next update:     Sun 14 Jun 2026 21:42:59 +0000
Files and hashes:         1: 323430303a653638303a3a2f33322d3332203d3e203539303834.roa (hash: hCjCss8Qrog8PzpIaKD0V1/B/1nEVtaXZSPDBcpebOw=)
                          2: 4EC27FCC44D433FABCCB17301446A57C3578CD57.crl (hash: FtzJlQ5uWUduJjmkIrg8VZ1cfMfnqfMIWCuTNlhD/H0=)
                          3: 34332e3234372e38342e302f32322d3232203d3e203539303834.roa (hash: UTsMLFBIg5eNtUqx8ENV+v7m0qdLL86FBpiVlkFAHww=)
                          4: 3130332e3232392e3137322e302f32322d3232203d3e203539303834.roa (hash: AUxiN3xrkojOpJEDBqwUUG7fz2qhvusWn+TwwyA5v5Y=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:60:f6:0f:65:47:fc:79:85:b6:28:14:d8:92:75:d6:b0:d6:34:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EC27FCC44D433FABCCB17301446A57C3578CD57
        Validity
            Not Before: Jun 13 17:51:59 2026 GMT
            Not After : Jun 14 21:42:59 2026 GMT
        Subject: CN=65ABB9E40CCA7478BCAED8221A19AAD11FCF479D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8f:bb:b7:04:54:b8:b5:9e:b3:c4:d7:d7:4a:
                    8d:4c:84:36:e9:a0:67:de:2e:06:87:ce:97:9c:41:
                    f5:f9:08:0d:64:3e:1f:41:ac:52:64:30:37:65:87:
                    a5:2d:c1:01:33:a7:a0:1d:b3:e7:14:3e:0e:2c:b4:
                    fd:19:25:c0:b2:5c:5e:ec:3b:ea:16:72:60:39:4f:
                    5a:10:63:26:1c:18:75:28:c2:f7:40:6d:e1:1e:a2:
                    bf:2b:05:4b:98:5c:61:12:c5:8e:3d:2d:a3:bb:ac:
                    01:43:fe:55:a8:7e:82:04:33:d9:d1:04:19:e8:22:
                    0a:ae:03:9f:9b:f9:33:76:e7:46:99:20:3d:98:f7:
                    9e:97:ae:d5:b9:55:d8:b4:2d:bc:6a:b9:39:fc:3b:
                    13:9e:76:f8:66:7f:bd:30:77:36:35:05:a5:b1:68:
                    0e:26:15:48:8f:85:f2:d1:38:0a:91:34:bf:ac:d2:
                    fc:ed:2f:eb:29:8b:4a:40:ec:e2:75:b4:d7:14:d0:
                    00:b3:39:7a:39:83:e7:8e:77:78:11:08:70:6e:e3:
                    83:16:e0:69:a3:11:47:d0:0b:55:ec:78:e5:3e:67:
                    ca:12:b3:73:7b:30:85:a8:05:c1:c5:fd:26:53:b2:
                    06:2b:9a:53:d1:a4:bb:8d:72:62:af:a1:d6:59:3a:
                    69:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AB:B9:E4:0C:CA:74:78:BC:AE:D8:22:1A:19:AA:D1:1F:CF:47:9D
            X509v3 Authority Key Identifier:
                keyid:4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:2f:e5:ec:27:aa:4e:23:25:68:57:39:c3:37:b7:e5:8a:1c:
         64:0d:53:b1:69:fb:0b:b0:b2:64:ab:b1:1a:3d:19:78:59:1c:
         e8:ce:a2:ca:57:d1:01:28:e3:b2:16:9e:3f:af:59:bb:c0:3c:
         33:5d:51:9d:f8:44:ff:c5:6c:cf:66:6e:da:3a:ee:3f:e7:e1:
         6b:be:3c:b7:fd:11:54:93:20:67:b1:b0:e1:fd:10:b7:6b:55:
         fb:2e:f2:d5:88:ed:e2:fc:fd:6a:2d:d6:47:5d:22:94:d3:fd:
         ff:d2:a1:d1:34:8d:e8:44:79:19:ce:9a:6a:49:b4:41:87:71:
         bf:cd:71:e1:f8:20:13:c9:b3:5c:9e:59:da:7c:65:57:5c:14:
         4d:98:6a:94:4e:9d:79:89:2c:c8:16:f0:d4:d4:6d:3e:0f:b7:
         d7:51:34:26:5c:22:c2:80:87:2a:22:e7:82:26:b1:08:53:bc:
         b6:a5:62:e1:8a:78:95:08:03:24:73:06:05:53:5a:e1:33:37:
         c5:c6:3d:37:82:2f:fd:c9:d8:4c:4a:d2:74:ed:04:11:31:f8:
         c3:46:06:f5:c1:5c:a5:21:df:da:61:f5:28:ea:87:00:b8:b0:
         90:4e:03:7d:04:32:20:6b:93:b3:38:f1:1d:0a:02:d4:a3:b5:
         cc:96:ea:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:06 2026 by rpki-client