Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft
File:                     5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft (raw, json)
Hash identifier:          iCZWg/oJN7uR7Oad/H1kpoDRuKzGOgRi+8WbMH2u7bs=
Subject key identifier:   47:F0:0C:17:4D:1B:84:F6:38:1A:71:1D:E8:6A:D6:78:A5:E9:5C:92
Authority key identifier: 5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF
Certificate issuer:       /CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF
Certificate serial:       0DFDC88BC816C6196A7267ACC90154AA8038CBFE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft
Manifest number:          45
Signing time:             Sat 13 Jun 2026 16:11:55 +0000
Manifest this update:     Sat 13 Jun 2026 16:06:55 +0000
Manifest next update:     Sun 14 Jun 2026 18:57:55 +0000
Files and hashes:         1: 5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl (hash: NPpfX/hoZmoUKh7xSS6QOxZlbkk06pyOGnQFVefw+98=)
                          2: 323430363a636163303a3a2f34302d3430203d3e20313337373438.roa (hash: aRLvXYoRtvP7clHuuxr1krpZ56utFOKI5wmAeoYmk/w=)
                          3: 323430363a636163303a3230303a3a2f34302d3430203d3e20313337373438.roa (hash: x2XSJIwCKDpp3rwcXVq5g4z1/eZ8OIbDQxrdTRlIM0k=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:fd:c8:8b:c8:16:c6:19:6a:72:67:ac:c9:01:54:aa:80:38:cb:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF
        Validity
            Not Before: Jun 13 16:06:55 2026 GMT
            Not After : Jun 14 18:57:55 2026 GMT
        Subject: CN=47F00C174D1B84F6381A711DE86AD678A5E95C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:dc:da:78:fe:5a:d2:53:fa:44:5c:e4:0a:
                    44:67:de:7f:ef:c6:ee:48:aa:b0:2b:04:c7:ae:39:
                    69:1b:ee:fd:a8:53:9e:cc:79:98:3a:61:c9:18:a6:
                    c1:0f:db:65:ff:e6:19:4e:c8:d3:c8:6b:ec:d4:cd:
                    20:12:66:66:1d:30:a4:51:90:f0:7d:9b:bf:4b:7a:
                    cf:35:dd:5b:04:3b:0a:25:b3:f8:92:98:c0:c3:2b:
                    42:64:7a:b6:86:dc:f3:af:97:2b:c5:24:60:cf:aa:
                    fa:75:46:4b:1a:33:a5:a1:c3:f9:04:6b:76:0c:b4:
                    58:0e:e4:37:c9:d9:22:18:87:a6:05:3d:cc:b3:60:
                    e2:61:3e:3b:eb:83:98:d8:21:81:9b:c9:4d:92:1a:
                    a6:00:95:52:da:2f:e6:bd:89:ba:13:d9:fd:2b:27:
                    89:2b:26:2f:28:fb:47:8f:b5:b9:b7:c8:34:90:7c:
                    c7:04:a4:90:10:3a:dc:25:6f:42:77:4a:d7:47:34:
                    25:53:58:d1:5c:a9:81:35:1f:e5:4e:c2:f6:f6:ee:
                    02:18:82:ce:ab:b9:e0:59:f2:45:da:86:b5:c1:78:
                    7d:75:4d:10:9b:2c:50:83:1d:7a:a1:4f:7f:86:5e:
                    17:53:54:12:85:9c:05:92:68:16:6b:51:71:05:ba:
                    09:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F0:0C:17:4D:1B:84:F6:38:1A:71:1D:E8:6A:D6:78:A5:E9:5C:92
            X509v3 Authority Key Identifier:
                keyid:5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:66:09:0b:5e:d7:4d:28:97:13:85:15:12:24:f0:05:e1:a7:
         65:46:b5:89:37:34:79:17:75:48:a1:00:a9:9d:5c:14:44:86:
         25:cc:0f:08:0c:f9:7d:06:d8:17:a4:e3:c5:07:39:96:8f:42:
         e1:a6:1a:fd:77:1f:eb:dd:3e:2d:f8:ef:94:06:ae:0f:7c:78:
         82:b1:1a:44:c2:5c:2b:4c:52:1b:e7:4b:9f:c8:01:65:ab:b6:
         3f:0e:07:6c:67:74:80:d3:dc:2a:8d:9b:79:49:e5:5c:66:60:
         48:60:1e:84:c3:62:47:24:d4:40:79:1d:e4:05:61:1e:bf:ff:
         04:8b:a7:d9:20:5d:20:86:53:ec:22:63:70:84:13:31:31:6a:
         93:32:48:48:20:86:bc:af:b8:06:bd:67:3c:99:8d:8b:97:ce:
         4d:59:25:38:f0:64:da:19:54:68:87:e3:df:c7:fe:d8:31:b7:
         71:9e:60:2f:18:31:a3:16:8a:76:14:53:66:3c:6e:fd:c3:fe:
         65:f6:7e:fe:15:8a:75:56:b4:6c:69:fa:1c:29:4b:4f:fe:e2:
         2c:52:af:57:8d:ef:0f:1c:1a:69:fe:91:94:15:55:d8:20:a0:
         e2:98:04:95:5d:be:03:9d:9e:9c:fa:0b:e9:c1:80:7e:d1:bd:
         0a:9f:8e:ed
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUDf3Ii8gWxhlqcmesyQFUqoA4y/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQyRENCQjZEODI0MDFCNUUwRTU4MDI1NDJCQjUzRTU2
MUMxRjhFRjAeFw0yNjA2MTMxNjA2NTVaFw0yNjA2MTQxODU3NTVaMDMxMTAvBgNV
BAMTKDQ3RjAwQzE3NEQxQjg0RjYzODFBNzExREU4NkFENjc4QTVFOTVDOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF7tzaeP5a0lP6RFzkCkRn3n/v
xu5IqrArBMeuOWkb7v2oU57MeZg6YckYpsEP22X/5hlOyNPIa+zUzSASZmYdMKRR
kPB9m79Les813VsEOwols/iSmMDDK0JkeraG3POvlyvFJGDPqvp1RksaM6Whw/kE
a3YMtFgO5DfJ2SIYh6YFPcyzYOJhPjvrg5jYIYGbyU2SGqYAlVLaL+a9iboT2f0r
J4krJi8o+0ePtbm3yDSQfMcEpJAQOtwlb0J3StdHNCVTWNFcqYE1H+VOwvb27gIY
gs6rueBZ8kXahrXBeH11TRCbLFCDHXqhT3+GXhdTVBKFnAWSaBZrUXEFugmlAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUR/AMF00bhPY4GnEd6GrWeKXpXJIwHwYDVR0j
BBgwFoAUXS3LttgkAbXg5YAlQrtT5WHB+O8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTkxOTMzNDM3OTA5NDAxNy8wLzVEMkRDQkI2RDgyNDAxQjVFMEU1ODAyNTQyQkI1
M0U1NjFDMUY4RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUQyRENCQjZEODI0MDFCNUUwRTU4MDI1NDJCQjUzRTU2MUMxRjhFRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTk5MTkzMzQzNzkwOTQwMTcvMC81RDJEQ0JCNkQ4MjQw
MUI1RTBFNTgwMjU0MkJCNTNFNTYxQzFGOEVGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwWYJC17XTSiX
E4UVEiTwBeGnZUa1iTc0eRd1SKEAqZ1cFESGJcwPCAz5fQbYF6TjxQc5lo9C4aYa
/Xcf690+LfjvlAauD3x4grEaRMJcK0xSG+dLn8gBZau2Pw4HbGd0gNPcKo2beUnl
XGZgSGAehMNiRyTUQHkd5AVhHr//BIun2SBdIIZT7CJjcIQTMTFqkzJISCCGvK+4
Br1nPJmNi5fOTVklOPBk2hlUaIfj38f+2DG3cZ5gLxgxoxaKdhRTZjxu/cP+ZfZ+
/hWKdVa0bGn6HClLT/7iLFKvV43vDxwaaf6RlBVV2CCg4pgElV2+A52enPoL6cGA
ftG9Cp+O7Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:05:53 2026 by rpki-client