Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
File:                     A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft (raw, json)
Hash identifier:          +GPy6s8D2TMNBAOkLj6l0mAxebXNwSbnmSggFBlOhos=
Subject key identifier:   67:90:44:35:F9:D3:A3:D4:76:78:47:4A:4F:95:F3:45:7F:CE:F3:E0
Authority key identifier: A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F
Certificate issuer:       /CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F
Certificate serial:       458A8379B16E299CE7B7F95F56D7C555A5FC5810
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
Manifest number:          49
Signing time:             Sat 13 Jun 2026 09:56:42 +0000
Manifest this update:     Sat 13 Jun 2026 09:51:42 +0000
Manifest next update:     Sun 14 Jun 2026 12:04:42 +0000
Files and hashes:         1: 3132312e34362e3139362e302f32322d3232203d3e20313430323932.roa (hash: O/AD3qSU6wTIgj4hkNfIn+Jeen/941RJSXGvoa481lc=)
                          2: 3132312e34362e3139362e302f32322d3232203d3e203536303436.roa (hash: aodd28e8U9PHDKWSm11EB6EZp6VbHVm/MuILVwyonvk=)
                          3: 3132312e34362e3230302e302f32322d3232203d3e203536303436.roa (hash: ctS4EHMva7f1SKBENENSA56WVaEq0k2ByBGUs33Z5FA=)
                          4: 3132312e34362e3139322e302f32322d3232203d3e203536303436.roa (hash: eS3fIU3qyAFP/R9AYBNjmWcu/ek4BsGa+9vz4CrGdkE=)
                          5: 3132312e34362e3230302e302f32322d3232203d3e20313430323932.roa (hash: 8xs+dUd+uQdNQZJjuvb+nFvO1wt2heC5dsLAy2/mChI=)
                          6: 3132312e34362e3139362e302f32322d3232203d3e20313430373137.roa (hash: r1OrvrQbOG3CWpMBVfsfGJEW6xW4KGBKQR94p3XbtMs=)
                          7: A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl (hash: jn5rexnM51h+1E05BmLBhcM1VCqOLUr0zxXfnlFSxfk=)
                          8: 3132312e34362e3230302e302f32322d3232203d3e20313430373137.roa (hash: EEb5FwKgW5dHQUxB859/L0aDnU2++rdkRtR6F19ReF8=)
                          9: 3132312e34362e3139322e302f32322d3232203d3e20313430323932.roa (hash: wc58+9s0xCI5qy0srFHch4c3xXfPOj0QoS2Uy2hNKzo=)
                          10: 3132312e34362e3139322e302f32322d3232203d3e20313430373137.roa (hash: 5wawcPsM5m80HU28KarQtD66H36M4Wp3DiAa4Kkd7FM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8a:83:79:b1:6e:29:9c:e7:b7:f9:5f:56:d7:c5:55:a5:fc:58:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F
        Validity
            Not Before: Jun 13 09:51:42 2026 GMT
            Not After : Jun 14 12:04:42 2026 GMT
        Subject: CN=67904435F9D3A3D47678474A4F95F3457FCEF3E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:25:17:4a:a9:9a:27:66:8b:ad:28:9d:14:b4:
                    ac:ac:b0:c6:2b:cb:42:89:1d:8c:c7:6b:55:7a:9d:
                    68:95:4b:0b:00:53:55:88:a9:ad:9d:d5:ac:ff:c0:
                    60:63:c4:0f:f7:a2:eb:9e:90:55:9b:02:80:56:8b:
                    64:e2:25:c4:3c:2b:fb:2d:82:2c:5f:83:c3:f3:33:
                    8b:9b:a5:9d:07:69:cd:91:3c:a6:8d:28:b7:0c:ca:
                    84:8e:59:1e:6f:ce:f8:33:cc:8e:3c:67:36:89:34:
                    0c:27:d2:b6:48:2d:05:31:70:31:d2:ac:99:cd:5d:
                    82:c3:74:b4:aa:28:79:17:88:07:72:28:bf:e7:f8:
                    01:75:87:cc:b3:9a:0a:0d:10:66:0f:4c:22:48:de:
                    f9:4c:0d:74:c1:93:27:fc:2b:d1:29:d1:c1:4e:cb:
                    9f:f1:33:65:ff:2d:10:f3:6d:9b:75:cf:5f:09:26:
                    d9:18:1f:d8:38:5a:20:c6:4a:20:55:1f:c5:d4:67:
                    2c:20:2e:5e:ba:85:ca:49:a3:43:f0:a1:39:41:75:
                    71:5b:9c:56:c0:b8:ba:df:93:d0:fe:de:56:a6:bb:
                    de:6b:9e:be:1f:61:78:9f:df:93:aa:1b:e9:e1:26:
                    39:bf:14:82:34:2c:18:bc:e7:41:90:7c:70:fa:44:
                    04:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:90:44:35:F9:D3:A3:D4:76:78:47:4A:4F:95:F3:45:7F:CE:F3:E0
            X509v3 Authority Key Identifier:
                keyid:A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:4c:e0:90:13:42:9a:3c:4c:ea:ff:38:d4:10:24:e6:3e:2e:
         4f:f5:95:7f:d5:9f:c6:0a:48:dd:80:67:74:b7:c9:3f:a1:28:
         f4:5e:50:b3:d7:d5:fa:9e:62:9f:d0:ff:c1:3e:cf:2e:0b:82:
         13:77:d0:ad:2b:1e:7b:fa:fb:44:14:41:9b:94:c1:2f:f3:55:
         6c:57:f7:2d:3b:f2:f5:25:76:27:e5:1d:d0:f6:0b:ea:26:6a:
         7a:6f:5e:64:43:34:f4:7b:4a:26:1e:1b:34:9a:e7:67:3a:da:
         9d:1c:25:75:b9:16:c0:7f:16:7f:aa:2d:cf:21:81:9f:10:38:
         c3:9b:be:c1:4b:67:47:79:de:89:b5:8b:e1:42:cc:ae:c1:7e:
         cf:0e:93:91:de:c0:43:6f:5c:57:cf:88:62:7e:eb:c4:74:d1:
         a4:7a:f9:9d:9c:86:49:b1:29:50:c4:c2:e3:2c:4a:d2:3e:86:
         c3:a6:b7:a5:7f:79:0e:b1:f3:98:49:d6:ed:89:54:0d:f2:1c:
         4a:5a:0f:4a:43:a6:d3:db:c1:24:d8:09:0c:b1:3e:a4:7e:23:
         ee:c6:64:de:b2:c3:5b:64:4b:a6:17:8a:27:d2:c9:df:00:04:
         bc:dd:42:a1:39:b3:bc:7d:69:7e:4b:2e:98:d3:a2:fb:bd:dd:
         12:6f:14:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:07 2026 by rpki-client