Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft
File:                     A4CF7F709E062849E6BF84E14474A0320EAB780E.mft (raw, json)
Hash identifier:          c9FE6NgtZARg18jMJIHVDwDQWgLf8ukyvSsRqjCusjM=
Subject key identifier:   EA:3C:CD:06:51:9A:B9:73:67:6B:62:23:27:B8:F5:AF:EA:8E:44:4C
Authority key identifier: A4:CF:7F:70:9E:06:28:49:E6:BF:84:E1:44:74:A0:32:0E:AB:78:0E
Certificate issuer:       /CN=A4CF7F709E062849E6BF84E14474A0320EAB780E
Certificate serial:       16E75B0DF4CD3840F53BEA618333EEF33F4DAB64
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft
Manifest number:          3D
Signing time:             Sat 13 Jun 2026 14:26:52 +0000
Manifest this update:     Sat 13 Jun 2026 14:21:52 +0000
Manifest next update:     Sun 14 Jun 2026 15:34:52 +0000
Files and hashes:         1: 3231302e37332e39362e302f32302d3230203d3e2037363430.roa (hash: EtkpsC4Mngg6Z7xDQx0zDkvqampHk4U0fmU7Xuo/Gy8=)
                          2: A4CF7F709E062849E6BF84E14474A0320EAB780E.crl (hash: ZOudTNuTUsjLZTgcnBP+sd1+VGwfdGxcfdlCWan4bqA=)
                          3: 3231302e37332e3131322e302f32302d3230203d3e2034383038.roa (hash: BkkuipTr70Pd9n38Azg/lvzhSYMnI9heviaZaEVEgbU=)
                          4: 323430313a313030303a3a2f33322d3332203d3e2037363430.roa (hash: zAaAPOY8JgjZ5yQFoHRvVaNJ/n7fbcAqptOZFbs0UYU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 15:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e7:5b:0d:f4:cd:38:40:f5:3b:ea:61:83:33:ee:f3:3f:4d:ab:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4CF7F709E062849E6BF84E14474A0320EAB780E
        Validity
            Not Before: Jun 13 14:21:52 2026 GMT
            Not After : Jun 14 15:34:52 2026 GMT
        Subject: CN=EA3CCD06519AB973676B622327B8F5AFEA8E444C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:f0:c2:6f:63:d2:65:92:e2:1b:c1:a8:c4:
                    1a:70:91:26:c8:2a:de:f6:0b:a0:7c:cb:e9:4d:3c:
                    a7:b0:12:f9:4b:e0:dd:7f:7b:81:e9:79:8a:7b:28:
                    06:6d:61:6c:4c:5e:18:7d:38:29:2b:a4:8e:ef:c3:
                    18:dc:c8:0a:96:91:75:76:34:cf:b7:14:3b:3e:bf:
                    0c:27:33:52:d2:93:d0:aa:04:39:99:2c:71:82:48:
                    21:c5:5d:b5:28:ca:01:f9:b7:86:a4:d5:47:53:4e:
                    01:07:1b:d1:1b:d6:44:cc:22:76:bb:8c:f7:6f:dc:
                    b1:45:75:28:ca:0d:98:79:12:8f:eb:80:0b:ba:30:
                    16:13:dc:0d:e6:f8:6b:b3:02:20:b3:41:c4:09:3d:
                    17:b5:c0:91:2e:1b:c3:66:67:c8:3c:e7:fd:f2:c7:
                    64:ca:e5:6e:8f:57:c6:bf:80:41:6b:19:bc:e8:0c:
                    79:fd:00:69:27:60:aa:f0:35:6c:33:d9:aa:2b:40:
                    8d:95:ca:be:c5:b0:17:b9:cd:d8:84:01:19:1c:8d:
                    fd:3b:ec:b3:ee:fa:fd:6d:12:5c:ee:a4:e0:00:ad:
                    2c:fb:40:62:12:c6:93:8c:67:3d:fd:de:0a:28:80:
                    64:45:2f:de:89:57:35:6a:e4:24:30:1e:21:bd:38:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3C:CD:06:51:9A:B9:73:67:6B:62:23:27:B8:F5:AF:EA:8E:44:4C
            X509v3 Authority Key Identifier:
                keyid:A4:CF:7F:70:9E:06:28:49:E6:BF:84:E1:44:74:A0:32:0E:AB:78:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d1:df:6a:1e:88:f5:67:dc:f2:a5:a6:cc:ad:76:8c:8e:a6:
         36:87:46:58:6d:46:79:b9:75:e4:69:eb:c5:84:89:b0:39:f2:
         30:72:46:89:e8:7d:f9:eb:e7:1e:f6:f4:8f:18:59:e0:d8:43:
         21:f1:ef:2e:b8:b4:51:30:4b:22:e2:ac:d7:75:5c:09:cb:82:
         1f:26:92:70:0a:96:bf:49:27:79:f0:ca:e7:63:50:a9:7e:80:
         7c:e7:1a:eb:02:93:81:6b:b8:e8:62:82:c9:1b:91:89:08:9f:
         3c:b5:13:c1:64:d6:a3:7e:b8:c0:82:8a:10:d1:d8:e9:78:ce:
         87:f3:11:b6:50:d8:8c:f4:00:b0:07:7a:d1:b5:3d:4f:93:52:
         78:d3:5d:f3:63:e5:0f:d9:e5:60:61:ce:08:76:cd:3b:8d:4b:
         79:b6:1f:a5:c5:17:05:cf:8c:d3:c0:9f:f7:64:a3:92:4a:3f:
         b8:84:3b:1a:14:57:46:81:ff:5c:19:c2:91:d8:b5:94:3e:fc:
         1f:82:08:17:61:4b:a4:7d:d7:7e:59:1e:e2:5c:96:1e:c0:89:
         6e:df:77:e6:04:de:83:0d:ce:06:5d:c4:36:9f:e0:e4:dd:0e:
         13:71:11:9a:b2:94:bf:c2:6b:27:00:08:d6:d5:e0:ac:01:62:
         64:38:08:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:28:09 2026 by rpki-client