Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft
File:                     450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft (raw, json)
Hash identifier:          ln+cABBE07KuezfiSW4NHGijTqK7yJfmZjR2JKEE3oo=
Subject key identifier:   D6:41:35:99:23:0D:9E:F3:B3:22:87:33:7B:DA:5F:A1:42:72:A5:E9
Authority key identifier: 45:0A:C0:E4:CD:E3:18:16:82:FF:27:C2:52:1C:C4:BF:72:90:C0:D7
Certificate issuer:       /CN=450AC0E4CDE3181682FF27C2521CC4BF7290C0D7
Certificate serial:       6180A9E02B2981288C71F614D9B5C0FF56E46756
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft
Manifest number:          3A
Signing time:             Sat 13 Jun 2026 13:36:49 +0000
Manifest this update:     Sat 13 Jun 2026 13:31:49 +0000
Manifest next update:     Sun 14 Jun 2026 13:43:49 +0000
Files and hashes:         1: 450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl (hash: 9X+xFNXXedyxm6pxORdARlGlK8Y5AWoPNvI8T89ZyU0=)
                          2: 3130332e3232382e3230342e302f32332d3233203d3e2034383038.roa (hash: 0Mhtj21hVbeX9XUR/Q2Gx0H8h7HJJx0VMMT+V2reTHc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 13:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:80:a9:e0:2b:29:81:28:8c:71:f6:14:d9:b5:c0:ff:56:e4:67:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450AC0E4CDE3181682FF27C2521CC4BF7290C0D7
        Validity
            Not Before: Jun 13 13:31:49 2026 GMT
            Not After : Jun 14 13:43:49 2026 GMT
        Subject: CN=D6413599230D9EF3B32287337BDA5FA14272A5E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:99:9c:05:51:59:7a:51:7b:ef:7c:98:9e:d5:
                    fa:c1:c7:75:be:86:3e:e0:26:27:8b:3a:57:87:34:
                    83:dd:dd:2d:96:30:91:77:0d:84:05:7a:bf:54:8c:
                    00:a8:3d:52:ed:0b:88:27:d8:bd:a6:6c:a8:b5:60:
                    d7:90:d3:8a:ed:ca:77:aa:6f:10:67:72:85:ad:d5:
                    98:0f:6c:a0:71:18:64:41:c3:57:f6:0f:8c:18:86:
                    4d:5a:6d:57:10:4f:85:f8:44:88:8e:02:c0:47:7c:
                    73:96:fd:da:d2:26:12:ba:c0:55:b7:f2:4c:e8:f7:
                    18:e1:5e:82:31:ae:f5:62:1d:cd:39:81:e9:a8:b7:
                    32:a0:d2:9f:03:c9:4a:a5:b2:5a:e7:f9:f0:a3:30:
                    6f:b3:a0:ba:fb:7d:4f:31:6c:69:16:67:8e:cd:5e:
                    94:22:56:a0:a8:a0:2f:5a:d1:5f:39:40:86:5b:a1:
                    3d:df:33:10:4b:b4:a9:bd:cd:b8:a4:b5:24:7f:ea:
                    39:30:d1:89:6a:55:1a:bf:94:35:83:14:ad:af:06:
                    42:c5:fb:be:78:4e:18:34:31:70:1c:d2:de:db:ef:
                    2f:1a:9a:63:22:e7:e5:fb:95:8f:4a:67:07:be:80:
                    a5:1b:f1:21:16:7a:fd:04:d3:c4:b4:57:c4:15:9c:
                    c5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:41:35:99:23:0D:9E:F3:B3:22:87:33:7B:DA:5F:A1:42:72:A5:E9
            X509v3 Authority Key Identifier:
                keyid:45:0A:C0:E4:CD:E3:18:16:82:FF:27:C2:52:1C:C4:BF:72:90:C0:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:48:1d:aa:9f:fd:c6:ea:54:cd:f9:67:5c:47:12:53:3d:ba:
         7a:67:d5:11:12:cb:eb:6a:5a:ea:d4:3e:0b:96:d2:7d:a0:69:
         26:e5:cc:17:0d:6f:0f:f0:f0:28:a2:5b:d4:2e:95:22:db:dc:
         c0:1a:fd:6d:63:77:c4:38:2e:98:e0:ee:bb:8c:4f:a2:77:a6:
         1f:1b:fc:4b:35:86:73:46:df:9c:03:18:f2:d5:e7:7c:20:b4:
         a4:bd:34:58:36:68:c0:d9:63:ef:8d:4f:4e:3a:98:d5:c9:0e:
         15:db:0f:80:57:b9:f5:d7:11:f1:27:2e:f8:bc:60:d4:e2:04:
         21:83:98:3a:b9:55:fc:fd:be:98:b1:0f:48:ad:b3:cf:58:8c:
         26:e8:37:51:4b:b0:97:06:cd:c5:69:0b:4a:ff:df:19:1d:cd:
         a1:c9:4b:d7:a7:5f:64:6f:af:bb:38:b8:25:bc:83:f1:b7:84:
         c8:d4:f0:b9:f3:4c:19:9f:42:a4:3a:d1:d6:b2:60:6e:91:1f:
         37:9d:c3:48:e5:a6:0a:bd:44:67:60:ea:47:83:8b:5f:7a:f7:
         13:e2:01:f0:a4:5e:68:ff:3f:1d:79:7a:bb:03:96:d8:e5:3c:
         d1:bb:df:11:72:68:4a:23:af:0a:cc:21:3f:f0:5a:30:86:71:
         1a:41:1b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:36:32 2026 by rpki-client