Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft
File:                     94CD4C01C346E7777BF9874A62B37929003445D7.mft (raw, json)
Hash identifier:          jEY2N0cvBRbnChNiPyTK0DEN0cDRE8TqTIGW3UDezzA=
Subject key identifier:   DF:33:3A:7C:FC:06:4A:2C:58:FC:28:FB:71:F1:D4:B7:C4:FB:F6:76
Authority key identifier: 94:CD:4C:01:C3:46:E7:77:7B:F9:87:4A:62:B3:79:29:00:34:45:D7
Certificate issuer:       /CN=94CD4C01C346E7777BF9874A62B37929003445D7
Certificate serial:       0D03A7D58A8009027392CBE606EBA8A68333BE67
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft
Manifest number:          70
Signing time:             Wed 29 Jul 2026 07:53:51 +0000
Manifest this update:     Wed 29 Jul 2026 07:48:51 +0000
Manifest next update:     Thu 30 Jul 2026 09:35:51 +0000
Files and hashes:         1: 3130332e3130372e3130382e302f32322d3232203d3e2030.roa (hash: v3s0WHWsHN7gLw6ctSTDGQRf26tMQsIpS21ppnvBCk0=)
                          2: 94CD4C01C346E7777BF9874A62B37929003445D7.crl (hash: pUKNQSXUOvy6v8vznfFPdVa38/L6gzD12GhdWqUy5ds=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:03:a7:d5:8a:80:09:02:73:92:cb:e6:06:eb:a8:a6:83:33:be:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94CD4C01C346E7777BF9874A62B37929003445D7
        Validity
            Not Before: Jul 29 07:48:51 2026 GMT
            Not After : Jul 30 09:35:51 2026 GMT
        Subject: CN=DF333A7CFC064A2C58FC28FB71F1D4B7C4FBF676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6c:4f:ef:df:72:76:72:0d:5d:a6:3f:68:47:
                    b1:ab:ad:87:83:c7:e1:ec:e1:f9:ed:39:e4:1e:15:
                    e1:d2:1d:87:3b:d7:cd:0c:fb:0d:b5:91:87:ee:f1:
                    13:93:87:1e:6a:48:c8:d8:62:59:e9:87:5d:b1:83:
                    ab:74:61:91:62:12:1d:f5:5a:1d:dd:b1:38:81:25:
                    37:3a:4d:3c:28:fa:56:4c:f2:b8:7d:2a:5b:71:94:
                    6f:df:f6:77:f2:5d:63:77:78:85:95:c0:d8:ba:92:
                    e2:6d:51:f5:b4:95:69:ab:52:1e:6e:0c:4b:eb:12:
                    15:8d:5e:6a:4c:b9:e2:9f:c7:1b:2d:b1:76:23:b9:
                    cd:44:8d:b1:d6:7b:ce:d9:68:7f:50:f2:91:dd:90:
                    64:fa:3f:b4:7e:5e:db:5a:35:79:89:a0:6c:a6:24:
                    06:c8:d3:7b:f9:e2:be:14:a9:07:68:12:f8:10:58:
                    56:0a:b4:e4:85:28:90:5c:63:f6:65:e9:ca:d7:df:
                    8c:ff:93:11:7e:b8:15:2c:db:5a:83:6a:56:7c:e8:
                    82:33:93:a4:4f:da:bc:96:71:0c:8b:3b:e5:74:a2:
                    19:76:0c:dd:3c:84:d7:b4:47:48:48:b6:05:ce:c6:
                    b7:50:27:0b:63:36:05:5d:f9:3b:7e:c0:95:e5:8b:
                    45:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:33:3A:7C:FC:06:4A:2C:58:FC:28:FB:71:F1:D4:B7:C4:FB:F6:76
            X509v3 Authority Key Identifier:
                keyid:94:CD:4C:01:C3:46:E7:77:7B:F9:87:4A:62:B3:79:29:00:34:45:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:3f:3d:41:3e:73:52:ad:54:41:0f:af:65:24:35:a8:2d:d5:
         83:81:af:6d:a0:4a:40:5e:1d:07:32:fe:33:2e:f2:b8:65:8f:
         16:a0:01:23:38:a8:76:77:d8:ab:53:78:48:4d:d5:6a:dc:27:
         ad:ea:77:1f:5d:39:46:1a:0a:91:87:c1:9b:b1:5a:26:43:2f:
         84:e8:11:b8:69:13:77:ea:ac:db:06:a9:a7:0e:03:9e:2c:f1:
         bf:4a:a3:34:a9:ef:d9:d8:c0:60:7d:c4:1d:38:27:1c:a0:dd:
         5f:f3:28:4a:b5:01:d4:1c:64:9a:8c:fb:ba:b9:87:63:70:e7:
         51:09:53:04:ab:06:1f:3c:ab:eb:90:5b:47:2b:eb:1f:07:98:
         4c:bb:18:af:03:a4:fd:ab:34:00:d1:3c:42:78:65:d8:ed:da:
         47:ec:18:e9:cf:17:59:c7:4c:9a:0b:82:f8:90:f5:75:ae:d1:
         63:c9:9d:e4:65:21:63:af:43:72:d4:a9:76:df:52:7b:cc:ef:
         49:e8:b7:a0:11:fe:ad:d2:93:6a:78:f0:36:e9:59:b8:01:eb:
         49:50:b9:4f:04:5b:81:68:c1:76:b5:8c:c4:63:91:94:b6:c2:
         29:78:56:cd:4b:74:ad:56:a5:98:be:4f:7f:01:cf:32:8d:58:
         6b:a0:2f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:08:19 2026 by rpki-client