Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft
File:                     C178E89AC582AE71D7881FC86E201466F09D849B.mft (raw, json)
Hash identifier:          WYxXJJB+XSlUUKf7O6YSd1CMGUnkVI2CV4j75ThKrhQ=
Subject key identifier:   DE:36:8B:ED:26:18:B1:EC:45:B4:57:66:A2:2B:15:29:23:43:98:13
Authority key identifier: C1:78:E8:9A:C5:82:AE:71:D7:88:1F:C8:6E:20:14:66:F0:9D:84:9B
Certificate issuer:       /CN=C178E89AC582AE71D7881FC86E201466F09D849B
Certificate serial:       5BC7785014C892E0B2D59E156F3A371BB19EA499
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft
Manifest number:          29
Signing time:             Sat 13 Jun 2026 18:22:05 +0000
Manifest this update:     Sat 13 Jun 2026 18:17:05 +0000
Manifest next update:     Sun 14 Jun 2026 20:38:05 +0000
Files and hashes:         1: 3130332e35332e3230382e302f32342d3234203d3e2034383038.roa (hash: enYv3abbVKOktfEN/FTcAdZ8EmguoNf0izTnKUsvjeY=)
                          2: 3130332e35332e3231312e302f32342d3234203d3e2034383038.roa (hash: 9USapACXMKvdBF3g3pPaZVE/MEDexYhYCH1QWormaIc=)
                          3: C178E89AC582AE71D7881FC86E201466F09D849B.crl (hash: vliMOyKFiH7DoB5ZGLlS6bs/apsMRzE6HsqFgRd+YJo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c7:78:50:14:c8:92:e0:b2:d5:9e:15:6f:3a:37:1b:b1:9e:a4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C178E89AC582AE71D7881FC86E201466F09D849B
        Validity
            Not Before: Jun 13 18:17:05 2026 GMT
            Not After : Jun 14 20:38:05 2026 GMT
        Subject: CN=DE368BED2618B1EC45B45766A22B152923439813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:18:07:3e:08:2a:92:2f:21:7e:d7:0b:c3:46:
                    1d:a5:9e:62:be:50:14:cf:87:9a:5a:54:58:12:77:
                    39:aa:67:dc:1d:21:6b:ad:c1:4b:73:ec:7d:7d:f5:
                    fb:d2:b5:9c:1f:84:15:cc:37:2b:a4:5f:af:f5:f2:
                    fe:03:44:c1:8f:a4:b4:44:62:1f:74:96:4e:3b:63:
                    20:00:97:63:ff:58:b7:8f:55:8c:24:a1:ee:91:c0:
                    f8:d7:b6:3a:53:6d:a5:ec:e9:fb:d6:26:c6:0f:34:
                    c7:d5:d4:12:00:cc:a8:92:25:e4:98:a4:c5:da:8f:
                    bf:33:33:21:fd:18:f8:f4:e7:98:3f:f3:5a:aa:c0:
                    6c:15:7b:40:e5:cc:c4:7d:42:a6:38:d8:aa:0e:61:
                    58:44:34:56:20:b9:95:e3:05:39:b7:3c:df:c1:e9:
                    23:05:e4:98:7d:b5:04:88:ba:27:d7:d4:d2:cb:53:
                    87:c1:6c:c8:1d:f0:e3:14:42:cb:c1:3b:68:cb:80:
                    f0:94:34:44:08:6e:02:47:b9:56:d4:5e:d4:35:2e:
                    71:ab:7b:ce:69:79:f7:09:84:82:4f:3a:01:a7:a6:
                    64:ed:9a:4b:51:24:48:1e:92:fc:87:87:3c:c9:f9:
                    8f:1c:f1:21:55:86:43:59:02:10:b2:cd:17:6b:fe:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:36:8B:ED:26:18:B1:EC:45:B4:57:66:A2:2B:15:29:23:43:98:13
            X509v3 Authority Key Identifier:
                keyid:C1:78:E8:9A:C5:82:AE:71:D7:88:1F:C8:6E:20:14:66:F0:9D:84:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ee:ae:cf:3b:73:f7:fc:4a:56:84:ff:83:a5:40:36:4b:e7:
         09:b5:fc:91:55:ae:6b:d5:0a:dd:b6:97:6e:14:4f:3c:ab:71:
         8b:ae:1f:df:9f:66:58:8d:d1:18:40:93:d0:6e:77:bf:d6:e5:
         5e:08:31:6c:c4:62:f0:2a:f0:d1:ea:b8:31:11:36:6e:91:dd:
         46:f5:ee:0f:5f:d8:50:80:0b:1e:d5:45:9f:4d:8f:8c:0a:3a:
         74:9d:6c:e8:4c:71:9f:1c:4f:e6:13:f0:9e:b4:8c:26:97:20:
         21:17:3a:ea:96:e4:fc:c3:33:be:e0:2a:88:30:e9:3d:3e:4b:
         a0:03:79:ed:4c:1c:af:5d:91:7f:a6:7f:13:10:dc:d8:75:04:
         0c:27:e4:6f:3c:68:c7:b6:9d:3b:04:f9:ff:19:da:7a:d8:f6:
         a0:a8:86:b2:a5:28:67:02:b6:ea:65:39:66:c2:74:f3:53:3b:
         a3:ea:f2:30:2f:cb:d6:63:f8:ad:db:84:2f:4f:69:31:84:ad:
         ea:5b:6d:a8:6a:54:8f:d1:14:2c:60:4c:8c:28:a1:c2:4e:bc:
         d6:5b:43:ff:3a:6b:01:69:b6:39:22:ef:87:a7:48:ee:53:da:
         7f:d7:21:b0:6c:dd:0d:5d:3d:3e:54:bb:b6:3d:60:ce:55:c2:
         85:40:ea:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:45:41 2026 by rpki-client