Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
File:                     34792F5FA94D005EB8C9704B96BE16835CB06819.mft (raw, json)
Hash identifier:          vqalU77ecSg/drmYi6XNRFwCEMtGHZXVIMX63Ut/2es=
Subject key identifier:   4E:97:F5:17:FD:26:A3:E8:64:69:12:F3:08:8F:38:C3:35:2F:E5:64
Authority key identifier: 34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19
Certificate issuer:       /CN=34792F5FA94D005EB8C9704B96BE16835CB06819
Certificate serial:       51DAE6DE2A5FBCB1BA7163828E80022DE58FC48F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
Manifest number:          21
Signing time:             Sun 14 Jun 2026 00:07:28 +0000
Manifest this update:     Sun 14 Jun 2026 00:02:28 +0000
Manifest next update:     Mon 15 Jun 2026 00:26:28 +0000
Files and hashes:         1: 34792F5FA94D005EB8C9704B96BE16835CB06819.crl (hash: U0870GO78WtjA89c2mBxu+5Rv+5t31tZsZRtsl0C04c=)
                          2: 323430323a313861303a3a2f33322d3332203d3e20313531323239.roa (hash: c8WNPZIvhrZeBjLe5wY9CC8paBg1j9yN7x/SJKYbClQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:da:e6:de:2a:5f:bc:b1:ba:71:63:82:8e:80:02:2d:e5:8f:c4:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34792F5FA94D005EB8C9704B96BE16835CB06819
        Validity
            Not Before: Jun 14 00:02:28 2026 GMT
            Not After : Jun 15 00:26:28 2026 GMT
        Subject: CN=4E97F517FD26A3E8646912F3088F38C3352FE564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:48:5f:bd:e6:40:32:5c:0e:21:61:81:e2:5b:
                    97:16:f0:e4:e2:ec:86:ba:fd:57:d0:07:1e:ee:e4:
                    e9:61:f7:c1:1e:fb:5d:3f:0e:be:eb:0e:db:06:08:
                    ba:44:25:83:f2:fb:6c:0e:76:14:bb:3d:0d:37:bb:
                    b2:e0:0a:0b:63:95:6c:85:8e:64:b8:d3:b0:85:be:
                    97:64:c1:45:84:27:bc:f5:83:53:42:84:29:76:6f:
                    d6:7f:7d:8b:c3:5e:79:b8:b5:a2:ab:18:4f:b8:47:
                    83:e3:06:e0:80:fe:e3:ad:e2:73:6a:e4:ed:78:fd:
                    2d:e6:c0:65:c1:32:f8:ff:15:5c:1e:68:3f:d6:72:
                    1c:dd:87:99:dc:8c:1f:51:5c:bc:d2:98:97:35:49:
                    93:8a:64:d4:68:13:b8:d0:58:35:db:bb:cb:4f:3f:
                    da:a1:0c:1a:20:dc:70:e6:c1:5e:5d:e8:fd:19:49:
                    cb:60:6c:04:ee:cc:2f:8a:40:9e:2d:d8:94:1a:ac:
                    d2:a1:c0:bb:79:84:71:4c:cb:54:a7:6c:4b:af:cb:
                    81:f9:bd:d8:bd:0e:a1:29:e3:65:5a:59:7f:55:c7:
                    cb:83:7b:b2:ee:0e:9b:cd:0f:b1:15:a0:cf:fd:23:
                    d3:8d:07:be:da:f1:4c:6a:fc:88:d4:4f:58:90:31:
                    08:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:97:F5:17:FD:26:A3:E8:64:69:12:F3:08:8F:38:C3:35:2F:E5:64
            X509v3 Authority Key Identifier:
                keyid:34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:88:5b:da:a2:86:69:49:ba:b5:09:39:9a:39:1b:63:41:df:
         50:c5:a8:23:cd:60:b0:11:f0:76:ee:ec:c4:72:ff:10:85:9a:
         27:0d:ae:f2:49:b9:db:ca:9a:45:e5:dd:e0:71:5f:39:4f:35:
         bf:03:a4:9d:d2:7b:f1:f2:f5:84:22:c6:06:fa:79:fd:83:94:
         f5:76:73:ec:ed:f5:fb:f7:08:28:7c:0a:32:82:58:a9:10:39:
         4d:6e:66:c7:22:af:69:88:6d:9a:05:0a:ae:8a:a6:fb:00:69:
         90:84:86:ce:97:89:9f:9e:42:c4:69:8b:b7:72:0f:00:7e:d8:
         cc:60:31:00:a0:f6:bf:5c:2c:b5:c3:76:54:21:50:e3:c7:b6:
         78:96:b6:20:86:ae:24:52:77:36:71:47:08:2a:0f:36:02:7f:
         93:dd:2c:73:a5:0d:06:3f:2c:15:69:d8:8d:dc:d1:66:b5:3e:
         49:f3:67:c2:18:8e:7a:6a:6d:d3:67:f3:00:78:27:2d:5a:95:
         7f:17:52:82:9f:22:05:b7:5e:2a:22:ab:62:45:3d:b4:39:f4:
         3a:ae:e9:ce:2d:97:4c:d5:89:91:cf:97:59:14:5c:e9:e4:32:
         b1:a1:5b:ad:0d:61:02:1e:34:84:09:de:03:25:07:c2:57:aa:
         12:e2:2c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:03 2026 by rpki-client