Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
File:                     34792F5FA94D005EB8C9704B96BE16835CB06819.mft (raw, json)
Hash identifier:          JSDMTiwwh5ywzayBEOHN2BM9kOo6DICLwfdHdLZkbmw=
Subject key identifier:   F2:BF:50:5B:5D:66:C9:D0:DB:08:DE:39:89:28:F2:26:0B:23:58:04
Authority key identifier: 34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19
Certificate issuer:       /CN=34792F5FA94D005EB8C9704B96BE16835CB06819
Certificate serial:       3C60D1D2E5C33D84C8B0DF18C42AB270D366FA52
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
Manifest number:          5D
Signing time:             Wed 29 Jul 2026 08:28:52 +0000
Manifest this update:     Wed 29 Jul 2026 08:23:52 +0000
Manifest next update:     Thu 30 Jul 2026 12:01:52 +0000
Files and hashes:         1: 34792F5FA94D005EB8C9704B96BE16835CB06819.crl (hash: KgEPgHvdX/Gfeism1f6rEk8RVuocT29IW93jjCGwh0g=)
                          2: 323430323a313861303a3a2f33322d3332203d3e20313531323239.roa (hash: c8WNPZIvhrZeBjLe5wY9CC8paBg1j9yN7x/SJKYbClQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:60:d1:d2:e5:c3:3d:84:c8:b0:df:18:c4:2a:b2:70:d3:66:fa:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34792F5FA94D005EB8C9704B96BE16835CB06819
        Validity
            Not Before: Jul 29 08:23:52 2026 GMT
            Not After : Jul 30 12:01:52 2026 GMT
        Subject: CN=F2BF505B5D66C9D0DB08DE398928F2260B235804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:56:14:5e:d4:9b:d5:7c:eb:7e:90:0b:fe:34:
                    81:1f:60:8a:6f:40:0a:53:2b:1e:3d:b5:26:05:ef:
                    ce:d1:11:bb:fe:34:50:13:75:3c:de:4e:98:9a:5c:
                    47:21:7e:f9:23:bd:67:34:74:e0:f8:2d:99:ca:82:
                    fb:50:41:16:da:f3:8e:9a:59:d5:4d:ff:37:71:58:
                    47:a5:34:de:95:0d:92:d5:7d:63:5b:a1:39:d3:70:
                    3a:06:6b:fe:a7:ce:b6:fe:78:d7:7e:1c:05:91:50:
                    4b:6e:15:85:f8:16:85:d1:37:74:c5:62:24:a7:4b:
                    99:10:58:0c:5b:c4:0c:56:f7:0a:07:cc:6e:f7:52:
                    49:07:4a:52:d6:c2:21:76:ee:77:d8:8a:92:6f:50:
                    f4:72:56:df:34:af:b4:ba:77:20:4d:eb:de:89:d5:
                    84:a9:d6:b6:e2:14:35:71:14:43:75:79:dd:3c:b6:
                    7c:3c:c0:d5:b0:6a:67:b8:5e:ee:15:a3:1e:33:80:
                    85:55:c1:7b:49:9b:89:a3:4d:a5:7c:be:4b:f6:0c:
                    c0:97:9d:03:66:61:57:0f:d5:4a:86:db:9e:d9:4f:
                    de:5c:d2:4a:6b:95:f5:32:de:4f:72:cf:67:12:e5:
                    78:f9:52:d0:41:13:98:a6:bf:60:73:df:80:37:5a:
                    3e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BF:50:5B:5D:66:C9:D0:DB:08:DE:39:89:28:F2:26:0B:23:58:04
            X509v3 Authority Key Identifier:
                keyid:34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:28:79:3d:f0:d3:3c:07:4b:5a:d0:d7:7c:ef:62:3f:29:bd:
         2e:fa:b0:97:de:3b:63:c7:2d:99:82:16:90:7c:f6:e5:bc:25:
         60:84:55:31:3c:cd:1a:ad:e3:f5:62:85:67:60:ed:49:f7:17:
         2a:c0:10:d1:a6:ef:88:63:a0:6e:c2:02:8d:50:f1:33:3e:1f:
         88:a0:3e:7b:f1:94:01:54:13:8c:4d:20:29:bb:8f:53:19:ac:
         37:87:63:ae:f6:0f:e4:9b:db:d0:17:e4:79:5e:bf:5e:95:b1:
         f2:36:7f:c7:4a:f2:b4:5b:39:92:8e:1d:32:81:8e:5b:77:80:
         3a:30:cf:58:0d:c9:1a:41:47:70:55:be:00:a0:1c:73:a3:95:
         52:f3:3a:e1:5f:f9:a3:0b:43:3d:b6:08:d5:50:8e:9b:3c:eb:
         c9:ae:43:9a:05:18:2c:f0:45:ca:e4:b4:04:50:cd:e9:44:d6:
         41:1d:e6:3b:46:04:f7:8a:d1:0b:72:ef:09:9d:79:64:9a:0a:
         17:74:49:3d:8b:48:1d:3c:6d:2c:c3:67:cd:82:33:d2:51:f0:
         76:25:61:18:2b:22:3f:1d:34:0c:33:f8:60:3e:1c:52:d5:75:
         d0:0f:18:8c:3e:63:4c:0e:8d:ce:f9:bc:39:66:9c:2c:70:e7:
         8e:6e:a2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:48:02 2026 by rpki-client