Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
File:                     305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft (raw, json)
Hash identifier:          S7ZtnC/T0/WLDMBpu8K2D6VMqX3FoirFYQEPVQhp8i0=
Subject key identifier:   9D:D4:16:2C:D7:32:0A:49:89:89:7E:27:A1:DF:34:E7:E4:88:2C:0D
Authority key identifier: 30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C
Certificate issuer:       /CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
Certificate serial:       496890C085C3F116C3795BA08247E24CE5AFD6E7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
Manifest number:          5D
Signing time:             Wed 29 Jul 2026 15:19:40 +0000
Manifest this update:     Wed 29 Jul 2026 15:14:40 +0000
Manifest next update:     Thu 30 Jul 2026 17:57:40 +0000
Files and hashes:         1: 3134342e34382e36342e302f32322d3232203d3e2034383337.roa (hash: vQ0CAaPQV+i3w/GJOaVXDBBSQcmTSIVf3fh4Hxu2or0=)
                          2: 305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl (hash: 0YuFNpCAed9HpzpxMgH2r7MQUC/FV1bYoLXEUa/I0ho=)
                          3: 34332e3232342e38302e302f32322d3232203d3e2034383337.roa (hash: bXqT1q3Xi8uEtR2DeZe8yD99M07BG3eez7vSwEaf0iI=)
                          4: 3130332e3231342e34382e302f32322d3232203d3e2034383337.roa (hash: wpwMVqYTLbP68yao2fYoXKN2+eMRU0R4Vc9UHj1IA7A=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 17:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:68:90:c0:85:c3:f1:16:c3:79:5b:a0:82:47:e2:4c:e5:af:d6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
        Validity
            Not Before: Jul 29 15:14:40 2026 GMT
            Not After : Jul 30 17:57:40 2026 GMT
        Subject: CN=9DD4162CD7320A4989897E27A1DF34E7E4882C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1f:24:94:50:74:55:7a:ce:31:05:6b:52:57:
                    f9:dd:05:58:b2:1f:06:0a:86:62:0a:53:67:6a:a0:
                    97:36:97:74:f7:4b:82:c7:81:34:fd:07:37:4a:9a:
                    35:d9:a8:77:04:3c:23:92:b5:1f:60:90:d2:da:2f:
                    ef:0e:79:49:e4:df:b0:15:de:09:43:15:be:8e:07:
                    c4:54:33:0e:a4:72:78:d0:c9:a9:d5:e7:23:84:26:
                    4a:b0:61:51:03:c9:a8:55:aa:24:49:62:fb:0e:92:
                    49:af:4b:d7:fb:35:b6:77:f0:a4:86:50:6e:95:2f:
                    d3:2d:fa:29:a9:a8:2a:f6:e7:70:06:08:09:d1:e0:
                    d0:f4:18:8b:b5:16:65:cd:de:1d:ee:6a:5c:cf:34:
                    63:66:49:68:c0:51:42:8b:b1:87:1f:8b:65:85:5a:
                    cf:38:37:67:25:29:f5:47:c9:e0:f3:22:06:3b:33:
                    fd:85:60:c1:d9:73:e9:a0:a9:7d:cc:80:1c:3a:f2:
                    bd:45:c9:1b:cb:55:f6:c3:ba:1d:95:e2:37:39:e6:
                    f3:a8:4f:12:c3:e8:10:bd:74:53:ba:6f:ee:7e:0d:
                    99:e0:10:a8:a2:3c:8f:4b:2d:93:42:f1:60:f1:0a:
                    80:91:6c:f9:68:3e:7e:55:ea:ca:18:cb:1a:2e:65:
                    e6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D4:16:2C:D7:32:0A:49:89:89:7E:27:A1:DF:34:E7:E4:88:2C:0D
            X509v3 Authority Key Identifier:
                keyid:30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:37:6c:d7:de:6c:c8:5d:0c:87:db:af:54:11:b2:4b:2c:5d:
         30:86:f4:64:28:23:6e:50:60:8e:60:fe:cf:8a:a4:fc:d6:5f:
         f2:e6:09:7a:aa:30:53:18:68:6d:ff:64:ee:83:86:03:39:c1:
         9b:5c:0c:38:86:5e:87:e6:4c:27:38:27:88:72:a0:ea:2e:27:
         59:5e:d9:c8:93:96:83:40:ac:87:f5:b2:a7:83:60:8a:af:6a:
         53:d2:bc:8c:85:ba:39:36:92:44:ca:cd:da:4c:f1:70:97:60:
         06:2d:a1:da:80:dd:ef:56:91:c6:7d:b0:ee:c2:b1:c2:bf:b2:
         45:49:be:41:53:82:7a:ac:04:fc:a4:3a:6d:8c:df:fd:bf:97:
         7c:25:b0:36:b0:16:5a:6f:8f:2d:6c:f4:a5:59:d2:9d:7a:28:
         3c:1a:a0:e7:04:9f:a4:69:c0:af:f5:33:18:37:0b:b8:74:da:
         a7:88:2e:3f:3e:f3:fd:81:ca:27:11:3c:81:57:6a:84:b2:53:
         1f:c9:f5:b0:be:12:39:2b:39:31:7e:38:78:e1:d3:ae:dc:53:
         bf:2e:e5:0d:67:e7:e2:4f:4d:a9:20:04:4e:2b:ff:61:60:55:
         bf:64:24:dc:19:a4:cc:30:c4:f2:ac:1b:ee:ba:65:a7:de:1d:
         d4:29:01:22
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUSWiQwIXD8RbDeVuggkfiTOWv1ucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA1Q0Y5QTQxRENDNkUwNkNFOUNBNzMzNTIzMjVFRkM0
RDM0MzMxQzAeFw0yNjA3MjkxNTE0NDBaFw0yNjA3MzAxNzU3NDBaMDMxMTAvBgNV
BAMTKDlERDQxNjJDRDczMjBBNDk4OTg5N0UyN0ExREYzNEU3RTQ4ODJDMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUHySUUHRVes4xBWtSV/ndBViy
HwYKhmIKU2dqoJc2l3T3S4LHgTT9BzdKmjXZqHcEPCOStR9gkNLaL+8OeUnk37AV
3glDFb6OB8RUMw6kcnjQyanV5yOEJkqwYVEDyahVqiRJYvsOkkmvS9f7NbZ38KSG
UG6VL9Mt+impqCr253AGCAnR4ND0GIu1FmXN3h3ualzPNGNmSWjAUUKLsYcfi2WF
Ws84N2clKfVHyeDzIgY7M/2FYMHZc+mgqX3MgBw68r1FyRvLVfbDuh2V4jc55vOo
TxLD6BC9dFO6b+5+DZngEKiiPI9LLZNC8WDxCoCRbPloPn5V6soYyxouZeYfAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUndQWLNcyCkmJiX4nod805+SILA0wHwYDVR0j
BBgwFoAUMFz5pB3MbgbOnKczUjJe/E00MxwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MTg1Nzg0NDk3NTU2Njg2Ny8wLzMwNUNGOUE0MURDQzZFMDZDRTlDQTczMzUyMzI1
RUZDNEQzNDMzMUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzA1Q0Y5QTQxRENDNkUwNkNFOUNBNzMzNTIzMjVFRkM0RDM0MzMxQy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTE4NTc4NDQ5NzU1NjY4NjcvMC8zMDVDRjlBNDFEQ0M2
RTA2Q0U5Q0E3MzM1MjMyNUVGQzREMzQzMzFDLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijds195syF0M
h9uvVBGySyxdMIb0ZCgjblBgjmD+z4qk/NZf8uYJeqowUxhobf9k7oOGAznBm1wM
OIZeh+ZMJzgniHKg6i4nWV7ZyJOWg0Csh/Wyp4Ngiq9qU9K8jIW6OTaSRMrN2kzx
cJdgBi2h2oDd71aRxn2w7sKxwr+yRUm+QVOCeqwE/KQ6bYzf/b+XfCWwNrAWWm+P
LWz0pVnSnXooPBqg5wSfpGnAr/UzGDcLuHTap4guPz7z/YHKJxE8gVdqhLJTH8n1
sL4SOSs5MX44eOHTrtxTvy7lDWfn4k9NqSAETiv/YWBVv2Qk3BmkzDDE8qwb7rpl
p94d1CkBIg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 23:04:56 2026 by rpki-client