Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft
File:                     A0C998BFCCAE8946353EA73912CB7156A19A818C.mft (raw, json)
Hash identifier:          8gS5RuLW58AtVMnxt/tZXYIaOjvTn/THDqAxtgYmYG8=
Subject key identifier:   28:CB:49:AE:0F:C8:45:B0:EF:65:71:40:37:50:35:04:9B:2E:F7:54
Authority key identifier: A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C
Certificate issuer:       /CN=A0C998BFCCAE8946353EA73912CB7156A19A818C
Certificate serial:       1AEC60C506640FB5F900C595A44CCDBE0C150A51
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft
Manifest number:          0E
Signing time:             Sat 13 Jun 2026 14:06:51 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:51 +0000
Manifest next update:     Sun 14 Jun 2026 17:24:51 +0000
Files and hashes:         1: A0C998BFCCAE8946353EA73912CB7156A19A818C.crl (hash: xWBE8qFacqoESN0W0dDK82XbJwLaG0KIcIqE0DfbSzQ=)
                          2: 34332e3232342e37322e302f32322d3232203d3e2030.roa (hash: Z7n2GETvz6qdxJjD+2JtNEFlMdPoKyod/n6PeMXops8=)
                          3: 3130332e34332e3130302e302f32322d3232203d3e2030.roa (hash: Zb/Yg48+x4Z5AdQJry8Ao1d91TJrxggZPUisKeQCA1w=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ec:60:c5:06:64:0f:b5:f9:00:c5:95:a4:4c:cd:be:0c:15:0a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0C998BFCCAE8946353EA73912CB7156A19A818C
        Validity
            Not Before: Jun 13 14:01:51 2026 GMT
            Not After : Jun 14 17:24:51 2026 GMT
        Subject: CN=28CB49AE0FC845B0EF657140375035049B2EF754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ad:94:67:7c:90:89:b9:f1:6d:3e:9f:3b:35:
                    83:1a:95:a8:91:97:99:03:2c:56:06:05:ba:44:c3:
                    6f:90:37:b7:07:a6:77:9b:8d:4c:76:5b:40:bd:a8:
                    48:50:c3:0e:66:15:0c:ea:39:ee:a4:85:e0:a4:c1:
                    33:a7:c7:6d:78:25:b9:68:dd:04:e3:9c:94:fd:34:
                    0b:aa:2d:36:d6:50:63:d1:68:a7:af:4e:7b:4f:df:
                    3f:d3:ac:de:ff:d4:af:f3:59:36:74:49:85:21:f7:
                    03:c2:75:b2:89:24:ac:ec:df:a9:f9:af:0e:39:b3:
                    2b:12:5a:a9:6e:59:08:82:05:9c:10:82:19:f6:83:
                    1d:01:5c:bc:8e:4a:ae:05:66:d2:d9:4a:e9:22:2f:
                    2b:2a:26:c4:1d:f0:c9:e9:1e:e7:4a:60:a5:8b:4d:
                    41:75:79:d9:ff:4a:3f:a1:54:d8:9e:2f:f5:f9:39:
                    9a:da:c0:34:0a:b7:1b:ad:06:9d:88:ce:f4:cc:bd:
                    22:7f:ef:5c:ab:47:94:23:01:ff:67:83:8d:f4:82:
                    20:00:fc:af:b3:87:09:cd:73:62:aa:7d:3e:d8:42:
                    3b:fa:b1:18:cc:08:17:b9:ba:e9:c8:6e:73:e0:9d:
                    e5:b1:e6:90:8a:0f:97:94:24:ea:7f:b5:1a:ec:62:
                    73:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CB:49:AE:0F:C8:45:B0:EF:65:71:40:37:50:35:04:9B:2E:F7:54
            X509v3 Authority Key Identifier:
                keyid:A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:be:7d:8a:d7:84:2e:4d:33:d8:97:73:29:91:f6:6c:3e:c8:
         33:af:b0:d4:d2:7b:6e:8c:44:fa:0c:4e:fa:ab:d2:71:da:c8:
         5f:cd:48:06:b5:41:67:ce:ab:39:db:d6:f3:ef:49:55:09:c1:
         d6:ef:9d:d4:f5:61:5b:d7:db:92:bf:b1:03:62:1e:00:09:a6:
         5e:57:17:6c:81:f4:de:87:a2:c7:37:fa:3a:be:b6:d2:a5:77:
         a9:30:9e:a6:a2:cf:b6:7f:7b:36:59:c8:41:23:42:5f:2e:62:
         d4:40:55:df:31:a7:bb:57:65:c9:13:09:a7:99:ae:36:1c:d8:
         12:fe:cc:71:a2:78:b3:00:ab:18:64:de:0d:35:e9:26:cc:f5:
         13:8f:d9:5a:48:40:b3:d6:1f:0f:d1:eb:73:f7:60:4d:e7:b7:
         d3:7b:d8:24:46:3e:a5:1c:f0:75:7a:71:11:88:a1:2d:29:7e:
         11:b4:00:10:4a:c2:b4:15:de:92:08:df:af:2c:e2:f0:78:5d:
         bf:27:2b:88:cf:77:9d:5e:6f:1a:8c:6e:ea:ad:45:04:15:f5:
         19:06:45:a6:c0:a5:31:8f:32:1a:25:c4:37:d3:59:9b:c2:2e:
         f4:dc:fa:8c:76:a6:4e:fc:61:4c:9a:37:db:bc:28:39:d9:1e:
         73:9c:41:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:48:04 2026 by rpki-client