Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft
File:                     0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft (raw, json)
Hash identifier:          /40iPcpGvFSDO3kzkkvo/4B+YVhFD6Pdnb1TZ5r+AAg=
Subject key identifier:   86:69:D2:DC:E9:4A:FE:68:10:4A:0C:1D:D4:B5:CA:8A:91:91:E7:F6
Authority key identifier: 0D:AB:49:AD:13:77:D4:66:D1:D5:1E:FE:CA:F3:B2:2A:D7:D4:CF:CC
Certificate issuer:       /CN=0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC
Certificate serial:       0C7BD3936D3C8A470C55F289D61574F5EBC744DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft
Manifest number:          0E
Signing time:             Sat 13 Jun 2026 21:12:14 +0000
Manifest this update:     Sat 13 Jun 2026 21:07:14 +0000
Manifest next update:     Sun 14 Jun 2026 21:50:14 +0000
Files and hashes:         1: 3130332e31322e39382e302f32342d3234203d3e20313436383032.roa (hash: uHCaaw9s8g63NiSSnL9QPEn47SUgnpGsYsdUuRJOHSk=)
                          2: 0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl (hash: JoLLUbnw9uZGIhua4aXuuxaJYgZDseLkbY2e8wKP/Xo=)
                          3: 3130332e31322e39392e302f32342d3234203d3e20313436383032.roa (hash: tbUTFYMvu1gUlC2oFmjSZqAYOrU9u+JdPDJBttAzV/o=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7b:d3:93:6d:3c:8a:47:0c:55:f2:89:d6:15:74:f5:eb:c7:44:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC
        Validity
            Not Before: Jun 13 21:07:14 2026 GMT
            Not After : Jun 14 21:50:14 2026 GMT
        Subject: CN=8669D2DCE94AFE68104A0C1DD4B5CA8A9191E7F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:81:fb:b8:4a:dd:dc:f3:f9:2d:9b:2c:7a:d5:
                    eb:8d:69:ff:c8:7f:cb:1c:25:3f:c5:24:a1:69:df:
                    37:9a:e3:03:0d:ef:29:32:5b:10:af:fd:80:b2:06:
                    61:60:1b:4e:13:89:ce:52:df:6e:7e:8e:61:54:cb:
                    2f:d3:51:10:b2:62:d9:24:9d:75:4c:1c:42:20:ec:
                    46:36:f2:f5:c6:3d:9f:8e:20:de:d3:88:65:4b:d3:
                    a0:4a:fb:d1:97:a7:3b:35:1f:88:f2:ea:fb:ab:25:
                    e6:d2:70:49:9f:60:38:2c:f6:3f:4e:5d:7d:94:9a:
                    66:13:81:d5:f2:78:87:f4:48:77:3d:46:ca:1e:d0:
                    82:d1:d3:c8:04:1a:b2:e4:9c:12:62:fb:52:6c:70:
                    0d:e1:ad:d4:b9:1d:cd:5a:2a:35:51:23:2c:12:7f:
                    2d:f9:e4:0d:88:4c:83:4d:a6:1d:07:ea:2c:b8:51:
                    78:48:35:1e:bb:f6:94:5a:a4:7a:f2:18:46:03:91:
                    1b:1f:f7:52:78:33:3b:66:31:47:36:3f:4b:e7:25:
                    22:27:b7:07:b0:4c:f7:ea:b0:73:ce:03:90:c4:a7:
                    33:fd:1c:4e:1c:02:c8:0d:30:19:8c:09:76:24:da:
                    8b:00:14:3c:16:d2:5d:6d:a2:bd:95:2e:ad:1d:dc:
                    f1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:69:D2:DC:E9:4A:FE:68:10:4A:0C:1D:D4:B5:CA:8A:91:91:E7:F6
            X509v3 Authority Key Identifier:
                keyid:0D:AB:49:AD:13:77:D4:66:D1:D5:1E:FE:CA:F3:B2:2A:D7:D4:CF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:42:01:ff:82:d4:78:36:77:67:93:b6:d9:54:0c:76:0a:81:
         19:66:b4:7f:d0:08:7d:67:ed:8d:6a:f3:28:72:f7:5a:53:7a:
         00:68:04:15:c9:10:b5:1e:3d:2d:2c:50:76:d6:a0:2a:60:a5:
         58:2b:13:72:27:64:b3:74:58:d2:22:c1:e4:b6:f7:e2:94:f6:
         30:bd:70:a4:d4:1c:09:f8:66:f6:f4:8c:d9:a4:dd:2f:0f:8c:
         0f:a3:28:bf:ff:1e:a2:11:6c:5b:79:7f:47:73:99:65:6d:51:
         79:9f:df:86:76:95:73:3a:14:2a:0d:97:14:87:53:1a:9a:0f:
         ba:93:62:6f:c6:28:24:28:f9:e7:c9:39:f1:93:1e:aa:94:e3:
         c5:1e:b2:3e:28:c7:ee:8c:ea:95:e8:e3:a9:f7:be:77:81:18:
         96:74:cd:64:54:87:80:8b:9e:a5:2b:d6:f6:93:d4:71:8d:58:
         6d:ba:91:1d:dc:38:4f:cf:58:96:4c:48:6c:82:08:77:73:5c:
         2c:89:32:b0:6a:af:e2:d0:84:62:0c:63:0e:7c:8c:2d:82:17:
         4c:d9:01:ac:06:86:2c:4f:af:a9:6e:96:29:e3:c7:ec:a4:94:
         96:86:06:11:c0:e6:79:ee:53:6e:26:9b:8e:31:17:5c:e5:02:
         1c:f1:cc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:10 2026 by rpki-client