Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft
File:                     823A9D24802AB10026095D92952BEC936120C9F0.mft (raw, json)
Hash identifier:          fKCiIa+N7JWWFARtx3e1Z4UyD3FuRgIBpHei23eXI+c=
Subject key identifier:   55:FF:C3:50:A8:9A:12:98:6F:90:9A:B3:D4:2B:15:6E:F1:18:1F:06
Authority key identifier: 82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0
Certificate issuer:       /CN=823A9D24802AB10026095D92952BEC936120C9F0
Certificate serial:       2738297FE2A329A1CCB240FEB924075D3BE8CBA0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft
Manifest number:          49
Signing time:             Wed 29 Jul 2026 09:29:01 +0000
Manifest this update:     Wed 29 Jul 2026 09:24:01 +0000
Manifest next update:     Thu 30 Jul 2026 12:15:01 +0000
Files and hashes:         1: 323430323a663134303a666631343a3a2f34382d3438203d3e2034383337.roa (hash: 5YFwBo/iyC0NCYe2fUQRMepGEYQTAVopWqjxpwpGlYs=)
                          2: 323430323a663134303a666630333a3a2f34382d3438203d3e203338323833.roa (hash: JPasNsDug0W5Rn92K6EqWBzIP/Agm6A9fVDgf+UVINo=)
                          3: 323430323a663134303a666630313a3a2f34382d3438203d3e2034383131.roa (hash: MmKHcvIlqA5q5tYLzb7CR3bSXT4jOLcAnOsXDr7mbkk=)
                          4: 323430323a663134303a666630303a3a2f34382d3438203d3e203233373234.roa (hash: 9yVGqA3r0m6Cw9MsGwxxYMb5n5CK4oWFB+NiW+b0/ZQ=)
                          5: 823A9D24802AB10026095D92952BEC936120C9F0.crl (hash: C5+RUjpmNYA45PwQybHB0yqSlmMAZr1zmj/M+sIuOZ0=)
                          6: 323430323a663134303a666631303a3a2f34382d3438203d3e2034383038.roa (hash: 9bGFD9HHavl9e02Jjpm7l9kROKPFls7dr+YzU90e5Gs=)
                          7: 323430323a663134303a666630343a3a2f34382d3438203d3e203538353633.roa (hash: RDrRnpeXL02LfYBtu1Rzk0qsfCVRDCWrAsnr4P79d78=)
                          8: 323430323a663134303a666630323a3a2f34382d3438203d3e203538343636.roa (hash: HqXlvSUowM8l9/o35C7EeP1fsjfyNy+C2drlUeUL4+w=)
                          9: 323430323a663134303a666631323a3a2f34382d3438203d3e20313336393538.roa (hash: bCL03YG87TLLs/GAH5OMoR4G1zVvmobwxjT7k1rWeZo=)
                          10: 323430323a663134303a666631313a3a2f34382d3438203d3e20313338343231.roa (hash: 6I5dCiQ1WXXdAyQE5mVGMmBaVm3iJExp8C+wBxugLC0=)
                          11: 323430323a663134303a666631333a3a2f34382d3438203d3e2034383337.roa (hash: C4vjh9oC6KZ/UwdEbBnBmLKe4TfS4Ep6Dsiv1fgoPyA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:38:29:7f:e2:a3:29:a1:cc:b2:40:fe:b9:24:07:5d:3b:e8:cb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823A9D24802AB10026095D92952BEC936120C9F0
        Validity
            Not Before: Jul 29 09:24:01 2026 GMT
            Not After : Jul 30 12:15:01 2026 GMT
        Subject: CN=55FFC350A89A12986F909AB3D42B156EF1181F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:aa:dc:fb:5b:d7:47:08:a6:e0:d6:cc:d8:46:
                    24:80:91:36:fd:6b:29:f0:dd:cd:f9:45:f9:b0:04:
                    ce:af:15:2c:3e:22:e9:7e:5d:b8:0a:ba:4e:5e:db:
                    3a:63:1a:ce:ff:db:26:f1:fc:71:43:45:b2:ce:9c:
                    df:e7:d7:bb:a6:46:ca:80:fb:90:10:62:bc:1b:63:
                    ae:38:17:46:6e:a2:99:f2:3f:03:ae:74:21:25:25:
                    24:cd:54:f6:8e:a8:c6:42:45:33:6f:1e:0b:71:34:
                    92:be:8f:c9:4d:bf:1a:1d:59:11:53:80:4b:3c:44:
                    84:15:e7:ac:80:e1:56:78:90:c9:73:0b:de:f2:7d:
                    5e:44:94:44:1c:40:ea:50:b4:7b:b0:4c:08:4d:40:
                    85:00:69:0a:c1:08:f5:76:6f:b5:22:9f:1c:ef:1d:
                    0a:28:9c:a3:be:a3:2b:d9:21:7d:2c:22:de:a2:d1:
                    7f:46:90:11:1f:ff:5c:e1:fa:99:a9:08:a3:bb:af:
                    15:81:ea:94:6f:84:ce:12:4f:c8:8b:15:f4:a6:b3:
                    f3:9a:30:c0:c2:0a:c4:9e:1b:93:0c:76:f0:31:65:
                    e9:ef:38:ce:7e:7e:bf:34:a5:96:08:f8:f4:60:f6:
                    fb:94:80:c0:64:90:69:92:1f:89:37:41:a1:bc:fa:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FF:C3:50:A8:9A:12:98:6F:90:9A:B3:D4:2B:15:6E:F1:18:1F:06
            X509v3 Authority Key Identifier:
                keyid:82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:7a:9d:19:32:3a:77:1a:b3:03:d4:86:9c:a9:e3:40:05:60:
         cd:d7:ab:e0:70:8e:80:4c:78:09:68:2c:b0:b2:37:5c:a3:17:
         61:d5:ae:09:75:51:3a:fd:cd:c1:f4:24:a5:1f:b7:cb:cc:35:
         91:9c:d8:29:89:cf:f2:67:86:7c:22:7f:61:b9:d0:66:38:4f:
         54:1b:4e:b0:1d:d6:67:67:bf:ba:36:3d:52:6e:c6:b4:b0:15:
         81:bb:b9:d0:d2:11:cb:f8:c5:6c:56:ab:34:54:8a:fe:83:4f:
         ac:fd:51:13:d6:a7:7e:5d:8e:93:ec:f2:44:97:08:35:ea:05:
         ed:7a:48:26:fe:74:7c:d2:7d:ff:3d:39:84:3b:f5:0b:8e:72:
         15:c2:cb:5b:99:1a:36:95:63:db:ff:04:96:c1:8a:61:9a:44:
         ae:fd:d8:5e:d1:a1:9c:df:b9:4a:79:4b:10:5f:b9:b2:73:d7:
         79:18:fb:e2:30:40:df:5d:32:0c:89:6e:15:10:e4:a9:43:ce:
         72:fc:c8:81:a5:70:ed:70:ef:d4:0d:98:aa:03:02:c3:c9:ad:
         a6:96:d5:f9:9e:c1:54:72:1d:87:3f:9f:e1:60:70:8d:e6:1c:
         48:4c:27:1a:8a:92:2b:40:95:98:af:6d:9e:16:25:a0:00:fc:
         6f:d1:a4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:11:54 2026 by rpki-client