Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft
File:                     C95DC06ABAF176962C0E90D36D939FA729AAC050.mft (raw, json)
Hash identifier:          Hdl0n66tqKcJodfEFWmdVPbNmPaN1OGQLta6HqKKKAQ=
Subject key identifier:   A3:A0:2A:BE:DD:08:BD:00:33:35:D1:19:21:1E:11:46:E8:E1:5C:44
Authority key identifier: C9:5D:C0:6A:BA:F1:76:96:2C:0E:90:D3:6D:93:9F:A7:29:AA:C0:50
Certificate issuer:       /CN=C95DC06ABAF176962C0E90D36D939FA729AAC050
Certificate serial:       1FE8785CA777D9A0D50EAF0A880702639DF0F228
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft
Manifest number:          C2
Signing time:             Tue 21 Jul 2026 17:44:12 +0000
Manifest this update:     Tue 21 Jul 2026 17:39:12 +0000
Manifest next update:     Wed 22 Jul 2026 18:29:12 +0000
Files and hashes:         1: 3134342e37392e3134382e302f32332d3234203d3e20313337373731.roa (hash: SAeCRFVxu1ERGhOcXkGGGkwcAEAXwuDqhIvQaUGtLYA=)
                          2: C95DC06ABAF176962C0E90D36D939FA729AAC050.crl (hash: Ar6lGMfUvUWRbYzMn/r1qyTXFHEamqIjG0fFUzHJfe4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 18:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e8:78:5c:a7:77:d9:a0:d5:0e:af:0a:88:07:02:63:9d:f0:f2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C95DC06ABAF176962C0E90D36D939FA729AAC050
        Validity
            Not Before: Jul 21 17:39:12 2026 GMT
            Not After : Jul 22 18:29:12 2026 GMT
        Subject: CN=A3A02ABEDD08BD003335D119211E1146E8E15C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8e:ba:a2:51:80:4e:e5:20:31:b0:98:f3:28:
                    3b:25:d0:46:37:7b:38:55:51:c5:c2:28:c2:e1:8a:
                    43:d8:06:2b:44:2f:33:e7:c7:16:b4:37:dd:88:da:
                    d4:a7:fa:e7:e9:ee:74:30:32:12:0a:4e:67:93:d6:
                    4f:e5:0c:f5:4d:ef:41:5d:ce:72:7f:5e:56:13:57:
                    c8:70:f0:06:f6:48:05:7f:8b:67:54:46:ba:57:a3:
                    89:a5:cf:27:be:f7:30:57:22:f9:90:93:b3:f4:43:
                    22:0b:de:3f:da:56:8f:a5:bc:e6:26:2c:de:66:c2:
                    88:61:f4:d3:b6:b2:c6:90:f8:ae:7d:90:e2:4a:20:
                    29:a0:e9:d9:2b:0f:0c:80:32:07:49:da:6d:93:e4:
                    48:d8:e2:41:e5:73:fb:eb:fb:7b:72:94:ef:7c:e5:
                    f1:98:bc:33:df:0b:a8:2a:8a:a2:35:e1:e6:a0:0d:
                    04:8e:9b:26:a1:28:a9:d6:7d:9a:03:92:ee:7e:9b:
                    53:c0:3d:4a:ec:99:e9:75:fc:2f:b8:27:59:cc:85:
                    9e:f5:12:ea:17:2a:f7:3a:c6:e0:73:fb:9f:b3:ba:
                    82:d3:20:45:d9:ce:5b:d0:e1:b7:b6:fd:27:bc:b4:
                    b1:64:6c:95:c7:36:ac:78:c9:11:69:49:10:fc:6f:
                    ac:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A0:2A:BE:DD:08:BD:00:33:35:D1:19:21:1E:11:46:E8:E1:5C:44
            X509v3 Authority Key Identifier:
                keyid:C9:5D:C0:6A:BA:F1:76:96:2C:0E:90:D3:6D:93:9F:A7:29:AA:C0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:6a:80:57:53:5d:69:67:2d:1a:04:0c:40:01:30:85:b4:8f:
         5f:3d:52:24:56:b6:2f:73:ea:a5:bb:be:2d:f2:10:46:2d:38:
         42:3c:c0:6b:33:70:8e:03:5a:03:54:9e:c5:b6:22:0c:57:7c:
         4b:83:9a:86:c6:4a:55:23:a2:3e:03:09:58:51:11:22:b3:3d:
         8f:e3:6d:37:46:fb:8f:8c:aa:54:39:2d:48:08:57:55:b5:f8:
         54:52:90:03:17:1b:fc:95:2a:69:7a:2c:bd:99:0a:e0:33:eb:
         45:67:30:73:99:b0:1f:5a:53:7b:38:90:55:c4:1d:e5:77:e3:
         94:68:6e:87:97:5b:f7:77:e5:ec:45:d7:c3:81:19:1b:2d:ab:
         d7:b0:d1:1b:ac:c7:78:b2:a2:c7:5d:83:2b:0a:04:f1:f6:28:
         01:16:30:8f:80:ce:90:69:59:71:10:58:f3:33:98:1f:e2:21:
         1f:6a:66:ee:ba:b3:a4:f6:88:78:8c:cf:6b:fe:93:c3:40:1f:
         b3:5e:95:c8:49:8c:dc:0c:f4:e7:b8:d8:9c:d4:14:33:cc:6d:
         28:f2:79:57:a3:de:cf:94:22:95:29:4e:8a:47:1a:a9:13:39:
         e4:65:bb:2e:b0:b8:6e:36:19:b0:12:77:b1:0c:00:c0:db:85:
         f2:d3:94:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:46:50 2026 by rpki-client