Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
File:                     0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft (raw, json)
Hash identifier:          dKVA3WwwG7oo4/cRHoJYaAdsvsW1oaEUCERsWUZwJWU=
Subject key identifier:   79:07:69:60:44:05:B5:61:D5:47:22:CD:72:11:DE:23:4A:EC:B6:05
Authority key identifier: 0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
Certificate issuer:       /CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Certificate serial:       79E5CD6E74A0F9EC10E7552D38A2B8A0A108B315
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
Manifest number:          C3
Signing time:             Fri 12 Jun 2026 04:39:48 +0000
Manifest this update:     Fri 12 Jun 2026 04:34:48 +0000
Manifest next update:     Sat 13 Jun 2026 08:10:48 +0000
Files and hashes:         1: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl (hash: OwAs9JpcJysRph2IXeOJwyzOG5844gUP5DirSessm+o=)
                          2: 3130332e3231322e34342e302f32322d3234203d3e203337393633.roa (hash: LZ5ZiHAjJ58unIuXAet8TkcoHvRxwDe8hTAorVHPgBo=)
                          3: 3131362e3235312e36342e302f31382d3234203d3e203337393633.roa (hash: c0UPetqv4UH1FCrUJE1PkrN+kosNn3NSpLA0/9EQ7Og=)
                          4: 3131302e37352e302e302f31382d3234203d3e203337393633.roa (hash: hqcYOV5DzQRa8/wBnBYjQnjsbrLdtVYrbvETGifMOeE=)
                          5: 3131362e3235312e36342e302f31382d3234203d3e203435313032.roa (hash: LjfpxDo4n9DURJySPAVdSCss5Og9jbyQxEU2rPQE7mg=)
                          6: 3131302e37352e302e302f31372d3137203d3e203337393633.roa (hash: NjV/4Tmugxcb7MxgKN/CQ0Zj9ubpxTO3VJ0+YKiY0Bc=)
                          7: 3131352e3132342e31362e302f32302d3234203d3e203337393633.roa (hash: vvfwFZ8SwgMfa65mBo2v4msDDyJZbOcUBOdsiqZAZJU=)
                          8: 3131302e37352e36342e302f31382d3234203d3e203337393633.roa (hash: ybHh2urN2/zaCl1x/9nmbMr6wmHj3aI03LgNct/0feE=)
                          9: 3131302e3137332e3139322e302f31392d3234203d3e203337393633.roa (hash: D0J+ywNira+Kl03ezdRJIK+PVflth3zvrHDo5domtUQ=)
                          10: 3133392e352e3136302e302f32322d3234203d3e203337393633.roa (hash: A267Qqwq0aG5nDt5DxIjTlpU0ZWaCBcTmpXTBaHvJtQ=)
                          11: 323430363a313838303a3a2f33322d3438203d3e203337393633.roa (hash: hJsybIobgo+Zdtzi5pveEPQvo/wP2zxjwnIddOptEdE=)
                          12: 3130362e31312e302e302f31362d3234203d3e203337393633.roa (hash: yQmD+OYAINvD98IxrI87Ly9AvZOmM2xePYRx0N/oDyQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 04:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e5:cd:6e:74:a0:f9:ec:10:e7:55:2d:38:a2:b8:a0:a1:08:b3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
        Validity
            Not Before: Jun 12 04:34:48 2026 GMT
            Not After : Jun 13 08:10:48 2026 GMT
        Subject: CN=790769604405B561D54722CD7211DE234AECB605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:23:1d:a3:50:22:de:3f:e1:ca:06:7a:e3:
                    db:ff:b1:2d:83:c7:70:7e:7a:be:62:2c:c7:99:30:
                    50:bb:af:91:bf:6d:0d:b5:7e:8d:d1:66:90:5d:4e:
                    11:09:42:84:29:cf:f7:e7:11:90:41:52:b4:b3:03:
                    61:72:6c:92:49:79:5e:e0:75:56:6c:92:df:04:3a:
                    e9:e6:5e:c3:f5:34:15:c8:9d:5d:98:4d:ba:34:77:
                    b3:ad:0f:ec:8d:60:4c:d0:0a:dc:50:d0:8f:9b:08:
                    f2:d1:b2:13:aa:21:de:22:a7:f0:b2:fc:51:9c:ac:
                    32:f3:a7:6d:a6:3b:d0:1f:d7:4d:9f:a3:38:17:b0:
                    df:c7:1d:d0:55:34:02:dd:b0:ec:7b:38:1b:d0:16:
                    47:ee:45:a1:94:ff:3c:5f:0d:f6:76:1e:d2:d2:ca:
                    80:38:94:53:d8:c1:80:ca:11:d0:42:3e:8a:da:50:
                    21:77:9b:5d:65:56:88:a5:2b:72:e6:99:b3:28:0a:
                    78:68:5c:ef:73:c4:21:52:44:64:d0:4f:97:29:aa:
                    0b:33:b1:b6:dd:d6:0c:ae:0a:94:a1:42:6d:48:7f:
                    b2:f5:ec:0f:bf:83:fc:7c:5e:72:f4:2d:49:d6:e3:
                    bd:11:d6:c8:f8:12:cd:59:05:8b:59:4e:5f:2b:d6:
                    67:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:07:69:60:44:05:B5:61:D5:47:22:CD:72:11:DE:23:4A:EC:B6:05
            X509v3 Authority Key Identifier:
                keyid:0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:44:97:7f:f4:1d:01:43:00:ab:06:83:1e:5d:6a:5e:1f:6e:
         f9:b7:f5:0a:0a:d5:97:ca:49:13:c8:02:b3:b9:9c:65:17:2d:
         24:10:c1:2d:f2:ed:9a:67:a5:0b:44:a2:bf:08:22:c9:c0:53:
         c0:f5:3c:9d:b7:9d:71:f2:fe:9a:90:06:ec:9f:3a:2b:9f:7a:
         f1:ee:1e:18:e1:96:7a:06:8d:89:64:9b:79:fb:63:a8:15:55:
         83:27:84:fe:22:a8:00:57:dd:6b:d1:bb:cf:5c:d1:37:0f:48:
         3a:e2:35:80:84:59:13:5c:a4:dd:6c:4d:51:77:19:05:ff:46:
         46:c3:44:cc:b4:11:3d:fe:44:dd:8b:7a:0a:91:ba:68:66:16:
         bb:a5:76:9e:84:b3:21:42:95:2a:95:f0:9c:1a:c2:e7:a9:c6:
         ad:86:9d:e7:64:8b:77:08:98:ca:a0:30:19:b9:35:a8:e6:7e:
         13:56:c2:1c:d4:b8:0e:6c:59:ea:88:2a:92:7a:f0:3d:41:38:
         34:6f:9d:ba:dd:84:eb:d2:cf:33:a9:b3:18:d2:4e:0a:dd:4a:
         9b:6f:56:c8:42:a9:79:fd:57:90:51:55:ee:58:71:d6:09:f9:
         b7:c7:ef:90:f1:e3:24:71:74:96:fc:e9:ae:90:c2:9c:d1:86:
         7d:fa:23:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 13:25:47 2026 by rpki-client