Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
File:                     50A5171941F715FACDCF9DD46FA674046AC02D04.mft (raw, json)
Hash identifier:          ya+Po7wtIb4DEnFV2g8q0d2YXesm9coJvY9Z41ROwZ0=
Subject key identifier:   36:78:10:02:CE:B7:48:80:48:B0:7A:51:79:EE:21:35:6E:BE:0D:C2
Authority key identifier: 50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04
Certificate issuer:       /CN=50A5171941F715FACDCF9DD46FA674046AC02D04
Certificate serial:       3EA0876444E4C6D9B5C6D6AF01854DED6E36EA1B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
Manifest number:          84
Signing time:             Sun 26 Apr 2026 23:18:34 +0000
Manifest this update:     Sun 26 Apr 2026 23:13:34 +0000
Manifest next update:     Tue 28 Apr 2026 02:31:34 +0000
Files and hashes:         1: 323430343a363338303a3a2f33322d3438203d3e20313430323933.roa (hash: wOEu4s8or2SwQwHND5Q2d5xq0kfsHWiBIQ/WtFCz69A=)
                          2: 50A5171941F715FACDCF9DD46FA674046AC02D04.crl (hash: IsROLq5FqHQperonWaFgofJ5fvLT7PxWpvuW6XYQ8R8=)
                          3: 323430343a363338303a3a2f33322d3438203d3e20313338393530.roa (hash: um5xmJsffRW2lIF7biMqE2a2cHsjZcaKv+O4nXwQlmI=)
                          4: 3131382e3138342e3132382e302f31372d3234203d3e20313430323933.roa (hash: j5borvIgjotWQ92+vPRSlxUfz7IOQtoG2WJTyai460I=)
                          5: 323430343a363338303a3a2f33322d3438203d3e203233363530.roa (hash: ZonKZhguTk17nFk21NONrgzeysQRGdLBzTmVOs0FiTI=)
                          6: 3131382e3138342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7LPc87hS5rjIOtI6iPGGcyZ23idOROuWnZG/gbZcJmY=)
                          7: 3131382e3138342e3132382e302f31372d3234203d3e203233363530.roa (hash: M2mhmaVYXohsZSx0mGr2+YhMGZG5m/A4U5wT++q9UVk=)
                          8: 3131382e3138342e3132382e302f31372d3234203d3e203138323537.roa (hash: BdhmLC4zgYEiVmndB2HSccET9FqpO3NsVZi11RKwT6Y=)
                          9: 3131382e3138342e3132382e302f32312d3231203d3e20313337373032.roa (hash: DNLg5TiXgapWfZOaVGtGTe80zdMoFa/6XxRWNFo+LUM=)
                          10: 3131382e3138342e3132382e302f31372d3234203d3e20313338393530.roa (hash: BPTzwC6QNr0mZbMlCDApnpFNWALr7CkeZYYL4jfCJqI=)
                          11: 323430343a363338303a3a2f33322d3438203d3e203138323537.roa (hash: e092N5ZIw8NIOzez3Wr2tRokhJN6B0n06OiT8fKrvto=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 02:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a0:87:64:44:e4:c6:d9:b5:c6:d6:af:01:85:4d:ed:6e:36:ea:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50A5171941F715FACDCF9DD46FA674046AC02D04
        Validity
            Not Before: Apr 26 23:13:34 2026 GMT
            Not After : Apr 28 02:31:34 2026 GMT
        Subject: CN=36781002CEB7488048B07A5179EE21356EBE0DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d7:57:be:3a:a5:4b:83:9a:10:1c:eb:95:ef:
                    20:4f:eb:1c:a8:59:4d:ef:ac:3c:aa:0a:0f:01:c9:
                    86:00:2f:53:a8:b2:e0:0c:c9:a7:7e:2f:f8:49:0e:
                    e1:aa:f3:30:bf:10:e5:73:7d:54:76:90:4d:f5:d4:
                    74:bf:98:f6:a0:e4:b4:84:ba:fa:70:09:ba:ab:45:
                    55:ba:3e:08:25:bc:45:ab:a0:73:4f:80:3b:7e:40:
                    f7:0a:64:ab:75:ee:c7:e9:e9:ea:3a:90:d9:b8:33:
                    27:5a:7e:92:8b:6d:20:35:a6:77:d7:09:26:5f:4c:
                    0e:ac:68:1d:de:8b:13:ce:77:4b:d6:b5:50:d8:8e:
                    6d:46:a1:b2:ad:07:9a:37:2e:e1:d6:ea:73:48:0f:
                    d0:15:07:b6:4b:b5:81:27:03:b8:cf:b3:53:2e:9f:
                    8e:1a:b1:f7:15:9e:ea:c4:78:34:40:0b:63:28:f9:
                    a8:5c:f0:63:d3:0e:06:82:8e:5d:7e:67:22:f9:f3:
                    07:0e:92:f9:56:65:ad:b0:f2:31:09:63:83:1a:1a:
                    9e:11:3d:26:50:49:c2:50:10:b6:b9:dc:a3:16:e1:
                    d8:29:49:8d:e0:69:28:86:69:ba:cc:4a:df:0b:48:
                    b5:df:3c:65:a4:7e:5c:e3:bc:06:7d:54:6a:cb:d6:
                    ff:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:78:10:02:CE:B7:48:80:48:B0:7A:51:79:EE:21:35:6E:BE:0D:C2
            X509v3 Authority Key Identifier:
                keyid:50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:01:20:95:ba:29:1b:3c:92:06:2b:31:24:72:a6:0c:ca:59:
         7f:ca:e0:11:94:fe:52:f6:e5:a0:ed:a3:76:65:61:c2:b4:fa:
         fd:b4:c9:4f:60:42:2a:84:23:8d:74:94:6b:0a:a1:04:60:13:
         9e:af:c9:29:51:ee:ba:e6:90:50:f1:b5:1f:b0:6b:24:9c:bd:
         bc:ba:a8:c6:93:49:61:03:80:4a:23:a8:c8:0d:84:8b:85:63:
         c8:1a:57:2f:40:6c:0b:66:61:5a:16:44:40:cb:81:c3:28:c4:
         d5:60:a0:49:19:51:2a:a5:8d:2c:16:99:18:29:e1:f4:7a:6d:
         41:8c:11:86:88:c8:7c:d3:29:c6:b4:17:3e:63:d8:b0:bd:a4:
         db:80:9e:3f:6b:10:79:e2:0f:4f:a1:e0:07:db:19:fc:48:31:
         51:6b:f8:22:cf:4b:87:13:46:45:31:f8:ad:b5:c6:f4:3a:f5:
         dd:6c:f3:ea:84:4d:6e:16:96:95:b1:e4:4e:b8:8b:79:ef:21:
         73:02:e2:78:8e:e7:39:a1:df:74:ea:d7:5f:e8:78:db:9e:d9:
         72:bc:11:1e:87:32:94:b1:9d:00:79:06:48:7b:8b:48:00:6b:
         33:ec:62:ee:4b:37:d2:16:3a:03:c8:65:4a:49:97:52:af:81:
         b3:49:7a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:14:34 2026 by rpki-client