Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
File:                     50A5171941F715FACDCF9DD46FA674046AC02D04.mft (raw, json)
Hash identifier:          96Ofh1Xo207rgSFL+gQM7ssfEQdJXYnsxBerfUYzupg=
Subject key identifier:   21:9E:07:8C:25:75:71:90:BF:06:4A:D4:1F:C9:F2:D2:DD:9F:F5:DC
Authority key identifier: 50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04
Certificate issuer:       /CN=50A5171941F715FACDCF9DD46FA674046AC02D04
Certificate serial:       464BC179FFEEB52DB9E33A8927B1530E9999C3BD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
Manifest number:          C1
Signing time:             Thu 11 Jun 2026 13:58:50 +0000
Manifest this update:     Thu 11 Jun 2026 13:53:50 +0000
Manifest next update:     Fri 12 Jun 2026 15:09:50 +0000
Files and hashes:         1: 3131382e3138342e3132382e302f31372d3234203d3e203233363530.roa (hash: M2mhmaVYXohsZSx0mGr2+YhMGZG5m/A4U5wT++q9UVk=)
                          2: 50A5171941F715FACDCF9DD46FA674046AC02D04.crl (hash: LNauxPlEviry8IcDIkCXI3OBOc9+0CXEDw2B8g6IqZY=)
                          3: 3131382e3138342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7LPc87hS5rjIOtI6iPGGcyZ23idOROuWnZG/gbZcJmY=)
                          4: 323430343a363338303a3a2f33322d3438203d3e203233363530.roa (hash: ZonKZhguTk17nFk21NONrgzeysQRGdLBzTmVOs0FiTI=)
                          5: 3131382e3138342e3132382e302f31372d3234203d3e203138323537.roa (hash: BdhmLC4zgYEiVmndB2HSccET9FqpO3NsVZi11RKwT6Y=)
                          6: 3131382e3138342e3132382e302f32312d3231203d3e20313337373032.roa (hash: DNLg5TiXgapWfZOaVGtGTe80zdMoFa/6XxRWNFo+LUM=)
                          7: 323430343a363338303a3a2f33322d3438203d3e20313338393530.roa (hash: um5xmJsffRW2lIF7biMqE2a2cHsjZcaKv+O4nXwQlmI=)
                          8: 3131382e3138342e3132382e302f31372d3234203d3e20313430323933.roa (hash: j5borvIgjotWQ92+vPRSlxUfz7IOQtoG2WJTyai460I=)
                          9: 3131382e3138342e3132382e302f31372d3234203d3e20313338393530.roa (hash: BPTzwC6QNr0mZbMlCDApnpFNWALr7CkeZYYL4jfCJqI=)
                          10: 323430343a363338303a3a2f33322d3438203d3e20313430323933.roa (hash: wOEu4s8or2SwQwHND5Q2d5xq0kfsHWiBIQ/WtFCz69A=)
                          11: 323430343a363338303a3a2f33322d3438203d3e203138323537.roa (hash: e092N5ZIw8NIOzez3Wr2tRokhJN6B0n06OiT8fKrvto=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 15:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4b:c1:79:ff:ee:b5:2d:b9:e3:3a:89:27:b1:53:0e:99:99:c3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50A5171941F715FACDCF9DD46FA674046AC02D04
        Validity
            Not Before: Jun 11 13:53:50 2026 GMT
            Not After : Jun 12 15:09:50 2026 GMT
        Subject: CN=219E078C25757190BF064AD41FC9F2D2DD9FF5DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:aa:3f:8f:11:f9:ec:98:4e:ca:c6:23:0b:
                    0d:b2:a2:16:8a:86:f6:92:28:03:1d:d1:30:6d:e7:
                    d7:b1:f6:9a:d6:11:69:09:61:44:3a:6c:a1:36:be:
                    aa:18:3b:32:6c:a5:5b:c9:7a:57:13:9c:44:fa:6c:
                    bd:92:a0:29:be:fe:9e:f5:15:69:e8:5a:b0:a5:53:
                    01:fb:31:ac:ac:9a:77:c4:a9:3a:a7:35:a1:f0:0a:
                    40:7f:ea:99:7c:8a:87:cb:22:54:cc:39:73:a3:3c:
                    85:79:ad:c7:34:f6:31:5e:a3:df:7a:5d:bc:48:70:
                    64:eb:c4:31:9e:b1:39:5b:8c:d8:de:43:27:54:a3:
                    ef:a9:89:82:42:b1:7f:47:b6:b2:91:37:0a:aa:b9:
                    a8:84:3c:21:e6:09:21:1f:4d:ed:1e:b4:76:5d:07:
                    88:a7:ef:ba:fb:02:77:04:63:ba:81:ee:94:78:db:
                    be:30:f0:aa:2b:26:0d:5d:b3:35:65:d8:3b:5e:50:
                    6e:37:44:d3:60:f8:66:b6:63:04:40:b5:cd:84:0e:
                    64:27:cd:09:c1:05:29:fe:c5:36:9c:3d:42:d4:d9:
                    a6:61:b9:a0:ea:c4:e6:8c:04:0c:75:93:a4:b6:5c:
                    38:4a:1a:0d:74:57:83:80:34:38:6f:f8:b8:4f:d1:
                    45:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9E:07:8C:25:75:71:90:BF:06:4A:D4:1F:C9:F2:D2:DD:9F:F5:DC
            X509v3 Authority Key Identifier:
                keyid:50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e8:b1:c0:c9:15:01:06:eb:44:72:5a:ab:3a:e2:87:9f:60:
         ed:79:45:e9:5b:4b:23:c8:4a:19:12:99:f1:95:cd:f9:44:9a:
         4a:b1:a2:7a:5b:a7:d4:4e:07:c6:2c:29:ac:68:a5:b1:e0:64:
         7e:b7:b2:ce:a9:8a:77:7d:db:a8:b8:2d:99:7f:84:9a:16:27:
         09:ce:70:2e:06:3e:0e:ee:27:af:7d:bb:23:da:4c:0f:74:94:
         28:93:13:4d:07:59:6e:ea:e3:f8:a4:7d:ad:c9:bd:1c:41:ab:
         9a:29:4b:97:97:c2:30:45:33:24:4b:c3:a5:93:3d:eb:07:6a:
         72:a1:06:62:2f:35:17:9e:51:9a:84:0f:ad:ad:34:c1:ed:f1:
         14:62:b0:a3:00:64:83:da:f6:cf:46:b6:26:a4:52:72:0b:cb:
         69:9a:9c:4a:b0:d5:ae:af:37:af:5d:14:5d:57:bd:6c:5c:92:
         49:20:04:50:e0:fd:c3:50:13:0a:9b:2e:68:da:6f:20:81:8a:
         7b:66:47:2c:34:59:41:2b:ee:34:20:48:f1:ba:7a:68:71:6c:
         2e:0e:43:23:6c:af:8a:dd:51:f5:3e:01:45:be:dc:ee:97:e6:
         ac:b6:02:18:22:51:47:36:c8:95:3a:87:09:23:82:e7:40:50:
         72:b0:0c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:54:28 2026 by rpki-client