Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
File:                     191E76D74421148B42FA2A7F663270AE7FAD25F9.mft (raw, json)
Hash identifier:          ly5y94bKoGBjrc8emlxFigNV0v30pHfhCzVz+iZuilA=
Subject key identifier:   73:7E:F0:D4:68:58:8E:B9:7A:9E:3B:00:0A:57:BA:A5:C9:76:8C:94
Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
Certificate issuer:       /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Certificate serial:       18860E5C4BD7D5E69F69D06951F28DB5F5C6E7B5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
Manifest number:          B0
Signing time:             Fri 29 May 2026 01:52:25 +0000
Manifest this update:     Fri 29 May 2026 01:47:25 +0000
Manifest next update:     Sat 30 May 2026 05:43:25 +0000
Files and hashes:         1: 3130332e3131362e3132302e302f32342d3234203d3e203633363534.roa (hash: sjhYlFRils7TGbe4yrQB1MXoq74ExmSHsG4znfKuu7I=)
                          2: 3130332e3131362e3132332e302f32342d3234203d3e203633363534.roa (hash: 6OtEuNz2GVGLvEPnp1uI15Y+vgwMkKwikkqR/oRSa24=)
                          3: 3130332e3131362e3132332e302f32342d3234203d3e2034383437.roa (hash: iusd/geGAkaqNqYv0woWsgccBNM+keeMZWKm1FAoOOM=)
                          4: 3130332e3131362e3132312e302f32342d3234203d3e203633363534.roa (hash: vpD7NEE8qzM+eWphvno3vCArBIi9VdE9XjhBRn48b6k=)
                          5: 3130332e3131362e3132302e302f32332d3233203d3e203633363534.roa (hash: ayiRQLB0vCQOVj4IcpJdzMo4ohtXvgd7waElFg36mCA=)
                          6: 323430323a663963303a3a2f34382d3438203d3e20313337373937.roa (hash: Xa71V3zlzwJxLxJVMnOGWGmp2Wl6+BqPl/c74CX5nDA=)
                          7: 3130332e3131362e3132302e302f32322d3232203d3e203633363534.roa (hash: fLgddK5a5pen10EIOArIO5eS1Bvv0lSS9vSM6d0T0bw=)
                          8: 191E76D74421148B42FA2A7F663270AE7FAD25F9.crl (hash: XmqZAN3TpkXAC1xFcwGzYeuXiSVCPTlfY6MsoZKbe5s=)
                          9: 3130332e3131362e3132302e302f32342d3234203d3e2034383437.roa (hash: zB7FMCFhHyOWYUyT241bOpU68Hl2jbAwsIx3PIajOso=)
                          10: 3130332e3131362e3132312e302f32342d3234203d3e2034383437.roa (hash: bybvQVpDA62zpyPwHa1XWTYZhk2FjGjkQojOKPAlIPY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 05:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:86:0e:5c:4b:d7:d5:e6:9f:69:d0:69:51:f2:8d:b5:f5:c6:e7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
        Validity
            Not Before: May 29 01:47:25 2026 GMT
            Not After : May 30 05:43:25 2026 GMT
        Subject: CN=737EF0D468588EB97A9E3B000A57BAA5C9768C94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:21:c2:0a:91:0f:19:87:c8:56:a2:5e:7b:37:
                    df:5d:ed:72:a8:1e:3b:68:35:49:20:7c:49:67:e1:
                    4d:b2:fd:fb:ca:e6:f4:df:89:65:b6:eb:ed:c2:2c:
                    f0:82:39:24:cc:0b:95:e5:a4:e3:99:d7:c8:b1:83:
                    8d:81:4c:19:a8:75:1b:f3:50:cd:79:d1:30:e9:63:
                    02:eb:f2:41:6e:bd:62:93:61:07:af:82:22:e0:c8:
                    c1:ce:31:f1:3a:59:00:5d:8f:c9:1d:4a:23:a3:26:
                    7c:0e:98:24:79:e7:bd:3b:2b:26:d0:19:17:c5:98:
                    d4:07:14:ed:e4:98:fa:94:89:9b:48:f1:e2:83:14:
                    00:fe:11:7b:f3:0a:52:f1:67:79:b3:db:bc:0d:fe:
                    cb:d6:c7:18:f6:8e:15:43:78:49:c3:44:0b:71:79:
                    64:09:fd:72:63:28:6b:1f:95:11:f2:b9:ef:2d:a3:
                    02:36:eb:ce:11:83:c1:88:6f:9b:84:0f:6e:74:c6:
                    89:16:fb:f9:17:68:4d:e8:76:ed:48:e9:88:6e:07:
                    3b:c9:3a:e5:32:fe:25:e2:fd:52:5d:05:68:e2:f5:
                    d3:99:a9:d5:d3:2d:c2:eb:74:f9:92:30:db:88:aa:
                    41:2e:d4:65:44:1e:9e:12:20:2d:83:38:ad:03:58:
                    6f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7E:F0:D4:68:58:8E:B9:7A:9E:3B:00:0A:57:BA:A5:C9:76:8C:94
            X509v3 Authority Key Identifier:
                keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a4:72:54:3b:a2:52:e4:07:12:d3:c4:b8:86:ae:90:aa:46:
         79:da:27:df:e4:53:ba:63:23:56:b9:13:3f:92:95:71:51:0a:
         7d:33:d0:6a:e5:ff:84:b8:67:2f:03:09:e1:06:70:a5:bf:02:
         e5:96:f6:ec:69:bf:1d:d1:94:bc:38:8f:59:09:a3:8d:aa:13:
         04:00:7e:33:84:5d:26:71:c9:de:71:7f:2a:42:b5:3e:13:f2:
         a3:e3:ae:8f:f7:54:43:3c:63:0c:91:0c:b5:83:59:87:84:15:
         1c:93:49:df:b6:9b:df:b5:ea:be:50:3a:4e:e4:f7:c1:24:14:
         91:ae:d1:2d:89:66:eb:51:4a:38:3c:93:60:31:53:14:9f:9c:
         49:43:d1:53:92:9f:d4:d7:60:c5:a1:cc:a0:4f:c9:44:02:2e:
         11:30:88:b9:1c:02:d3:75:24:7d:65:db:b4:11:d0:7e:7f:a5:
         c1:3b:45:77:08:ba:68:ee:d8:df:88:1e:b1:34:dc:f6:fa:da:
         94:f0:d2:85:fb:46:80:d1:d3:90:a8:74:85:41:a1:11:71:30:
         bb:f1:96:4c:f6:c1:34:98:33:91:7d:d8:39:9d:f7:15:11:5d:
         5f:04:52:86:ea:b6:d9:57:86:74:b3:37:af:79:d9:2d:db:02:
         b5:27:f9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:10 2026 by rpki-client