Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
File:                     E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft (raw, json)
Hash identifier:          Rd+IRqGIKM2nTaKWoN+e6XEuj0fk22jf0aNiYtSE3Gk=
Subject key identifier:   4D:61:1B:52:AF:5C:03:7E:01:59:B0:F3:03:D9:56:70:43:57:2F:5C
Authority key identifier: E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5
Certificate issuer:       /CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5
Certificate serial:       32FC4C5C81806256EFE2CEEADD0E490BB6878EA4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
Manifest number:          ED
Signing time:             Tue 14 Jul 2026 17:36:48 +0000
Manifest this update:     Tue 14 Jul 2026 17:31:48 +0000
Manifest next update:     Wed 15 Jul 2026 21:11:48 +0000
Files and hashes:         1: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl (hash: bDAubjU1JPLGeOqIJrGJp9nqByW3ivuyEQcDOAsPu8A=)
                          2: 323430313a373065303a3a2f33322d313238203d3e203633353338.roa (hash: xsErhEAOwjB/ZA5qSkY2qGpN9u/QeP5cfqWvkHIhTTo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:fc:4c:5c:81:80:62:56:ef:e2:ce:ea:dd:0e:49:0b:b6:87:8e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5
        Validity
            Not Before: Jul 14 17:31:48 2026 GMT
            Not After : Jul 15 21:11:48 2026 GMT
        Subject: CN=4D611B52AF5C037E0159B0F303D9567043572F5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c6:59:d3:05:c1:70:ea:f5:7a:67:2b:71:2e:
                    56:75:8a:66:46:bf:4e:9b:4f:76:43:d9:4f:17:8b:
                    f3:1d:e5:60:7d:75:3b:ec:8a:3b:40:14:4f:e1:21:
                    96:b7:67:1d:0a:c3:e5:7c:cb:e3:e6:6f:e0:c4:f0:
                    d2:15:c5:7a:ee:c4:57:88:80:fb:60:82:8f:73:63:
                    e1:b8:69:e5:17:61:9a:39:4b:d3:22:c5:7c:2a:f0:
                    28:cb:af:93:4c:c5:29:06:88:d3:1f:11:13:9a:b1:
                    b6:48:84:a0:07:fb:0d:39:bf:0a:15:9f:69:20:00:
                    ac:09:e0:33:a7:05:af:ad:52:0e:0e:cd:48:d0:e6:
                    c4:3d:a6:3e:f6:8e:4c:d4:5b:70:43:34:69:13:93:
                    6d:e3:4d:ac:2d:6a:ff:a7:4b:eb:42:4f:96:5a:21:
                    95:fe:2b:79:d4:50:89:0c:cd:a6:d9:a0:d3:b1:da:
                    82:a4:08:6f:92:d8:fe:5c:23:2e:64:8e:c1:2d:0b:
                    cf:8c:00:29:3e:67:39:eb:ff:94:d6:18:db:6e:51:
                    ed:8a:c3:31:d4:c3:c8:20:30:00:c7:43:8d:64:9d:
                    96:8f:a6:1a:23:89:fc:34:32:2f:d5:aa:6d:ad:2e:
                    80:f4:38:22:8f:08:43:e8:97:e0:62:b0:49:92:b3:
                    d9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:61:1B:52:AF:5C:03:7E:01:59:B0:F3:03:D9:56:70:43:57:2F:5C
            X509v3 Authority Key Identifier:
                keyid:E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:7f:1e:fb:5d:97:ca:86:3b:a9:8b:a9:69:6c:4e:43:8a:c9:
         02:09:a9:c5:b5:32:fb:9b:45:d8:e5:9b:d7:1a:d6:a8:25:19:
         59:08:89:f0:65:fb:a7:d0:3b:b2:ec:fc:c5:39:c5:89:74:bb:
         1f:e0:85:6f:2b:16:7a:7a:b1:15:e5:55:d3:d7:33:b3:0f:c3:
         24:91:af:e7:61:20:58:87:17:2c:be:7a:e5:a3:c7:13:98:79:
         44:c2:a3:2e:35:65:dc:b3:e6:a0:cb:f7:41:22:d3:da:2e:d4:
         db:7d:55:4f:ca:cd:9c:99:4f:28:ae:a4:31:48:17:15:b2:71:
         a6:7c:1d:7d:5f:82:9c:40:24:f8:c3:14:ff:88:3a:bd:8d:dd:
         1f:51:c1:ab:e2:fb:28:5f:d1:81:76:4a:d5:b0:84:da:86:8c:
         c9:30:7f:1e:00:fc:51:44:ed:6f:dd:c6:c1:c0:bc:67:cc:8a:
         9c:31:ca:bd:e2:d8:4d:b7:9c:4c:46:bf:d6:d0:b0:0d:d4:f3:
         a7:37:cb:a5:de:e6:73:be:55:74:3c:88:55:d7:5b:8c:b7:aa:
         c5:d5:91:46:7a:49:5e:e3:90:bd:07:36:0f:eb:ee:03:a0:a8:
         1c:4a:4a:ee:4a:1c:4c:98:62:2a:bd:55:36:58:ef:d9:bf:11:
         e9:2e:a3:03
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUMvxMXIGAYlbv4s7q3Q5JC7aHjqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1
NUJGRjFGNTAeFw0yNjA3MTQxNzMxNDhaFw0yNjA3MTUyMTExNDhaMDMxMTAvBgNV
BAMTKDRENjExQjUyQUY1QzAzN0UwMTU5QjBGMzAzRDk1NjcwNDM1NzJGNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDixlnTBcFw6vV6ZytxLlZ1imZG
v06bT3ZD2U8Xi/Md5WB9dTvsijtAFE/hIZa3Zx0Kw+V8y+Pmb+DE8NIVxXruxFeI
gPtggo9zY+G4aeUXYZo5S9MixXwq8CjLr5NMxSkGiNMfEROasbZIhKAH+w05vwoV
n2kgAKwJ4DOnBa+tUg4OzUjQ5sQ9pj72jkzUW3BDNGkTk23jTawtav+nS+tCT5Za
IZX+K3nUUIkMzabZoNOx2oKkCG+S2P5cIy5kjsEtC8+MACk+Zznr/5TWGNtuUe2K
wzHUw8ggMADHQ41knZaPphojifw0Mi/Vqm2tLoD0OCKPCEPol+BisEmSs9nzAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUTWEbUq9cA34BWbDzA9lWcENXL1wwHwYDVR0j
BBgwFoAU5OM4W9QhrxrO1COkjgVfVVW/8fUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTYxNjg5Ny8wL0U0RTMzODVCRDQyMUFGMUFDRUQ0MjNBNDhFMDU1
RjU1NTVCRkYxRjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1NUJGRjFGNS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMC9FNEUzMzg1QkQ0MjFB
RjFBQ0VENDIzQTQ4RTA1NUY1NTU1QkZGMUY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmX8e+12XyoY7
qYupaWxOQ4rJAgmpxbUy+5tF2OWb1xrWqCUZWQiJ8GX7p9A7suz8xTnFiXS7H+CF
bysWenqxFeVV09czsw/DJJGv52EgWIcXLL565aPHE5h5RMKjLjVl3LPmoMv3QSLT
2i7U231VT8rNnJlPKK6kMUgXFbJxpnwdfV+CnEAk+MMU/4g6vY3dH1HBq+L7KF/R
gXZK1bCE2oaMyTB/HgD8UUTtb93GwcC8Z8yKnDHKveLYTbecTEa/1tCwDdTzpzfL
pd7mc75VdDyIVddbjLeqxdWRRnpJXuOQvQc2D+vuA6CoHEpK7kocTJhiKr1VNljv
2b8R6S6jAw==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:09:48 2026 by rpki-client