Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
File:                     19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft (raw, json)
Hash identifier:          MsLQsvD4bBUzvZ0GA19t/Lj2lGlyJw0ffX3z22M+ar4=
Subject key identifier:   A6:28:35:35:16:A0:B4:AF:06:DF:80:47:C1:D3:8B:C3:FF:B8:5F:D3
Authority key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD
Certificate issuer:       /CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
Certificate serial:       1AADFC80BC6ECA997D3B4FF42C8798047D0A8F2A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
Manifest number:          0127
Signing time:             Fri 28 Aug 2026 06:48:04 +0000
Manifest this update:     Fri 28 Aug 2026 06:43:04 +0000
Manifest next update:     Mon 31 Aug 2026 17:58:04 +0000
Files and hashes:         1: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl (hash: ZIZkl8/1fWjf/80yfVdKnDfoGvw+khsDuJkjxyX11LM=)
                          2: 3134342e37392e31302e302f32332d3234203d3e20313531323531.roa (hash: WjMCSVc2nZ6LHlmIFS3fh2fKf0RsOi1ahfbmP+aZL0U=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 13:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ad:fc:80:bc:6e:ca:99:7d:3b:4f:f4:2c:87:98:04:7d:0a:8f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
        Validity
            Not Before: Aug 28 06:43:04 2026 GMT
            Not After : Aug 31 17:58:04 2026 GMT
        Subject: CN=A628353516A0B4AF06DF8047C1D38BC3FFB85FD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:09:ca:ce:4b:d0:8e:9e:40:0d:c3:00:0e:6d:
                    d9:18:4b:6e:8a:3e:9a:78:8a:cd:13:60:68:3d:2e:
                    55:e7:35:eb:6b:ea:d7:aa:cb:b5:b0:20:8e:b5:a1:
                    7d:06:ba:27:b3:c2:40:a5:de:a2:e6:b5:2f:32:24:
                    74:ea:6a:b4:93:00:b8:76:07:ff:e9:08:b5:ef:4e:
                    c8:5e:76:69:ce:ea:43:e6:b1:a6:0e:84:6d:50:ef:
                    22:20:fc:27:a7:91:f4:fb:2a:45:ee:dd:14:75:f7:
                    80:21:eb:cf:f1:2a:87:a6:60:d8:b2:4d:84:53:14:
                    91:4f:e7:82:c6:73:40:23:96:5a:54:4c:77:b2:5b:
                    7e:ea:c8:95:eb:4d:7c:1d:6f:b0:d2:4e:68:32:04:
                    85:e4:4b:ca:89:08:0d:7d:dc:db:b1:c7:e3:ca:a4:
                    82:f8:26:20:a3:e9:9e:86:11:e9:21:ef:69:55:86:
                    81:f5:32:f9:32:44:48:a7:29:d7:55:da:fe:c9:65:
                    12:58:ec:13:86:2e:02:18:11:1c:d2:fa:72:0e:6e:
                    e1:12:78:09:48:50:a2:4c:88:86:de:8b:e0:26:b8:
                    12:37:57:e7:0e:36:69:76:09:59:0d:e4:9e:fd:1b:
                    ad:6a:4c:11:d9:ab:93:6c:99:e7:d9:30:86:e0:8d:
                    6e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:28:35:35:16:A0:B4:AF:06:DF:80:47:C1:D3:8B:C3:FF:B8:5F:D3
            X509v3 Authority Key Identifier:
                keyid:19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e8:e4:27:ff:ff:ce:94:fe:78:ae:4c:b3:6d:78:a4:50:87:
         b2:55:b8:2b:0b:4e:6f:c7:39:be:78:42:fa:52:72:2b:76:b2:
         c5:de:57:08:2b:63:56:55:77:61:cd:5b:7b:09:6b:26:4b:f8:
         1a:87:3c:c0:02:fb:06:36:40:20:29:86:76:b4:d8:2a:a2:66:
         65:c2:df:86:e3:3e:6d:e4:79:7e:97:f7:6a:a3:90:24:63:55:
         2f:77:bb:c9:d7:e6:dd:79:36:50:d3:9b:aa:59:0f:21:30:42:
         21:e8:6a:02:eb:c7:18:6c:c3:8c:a7:16:c1:1c:ca:9a:af:eb:
         c0:f2:a7:21:21:b3:69:0f:b1:89:20:7b:28:26:6d:8d:ff:d4:
         61:92:d8:2e:fa:4c:f7:f9:7b:bc:d4:58:48:cd:f3:62:b9:d1:
         58:3d:70:cc:95:75:cd:e1:be:ef:88:9c:f7:49:5b:14:f8:18:
         d2:b3:fb:9d:8e:74:05:56:1b:5a:1c:14:ff:3c:8b:af:1a:42:
         c5:68:a5:07:4a:c6:54:a0:cd:c0:a2:22:08:0b:c4:d1:96:51:
         c5:97:c3:80:0c:0c:94:00:00:e1:15:97:78:15:5f:18:4a:83:
         f6:eb:71:22:5d:60:d2:a4:3a:15:1b:ec:61:4d:31:47:6d:a6:
         31:87:a6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:09:27 2026 by rpki-client