Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft
File:                     98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft (raw, json)
Hash identifier:          LpKv7BhfH+MhbXJSUvzg7IZdbpK+k1g9IffFeC3Y5G0=
Subject key identifier:   D7:E0:6A:51:50:E2:78:1F:B1:8F:73:44:C0:89:59:31:26:EB:96:88
Authority key identifier: 98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01
Certificate issuer:       /CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601
Certificate serial:       0126299B9D7739269918806FF6CDDFF9A8D4E888
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft
Manifest number:          0103
Signing time:             Wed 03 Jun 2026 23:34:00 +0000
Manifest this update:     Wed 03 Jun 2026 23:29:00 +0000
Manifest next update:     Fri 05 Jun 2026 03:25:00 +0000
Files and hashes:         1: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl (hash: bFZ+yRONDQ23RdbgXZYGxSeYxjgGbEKMqn0g+Slekdo=)
                          2: 3137302e3137392e302e302f31362d3234203d3e20313331343836.roa (hash: qat1H617QJwQjY8jG6LbfzleO4RxVlthXXvF9jpIwLY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Jun 2026 03:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:26:29:9b:9d:77:39:26:99:18:80:6f:f6:cd:df:f9:a8:d4:e8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601
        Validity
            Not Before: Jun  3 23:29:00 2026 GMT
            Not After : Jun  5 03:25:00 2026 GMT
        Subject: CN=D7E06A5150E2781FB18F7344C089593126EB9688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:93:6e:0b:4d:f5:30:4d:a1:bf:84:78:c1:c2:
                    8f:51:76:4c:85:3b:bc:c3:25:ee:0d:ce:38:a6:95:
                    84:19:bf:cf:5a:9e:5d:a2:d7:34:5f:fd:d9:f8:fe:
                    e6:23:af:e2:a6:28:8a:2e:33:fa:d6:df:54:4b:fb:
                    35:c5:58:55:9a:08:96:84:b0:b0:d1:4c:06:87:6b:
                    91:2b:39:b2:1e:5d:a4:5a:9a:d5:b1:02:a2:a9:06:
                    f9:31:86:61:ac:a3:b8:ab:5b:0f:2e:d2:a9:68:aa:
                    61:06:ac:b2:cd:f1:39:fc:ed:49:b0:1d:e8:12:fa:
                    fc:87:0c:dd:9b:91:16:ab:71:68:c1:53:d4:35:b2:
                    d2:67:ed:7b:41:ac:13:c5:61:76:ab:44:61:70:76:
                    9d:d6:31:54:d0:43:a6:70:8a:d6:e2:2c:fa:4b:9f:
                    5f:d2:eb:37:9a:99:91:51:7b:25:4d:4b:1b:83:c0:
                    8e:7e:1b:cc:f8:74:e5:b2:71:1f:b8:fc:18:f8:f4:
                    ca:10:0c:62:ff:b3:8b:ab:36:a2:a1:af:82:ec:ca:
                    92:c6:47:c8:79:b6:ff:28:79:a2:1f:3c:72:13:1e:
                    df:c7:c7:44:a8:58:78:6c:77:fc:e5:33:2a:20:8f:
                    96:36:e3:cb:f7:58:78:f0:a0:c6:3c:49:ac:3a:ec:
                    14:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E0:6A:51:50:E2:78:1F:B1:8F:73:44:C0:89:59:31:26:EB:96:88
            X509v3 Authority Key Identifier:
                keyid:98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a4:61:e7:d8:29:9e:1f:85:f5:6f:58:3d:2d:44:12:93:b4:
         41:5d:bc:fe:27:60:63:25:02:4b:6f:2b:8f:14:34:49:da:4d:
         f0:7d:8f:ed:b9:c5:50:fc:7b:a2:a0:2c:56:d4:c3:fc:c7:c2:
         5a:f0:ad:4b:02:df:19:bc:82:af:59:99:cd:f6:8e:e0:d9:e6:
         fb:b5:fd:52:85:45:49:63:08:8d:e6:9f:8b:4e:95:4d:19:af:
         65:67:43:dc:1c:6c:f1:e8:2b:5c:84:3e:cd:0d:ba:08:79:13:
         44:00:5c:b0:a8:02:7e:a8:04:6a:0d:8e:ce:34:98:65:da:99:
         73:bb:15:d5:70:62:f4:07:c3:8c:e1:65:cd:5e:7c:0a:a6:64:
         37:85:27:68:b2:7b:de:8b:40:c5:21:6c:ef:a6:31:62:aa:06:
         93:8f:0e:4f:33:6e:a7:b5:ac:cc:bb:9e:de:89:ad:fa:74:14:
         26:b0:64:d4:1a:34:bf:7b:4f:0c:ae:dc:ae:61:e5:b4:67:70:
         3d:e2:3b:7b:ba:6b:0d:e0:6a:ad:a3:22:08:a6:ed:89:51:7f:
         d6:79:63:62:c3:d9:7c:60:9e:ca:99:b4:82:79:4e:cb:14:47:
         9e:35:01:07:4c:0a:ea:42:17:e1:34:4e:48:a3:53:60:ef:56:
         a4:2f:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:09:35 2026 by rpki-client