Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft
File:                     98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft (raw, json)
Hash identifier:          dg7ckOISLXFLeN4+//46WHjxsC2Z+UPJB0O5nXwuJC4=
Subject key identifier:   96:36:7A:AD:A1:28:78:52:D6:D8:7F:8A:99:24:DB:2B:B1:B5:0A:FE
Authority key identifier: 98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01
Certificate issuer:       /CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601
Certificate serial:       5CCFF299D5A48F04D9C3782D0FD245A792AB684E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft
Manifest number:          C5
Signing time:             Sat 18 Apr 2026 12:59:54 +0000
Manifest this update:     Sat 18 Apr 2026 12:54:54 +0000
Manifest next update:     Sun 19 Apr 2026 13:05:54 +0000
Files and hashes:         1: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl (hash: QKf3UZHzT0IbgkqBBj8v+GXwbE8kzZOeReQSjszMBdE=)
                          2: 3137302e3137392e302e302f31362d3234203d3e20313331343836.roa (hash: qat1H617QJwQjY8jG6LbfzleO4RxVlthXXvF9jpIwLY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 10:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:cf:f2:99:d5:a4:8f:04:d9:c3:78:2d:0f:d2:45:a7:92:ab:68:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601
        Validity
            Not Before: Apr 18 12:54:54 2026 GMT
            Not After : Apr 19 13:05:54 2026 GMT
        Subject: CN=96367AADA1287852D6D87F8A9924DB2BB1B50AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:99:c4:d1:a6:46:e7:72:ca:c1:1d:bd:61:a1:
                    a0:0e:e7:d8:8a:28:20:70:83:4f:8f:b4:ba:c7:27:
                    ef:9b:15:2f:d2:b1:bf:a1:29:b6:ce:2d:11:9b:13:
                    ad:4b:c4:4e:86:5a:82:9c:e3:e3:e4:7a:7d:56:a4:
                    45:40:e6:e9:2b:d7:ec:f4:38:06:ed:90:1f:ce:9d:
                    22:f7:fe:1e:b1:84:d1:d1:2e:87:71:7f:86:4f:af:
                    83:78:fa:e5:19:f1:78:63:3e:60:de:a2:12:13:17:
                    83:b4:f1:c4:03:39:cf:2c:a6:82:9c:fd:2b:4a:72:
                    f6:38:4d:1d:59:68:e4:7f:85:b0:4a:85:b2:0a:35:
                    25:ad:d2:dd:64:44:0e:38:59:c5:8a:b0:e3:06:a0:
                    54:d2:cd:59:0d:30:b3:2f:97:3c:55:34:75:04:5f:
                    59:73:c1:6d:4b:15:74:63:80:d9:99:ce:31:74:c8:
                    23:05:52:c2:e8:28:4d:30:19:a4:c8:b2:ed:11:f4:
                    45:49:aa:d7:42:51:a5:a6:6d:7a:30:e8:0f:75:f9:
                    68:8c:82:43:b9:86:0d:56:85:66:05:1d:74:1a:c1:
                    bf:79:64:db:8e:73:e5:d5:00:80:f5:a8:dd:a9:1e:
                    20:29:7a:d3:01:55:2d:b2:20:b7:36:30:4a:5c:34:
                    7e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:36:7A:AD:A1:28:78:52:D6:D8:7F:8A:99:24:DB:2B:B1:B5:0A:FE
            X509v3 Authority Key Identifier:
                keyid:98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:db:0f:8e:ec:0f:1d:8f:41:57:4d:19:75:9a:5c:c1:c6:fa:
         43:af:0f:cb:5b:6a:ab:db:29:b8:14:6c:4e:26:64:60:66:c1:
         ba:2d:50:91:ea:f3:b3:6a:10:21:9a:88:c4:6d:e8:29:5f:ec:
         b9:54:80:59:26:4c:15:49:12:a1:71:46:af:84:9b:74:c4:17:
         4e:38:5e:cb:68:7a:67:90:af:fe:6b:ce:cb:e0:41:68:b5:df:
         e8:f9:a7:c0:e0:8e:5d:4b:de:95:d8:9d:67:cf:f2:70:00:34:
         cd:4e:4b:3d:aa:9b:c0:ac:76:ff:0b:af:8b:a5:4b:06:d5:92:
         b6:72:32:b8:32:7b:b7:9d:be:7c:6f:a6:12:a2:90:12:51:d4:
         e1:55:6b:ad:3a:63:1f:0c:64:56:d5:2f:47:48:0b:cf:4a:3b:
         70:1f:b2:8a:29:31:bf:86:fa:2d:42:b4:40:8c:0a:bc:49:28:
         26:c4:b2:62:0a:33:37:3f:42:37:44:76:06:a0:f6:96:88:b1:
         3e:fe:ae:b6:4d:70:3b:31:c0:70:ca:4d:b6:2c:5b:c2:a5:3c:
         c5:24:60:f4:52:26:cd:81:63:ab:40:85:f7:cf:90:0e:d0:f2:
         70:60:c2:81:28:5f:13:45:e4:56:25:e3:ba:44:bd:79:84:1c:
         f0:e6:1e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 01:15:43 2026 by rpki-client