Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft
File:                     9B5519650F0653145F5D42879890BE1251C8F463.mft (raw, json)
Hash identifier:          +VVPZ0wWqsqMGIa72czBrfNtgNIK+Vka9L5wF/gOtXM=
Subject key identifier:   48:C6:72:CF:5F:6B:E1:DC:0E:9B:93:4F:21:F1:19:F7:04:8C:D5:79
Authority key identifier: 9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63
Certificate issuer:       /CN=9B5519650F0653145F5D42879890BE1251C8F463
Certificate serial:       35B17E13A860F15A28215F6A44A8ABAD5A5B6CF9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft
Manifest number:          0A
Signing time:             Mon 06 Apr 2026 02:03:56 +0000
Manifest this update:     Mon 06 Apr 2026 01:58:56 +0000
Manifest next update:     Tue 07 Apr 2026 03:47:56 +0000
Files and hashes:         1: 9B5519650F0653145F5D42879890BE1251C8F463.crl (hash: 0VOfSNIDrnw5Yrswruro5nODeQ4DwF9s8VGFhB+wgL0=)
                          2: 3130332e3136362e35322e302f32332d3234203d3e20313532333230.roa (hash: 3TRbYHq703El7Neqe3loR720kcmC0cXg2mR3/oCz70A=)
                          3: 3130332e3136362e35322e302f32332d3234203d3e20313534333231.roa (hash: 0C8XcZ1s9U/Zhi7pGBjei7dFvtqtfA78ZraGcnjIorM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 Apr 2026 03:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b1:7e:13:a8:60:f1:5a:28:21:5f:6a:44:a8:ab:ad:5a:5b:6c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B5519650F0653145F5D42879890BE1251C8F463
        Validity
            Not Before: Apr  6 01:58:56 2026 GMT
            Not After : Apr  7 03:47:56 2026 GMT
        Subject: CN=48C672CF5F6BE1DC0E9B934F21F119F7048CD579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:32:14:d7:f8:db:ab:e9:d2:06:ae:0c:da:
                    2c:a0:20:c2:33:7d:df:af:4d:5b:97:65:1c:ea:cc:
                    76:a1:e6:80:31:cc:81:e6:b9:f8:1f:e1:d9:b5:fb:
                    88:b3:c6:f6:13:3b:69:6d:7a:06:b8:2b:db:5b:d0:
                    a5:90:13:22:18:ef:28:81:13:8e:74:94:b2:8d:94:
                    4f:cc:8f:8f:08:d2:09:25:3a:c8:74:2a:e6:9b:dd:
                    c0:98:8b:a2:e1:7e:96:bb:5a:be:81:12:df:f0:dd:
                    78:d4:07:9b:1e:8c:25:60:fe:55:50:56:0e:d3:ec:
                    96:cf:5c:09:a5:56:86:7a:84:81:27:58:1a:ca:70:
                    90:d4:83:c2:37:6d:7d:ab:35:5b:90:95:9b:33:e7:
                    10:13:de:2d:90:e8:16:32:87:0e:57:7f:22:b1:54:
                    a7:4f:de:d7:a2:de:7c:f1:5c:2a:d4:ad:2f:d4:0c:
                    02:8a:2f:9a:c9:dd:36:35:44:74:41:b6:5e:92:3b:
                    08:57:e0:ad:cd:e0:82:19:e5:d8:67:88:5b:ea:c8:
                    4b:af:f9:ef:d5:8f:01:ad:3b:70:88:02:45:77:39:
                    63:fc:8d:72:02:e5:25:b0:f6:cd:69:b8:55:5c:d6:
                    6d:b4:87:ed:3a:10:66:10:64:5e:e6:7f:44:7c:0b:
                    c0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C6:72:CF:5F:6B:E1:DC:0E:9B:93:4F:21:F1:19:F7:04:8C:D5:79
            X509v3 Authority Key Identifier:
                keyid:9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:6e:2d:c5:07:03:c7:3c:be:4c:cb:3f:41:12:1f:47:e8:5e:
         a7:c1:4c:43:b0:71:6a:95:21:1b:eb:ed:3d:79:5f:f7:17:37:
         0e:6c:9e:17:32:65:50:23:a6:ef:70:f2:b1:1a:d5:83:e4:57:
         78:d6:6a:12:40:07:8d:28:da:4c:d8:95:54:27:70:30:49:02:
         3b:00:d8:98:db:65:39:2c:eb:cb:04:92:e7:f2:4b:62:e0:ba:
         48:ad:56:29:da:54:f8:22:01:c6:d2:e8:26:db:df:e7:3e:81:
         bc:51:a9:14:b9:39:c0:91:6e:6c:f6:b7:b8:5d:89:cc:c0:47:
         f9:e9:88:59:9f:fc:09:96:1d:e8:00:f9:26:eb:a0:08:2f:28:
         b4:4a:35:85:86:0a:b2:7c:53:10:d3:9e:be:96:d4:aa:df:4a:
         36:19:c9:a0:13:d7:b5:a3:56:0e:08:e4:04:68:f7:83:9a:4f:
         1a:bd:92:10:da:c9:2f:f7:46:e0:ac:f5:8a:6d:72:44:db:09:
         b3:d2:48:26:da:e5:5c:f1:52:32:1b:7d:f6:c6:54:db:31:36:
         2e:00:bd:fb:d4:85:49:6e:b2:c9:7d:59:fe:90:ec:37:c7:eb:
         3d:03:1b:75:b7:bf:73:1b:d1:12:b8:a0:be:d7:05:22:48:20:
         f7:49:6d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:53:01 2026 by rpki-client