Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft
File:                     89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft (raw, json)
Hash identifier:          OLVy+lHNWXdLBA4IiuEbV5u2JC+AgsXUNjDFS41otp0=
Subject key identifier:   23:2F:E1:B6:91:12:F3:B0:B7:B7:C1:A1:14:90:79:AB:A8:8C:62:84
Authority key identifier: 89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC
Certificate issuer:       /CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC
Certificate serial:       288A6190310C66101D1E2FA1E725FF99D0BA76C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft
Manifest number:          95
Signing time:             Tue 14 Jul 2026 14:26:29 +0000
Manifest this update:     Tue 14 Jul 2026 14:21:29 +0000
Manifest next update:     Wed 15 Jul 2026 18:12:29 +0000
Files and hashes:         1: AS0.roa (hash: KIHAu+71SBGOjZy0+m+b+9Y+nNYA3SsGqBm2BhYlMk0=)
                          2: AS134762.roa (hash: eSYTzkJ8JGMz0GlshaE/rwlFL4yUx+ZzZxHFoXYyPiw=)
                          3: AS4816.roa (hash: Iul7zwOvNaYW5khbgmnadlB8+QqgxtIUtvm4m1VptM8=)
                          4: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl (hash: Fz7veYumLyYVgTvzqS/Pbc6kzsaeATTpwVYh2aAbiq8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 18:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8a:61:90:31:0c:66:10:1d:1e:2f:a1:e7:25:ff:99:d0:ba:76:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC
        Validity
            Not Before: Jul 14 14:21:29 2026 GMT
            Not After : Jul 15 18:12:29 2026 GMT
        Subject: CN=232FE1B69112F3B0B7B7C1A1149079ABA88C6284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:09:a8:3b:8b:fe:29:6d:5a:a1:d4:b5:29:9f:
                    95:70:60:24:e2:5b:c8:3e:3d:58:49:a0:3b:cb:38:
                    a7:ca:86:52:32:25:66:71:17:cc:73:04:fe:85:24:
                    d6:a7:77:af:4b:cc:a0:22:e9:a1:5b:7d:f2:7e:1e:
                    6a:2a:77:14:c5:90:92:f2:bc:4f:50:d6:0c:00:b3:
                    4d:bf:64:69:31:a7:fd:31:5b:82:66:70:ee:d6:b6:
                    9d:62:e1:c0:61:86:67:8a:0a:d4:5e:93:05:46:82:
                    13:87:25:d2:76:dd:ce:f9:13:8c:a5:68:ee:4c:fb:
                    69:bb:39:13:71:94:dc:4a:37:a3:38:87:b3:ae:6b:
                    7a:3e:74:2c:d0:17:af:3f:b4:7f:a8:57:54:ec:0d:
                    7e:bc:9d:ef:a0:82:83:e3:25:e2:43:b3:00:4d:7a:
                    be:7d:5a:2b:3e:0f:d3:dd:1c:b7:59:1f:ec:9a:16:
                    91:ec:67:e0:0e:8d:0a:a9:f5:7e:68:6e:9e:16:4f:
                    c3:70:0f:e0:fd:89:25:c7:6d:2a:fa:7b:7a:dc:7d:
                    7e:de:30:5c:cf:0c:7a:12:f9:14:5d:d3:87:c5:66:
                    42:0f:42:76:ab:44:5d:35:1d:e5:44:84:8e:e5:3b:
                    56:85:11:8d:d6:5b:20:5d:7e:4c:03:d9:d2:2f:18:
                    b8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2F:E1:B6:91:12:F3:B0:B7:B7:C1:A1:14:90:79:AB:A8:8C:62:84
            X509v3 Authority Key Identifier:
                keyid:89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d1:54:12:36:f8:dc:11:8f:64:0a:57:09:8c:36:a9:69:17:
         4a:55:ef:56:a0:f8:ff:28:48:29:16:6e:a5:54:f8:00:7a:be:
         c3:36:c9:25:84:15:6d:95:06:21:9c:7d:f3:89:77:44:24:dd:
         a2:b3:c0:04:37:e9:ca:7e:1b:be:5f:e4:a5:aa:be:71:49:1d:
         e7:91:d0:16:d3:4e:c2:44:cd:05:27:12:a5:33:be:96:1f:ef:
         15:1f:1b:19:d8:b4:74:c2:9c:05:14:43:4d:0d:07:35:e9:a8:
         f0:20:74:a4:96:1e:ea:75:e0:fd:d6:12:d6:57:cc:be:3b:f0:
         fa:e3:f4:77:bb:73:bc:b7:50:e2:e1:26:29:01:a6:aa:c6:bd:
         d6:bb:ce:18:b7:ff:24:d1:a1:09:50:b5:4b:e5:17:0b:5d:ed:
         67:c9:b0:ec:c4:93:3b:5c:84:e6:b5:c0:26:78:82:a9:1d:1f:
         5f:24:fc:72:26:6e:b1:41:b0:09:47:87:fa:3c:04:71:09:b5:
         28:34:b4:3c:f7:3e:b2:51:8c:0d:1f:b7:23:b7:71:af:a8:75:
         0f:68:21:a6:d8:dc:df:48:b1:68:2e:d5:4e:64:aa:c7:46:be:
         12:5c:ef:8b:71:cc:99:f4:ee:6b:16:9f:44:87:c1:f4:33:57:
         7a:51:2d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:05:05 2026 by rpki-client