Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
File:                     AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft (raw, json)
Hash identifier:          TKDshkvNDmR45uiPkPcFpJXxVr4BwlCszb9RJj5qOQY=
Subject key identifier:   3B:93:5A:E6:BB:39:02:49:16:62:85:42:EA:8D:95:B4:56:86:EF:F5
Authority key identifier: AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9
Certificate issuer:       /CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
Certificate serial:       681B9BC6E6DE7B3482084125AB9C9426D9C59879
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
Manifest number:          46
Signing time:             Fri 29 May 2026 19:28:16 +0000
Manifest this update:     Fri 29 May 2026 19:23:16 +0000
Manifest next update:     Sat 30 May 2026 21:22:16 +0000
Files and hashes:         1: 3231312e3130312e3234342e302f32322d3234203d3e203538353139.roa (hash: /uXfkAccy3v3a9BHA09vw6dKcshdQs/6n+DUQ8IYKi8=)
                          2: 3231312e3130312e3233322e302f32312d3234203d3e203538353139.roa (hash: iVNiE9bxsTL+DkppA0g1irY1nuYRs9Q3qr7qbEuyfxk=)
                          3: 3130332e33362e3232302e302f32322d3234203d3e203538353139.roa (hash: cpYrgo4yAI6Z4974RFpP1Ve2Wg+ZBptUjAdisTeBGyw=)
                          4: 34332e3234302e3232302e302f32322d3234203d3e203538353139.roa (hash: vSeQnc0mmTH3jj/CmKx/qvwuVCC4G3xToac39RSw2JM=)
                          5: 3130332e3136332e34362e302f32332d3234203d3e203538353139.roa (hash: tnfkAsqQvcqpL20P+LPe4F4kwN7iekWJ1PPQsYyrYg8=)
                          6: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl (hash: ur9kxI0/Y7pBcPMFdSCjW4MMGrrjabNSS75KyggBZzg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1b:9b:c6:e6:de:7b:34:82:08:41:25:ab:9c:94:26:d9:c5:98:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
        Validity
            Not Before: May 29 19:23:16 2026 GMT
            Not After : May 30 21:22:16 2026 GMT
        Subject: CN=3B935AE6BB39024916628542EA8D95B45686EFF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:06:d5:15:49:8e:3d:7f:1c:92:e3:ba:34:9c:
                    05:72:98:ce:6e:97:75:9e:80:f4:68:99:a6:85:c2:
                    7a:7a:18:ef:e5:e5:05:80:fb:0d:ef:70:04:c0:0b:
                    58:fc:f7:74:39:c6:34:fb:fd:27:5c:a9:93:dc:ff:
                    dd:0f:31:65:88:63:a8:59:ee:59:4c:eb:0e:59:69:
                    7a:eb:84:40:83:7d:e0:c9:27:a2:fa:b4:a6:f4:bf:
                    12:8d:ef:2d:34:d2:0b:fa:80:5b:22:4e:e8:42:d6:
                    8a:1a:74:98:1c:8b:7d:ea:0a:97:4e:bf:c3:4d:91:
                    92:da:a5:dc:95:bd:9d:1f:ed:d1:bd:a6:cd:eb:86:
                    3a:54:fc:9e:01:5e:62:c2:ce:8f:0f:ef:61:e3:c1:
                    50:6e:51:b9:b0:f5:e9:a9:3e:77:5f:09:a5:33:18:
                    57:45:f2:60:3b:aa:06:a8:0c:f5:47:22:d4:f5:73:
                    82:de:69:48:b5:51:38:22:56:d4:ef:1a:a9:a7:23:
                    b5:45:c4:0e:2b:67:ec:74:49:99:cd:5e:aa:10:68:
                    24:f0:0c:50:5f:36:d7:66:88:ff:fb:e3:15:98:df:
                    8e:91:80:40:82:3c:d5:b0:90:b4:75:fe:65:00:02:
                    82:be:32:4a:67:59:92:cc:b3:a8:26:ea:9d:e6:fc:
                    9c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:93:5A:E6:BB:39:02:49:16:62:85:42:EA:8D:95:B4:56:86:EF:F5
            X509v3 Authority Key Identifier:
                keyid:AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:88:47:0b:04:f4:6a:3f:3f:a2:d7:96:ed:74:d3:2f:03:14:
         28:41:39:75:5a:16:09:76:8c:c7:38:a6:6b:0c:db:45:a4:c0:
         a3:c1:6c:e1:7d:e7:aa:99:4a:3b:52:ab:96:aa:c5:6b:3c:62:
         ac:0d:04:13:c4:22:9b:7d:ac:12:18:74:42:0e:c6:ec:69:f6:
         da:85:6f:a0:21:18:f4:dd:6d:8d:e8:b5:a4:34:f7:a0:df:f6:
         0f:f0:21:a5:09:8c:66:c4:64:1f:ec:a3:34:69:ea:ae:0e:04:
         77:76:a9:ff:32:30:10:07:ee:82:75:88:c2:fa:78:2f:0b:e4:
         4d:9d:d7:65:f6:aa:ea:3b:0a:04:a5:c7:d8:a4:46:99:ee:dc:
         cd:fe:ca:cc:6c:09:d9:a9:7c:49:6f:92:63:ae:2f:a4:f8:ea:
         55:b3:8b:81:77:d9:92:d4:ad:af:85:08:92:c0:0c:e9:47:f8:
         a3:e8:5c:f5:76:d8:27:60:af:0e:46:49:05:69:d8:89:a2:aa:
         cf:ae:42:29:bb:be:db:1d:73:c6:33:01:9e:48:83:64:61:1f:
         c0:91:77:37:21:34:85:42:73:8a:64:de:b4:2f:91:ed:ba:4f:
         6f:05:03:25:56:0c:38:d7:5d:27:9e:f8:88:f2:f1:4f:80:b5:
         5a:bf:e0:f5
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUaBubxubeezSCCEElq5yUJtnFmHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU0QUQyN0QzM0Y5RDY0QjdGQTIxODRDNkMwMzBBN0I4
MDkxRTlFOTAeFw0yNjA1MjkxOTIzMTZaFw0yNjA1MzAyMTIyMTZaMDMxMTAvBgNV
BAMTKDNCOTM1QUU2QkIzOTAyNDkxNjYyODU0MkVBOEQ5NUI0NTY4NkVGRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFBtUVSY49fxyS47o0nAVymM5u
l3WegPRomaaFwnp6GO/l5QWA+w3vcATAC1j893Q5xjT7/SdcqZPc/90PMWWIY6hZ
7llM6w5ZaXrrhECDfeDJJ6L6tKb0vxKN7y000gv6gFsiTuhC1ooadJgci33qCpdO
v8NNkZLapdyVvZ0f7dG9ps3rhjpU/J4BXmLCzo8P72HjwVBuUbmw9empPndfCaUz
GFdF8mA7qgaoDPVHItT1c4LeaUi1UTgiVtTvGqmnI7VFxA4rZ+x0SZnNXqoQaCTw
DFBfNtdmiP/74xWY346RgECCPNWwkLR1/mUAAoK+MkpnWZLMs6gm6p3m/JxBAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUO5Na5rs5AkkWYoVC6o2VtFaG7/UwHwYDVR0j
BBgwFoAUrkrSfTP51kt/ohhMbAMKe4CR6ekwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDQ4ODgyMjY4NDU4MTg5MC8wL0FFNEFEMjdEMzNGOUQ2NEI3RkEyMTg0QzZDMDMw
QTdCODA5MUU5RTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUU0QUQyN0QzM0Y5RDY0QjdGQTIxODRDNkMwMzBBN0I4MDkxRTlFOS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ0ODg4MjI2ODQ1ODE4OTAvMC9BRTRBRDI3RDMzRjlE
NjRCN0ZBMjE4NEM2QzAzMEE3QjgwOTFFOUU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4hHCwT0aj8/
oteW7XTTLwMUKEE5dVoWCXaMxzimawzbRaTAo8Fs4X3nqplKO1KrlqrFazxirA0E
E8Qim32sEhh0Qg7G7Gn22oVvoCEY9N1tjei1pDT3oN/2D/AhpQmMZsRkH+yjNGnq
rg4Ed3ap/zIwEAfugnWIwvp4LwvkTZ3XZfaq6jsKBKXH2KRGme7czf7KzGwJ2al8
SW+SY64vpPjqVbOLgXfZktStr4UIksAM6Uf4o+hc9XbYJ2CvDkZJBWnYiaKqz65C
Kbu+2x1zxjMBnkiDZGEfwJF3NyE0hUJzimTetC+R7bpPbwUDJVYMONddJ574iPLx
T4C1Wr/g9Q==
-----END CERTIFICATE-----
Generated at Fri May 29 22:05:31 2026 by rpki-client