Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
File:                     C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft (raw, json)
Hash identifier:          oZyHJsl9E+RHOnfW5zxF/A2VkhDkpBRx/1cOrbyMb28=
Subject key identifier:   29:B4:91:2B:F0:E4:4D:78:79:21:13:F0:A6:50:53:9F:21:1A:25:9A
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Certificate issuer:       /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial:       66C0AA5B96E5E3ADC96DE6560FF2305CB4530F3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
Manifest number:          19
Signing time:             Mon 27 Apr 2026 11:18:47 +0000
Manifest this update:     Mon 27 Apr 2026 11:13:47 +0000
Manifest next update:     Tue 28 Apr 2026 12:32:47 +0000
Files and hashes:         1: 3130332e36302e3233362e302f32322d3232203d3e203633363437.roa (hash: PvB7R5rbDvx1hAvcsmGVf0fVA9gBKwD2ToXd+MvfvEM=)
                          2: 3130332e3234382e3232342e302f32322d3232203d3e2034383038.roa (hash: N837z9+HBsxTI6Uc+rr58LHPgeCE0NTZ649dwdA8vII=)
                          3: 3232332e3232332e3138342e302f32322d3232203d3e203435303634.roa (hash: p+D71BLuI8k94Q1H4/k7JU3sIoRsAtcwLqxPLVgrfBY=)
                          4: 34332e3235352e3230322e302f32332d3233203d3e203633363437.roa (hash: 7REn9RASQHZvN8euS0LAJMoryAYtn/bacCjh1LwDCoA=)
                          5: 34332e3235352e3230302e302f32322d3232203d3e203633363437.roa (hash: md7fYl91Lxt0c8GjUDNz/sn5ky2vltMG6Z5Oyh+X4U4=)
                          6: 3130332e36302e3233362e302f32322d3232203d3e2034383038.roa (hash: qHB8KTfFynHMWdIMcluKNSTEjwWTW8bWgCBwGKTf6lI=)
                          7: 3135302e3234322e37362e302f32322d3232203d3e2034383038.roa (hash: y6Tf2xSYD5JmpHmzNtdtKnHIbcnN5l76m/WJZK+R440=)
                          8: 323430303a613836303a343a3a2f34382d3438203d3e203633363437.roa (hash: LaJeeoBUe/P+sI6f8xjykw99r3pVPdodKbOl30xyWF0=)
                          9: 3230332e3137342e39362e302f31392d3139203d3e203633363437.roa (hash: rfRwHYwSIJm+rW4Mo2Nkxt/hlHnHVS4hIdZojPCJZZs=)
                          10: 323430303a613836303a363a3a2f34382d3438203d3e203633363437.roa (hash: foZYUYrtwuyFYE9YAYNGxYp3wXsxo09oBtrPx8ymreQ=)
                          11: 323430303a613836303a333a3a2f34382d3438203d3e203633363437.roa (hash: 6vHTtwTsWa/I8/f0+eUaN4fbssfyrhXnJFU69YNLczs=)
                          12: 3130332e3234302e31362e302f32322d3232203d3e203633363437.roa (hash: q++YE6i85heQelNf8oAs1O/pHfC1rrvg5gHw+M8CtUA=)
                          13: 3130332e3233332e3136322e302f32332d3233203d3e2034383038.roa (hash: YyhJmsiu5REjTLuvSSldDw5lxTqSSS+08c8fqNfPbVI=)
                          14: 34332e3235352e3230302e302f32332d3233203d3e203633363437.roa (hash: Qdj4XoKs+YJkaBz6U81jMaSigeKFBgg1ycjGe4LC6Jg=)
                          15: 3130332e3233392e3139322e302f32322d3232203d3e2034383038.roa (hash: vMSHtOzxPu3117LR4uNtGZu4s21BKCPeXBhgmL8fw6s=)
                          16: 323430303a613836303a323a3a2f34382d3438203d3e2034383038.roa (hash: OKFyZ0noKFQzPjadj+vTmmI839G12P+h27OorRvltNA=)
                          17: 3130332e32352e33362e302f32322d3232203d3e203633363437.roa (hash: k4MbWp+K5JEc1G46+T+jNoID0eatxChGV6x7pSy5RH4=)
                          18: 3130332e3233332e3136322e302f32332d3233203d3e203633363437.roa (hash: /mpCOOhcoifOGQlBxngziKNabqELudoz9rVsMBtpZeo=)
                          19: 3130332e3131312e3137322e302f32322d3232203d3e203633363437.roa (hash: TiV4V34LVrnU6qvMBQ8FzoHgw6xT4uFtKDm2u9CALqs=)
                          20: 34332e3235352e3230302e302f32332d3233203d3e2034383038.roa (hash: ap0XTw8WxsXmWf3NMpU4qhdo6QhwQmfZH8WhXiv/7xw=)
                          21: 34332e3234312e37362e302f32322d3232203d3e203633363437.roa (hash: gAMD+4cbodhA3dlU+8WAt19oUpti6aCVJXNXAq9wt6w=)
                          22: 323430303a613836303a313a3a2f34382d3438203d3e203633363437.roa (hash: COonzZG053Dm9ecVP49O7dSolVnbJXpi66s7GpvINRs=)
                          23: 3230332e3137342e3131322e302f32312d3231203d3e2034383437.roa (hash: st2/amX1wgVuhQO5TDf7aPH9NHEogiqwCQ79Wtvcf3E=)
                          24: 3232332e3232332e3138382e302f32322d3232203d3e203435303634.roa (hash: 3nmsiWW6cMLRKFttoF2caXmPqFJNaw3t8aM1xUneqAQ=)
                          25: 323430303a613836303a323a3a2f34382d3438203d3e203633363437.roa (hash: aEuTpvFsawhGYR75gpUyKUOhQ5r8nTqDdhAWiEV7TnE=)
                          26: 3130332e3234302e3234342e302f32322d3232203d3e203633363437.roa (hash: BZUtNrmGxyr+YCQF59SwBbfECbTmh81zwDxpWY2yKmo=)
                          27: 3232332e3232332e3138342e302f32312d3231203d3e2034383437.roa (hash: 4luDx/9zAC3YCiEkDohFLYU6qHIXb5VqeFWS79iS+vI=)
                          28: 3131362e3231342e36342e302f32302d3230203d3e203633363437.roa (hash: JvClkUewsT0aXuhX97pCueIzGDKcCMNARyrxk9iYnd0=)
                          29: 34332e3235342e3137322e302f32322d3232203d3e2034383038.roa (hash: ecz6eKDp5LMTZNwi/FceAVWwOE4xurxpGjZMjrIChLU=)
                          30: 34332e3235342e3137322e302f32322d3232203d3e203633363437.roa (hash: lG2Te3jOLEmHhI2Ph1e/5/mpWpMgUvzlShbnLBwcpu4=)
                          31: 34332e3234322e38342e302f32322d3232203d3e203633363437.roa (hash: IxoHWD6DCsgGGORftBrjvAvmmZX4k4STRA22FWqJpf8=)
                          32: 34332e3234302e3133362e302f32322d3232203d3e203633363437.roa (hash: u37GFxxjl2r+U4ii3ffL1u8/kZ75WsMQ+IHQVLWZ21g=)
                          33: 323430303a613836303a353a3a2f34382d3438203d3e203633363437.roa (hash: Q+fiz0TmEY8gqI4YA1MbFzcQNWD+mWHIWKuDwngSLkQ=)
                          34: 3130332e3233392e3139322e302f32322d3232203d3e203633363437.roa (hash: 2Tx+wGnKtJjrb5XdkXXoAiLeZpa4vCKZ9QkGtOmMhQw=)
                          35: 3130332e32352e32302e302f32322d3232203d3e203633363437.roa (hash: 7uY7CySOB9nghpRW6X7iz2EmNK83F0K6e4scBCMGaL4=)
                          36: C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl (hash: ht3uQ5UVBU5vetZpWAC18xBCSpM9rQYTdNPOAHxHZ/8=)
                          37: 34332e3235352e3230322e302f32332d3233203d3e2034383038.roa (hash: Kwa250eYEWkMDfeOUHE6s3QVFgrrZmnI4VqHa4mOfpo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 11:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c0:aa:5b:96:e5:e3:ad:c9:6d:e6:56:0f:f2:30:5c:b4:53:0f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
        Validity
            Not Before: Apr 27 11:13:47 2026 GMT
            Not After : Apr 28 12:32:47 2026 GMT
        Subject: CN=29B4912BF0E44D78792113F0A650539F211A259A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2f:90:91:2e:f3:74:13:ef:9f:26:e7:e1:81:
                    95:ea:c7:00:19:9c:28:59:59:74:59:4c:e6:98:be:
                    45:da:0e:7c:6e:f1:55:fb:16:91:72:80:1c:85:5b:
                    b4:d2:b6:b5:6a:4e:c0:41:9c:ee:71:0e:aa:8c:9a:
                    74:40:6d:7f:67:3e:c6:4e:04:76:80:83:a6:9c:91:
                    b6:c9:44:30:5b:f7:52:7d:34:6e:63:39:a5:62:a2:
                    3f:ce:55:be:51:e8:19:76:19:08:82:cf:40:d6:a3:
                    0b:cc:a3:ca:4d:9e:37:26:f4:a8:b2:f1:be:f8:ef:
                    85:16:da:f0:a1:a6:03:e2:cd:83:23:c8:4e:78:dd:
                    7b:fa:0d:77:c2:aa:b4:79:dc:87:5d:d2:e5:6d:58:
                    41:92:3f:1b:77:9b:d8:07:56:03:3f:2d:95:a4:25:
                    32:de:c3:92:95:12:bf:36:9f:62:eb:94:0a:b0:a8:
                    1b:69:ce:89:fb:6c:35:41:4d:8a:f1:e5:b9:cb:61:
                    cd:29:96:52:7f:e5:7e:bc:15:11:c2:e3:31:93:b8:
                    44:f6:04:20:9a:48:7e:43:a7:53:99:7f:23:7e:c5:
                    49:ca:5c:48:00:ea:c2:39:2d:8e:41:9b:bc:2a:8c:
                    8c:4f:35:b1:01:25:08:26:18:94:2c:b0:96:f3:fe:
                    84:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B4:91:2B:F0:E4:4D:78:79:21:13:F0:A6:50:53:9F:21:1A:25:9A
            X509v3 Authority Key Identifier:
                keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:17:e8:0b:82:e1:49:59:9f:9b:70:28:7e:65:c9:9a:9d:e6:
         c3:96:f7:4b:47:90:84:3c:79:bb:c6:13:36:c4:52:ef:54:ef:
         77:46:5f:04:a2:21:f5:9a:a0:e7:06:ee:56:93:39:7a:7c:e5:
         72:40:ee:c8:9f:4f:ad:95:21:0e:dc:a8:1e:0c:d9:1e:f0:5e:
         75:eb:bc:a3:97:81:6a:d4:fd:ed:e5:60:b2:c3:41:00:ce:93:
         aa:e2:0e:0f:a7:e9:c4:91:75:bc:2f:41:15:b2:4b:14:70:7c:
         6b:e9:f0:72:cb:b9:f4:ea:56:07:19:b6:63:78:1d:36:d4:15:
         53:ca:3d:10:30:b7:d1:c0:5e:8a:91:a9:41:1f:f2:aa:3c:38:
         b3:0e:63:a9:cc:6c:1d:b3:5d:1f:75:03:e0:14:5a:c4:cc:ad:
         03:6e:15:19:bf:b1:a1:78:df:13:63:0b:40:38:fe:b7:c0:dd:
         62:88:f0:f3:94:4d:80:82:34:a4:d9:a7:c5:df:64:74:02:1a:
         1f:2f:37:80:c7:89:7a:27:c6:a4:90:3f:f3:02:8e:12:50:f3:
         63:d4:86:8f:dc:f4:e9:2d:14:e3:14:9d:12:15:c7:d1:d8:5b:
         e9:22:56:18:39:28:68:12:8f:ad:55:3d:9c:dd:aa:0e:13:e8:
         36:1d:bc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:09:25 2026 by rpki-client