Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft
File:                     7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft (raw, json)
Hash identifier:          8rfPWYqFuARjE1mURGNKKgYUifO/zTcjsT1Rj7dKlWA=
Subject key identifier:   62:6F:BC:D3:B8:8B:9C:8B:7A:1F:D6:AB:56:BC:60:AA:1D:19:5B:62
Authority key identifier: 7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF
Certificate issuer:       /CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF
Certificate serial:       73F8BE87E7601F18F245D6FE58F00FF7B015A460
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft
Manifest number:          E4
Signing time:             Thu 03 Sep 2026 23:49:21 +0000
Manifest this update:     Thu 03 Sep 2026 23:44:21 +0000
Manifest next update:     Mon 07 Sep 2026 02:21:21 +0000
Files and hashes:         1: 3136372e3138392e302e302f31362d3234203d3e2030.roa (hash: MXf+SARmeNUqmxYlPN54Ktu2L7cV6EQdIwRkz23xCxM=)
                          2: 3136372e3138392e302e302f31362d3332203d3e203536303438.roa (hash: MrzEn6klYHxiYP4rtuuhkZhxDGTxHKj05TDsKOfntVs=)
                          3: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl (hash: 4FZf/yV0A5hrb3nzm8puaT6B4PPp7BedS1sZ2gYiPkM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 10:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f8:be:87:e7:60:1f:18:f2:45:d6:fe:58:f0:0f:f7:b0:15:a4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF
        Validity
            Not Before: Sep  3 23:44:21 2026 GMT
            Not After : Sep  7 02:21:21 2026 GMT
        Subject: CN=626FBCD3B88B9C8B7A1FD6AB56BC60AA1D195B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:09:3e:e8:d0:0c:21:9b:e1:70:f6:aa:8a:
                    49:28:dd:8a:d9:8b:3f:8e:38:7e:4a:37:6d:0c:f5:
                    e0:0a:4e:24:0b:e1:30:eb:ff:c9:8a:d8:97:af:a9:
                    d3:af:a7:73:d1:ac:b7:63:b7:3c:f1:c4:69:3d:0f:
                    84:2b:fd:71:d3:7a:28:db:39:c8:ba:39:cd:e0:a7:
                    61:b3:fc:ac:2f:16:36:d4:29:c8:3a:cd:a2:fa:04:
                    a7:d0:a3:24:f1:3b:38:cc:37:e3:62:d9:07:3c:08:
                    b2:00:24:1a:a8:26:d8:da:18:cd:d9:d6:50:25:0a:
                    15:f9:e3:a9:25:56:de:76:c3:1c:6f:e7:4d:54:e9:
                    fe:e1:2c:60:53:3a:81:97:f8:d6:bb:84:e6:9a:56:
                    ad:3a:0c:94:d1:99:3e:7a:41:63:85:0e:8e:77:6f:
                    1a:93:7f:aa:a1:b4:8a:47:e3:01:cd:17:54:20:80:
                    fc:3f:bd:27:2a:a3:df:ba:ea:b4:31:6a:cb:e9:be:
                    8e:eb:41:42:7e:c4:37:82:f2:10:81:c9:50:1f:31:
                    1b:cf:85:62:39:df:e0:ed:ca:a1:3b:08:48:1b:0c:
                    0f:4f:ce:79:9f:88:26:37:45:e5:8d:a7:1d:db:f1:
                    64:fb:ca:7d:f8:36:bf:ff:7d:c9:9c:28:9e:27:29:
                    70:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6F:BC:D3:B8:8B:9C:8B:7A:1F:D6:AB:56:BC:60:AA:1D:19:5B:62
            X509v3 Authority Key Identifier:
                keyid:7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:69:16:5e:87:35:df:3d:28:f3:04:19:bb:24:14:a4:92:83:
         53:1c:28:82:58:1f:71:7e:84:42:7d:07:06:e7:e8:ec:1f:9a:
         15:1e:a2:b9:85:c9:2b:7a:4d:da:34:ef:cc:09:95:21:19:53:
         f8:07:a8:b4:66:24:7b:5c:f9:2d:7a:6e:9e:b5:e3:8a:cf:f3:
         c0:67:e1:a3:a1:16:3b:37:cb:77:e8:ab:e2:5f:3b:bc:3f:2e:
         0c:67:7f:33:5e:ce:04:e3:1c:28:cc:9b:29:ac:cc:b9:b2:fd:
         31:10:6b:6e:32:ee:ba:5b:94:32:b5:c3:5a:70:ab:5a:ce:1d:
         db:13:11:66:64:88:f7:e4:bc:ba:03:fd:46:ed:79:0e:f7:bc:
         9b:a0:9c:cf:65:52:f4:20:bb:48:4b:fa:3f:79:97:27:9b:01:
         83:52:b0:f9:9b:1b:73:1d:a2:d1:e1:be:49:83:48:ed:b9:f7:
         0d:f6:3c:c8:b4:dc:6d:f6:3b:35:5c:5a:02:89:c6:58:4e:85:
         ff:de:25:36:30:03:7c:f0:e0:3a:a0:9c:3d:03:4a:a5:b0:14:
         7e:8e:6a:fd:fb:ef:95:ed:6f:9a:e7:fc:1c:99:50:53:8d:e7:
         2c:fa:bd:b1:7a:01:3d:e0:52:13:dc:aa:44:28:51:93:44:d9:
         1a:73:33:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:47:24 2026 by rpki-client