Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
File:                     4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft (raw, json)
Hash identifier:          GtyPBENjI/MZ0/2YkKdcNBVhkdfbu0OFMBTPsJhdZvI=
Subject key identifier:   CE:22:D4:D5:9D:D9:A7:DB:A1:4D:06:95:D1:65:B6:98:A0:4D:75:BD
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Certificate issuer:       /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial:       5D322CADED6D1F32DD169BE30B1E66E5A2147B2A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
Manifest number:          C4
Signing time:             Fri 28 Aug 2026 06:48:22 +0000
Manifest this update:     Fri 28 Aug 2026 06:43:22 +0000
Manifest next update:     Mon 31 Aug 2026 17:20:22 +0000
Files and hashes:         1: 3130332e3232322e3138302e302f32322d3232203d3e203538343636.roa (hash: KJ8ndn4BgQmtgW+vFewhPUiCUx0OF8yJqc/FF4/GVvA=)
                          2: 3130332e3232322e3138332e302f32342d3234203d3e203538343636.roa (hash: trWDmxj/bNtvLXn0EQ5qDElMfvX977EfQlgVuGKjWOk=)
                          3: 3130332e38392e3131322e302f32342d3234203d3e203633353939.roa (hash: qeNecZYzzDOdHNQ7OI1FGeTPwXb6OHSlmtGAyhOcfnc=)
                          4: 3130332e3232322e3138312e302f32342d3234203d3e203538343636.roa (hash: uKysvU2wPaXdqx5np2DX47AZPrvFjLAnDA6TLyNZjPM=)
                          5: 3130332e3232322e3137362e302f32322d3232203d3e203538343636.roa (hash: UpPEAYdcHSdgSDgWM1Xgq+oFeYVQGymiRyGhcR0Lp6Y=)
                          6: 3130332e3232322e3138302e302f32342d3234203d3e203538343636.roa (hash: 0JGuJhToHH0L5OQLMRNBtLB9WwPftj52WrM4HHFq/M8=)
                          7: 34352e3235312e35352e302f32342d3234203d3e203633353939.roa (hash: Jeg+X5mimydK7xcUiFtmKKbOa2PTH3bkxmXeoztyTKI=)
                          8: 3130332e38392e3131342e302f32342d3234203d3e203633353939.roa (hash: HWzCIK0J3kj61jM4RJKLtXp5PntrD5IoFA2l+KWrNdg=)
                          9: 3130332e3232322e3137392e302f32342d3234203d3e203538343636.roa (hash: G/oPdJHLin19eoCFgMmdJT+rkoQwoDBkC0Q90Pre/iY=)
                          10: 34352e3235312e35322e302f32342d3234203d3e203633353939.roa (hash: J5ttVDSRteWIi4hwKsChc1z51WL7/hz22Kunm15KqPk=)
                          11: 3130332e3232322e3138322e302f32342d3234203d3e203538343636.roa (hash: HWtDjdcXqq3zhzr+mpXlFH5pOBwY2xagFmHw0HxdMcA=)
                          12: 3130332e38342e31392e302f32342d3234203d3e203633353939.roa (hash: G7UdhBTuk//TBOjHKhN/OeEw0aA18CQ1k+SEI8xy8bc=)
                          13: 3130332e38392e3131352e302f32342d3234203d3e203633353939.roa (hash: B4R2Xn+gXDVx1b+C8xHqcnF6Dc+KqwoBc8mdRqmz84g=)
                          14: 3130332e3231352e34372e302f32342d3234203d3e203633353939.roa (hash: u/vlygKRp4uqaQ1eQKS9c4Kf1g9VgGjmp1fspJX/cVs=)
                          15: 3130332e3231352e34362e302f32342d3234203d3e203633353939.roa (hash: lCKeTzCngwtaI2otW+3pf3dT4E8FfBmqb7nBEm4iEO0=)
                          16: 3130332e3232322e3137372e302f32342d3234203d3e203538343636.roa (hash: sH7OowcFHJCcPwvZJv25D4lUlZf+T7s/iYMS2TGzZjc=)
                          17: 4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl (hash: OK8Dv80hGQEgJp+cRDnY03fFDz6Za3x6dURn835Meeg=)
                          18: 3130332e38392e3131332e302f32342d3234203d3e203633353939.roa (hash: hQKB7wKD7sK/SrxmBN5jMLs19OSDy2v58Jdv0HOGrB4=)
                          19: 3130332e3232322e3137362e302f32342d3234203d3e203538343636.roa (hash: XB81JUcmyZM4a4Aj4m+xpC4HUoBeeoNN9kOjOp5xSlU=)
                          20: 34352e3235312e35342e302f32342d3234203d3e203633353939.roa (hash: cTOAofuVrZB6PvajehxRqJi1HOjgKdwuykVDBV6ic3Y=)
                          21: 3130332e38342e31372e302f32342d3234203d3e203633353939.roa (hash: 08vQYNuWTP9OAw5cshG0cE68oQpzGq6+3rF8HhD3PJY=)
                          22: 3130332e38342e31362e302f32342d3234203d3e203633353939.roa (hash: b4swGTnagQiiHyws9QCt7f/EiuwxqkWDoYa89SJ+Pro=)
                          23: 3130332e38342e31382e302f32342d3234203d3e203633353939.roa (hash: 3DmQOstdoBvJ2hoZgDbRJT6QPLY4tMgVKWUBkWPRlxo=)
                          24: 34352e3235312e35332e302f32342d3234203d3e203633353939.roa (hash: gpdB2M4QzC5+FVSJ96SLxf+q0nMlU6vsNa1+V19UGpU=)
                          25: 3130332e3231352e34352e302f32342d3234203d3e203538343636.roa (hash: XkU0YtFgShSzOo20rJdwEEfkrJVTk7yy7dqNfbR4/fo=)
                          26: 3130332e3231352e34352e302f32342d3234203d3e203633353939.roa (hash: 8mVkqtHAsXXoQdq7QTFwXAv0F2qADSnLhXnxk2xo7+M=)
                          27: 3130332e3231352e34342e302f32342d3234203d3e203538343636.roa (hash: aTIutstV7nnOrlPVa9rL0oVDFBjtwfzvlvl2eoyD1/8=)
                          28: 3130332e3232322e3137382e302f32342d3234203d3e203538343636.roa (hash: F41StT+x2rlWXOQVNKcm+wNnMgPZjhcz7G5e31rQ98c=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 15:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:32:2c:ad:ed:6d:1f:32:dd:16:9b:e3:0b:1e:66:e5:a2:14:7b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
        Validity
            Not Before: Aug 28 06:43:22 2026 GMT
            Not After : Aug 31 17:20:22 2026 GMT
        Subject: CN=CE22D4D59DD9A7DBA14D0695D165B698A04D75BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:c1:2b:9b:3e:d2:2d:57:fa:6b:ad:0c:41:
                    ca:a4:d4:07:71:6e:31:72:dd:d3:26:11:a7:70:95:
                    e5:d1:30:90:58:b1:5a:9b:b6:7c:46:0a:be:dd:91:
                    06:08:8b:cd:7d:bb:89:8d:33:14:c5:80:16:72:04:
                    93:5a:6e:33:96:39:84:2f:51:c6:09:07:f3:2b:60:
                    09:ee:bf:46:a5:18:ed:13:1f:7d:17:b9:72:b5:36:
                    01:d2:0b:61:d4:92:a2:1e:d8:1b:10:c5:45:f1:de:
                    e9:4c:bc:96:ac:c7:80:9e:57:a6:16:42:62:ab:f7:
                    27:2b:26:d5:c6:40:73:62:c3:56:88:3b:9e:f9:2d:
                    bd:a4:4f:43:6d:bc:96:19:d9:92:90:dc:7f:e7:46:
                    2b:52:94:1d:f7:d4:21:a0:7d:cc:1c:4e:87:44:93:
                    a1:f6:2a:14:16:56:ff:ac:ef:83:1a:45:51:84:1c:
                    10:1e:0b:da:ed:1e:2d:6f:5b:4d:ec:a9:fd:a5:a7:
                    92:ff:d0:30:da:4b:03:36:f4:a4:19:53:8d:92:a1:
                    58:38:ba:8e:73:73:bf:6a:ec:72:7d:21:08:0b:4a:
                    3e:95:74:fa:29:e9:c5:b0:2c:2d:84:3d:41:6c:25:
                    05:04:9a:79:8f:ba:49:4b:e2:ec:3d:36:60:0b:0d:
                    85:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:22:D4:D5:9D:D9:A7:DB:A1:4D:06:95:D1:65:B6:98:A0:4D:75:BD
            X509v3 Authority Key Identifier:
                keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:17:57:81:1a:f1:5a:ee:d3:28:68:c1:c8:fc:97:e2:10:e8:
         e5:e9:10:b4:34:48:49:a0:0a:bf:ca:21:d8:2a:4f:f3:65:df:
         5c:41:31:62:6a:20:5c:06:91:6f:6b:29:20:30:e0:53:bd:23:
         5c:7d:4d:e8:86:d0:e0:1d:57:eb:b8:ae:ed:f5:e2:0b:1a:af:
         bd:0b:da:2c:c3:f4:62:e6:74:47:aa:b6:fe:2a:bc:20:b0:3c:
         14:95:aa:9b:42:49:d5:a4:a8:92:ce:e0:a7:03:17:dc:9c:23:
         33:e4:6d:93:c6:b7:90:81:a6:08:74:c5:90:95:a7:74:1a:09:
         17:34:12:ee:35:40:dc:61:c7:78:e9:a3:0b:fa:d3:35:46:73:
         90:d5:e7:f1:fd:87:8e:c5:0f:28:4b:46:90:9c:6a:4a:b3:5a:
         ba:84:75:23:cc:ac:28:fc:55:de:20:ef:25:73:2f:b7:8d:42:
         af:d8:29:5c:d5:ad:fa:cf:fe:d0:9b:53:c1:88:7a:69:1e:ed:
         64:51:4b:f7:0f:97:93:9e:e7:37:71:d4:7b:a2:ff:c3:13:c1:
         fe:e7:2b:cb:f3:27:5b:e4:13:19:33:8f:1f:0a:30:cd:61:42:
         29:ae:fd:04:ed:43:e5:c1:b1:15:af:fb:5c:6a:3a:6e:b9:66:
         37:9d:61:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:23:27 2026 by rpki-client