Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
File:                     4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft (raw, json)
Hash identifier:          SdQieYv8Llf1w0LiE3ieMRK1na5cYlTCJGKc58QExKY=
Subject key identifier:   CE:26:1C:EF:B3:F4:54:10:5B:3D:C7:3A:D4:4F:94:97:C1:B2:E1:AE
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Certificate issuer:       /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial:       3C8CA889EE643D93C6CC27F265F803B20656C929
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
Manifest number:          87
Signing time:             Tue 14 Jul 2026 05:55:34 +0000
Manifest this update:     Tue 14 Jul 2026 05:50:34 +0000
Manifest next update:     Wed 15 Jul 2026 05:58:34 +0000
Files and hashes:         1: 3130332e3232322e3137382e302f32342d3234203d3e203538343636.roa (hash: F41StT+x2rlWXOQVNKcm+wNnMgPZjhcz7G5e31rQ98c=)
                          2: 3130332e3231352e34342e302f32342d3234203d3e203538343636.roa (hash: aTIutstV7nnOrlPVa9rL0oVDFBjtwfzvlvl2eoyD1/8=)
                          3: 3130332e38342e31392e302f32342d3234203d3e203633353939.roa (hash: G7UdhBTuk//TBOjHKhN/OeEw0aA18CQ1k+SEI8xy8bc=)
                          4: 3130332e3231352e34352e302f32342d3234203d3e203633353939.roa (hash: 8mVkqtHAsXXoQdq7QTFwXAv0F2qADSnLhXnxk2xo7+M=)
                          5: 3130332e38342e31362e302f32342d3234203d3e203633353939.roa (hash: b4swGTnagQiiHyws9QCt7f/EiuwxqkWDoYa89SJ+Pro=)
                          6: 3130332e3232322e3138312e302f32342d3234203d3e203538343636.roa (hash: uKysvU2wPaXdqx5np2DX47AZPrvFjLAnDA6TLyNZjPM=)
                          7: 3130332e3232322e3137372e302f32342d3234203d3e203538343636.roa (hash: sH7OowcFHJCcPwvZJv25D4lUlZf+T7s/iYMS2TGzZjc=)
                          8: 3130332e3232322e3138302e302f32322d3232203d3e203538343636.roa (hash: KJ8ndn4BgQmtgW+vFewhPUiCUx0OF8yJqc/FF4/GVvA=)
                          9: 3130332e3232322e3137392e302f32342d3234203d3e203538343636.roa (hash: G/oPdJHLin19eoCFgMmdJT+rkoQwoDBkC0Q90Pre/iY=)
                          10: 3130332e3231352e34362e302f32342d3234203d3e203633353939.roa (hash: lCKeTzCngwtaI2otW+3pf3dT4E8FfBmqb7nBEm4iEO0=)
                          11: 3130332e3232322e3138322e302f32342d3234203d3e203538343636.roa (hash: HWtDjdcXqq3zhzr+mpXlFH5pOBwY2xagFmHw0HxdMcA=)
                          12: 34352e3235312e35322e302f32342d3234203d3e203633353939.roa (hash: J5ttVDSRteWIi4hwKsChc1z51WL7/hz22Kunm15KqPk=)
                          13: 3130332e38392e3131352e302f32342d3234203d3e203633353939.roa (hash: B4R2Xn+gXDVx1b+C8xHqcnF6Dc+KqwoBc8mdRqmz84g=)
                          14: 3130332e3232322e3137362e302f32342d3234203d3e203538343636.roa (hash: XB81JUcmyZM4a4Aj4m+xpC4HUoBeeoNN9kOjOp5xSlU=)
                          15: 3130332e3232322e3137362e302f32322d3232203d3e203538343636.roa (hash: UpPEAYdcHSdgSDgWM1Xgq+oFeYVQGymiRyGhcR0Lp6Y=)
                          16: 3130332e38342e31372e302f32342d3234203d3e203633353939.roa (hash: 08vQYNuWTP9OAw5cshG0cE68oQpzGq6+3rF8HhD3PJY=)
                          17: 34352e3235312e35342e302f32342d3234203d3e203633353939.roa (hash: cTOAofuVrZB6PvajehxRqJi1HOjgKdwuykVDBV6ic3Y=)
                          18: 34352e3235312e35352e302f32342d3234203d3e203633353939.roa (hash: Jeg+X5mimydK7xcUiFtmKKbOa2PTH3bkxmXeoztyTKI=)
                          19: 4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl (hash: KQFbc/4HKudzASeUPyOe5YxfVO20NgkY5Qww2VcvWJc=)
                          20: 3130332e38392e3131342e302f32342d3234203d3e203633353939.roa (hash: HWzCIK0J3kj61jM4RJKLtXp5PntrD5IoFA2l+KWrNdg=)
                          21: 34352e3235312e35332e302f32342d3234203d3e203633353939.roa (hash: gpdB2M4QzC5+FVSJ96SLxf+q0nMlU6vsNa1+V19UGpU=)
                          22: 3130332e38392e3131332e302f32342d3234203d3e203633353939.roa (hash: hQKB7wKD7sK/SrxmBN5jMLs19OSDy2v58Jdv0HOGrB4=)
                          23: 3130332e3232322e3138302e302f32342d3234203d3e203538343636.roa (hash: 0JGuJhToHH0L5OQLMRNBtLB9WwPftj52WrM4HHFq/M8=)
                          24: 3130332e3231352e34372e302f32342d3234203d3e203633353939.roa (hash: u/vlygKRp4uqaQ1eQKS9c4Kf1g9VgGjmp1fspJX/cVs=)
                          25: 3130332e3231352e34352e302f32342d3234203d3e203538343636.roa (hash: XkU0YtFgShSzOo20rJdwEEfkrJVTk7yy7dqNfbR4/fo=)
                          26: 3130332e3232322e3138332e302f32342d3234203d3e203538343636.roa (hash: trWDmxj/bNtvLXn0EQ5qDElMfvX977EfQlgVuGKjWOk=)
                          27: 3130332e38392e3131322e302f32342d3234203d3e203633353939.roa (hash: qeNecZYzzDOdHNQ7OI1FGeTPwXb6OHSlmtGAyhOcfnc=)
                          28: 3130332e38342e31382e302f32342d3234203d3e203633353939.roa (hash: 3DmQOstdoBvJ2hoZgDbRJT6QPLY4tMgVKWUBkWPRlxo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 05:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8c:a8:89:ee:64:3d:93:c6:cc:27:f2:65:f8:03:b2:06:56:c9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
        Validity
            Not Before: Jul 14 05:50:34 2026 GMT
            Not After : Jul 15 05:58:34 2026 GMT
        Subject: CN=CE261CEFB3F454105B3DC73AD44F9497C1B2E1AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:35:ca:21:d7:66:0d:e0:d3:b6:a7:ec:9f:c0:
                    33:25:f9:11:6e:82:c6:9c:9c:16:38:fd:0d:8f:23:
                    29:4e:bb:14:98:66:d1:c7:af:0b:bb:21:e1:40:c3:
                    39:70:b8:49:0f:14:b7:58:89:c3:00:70:d1:63:68:
                    5f:4a:21:92:d5:a3:ef:b6:4e:5f:61:89:08:3e:59:
                    14:14:79:83:b4:40:2b:35:5b:d9:18:0f:24:9f:56:
                    a3:d1:6b:d6:a7:c6:27:e9:89:fa:73:9f:48:6b:8c:
                    48:fe:70:3c:b5:7e:9d:e2:72:a5:23:3b:65:1f:fb:
                    65:c1:12:42:8f:98:bf:d7:a6:b9:92:d9:56:b0:83:
                    86:ce:9c:91:a4:ae:72:3c:0e:22:49:d3:be:d6:2a:
                    1a:f0:c4:d2:95:ae:28:3e:af:4c:d6:d9:23:b0:8b:
                    14:3d:1d:8f:a8:3a:b5:cf:b7:23:bc:87:06:93:80:
                    0e:5b:dd:81:4c:38:53:b8:55:c0:94:f1:5c:0f:db:
                    2a:da:60:f0:53:d3:d3:27:b4:e6:77:2b:e0:3f:ff:
                    14:d4:de:77:2b:d0:8d:b0:41:68:98:0e:55:b3:06:
                    40:96:33:a3:16:1d:78:03:e2:1d:89:c1:54:a5:2e:
                    61:04:9d:18:5c:4c:ba:c3:12:b5:c1:24:0e:be:23:
                    80:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:26:1C:EF:B3:F4:54:10:5B:3D:C7:3A:D4:4F:94:97:C1:B2:E1:AE
            X509v3 Authority Key Identifier:
                keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:dc:ac:c2:cd:31:0c:f0:62:7c:d8:69:be:0b:1d:89:d5:1e:
         40:d5:96:13:cc:1f:81:69:18:40:68:1e:4b:be:f9:f2:54:83:
         99:97:1d:4b:76:93:12:c8:8e:9c:32:67:75:2c:63:b7:eb:6e:
         e1:72:97:a8:06:8c:88:18:dd:62:bf:30:b4:03:28:ed:7e:0e:
         28:06:a8:a4:29:35:60:4a:f3:c4:42:0b:a8:50:13:fe:27:ca:
         a0:97:30:7d:ca:43:70:41:ee:61:3a:50:49:0c:f7:71:e5:62:
         66:c4:45:85:a8:11:1a:ea:a0:7a:08:0e:b7:9c:74:12:50:8b:
         86:b8:c5:c4:3b:bc:86:e1:28:bc:4c:8e:e4:b0:71:ff:b4:2c:
         a8:d3:11:39:27:5c:66:38:c8:eb:82:0c:69:6f:eb:f8:15:ec:
         39:68:72:c7:7e:6c:33:41:5c:16:db:e3:aa:5d:78:8f:fd:dd:
         29:e3:e5:ee:4f:ac:ca:bd:ee:02:e0:db:72:5a:85:31:f5:24:
         35:67:0e:61:8c:3a:9d:ca:dc:2e:ed:99:2d:6d:2d:d1:5c:64:
         d7:94:d3:5f:86:aa:71:79:cd:3c:29:4d:4e:c0:f3:e3:80:c4:
         a9:2c:cd:f9:bb:7c:f7:29:bd:ac:9b:20:0a:85:a6:b9:39:07:
         34:7b:51:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:05:39 2026 by rpki-client