Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft
File:                     4EC27FCC44D433FABCCB17301446A57C3578CD57.mft (raw, json)
Hash identifier:          pkYMQAzHtTLBnxfFntgy1xY06Lov5+81XRRKRPt7zbo=
Subject key identifier:   AB:6D:91:4A:24:89:2B:17:16:BA:1C:02:37:FB:76:4D:75:AF:7B:56
Authority key identifier: 4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57
Certificate issuer:       /CN=4EC27FCC44D433FABCCB17301446A57C3578CD57
Certificate serial:       3D41B8F2C5B2FA6C89B1446CDCE754F52BFCD7B9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft
Manifest number:          74
Signing time:             Tue 14 Jul 2026 06:30:36 +0000
Manifest this update:     Tue 14 Jul 2026 06:25:36 +0000
Manifest next update:     Wed 15 Jul 2026 10:07:36 +0000
Files and hashes:         1: 3130332e3232392e3137322e302f32322d3232203d3e203539303834.roa (hash: AUxiN3xrkojOpJEDBqwUUG7fz2qhvusWn+TwwyA5v5Y=)
                          2: 4EC27FCC44D433FABCCB17301446A57C3578CD57.crl (hash: i+4WUHk7bTnExgrBYrNjEsLpob1Muo1IaI5NnCEn8Tw=)
                          3: 323430303a653638303a3a2f33322d3332203d3e203539303834.roa (hash: hCjCss8Qrog8PzpIaKD0V1/B/1nEVtaXZSPDBcpebOw=)
                          4: 34332e3234372e38342e302f32322d3232203d3e203539303834.roa (hash: UTsMLFBIg5eNtUqx8ENV+v7m0qdLL86FBpiVlkFAHww=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 10:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:41:b8:f2:c5:b2:fa:6c:89:b1:44:6c:dc:e7:54:f5:2b:fc:d7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EC27FCC44D433FABCCB17301446A57C3578CD57
        Validity
            Not Before: Jul 14 06:25:36 2026 GMT
            Not After : Jul 15 10:07:36 2026 GMT
        Subject: CN=AB6D914A24892B1716BA1C0237FB764D75AF7B56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f8:ef:bc:76:8a:32:b0:d0:77:ec:00:9b:67:
                    23:14:d9:56:dc:24:ae:ef:f9:f0:dc:e8:cf:43:47:
                    4b:2f:85:10:d9:71:e4:1b:68:fc:f8:69:9f:1d:3e:
                    ec:b9:9b:1b:b7:6c:94:5a:86:0e:d1:f7:d1:56:96:
                    9a:50:48:40:8e:c7:a9:26:7c:9e:84:51:8a:8d:87:
                    f1:7e:f1:5a:24:32:dd:90:a1:25:26:78:f3:dc:28:
                    92:22:c0:04:64:c9:f5:77:af:f2:48:ce:ca:96:21:
                    80:46:4e:c2:c6:cd:1d:55:50:b7:c5:22:a9:cb:34:
                    f0:24:9b:14:a6:8e:ac:59:d7:13:d7:05:0e:2d:f0:
                    5d:ea:dd:55:1d:fa:a2:f5:ec:64:6e:f8:a7:21:3e:
                    dc:26:ba:cb:e0:52:c7:9b:64:46:1a:96:a1:d7:96:
                    8c:ea:29:61:06:d6:cf:f8:fc:14:ff:4c:2d:2d:de:
                    cc:16:8a:aa:3e:56:b2:4a:f0:ac:ea:72:09:16:b0:
                    8c:65:19:87:d0:54:9c:23:87:81:21:4b:60:be:f2:
                    9b:e8:3b:43:df:2e:34:8e:1a:00:ca:55:3a:85:01:
                    31:9d:5d:55:c6:eb:5b:60:da:da:19:0e:cc:56:fb:
                    3b:76:6d:57:00:53:a8:ce:1e:ef:4a:75:e5:be:e6:
                    03:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6D:91:4A:24:89:2B:17:16:BA:1C:02:37:FB:76:4D:75:AF:7B:56
            X509v3 Authority Key Identifier:
                keyid:4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e0:b8:e6:c4:d3:39:c4:c6:13:34:0f:23:c2:c4:8d:97:cd:
         d6:97:7c:cb:09:95:05:0b:82:88:0d:dd:3b:06:a0:6b:19:2e:
         2c:1d:c1:cf:ca:95:12:de:f2:34:2f:15:aa:36:ac:8b:a4:73:
         00:7d:67:a7:18:da:8c:ca:3c:cd:98:a7:05:4d:23:6c:8d:b5:
         01:f6:07:21:df:55:3d:4d:21:0c:04:c2:db:c7:76:dd:db:02:
         11:94:27:fb:e9:7b:83:13:b6:54:81:ae:4d:fa:ac:59:a8:3d:
         8d:12:21:01:20:f7:30:a3:dc:eb:1d:af:5c:3d:1f:47:d9:dc:
         6d:ed:e8:fe:2c:7a:78:f8:f2:b6:09:93:a4:5f:8b:7c:85:fd:
         c3:28:cc:ae:2d:cf:60:63:9a:c3:32:82:97:1f:0b:57:8d:00:
         51:f4:2f:d4:77:b9:57:ad:8a:c1:89:99:97:4d:f8:8a:b3:02:
         42:ac:2a:a0:3c:42:80:29:e6:5e:d6:3b:f7:dd:36:53:bb:99:
         93:04:b4:b0:27:38:ce:ce:e3:28:1f:26:3f:bd:1c:2e:1e:43:
         72:ec:e6:1f:d1:93:97:4e:d8:92:ba:0a:e8:19:e6:d7:c7:3b:
         3e:0f:ec:09:7b:6e:06:a7:81:0e:f8:8d:e7:34:06:3d:d1:43:
         76:cd:d5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:04:34 2026 by rpki-client