Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.mft
File:                     4484F3893797207C9981D7E181BC150543E7839F.mft (raw, json)
Hash identifier:          OQVYhcnkIkATNzbUpRxH5oOVZe7TxnUB2xnfiTurYMQ=
Subject key identifier:   0B:2B:3E:8A:4B:A6:11:19:4D:98:56:7B:A3:EB:F7:0A:4A:50:76:B5
Authority key identifier: 44:84:F3:89:37:97:20:7C:99:81:D7:E1:81:BC:15:05:43:E7:83:9F
Certificate issuer:       /CN=4484F3893797207C9981D7E181BC150543E7839F
Certificate serial:       46B1578AAD15E0DFBAD3C477DD581F78C0B939DA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4484F3893797207C9981D7E181BC150543E7839F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.mft
Manifest number:          34
Signing time:             Fri 29 May 2026 09:22:46 +0000
Manifest this update:     Fri 29 May 2026 09:17:46 +0000
Manifest next update:     Sat 30 May 2026 09:36:46 +0000
Files and hashes:         1: 4484F3893797207C9981D7E181BC150543E7839F.crl (hash: ktjD62zMxJPH2VB+0j65TR0XftvDeJd4Ea4587VBLy8=)
                          2: 36302e3230302e302e302f31362d3234203d3e203234343135.roa (hash: uS10l6UUbs4SLFXK3xXOjj3+hPOUh9ZMUoFB5ixu0C0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4484F3893797207C9981D7E181BC150543E7839F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b1:57:8a:ad:15:e0:df:ba:d3:c4:77:dd:58:1f:78:c0:b9:39:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4484F3893797207C9981D7E181BC150543E7839F
        Validity
            Not Before: May 29 09:17:46 2026 GMT
            Not After : May 30 09:36:46 2026 GMT
        Subject: CN=0B2B3E8A4BA611194D98567BA3EBF70A4A5076B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:29:cf:9d:53:1e:60:f4:ae:4a:c0:c1:79:
                    f0:1a:1b:fc:7d:b8:7f:25:aa:19:cf:10:a9:fc:a9:
                    27:86:3c:0b:b7:a4:ed:73:4a:b2:70:c4:48:80:f6:
                    df:b8:c8:74:73:02:07:a5:c5:0c:65:dd:90:26:b3:
                    a4:41:f3:84:44:50:d5:be:27:93:85:9b:0a:6c:40:
                    97:76:b1:1a:1f:f4:d9:34:c0:44:14:e0:de:36:f1:
                    9c:e0:93:df:a2:ae:c3:17:39:ea:4b:97:bc:fd:83:
                    b6:4d:fc:cd:89:de:db:c4:70:99:66:0c:6a:8f:3c:
                    aa:f8:69:ac:52:a6:e9:90:56:bd:49:df:e0:e1:f8:
                    90:a6:c2:e1:8e:db:fa:7d:b6:74:4e:67:5e:80:c9:
                    8a:33:5e:58:7b:57:28:44:d0:80:06:0f:b1:76:a4:
                    fd:3c:db:2d:be:5f:55:93:1e:93:1c:db:16:a5:27:
                    08:7e:4f:33:61:7e:62:27:5d:1b:a7:a1:20:f5:bd:
                    5b:dc:6c:75:9c:12:b3:09:55:2f:17:6d:6d:89:b2:
                    10:07:10:6c:44:78:45:fa:3e:62:b2:fc:7f:07:44:
                    2f:a4:40:03:64:80:3a:09:f5:a9:21:4f:89:5a:a3:
                    5d:24:6d:ea:40:5b:c2:0b:45:77:39:02:c6:e3:cb:
                    af:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2B:3E:8A:4B:A6:11:19:4D:98:56:7B:A3:EB:F7:0A:4A:50:76:B5
            X509v3 Authority Key Identifier:
                keyid:44:84:F3:89:37:97:20:7C:99:81:D7:E1:81:BC:15:05:43:E7:83:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4484F3893797207C9981D7E181BC150543E7839F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:92:1c:08:d3:95:be:aa:6c:db:31:a4:67:72:f4:86:89:fe:
         b5:5a:52:90:6f:93:24:fe:81:15:08:a8:56:bf:1b:c0:d8:f5:
         b7:24:11:a1:57:b7:c1:8b:02:6a:fe:6a:25:99:05:84:08:4e:
         d6:6d:9a:5b:11:d9:2f:3e:74:ab:3f:27:ba:e2:dc:db:ef:88:
         bd:4f:fa:f1:cf:ca:79:65:c1:1b:f4:22:f2:d4:b8:e7:7a:ef:
         c7:2c:0d:f0:77:85:d7:3c:ac:60:b9:4f:90:bf:42:96:47:cd:
         52:23:c2:45:c8:99:b1:41:61:0e:05:88:0b:a1:78:90:4e:4a:
         87:2f:af:fb:12:71:b8:3a:30:d1:d5:f5:96:b1:e6:04:bb:1d:
         fb:23:38:01:de:40:17:b4:c9:bf:53:15:f0:e5:1a:1f:a5:1b:
         18:53:9c:15:08:c9:ca:f6:f5:ec:27:cd:25:d2:4b:44:98:f0:
         af:75:f5:9c:e2:f4:8d:e1:05:8d:80:7b:7d:b2:55:2b:59:d7:
         12:93:53:70:5f:44:07:af:7f:70:f5:65:6f:00:d6:96:ae:42:
         dd:28:b2:b6:f3:59:d0:6f:e8:a5:5d:76:08:15:dc:ea:e2:0d:
         a6:86:5f:5a:4c:89:e4:44:a4:96:85:34:0a:30:8a:e3:fb:2f:
         89:34:db:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:03:29 2026 by rpki-client