Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft
File:                     0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft (raw, json)
Hash identifier:          aIA5xIjGJUC9mEsbEZuYjesIxsNAAktO/bmUJsfQOug=
Subject key identifier:   EC:FA:22:28:5B:75:2F:2E:84:0A:68:FF:2F:01:6D:2B:FE:31:33:D4
Authority key identifier: 0B:4E:B7:88:77:28:9F:D7:2E:96:BA:EC:F1:BB:DF:F6:C6:D7:A1:64
Certificate issuer:       /CN=0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164
Certificate serial:       5E7808FC78D3335C5344456D31F028A0065F0102
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft
Manifest number:          2B
Signing time:             Fri 22 May 2026 13:07:03 +0000
Manifest this update:     Fri 22 May 2026 13:02:03 +0000
Manifest next update:     Sat 23 May 2026 15:17:03 +0000
Files and hashes:         1: 0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl (hash: VpUkj9gQ6LsijIdi0xkRpwGGjdaHf7l3dUsFOYwXwTc=)
                          2: 3130332e3139382e32302e302f32322d3232203d3e2030.roa (hash: e6hTGBhyacWvz5ZBxIlb+wH+74wFHyksuzPVaP5ExnQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 15:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:78:08:fc:78:d3:33:5c:53:44:45:6d:31:f0:28:a0:06:5f:01:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164
        Validity
            Not Before: May 22 13:02:03 2026 GMT
            Not After : May 23 15:17:03 2026 GMT
        Subject: CN=ECFA22285B752F2E840A68FF2F016D2BFE3133D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:35:68:6f:39:6e:e2:77:19:33:c0:66:53:
                    87:27:84:5c:30:e6:b8:f0:b8:c1:60:b4:7a:9a:c9:
                    33:93:8c:16:8d:97:fc:b3:3b:16:b4:f1:74:f9:13:
                    5a:39:20:b8:08:4a:26:ae:26:32:ab:05:e4:14:cd:
                    c4:36:ae:38:29:5c:ce:66:6d:95:59:63:0e:a5:63:
                    39:a6:15:2a:04:65:f4:31:94:47:04:8b:ef:dc:f7:
                    66:23:de:02:24:17:c1:2b:30:b5:29:f5:fc:23:cc:
                    71:56:f1:a1:39:0a:0d:d1:64:f8:c1:9a:28:34:0a:
                    97:35:2c:61:a2:18:44:a8:71:8b:79:49:28:34:84:
                    20:16:d4:56:6c:a3:43:1e:69:9e:57:ac:b5:d3:f0:
                    45:dc:26:2f:56:27:fe:38:d2:3c:b7:f2:ff:81:3a:
                    6b:67:e8:cc:b2:39:dd:82:ea:a3:d5:d7:3d:3c:b5:
                    48:7d:10:1c:be:5a:ff:f3:24:f9:00:b5:e4:a8:80:
                    7c:30:93:94:f0:8e:b3:7d:ef:9b:a2:23:0d:1d:d1:
                    4f:60:c9:5f:49:9e:34:29:bf:c7:fa:7e:f9:88:10:
                    e9:61:cb:59:65:8c:ed:cc:ae:32:19:11:59:a5:79:
                    97:d3:05:81:83:84:2f:72:a8:ff:ea:f5:ea:40:07:
                    5c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FA:22:28:5B:75:2F:2E:84:0A:68:FF:2F:01:6D:2B:FE:31:33:D4
            X509v3 Authority Key Identifier:
                keyid:0B:4E:B7:88:77:28:9F:D7:2E:96:BA:EC:F1:BB:DF:F6:C6:D7:A1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099256941907017730/0/0B4EB78877289FD72E96BAECF1BBDFF6C6D7A164.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:9a:0f:00:12:79:15:5a:07:cf:fc:a0:2f:09:1f:d2:2a:26:
         43:d2:11:28:d7:02:d0:9b:1d:08:21:d0:87:b1:a5:d2:20:63:
         31:01:f3:9a:15:e9:c5:e5:bd:bf:7b:3e:cb:ee:15:f9:f2:e8:
         e5:4c:6a:76:12:4e:b7:ba:f5:cd:60:58:63:69:2b:1f:72:e7:
         79:29:b6:3c:4f:b7:46:b4:23:16:09:89:e0:d7:59:97:d0:32:
         1b:78:5d:d4:eb:bd:96:e1:fd:61:40:cd:ae:b9:67:49:5c:2e:
         b1:72:a4:10:90:cf:8c:9d:93:ff:aa:6f:36:72:21:33:dd:e0:
         41:2a:97:61:a4:e9:1e:31:b9:6a:21:fb:f5:d2:3f:1c:75:89:
         ef:dc:06:e2:4b:9a:52:98:53:6f:3a:9c:89:cb:fb:79:2e:09:
         95:54:a8:23:85:9b:05:53:dc:1c:03:ae:96:97:2f:69:0c:56:
         d1:d4:cd:f6:be:06:21:a4:d6:59:55:af:67:ea:0c:d0:15:09:
         48:ad:f7:96:49:dc:9a:bd:8a:05:e3:47:88:3b:0a:fb:ed:a8:
         bf:12:f6:3a:96:c9:62:bd:79:12:a5:19:c2:a5:7a:5c:64:4a:
         3d:08:a4:bb:50:98:d6:7c:6d:1d:e0:81:76:20:78:83:62:0a:
         4b:35:a5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:44:06 2026 by rpki-client