Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft
File:                     44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft (raw, json)
Hash identifier:          53QAxiyS8Aq436yE87pgsERUbnlk1dlc88BsXrEZo7E=
Subject key identifier:   16:E7:E1:F1:59:A0:41:FA:40:B9:4B:25:3E:79:12:A0:B4:04:13:25
Authority key identifier: 44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98
Certificate issuer:       /CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098
Certificate serial:       1F34CE16ACF88DCCFD6504A9095017F2EB1C9A42
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft
Manifest number:          4B
Signing time:             Thu 11 Jun 2026 21:39:25 +0000
Manifest this update:     Thu 11 Jun 2026 21:34:25 +0000
Manifest next update:     Sat 13 Jun 2026 00:22:25 +0000
Files and hashes:         1: 3232332e32372e3138342e302f32322d3234203d3e203137363232.roa (hash: EZct4Zms1fr5Cv5AHLRYsjjpW0LFyhDM8Nq7/BMcOeA=)
                          2: 44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl (hash: FQB5xO170UMxYHQAeiVSjpc6U+9LPyVWYXGbgWDcYuM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 00:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:34:ce:16:ac:f8:8d:cc:fd:65:04:a9:09:50:17:f2:eb:1c:9a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098
        Validity
            Not Before: Jun 11 21:34:25 2026 GMT
            Not After : Jun 13 00:22:25 2026 GMT
        Subject: CN=16E7E1F159A041FA40B94B253E7912A0B4041325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:ad:17:38:3f:15:d5:5f:cc:98:5a:83:89:
                    88:3a:40:53:45:4c:89:44:3e:5c:bf:a8:a2:75:2d:
                    cc:e5:b5:0c:dc:40:be:21:f0:df:47:83:a8:0f:ec:
                    1f:bb:d0:c7:1c:61:70:d1:cb:e5:d1:02:e9:47:57:
                    ee:78:ce:95:97:9d:4e:36:cb:46:4a:1d:8a:41:89:
                    c2:8d:34:d6:5f:ec:e4:71:2d:63:88:f3:30:a1:0f:
                    3a:f9:40:5c:14:0a:49:15:04:e7:12:1a:61:a7:22:
                    6c:71:6d:c4:a9:13:1c:80:6b:f9:9e:4d:0f:b9:bc:
                    3e:cc:c1:54:74:7f:26:3f:50:4f:ac:41:69:83:81:
                    a3:ca:93:0c:3f:ca:de:a6:26:a7:63:2d:0f:ab:b1:
                    4c:f8:cc:55:86:6d:f1:fe:1d:a6:12:76:f6:54:7a:
                    1e:bc:19:ce:48:04:19:0d:02:78:3f:b6:ad:79:af:
                    cc:ff:c9:85:9d:0d:d9:49:d5:1b:01:2a:e9:af:17:
                    55:00:ea:e4:a3:28:37:05:6a:4a:29:c2:2a:c7:d3:
                    ae:14:b7:64:b1:8e:63:2d:1f:58:c8:ef:75:c8:0f:
                    8f:14:6a:6d:9d:a8:57:46:45:58:a9:7d:a0:0b:1b:
                    f7:78:f8:97:4f:1e:21:a4:97:28:8f:cf:31:db:63:
                    1f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E7:E1:F1:59:A0:41:FA:40:B9:4B:25:3E:79:12:A0:B4:04:13:25
            X509v3 Authority Key Identifier:
                keyid:44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e3:14:c0:f7:26:fa:9e:23:36:25:26:9c:e5:ab:b8:76:6b:
         a9:a9:0b:c8:89:0d:66:f3:67:ce:77:47:bd:e0:4c:b7:cd:3c:
         65:eb:7e:f3:1d:bd:f3:f0:19:35:90:2d:a1:9f:76:11:59:e9:
         3e:ce:c8:1d:31:d2:05:e9:f1:10:95:6b:12:e4:b4:b6:43:97:
         e5:87:2d:de:a5:70:0b:d6:b0:5c:e3:69:e0:24:ed:c2:37:03:
         50:db:49:cc:7b:91:7f:30:f2:70:4f:c5:c4:6f:01:73:51:e2:
         c3:9e:71:0f:fa:63:af:45:18:02:9b:0e:21:1f:13:bd:86:c2:
         e5:3f:cf:03:65:b1:86:3a:6a:7b:2d:21:95:31:41:9f:ab:a8:
         5e:c7:88:89:29:27:ef:87:b3:41:f2:b9:12:42:12:79:f6:90:
         4c:56:5f:42:ab:79:b1:07:97:17:91:22:31:28:6a:df:a5:29:
         7a:fe:f8:fb:f1:1f:23:af:98:0f:eb:e3:c0:45:1e:97:47:db:
         14:4d:ec:e7:ef:9b:06:a1:13:2f:63:a3:f4:9e:02:53:79:20:
         87:f0:9b:27:41:c7:fd:ad:5c:0b:1c:28:be:27:ac:14:0b:be:
         d5:a5:03:cb:8a:dc:f0:b9:2f:da:4b:73:93:4a:31:f7:1d:0d:
         0b:23:cd:30
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUHzTOFqz4jcz9ZQSpCVAX8uscmkIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQwOTQ5NDhDNkUzRDMyQTFBNTlCRTY3OTVDRDhBMkEz
QTUyODA5ODAeFw0yNjA2MTEyMTM0MjVaFw0yNjA2MTMwMDIyMjVaMDMxMTAvBgNV
BAMTKDE2RTdFMUYxNTlBMDQxRkE0MEI5NEIyNTNFNzkxMkEwQjQwNDEzMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3nK0XOD8V1V/MmFqDiYg6QFNF
TIlEPly/qKJ1LczltQzcQL4h8N9Hg6gP7B+70MccYXDRy+XRAulHV+54zpWXnU42
y0ZKHYpBicKNNNZf7ORxLWOI8zChDzr5QFwUCkkVBOcSGmGnImxxbcSpExyAa/me
TQ+5vD7MwVR0fyY/UE+sQWmDgaPKkww/yt6mJqdjLQ+rsUz4zFWGbfH+HaYSdvZU
eh68Gc5IBBkNAng/tq15r8z/yYWdDdlJ1RsBKumvF1UA6uSjKDcFakopwirH064U
t2SxjmMtH1jI73XID48Uam2dqFdGRVipfaALG/d4+JdPHiGklyiPzzHbYx8FAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUFufh8VmgQfpAuUslPnkSoLQEEyUwHwYDVR0j
BBgwFoAURAlJSMbj0yoaWb5nlc2KKjpSgJgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTg5MjA3NTE3Mzc3MzMxNS8wLzQ0MDk0OTQ4QzZFM0QzMkExQTU5QkU2Nzk1Q0Q4
QTJBM0E1MjgwOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDQwOTQ5NDhDNkUzRDMyQTFBNTlCRTY3OTVDRDhBMkEzQTUyODA5OC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTk4OTIwNzUxNzM3NzMzMTUvMC80NDA5NDk0OEM2RTNE
MzJBMUE1OUJFNjc5NUNEOEEyQTNBNTI4MDk4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuMUwPcm+p4j
NiUmnOWruHZrqakLyIkNZvNnzndHveBMt808Zet+8x298/AZNZAtoZ92EVnpPs7I
HTHSBenxEJVrEuS0tkOX5Yct3qVwC9awXONp4CTtwjcDUNtJzHuRfzDycE/FxG8B
c1Hiw55xD/pjr0UYApsOIR8TvYbC5T/PA2Wxhjpqey0hlTFBn6uoXseIiSkn74ez
QfK5EkISefaQTFZfQqt5sQeXF5EiMShq36Upev74+/EfI6+YD+vjwEUel0fbFE3s
5++bBqETL2Oj9J4CU3kgh/CbJ0HH/a1cCxwoviesFAu+1aUDy4rc8Lkv2ktzk0ox
9x0NCyPNMA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:40:38 2026 by rpki-client