Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
File:                     C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft (raw, json)
Hash identifier:          c1nKpbmxhpbXybc/ae8QdT6RSB/hhOzKLJCp7NcT3L8=
Subject key identifier:   9F:88:23:D1:04:9F:44:D8:2F:AE:95:03:40:D2:ED:12:D2:6D:69:25
Authority key identifier: C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
Certificate issuer:       /CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Certificate serial:       0B16C16776A3F403C2C09B1C0451D9B5B8F66050
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
Manifest number:          32
Signing time:             Fri 29 May 2026 06:41:56 +0000
Manifest this update:     Fri 29 May 2026 06:36:56 +0000
Manifest next update:     Sat 30 May 2026 10:40:56 +0000
Files and hashes:         1: 3130332e3131352e3132302e302f32322d3234203d3e2039343035.roa (hash: vuP5Up3w8vONpsOtZlvkNeA8y/S1/WVpjwzicQqUVw0=)
                          2: 3130332e3131352e3132302e302f32322d3234203d3e20313331343930.roa (hash: 6TWLTk1SzLDC5ntlU2svqX0OyCF2MfGcCDNNmNPURk0=)
                          3: 323430323a653734303a3a2f33322d3332203d3e20313331343930.roa (hash: DEEgmSg+O7gl+RVm4t7MTe4v/o6dKWcbJAlI4KqZGJs=)
                          4: 323430323a653734303a3a2f33322d3332203d3e2039343035.roa (hash: AhaqnryXWgJbqZIuoHdvwVLm5yGOjOFLv/poRen0t38=)
                          5: C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl (hash: FchV24bhRR+a4+SGP/KTyKFf7cyRUjGrlxTf6kIjDUc=)
                          6: 323430323a653734303a3a2f33322d3332203d3e2034353338.roa (hash: IxNmfYj51w/bq1DwSzLAy5cD3aVP/sUfnP92xwzus20=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:16:c1:67:76:a3:f4:03:c2:c0:9b:1c:04:51:d9:b5:b8:f6:60:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
        Validity
            Not Before: May 29 06:36:56 2026 GMT
            Not After : May 30 10:40:56 2026 GMT
        Subject: CN=9F8823D1049F44D82FAE950340D2ED12D26D6925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:87:7b:35:f7:42:9d:0f:49:59:41:a3:12:6e:
                    fb:fd:68:b5:cb:9b:11:85:de:4d:24:16:28:1f:63:
                    22:75:02:00:a3:54:31:df:b1:99:45:c6:ff:56:4e:
                    8e:3c:f5:85:6b:1e:5e:5f:80:47:e9:dd:49:b4:e0:
                    4b:fc:d9:d5:17:ff:95:c1:2b:a2:71:01:c0:92:f4:
                    20:55:35:69:bd:75:f6:45:6a:03:b5:5c:da:37:f1:
                    eb:f0:11:69:b8:57:eb:c8:e8:35:c6:ba:3e:40:8a:
                    be:63:f2:1a:80:d9:80:ef:c8:7a:50:6b:c3:df:35:
                    25:a5:9f:a2:6b:8b:48:52:78:50:77:5f:f6:07:7d:
                    bc:87:c6:31:19:7b:52:be:17:ff:3f:0a:0d:be:13:
                    d0:fd:70:20:12:b1:f3:8d:b6:60:8f:28:47:0c:b0:
                    02:4c:ff:bc:c9:fa:74:7d:d5:a9:93:12:1a:0b:b3:
                    c0:cc:21:ec:08:a3:96:cd:f0:4d:8d:18:f8:dc:74:
                    69:1c:3d:8d:e8:a4:1c:22:f9:85:c5:06:ad:2a:f5:
                    9d:4a:a6:af:29:d6:b0:bd:56:c9:09:42:ce:69:17:
                    54:22:57:69:d8:67:76:3f:5d:95:a1:5c:46:0b:cb:
                    7e:4f:5f:2c:09:c4:ec:dc:2c:63:00:44:13:9c:cf:
                    48:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:88:23:D1:04:9F:44:D8:2F:AE:95:03:40:D2:ED:12:D2:6D:69:25
            X509v3 Authority Key Identifier:
                keyid:C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c7:7f:b6:79:11:f1:e2:1f:b6:b9:57:1f:ee:bd:a8:d6:08:
         53:4f:5f:8c:c2:c0:f8:79:c2:13:1c:1c:a3:a5:68:8a:67:87:
         0e:0c:23:5e:34:f7:b5:b6:dd:46:51:4e:72:3c:4b:40:54:a2:
         56:e6:91:d6:4f:da:92:17:70:a6:ac:3f:56:78:de:e3:0e:8d:
         6f:de:e3:af:e5:b8:05:c5:20:85:9a:6c:ac:40:12:c5:86:70:
         0f:ca:22:79:3c:c6:50:7f:f8:c1:71:ec:9a:ee:61:82:2d:aa:
         4d:93:22:d9:96:0a:55:09:98:5d:b3:d8:ef:33:a5:20:02:ae:
         52:e8:02:c4:08:26:b1:c4:42:b9:98:cc:46:a6:ca:11:ed:33:
         43:a4:6a:db:1a:b1:e0:d1:93:58:a1:3c:3b:8c:32:97:2e:57:
         f8:ec:45:41:01:ea:f5:e0:cb:56:52:e5:50:13:5a:4b:57:4d:
         ef:5b:e0:ce:a3:90:7e:ed:34:7f:1d:ab:4e:56:0a:23:20:c0:
         3b:8d:0b:05:c2:11:8f:18:b7:c7:00:44:60:37:50:9f:f2:f0:
         8e:f6:8c:12:66:49:cd:d2:02:88:de:61:15:c1:99:13:88:57:
         e8:32:2a:59:e7:88:13:bf:08:71:8e:0a:8d:e5:d2:66:f6:0d:
         44:7f:f8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:47 2026 by rpki-client