Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
File:                     A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft (raw, json)
Hash identifier:          0rhu7Fm6fujgfv7ANuqM6LJ/xmxVtAg/LxKo59lW6IE=
Subject key identifier:   2A:07:36:29:F0:C8:EF:05:95:0F:D2:A8:07:E6:F4:37:49:D7:19:C4
Authority key identifier: A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F
Certificate issuer:       /CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F
Certificate serial:       6A2C937A87709513FC6EB934DCEFA1FDD80AB3AF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
Manifest number:          35
Signing time:             Fri 29 May 2026 06:32:41 +0000
Manifest this update:     Fri 29 May 2026 06:27:41 +0000
Manifest next update:     Sat 30 May 2026 10:30:41 +0000
Files and hashes:         1: 3132312e34362e3139322e302f32322d3232203d3e20313430373137.roa (hash: 5wawcPsM5m80HU28KarQtD66H36M4Wp3DiAa4Kkd7FM=)
                          2: 3132312e34362e3230302e302f32322d3232203d3e20313430323932.roa (hash: 8xs+dUd+uQdNQZJjuvb+nFvO1wt2heC5dsLAy2/mChI=)
                          3: 3132312e34362e3139322e302f32322d3232203d3e20313430323932.roa (hash: wc58+9s0xCI5qy0srFHch4c3xXfPOj0QoS2Uy2hNKzo=)
                          4: 3132312e34362e3139362e302f32322d3232203d3e203536303436.roa (hash: aodd28e8U9PHDKWSm11EB6EZp6VbHVm/MuILVwyonvk=)
                          5: A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl (hash: Ek3AWUY44GL4h3qo3c7KEQyrD2MGU8sm9/inxyar3aE=)
                          6: 3132312e34362e3230302e302f32322d3232203d3e20313430373137.roa (hash: EEb5FwKgW5dHQUxB859/L0aDnU2++rdkRtR6F19ReF8=)
                          7: 3132312e34362e3139362e302f32322d3232203d3e20313430323932.roa (hash: O/AD3qSU6wTIgj4hkNfIn+Jeen/941RJSXGvoa481lc=)
                          8: 3132312e34362e3139322e302f32322d3232203d3e203536303436.roa (hash: eS3fIU3qyAFP/R9AYBNjmWcu/ek4BsGa+9vz4CrGdkE=)
                          9: 3132312e34362e3230302e302f32322d3232203d3e203536303436.roa (hash: ctS4EHMva7f1SKBENENSA56WVaEq0k2ByBGUs33Z5FA=)
                          10: 3132312e34362e3139362e302f32322d3232203d3e20313430373137.roa (hash: r1OrvrQbOG3CWpMBVfsfGJEW6xW4KGBKQR94p3XbtMs=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2c:93:7a:87:70:95:13:fc:6e:b9:34:dc:ef:a1:fd:d8:0a:b3:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F
        Validity
            Not Before: May 29 06:27:41 2026 GMT
            Not After : May 30 10:30:41 2026 GMT
        Subject: CN=2A073629F0C8EF05950FD2A807E6F43749D719C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:59:3b:20:ba:d4:2d:a6:ce:1a:78:56:77:
                    e1:cb:38:8f:89:a0:f1:e9:6a:43:8c:98:7f:4f:25:
                    1b:4e:df:1f:56:20:87:1f:a5:c2:ac:1b:33:2b:1b:
                    32:d6:de:93:67:6f:51:35:07:44:93:a3:89:8b:f1:
                    5b:be:02:1f:05:39:75:44:a7:31:63:e3:86:d6:0c:
                    6c:06:4b:d0:e4:c6:91:59:5d:cd:d5:7c:17:d1:87:
                    bf:96:a4:82:e2:41:aa:9b:75:b1:13:22:f1:e3:51:
                    9f:24:98:de:ae:ab:3e:e9:5e:40:f3:3b:5a:e4:8c:
                    11:2c:e6:4c:a0:9f:1e:99:93:39:9e:ec:71:89:92:
                    0c:09:02:ca:21:73:a7:ed:f1:00:eb:6b:b1:eb:35:
                    b2:57:37:83:f9:3c:52:67:53:de:0b:50:d3:cb:4a:
                    c5:3c:c3:be:09:9d:63:89:9b:0e:fb:3c:de:4c:53:
                    23:32:6d:de:33:3b:26:9c:6b:a2:2f:60:b9:fa:4b:
                    e2:53:d2:f6:2c:81:76:3d:e5:1e:57:07:18:dd:27:
                    a4:92:b0:17:9d:d0:f7:9f:a4:de:53:80:a9:d6:ec:
                    25:27:45:3d:cf:6e:c4:9c:a1:9b:2e:c3:85:95:a6:
                    58:d9:59:6b:6f:2c:5a:63:de:bb:86:f2:d3:c2:9a:
                    50:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:07:36:29:F0:C8:EF:05:95:0F:D2:A8:07:E6:F4:37:49:D7:19:C4
            X509v3 Authority Key Identifier:
                keyid:A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:aa:36:96:da:8e:ae:9c:6c:2c:7f:c8:2f:c7:5f:26:2a:fb:
         01:1c:3b:0b:8d:04:6a:95:f2:4e:14:9f:07:fa:7c:91:07:06:
         3b:2e:94:eb:96:15:7d:4d:12:34:55:8f:ce:c2:32:4e:bf:dc:
         84:84:4d:19:21:57:2b:79:d5:0d:c2:42:9f:4c:0e:e6:21:55:
         03:1d:7b:d6:8c:1c:8f:8d:3c:98:1d:58:18:0b:94:be:13:93:
         00:22:de:ab:b4:bd:6b:d5:87:de:b9:82:0e:ec:ea:20:98:01:
         0f:97:39:fb:66:a9:ac:ee:fe:77:f8:f8:3d:1e:d4:88:25:bf:
         f3:a8:fe:52:c1:a4:75:e4:6e:d3:28:10:67:8a:88:fe:55:e5:
         c7:86:79:df:0d:ce:47:0b:7a:3a:e5:27:9d:33:f9:87:9c:c8:
         34:49:24:ba:a2:67:6e:76:18:0e:eb:57:52:b8:34:19:ff:da:
         f1:8d:96:5d:ae:98:9d:97:19:55:a3:88:31:e5:c1:aa:d6:8e:
         17:65:6e:70:fa:e3:cf:21:a5:d6:95:af:b6:36:d0:a0:5d:cf:
         85:1a:8f:39:43:22:d5:8b:dd:18:c3:31:da:72:d0:47:7d:65:
         50:c4:7d:e2:dc:e5:c3:06:00:8e:02:a5:94:52:b1:90:8c:82:
         c6:be:c2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:48 2026 by rpki-client