Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft
File:                     450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft (raw, json)
Hash identifier:          /Kpj4crSrH76yl9almfKwASUrJMQp3dSLSfAdMA6+Os=
Subject key identifier:   58:2D:79:71:A1:DE:29:62:7F:8B:A4:2D:28:D5:1D:CC:ED:3F:C8:F9
Authority key identifier: 45:0A:C0:E4:CD:E3:18:16:82:FF:27:C2:52:1C:C4:BF:72:90:C0:D7
Certificate issuer:       /CN=450AC0E4CDE3181682FF27C2521CC4BF7290C0D7
Certificate serial:       5F474B74626C5D91DA294724AA1485C39F30063C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft
Manifest number:          26
Signing time:             Fri 29 May 2026 18:33:04 +0000
Manifest this update:     Fri 29 May 2026 18:28:04 +0000
Manifest next update:     Sat 30 May 2026 21:59:04 +0000
Files and hashes:         1: 450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl (hash: l2rOox1vmCyS45E/DrN8pLc7JICeJIrnBS/uwKFp5p8=)
                          2: 3130332e3232382e3230342e302f32332d3233203d3e2034383038.roa (hash: 0Mhtj21hVbeX9XUR/Q2Gx0H8h7HJJx0VMMT+V2reTHc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:47:4b:74:62:6c:5d:91:da:29:47:24:aa:14:85:c3:9f:30:06:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450AC0E4CDE3181682FF27C2521CC4BF7290C0D7
        Validity
            Not Before: May 29 18:28:04 2026 GMT
            Not After : May 30 21:59:04 2026 GMT
        Subject: CN=582D7971A1DE29627F8BA42D28D51DCCED3FC8F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:09:a2:da:1a:8b:eb:33:7d:8c:24:f3:57:11:
                    0d:c0:8d:7a:e3:46:64:1c:22:e8:56:89:f1:bd:31:
                    2e:78:32:e3:11:f8:8a:1b:1d:31:cf:00:c0:de:c8:
                    ca:43:8a:a6:b8:a3:a6:24:b1:96:a3:b7:a0:17:41:
                    90:f8:7d:9e:cc:58:f4:9a:3b:46:1c:7f:2b:61:14:
                    2d:5c:da:06:d6:cb:97:c9:58:8e:22:47:0d:85:8d:
                    db:1a:99:b9:a4:05:c0:92:4a:b4:da:3a:e8:39:d6:
                    d8:4c:eb:c4:c5:46:7e:9b:8e:71:03:50:bb:aa:2c:
                    1c:ad:ad:43:0e:7e:2e:ad:00:cb:ae:48:86:a7:8e:
                    f7:4c:07:22:db:8e:9a:a8:4d:b4:ad:b8:93:b3:9e:
                    97:1f:bf:d0:31:67:bc:fd:fc:30:dd:31:a1:fc:cf:
                    54:77:b7:4f:3c:ae:26:12:17:47:e4:8e:16:8e:2f:
                    0d:7a:e7:e5:0d:0f:d1:5a:00:dc:61:48:43:0f:8b:
                    ef:75:10:e9:6d:3b:48:7d:39:39:d8:9a:77:b6:d9:
                    d1:4e:06:4c:0a:09:f3:c0:dd:c9:52:b8:60:59:2b:
                    42:1a:01:26:c4:29:b1:ac:e8:84:1c:3f:87:15:b8:
                    96:b9:0a:79:7c:e5:0c:7f:0d:0f:50:87:7a:78:4f:
                    31:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2D:79:71:A1:DE:29:62:7F:8B:A4:2D:28:D5:1D:CC:ED:3F:C8:F9
            X509v3 Authority Key Identifier:
                keyid:45:0A:C0:E4:CD:E3:18:16:82:FF:27:C2:52:1C:C4:BF:72:90:C0:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c5:e7:ee:e6:93:ae:77:90:5e:bb:bd:cc:b2:6c:08:ff:8a:
         65:3b:5e:c6:a0:2b:a2:65:d6:ba:e3:1d:8d:8f:4c:db:b3:19:
         67:d2:19:e1:06:d0:ac:8d:34:6c:e4:4d:d5:dc:e6:97:9a:de:
         39:84:83:b6:17:37:e5:a1:38:36:90:17:15:0f:e3:7c:5d:78:
         59:d7:f8:12:9f:8a:da:44:c5:9b:a8:34:a8:36:47:57:67:f2:
         d0:5d:6f:ae:86:39:fb:93:22:db:37:91:96:58:31:5e:58:64:
         66:b6:ca:bc:b5:62:08:ae:bf:93:0a:37:dd:54:fa:49:2f:72:
         43:7f:c3:1c:8f:e2:01:bd:f3:be:ea:4a:0b:e5:21:ef:62:f9:
         b8:5e:d4:d1:99:02:54:c3:dd:72:8a:0f:36:8a:e3:16:9f:a8:
         5c:fe:e9:9a:61:a0:92:ee:64:9f:3f:14:e2:8f:b3:c2:4c:1a:
         a4:fe:89:15:24:25:8d:c7:d4:a9:64:a4:fe:a5:76:eb:28:c7:
         cf:21:b2:77:76:c3:af:25:5b:e2:96:22:76:bd:89:86:0c:80:
         c8:0d:b6:db:35:4a:a3:5e:02:f5:1a:80:08:72:8b:80:36:b1:
         44:bb:cb:44:83:ec:f4:a0:7d:4c:d6:11:dc:bd:41:11:64:f0:
         8a:e8:b5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:03:33 2026 by rpki-client