Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft
File:                     81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft (raw, json)
Hash identifier:          afkOXQe5AjIhfSjG6cMyDz1XWFkapRkFVnKy5kWlHrU=
Subject key identifier:   7D:46:6B:56:D1:54:AB:87:6A:7F:2E:4A:F4:43:CB:07:A3:C3:91:3D
Authority key identifier: 81:C6:11:9E:6A:4D:F7:B7:5E:15:7E:48:A1:36:35:B1:E0:5E:7B:B6
Certificate issuer:       /CN=81C6119E6A4DF7B75E157E48A13635B1E05E7BB6
Certificate serial:       4C2D9CCCD7735C7CC87093249C0154DB5E5A8FF0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft
Manifest number:          1E
Signing time:             Fri 29 May 2026 04:02:32 +0000
Manifest this update:     Fri 29 May 2026 03:57:32 +0000
Manifest next update:     Sat 30 May 2026 05:29:32 +0000
Files and hashes:         1: 81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.crl (hash: z9gVuUAsJ8t8HTfmoUUaH1b5ryIVyNQaLS1NgZg8ptQ=)
                          2: 3230322e36332e3136302e302f32302d3230203d3e2034383337.roa (hash: 8hu7dNrKt5Kh0Gug+I9Kc/1oeTX6FuZLquGE19/vspY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 05:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2d:9c:cc:d7:73:5c:7c:c8:70:93:24:9c:01:54:db:5e:5a:8f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81C6119E6A4DF7B75E157E48A13635B1E05E7BB6
        Validity
            Not Before: May 29 03:57:32 2026 GMT
            Not After : May 30 05:29:32 2026 GMT
        Subject: CN=7D466B56D154AB876A7F2E4AF443CB07A3C3913D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:24:2d:56:0a:8e:5f:75:1b:db:16:0c:ae:e0:
                    30:64:d7:6e:9e:2e:34:d5:1a:ac:77:19:a2:df:60:
                    a8:df:b2:2a:89:0f:46:ab:29:ec:79:3e:07:1a:71:
                    f8:bf:24:5d:cf:85:e7:52:1e:63:d8:80:9c:22:05:
                    9b:cc:ae:93:b0:2e:de:4e:c4:df:f5:a5:f2:23:87:
                    90:21:7e:2b:4a:4c:86:7a:c3:99:06:bf:63:26:c2:
                    e6:dd:69:e8:0e:ff:40:c7:a1:bf:93:46:ef:ff:50:
                    4d:d8:ca:78:4f:b5:aa:d5:56:3c:d0:7b:3d:9b:46:
                    cc:ea:44:d3:79:12:91:8b:54:3a:4a:20:0e:17:cd:
                    d2:e2:01:07:57:04:26:55:e0:6f:7c:25:79:ee:d7:
                    d6:13:fb:84:7d:9d:f4:68:88:db:5d:6f:83:09:b1:
                    fd:a0:90:03:35:21:7c:05:03:9f:27:ca:81:86:76:
                    6e:e2:4c:f6:4a:8c:68:46:d7:22:5a:94:61:d3:ba:
                    52:7d:1d:ba:8e:f0:0b:dc:b1:7b:39:82:99:4c:de:
                    63:88:91:ce:b7:a6:1e:b6:a4:59:72:42:3b:f1:f1:
                    5e:c3:6b:3d:c5:06:e6:1c:92:f2:3f:ad:67:c6:f1:
                    6e:fd:82:e4:f2:99:26:43:45:01:6d:51:e3:45:bd:
                    91:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:46:6B:56:D1:54:AB:87:6A:7F:2E:4A:F4:43:CB:07:A3:C3:91:3D
            X509v3 Authority Key Identifier:
                keyid:81:C6:11:9E:6A:4D:F7:B7:5E:15:7E:48:A1:36:35:B1:E0:5E:7B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:23:75:1f:2d:50:04:ac:dc:7a:cd:fc:61:5f:97:d3:d8:f1:
         03:64:3e:20:63:12:7a:08:3b:a5:e6:14:da:ff:10:ab:fb:f1:
         f0:33:32:08:ef:09:3c:33:db:5b:ae:64:ca:86:3a:7f:57:16:
         1e:8e:d9:ad:79:57:4f:5d:ec:04:af:37:8e:fa:44:48:1d:61:
         3f:43:98:d8:35:73:c8:93:50:7d:ec:62:28:b3:f6:f0:3f:e5:
         76:79:18:48:71:49:23:d0:b0:2f:a5:48:91:22:c9:c5:54:7c:
         a6:70:e6:b9:ba:60:1c:35:ca:89:10:e5:61:57:ce:62:5b:2d:
         b8:0a:59:8a:f9:5f:86:70:e3:80:7a:f5:65:ce:73:a3:6e:88:
         7e:93:4e:70:6a:7a:1e:5c:bf:96:44:f4:70:ec:e6:4f:fc:9f:
         c8:54:ce:fa:63:ab:83:ff:b1:f0:7d:56:38:a3:ee:a4:61:05:
         d9:0e:9a:ff:80:ff:9c:28:6a:a9:fd:f4:a6:92:4d:64:8f:07:
         28:c6:43:ec:d9:e2:25:8f:c1:23:21:97:cf:c2:9e:f0:20:f3:
         1d:5c:ec:4c:97:93:8d:5b:b5:ac:75:d4:7b:7c:bc:ba:59:89:
         ba:9e:4a:db:8f:dd:aa:cd:9c:1e:3a:8f:66:a2:7a:fe:07:ff:
         10:b3:fd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:03:31 2026 by rpki-client