Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
File:                     1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft (raw, json)
Hash identifier:          Z4lboeM3Yi3ZrP6os8cghBX89B41i3kOcYHHitMR1D4=
Subject key identifier:   08:4F:4C:A7:B2:F4:EC:79:91:7E:E9:C6:24:E9:3F:31:ED:C3:E9:51
Authority key identifier: 1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09
Certificate issuer:       /CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09
Certificate serial:       48C24F1DE3AFEFB2C762487ED2FF100E17B81535
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
Manifest number:          23
Signing time:             Fri 29 May 2026 07:52:43 +0000
Manifest this update:     Fri 29 May 2026 07:47:43 +0000
Manifest next update:     Sat 30 May 2026 10:29:43 +0000
Files and hashes:         1: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl (hash: EAPniZq36/YyrmCmDm8CW+P9G63Kmw0Hf0wpejew88Y=)
                          2: 3130332e37332e3131362e302f32322d3232203d3e203233363530.roa (hash: N6BZpHQs84IIbiebI1UWzRjDUYpAVV5g6fmxbbjciew=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c2:4f:1d:e3:af:ef:b2:c7:62:48:7e:d2:ff:10:0e:17:b8:15:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09
        Validity
            Not Before: May 29 07:47:43 2026 GMT
            Not After : May 30 10:29:43 2026 GMT
        Subject: CN=084F4CA7B2F4EC79917EE9C624E93F31EDC3E951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a8:2a:c5:2b:ab:b8:cc:60:5e:3c:91:04:b8:
                    28:af:14:61:db:6c:03:dd:fd:e9:5b:e8:d8:6c:9c:
                    c8:0f:0a:3e:fc:4d:04:39:98:c4:dd:b9:e4:7e:5a:
                    96:67:13:28:2f:05:e4:9c:4c:81:af:7f:7c:3b:b1:
                    5f:41:c5:a6:de:65:27:1f:aa:d9:f3:a1:b6:0e:54:
                    44:3b:53:8d:4d:4c:06:6f:8a:31:3b:56:a0:e8:7e:
                    07:3d:62:77:f9:dc:b5:2e:4d:3d:b5:33:8b:8a:04:
                    ba:73:87:da:c2:66:b3:9b:19:1a:c0:97:d9:0d:b7:
                    13:75:83:9b:f5:16:f6:12:e5:77:55:b9:2c:fa:52:
                    af:06:5d:07:6d:88:16:82:41:3e:e8:d5:19:44:f2:
                    91:27:43:cb:f5:db:3a:e9:5a:e9:c6:1c:9c:49:c2:
                    5c:9d:c5:fb:af:f6:74:d7:6a:89:85:bb:3d:8a:5c:
                    c1:d5:9f:5d:45:00:16:f3:22:56:7b:d1:ce:ed:d6:
                    03:cc:0b:3c:78:97:96:0e:bf:93:7e:4f:2b:61:0d:
                    b6:e0:05:d2:2b:34:be:32:9c:e1:9f:aa:d6:f3:64:
                    00:9b:d8:52:85:85:3c:e3:41:bf:04:0c:bc:95:89:
                    be:58:2a:b0:a0:80:85:84:3a:9c:a3:52:6b:e4:22:
                    52:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4F:4C:A7:B2:F4:EC:79:91:7E:E9:C6:24:E9:3F:31:ED:C3:E9:51
            X509v3 Authority Key Identifier:
                keyid:1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:88:2b:55:49:8f:91:18:2b:b2:f1:28:5b:13:ab:cb:e5:b5:
         dc:62:3e:2c:dd:66:0f:f7:af:41:2c:8a:86:68:fa:26:07:13:
         97:cf:ca:b2:49:0d:55:43:89:dc:a2:08:f3:c0:54:01:d8:b9:
         7a:58:71:96:f6:f9:3b:6a:28:54:b9:45:d2:ae:3e:82:54:f1:
         8e:b5:2f:33:cc:66:37:e8:5b:f0:d4:c5:92:55:11:2a:54:61:
         c2:44:8b:fa:bd:77:4a:46:c5:74:45:2c:f3:fe:22:31:a5:ea:
         31:e4:cb:6a:e7:08:b8:f9:76:7e:50:db:33:6a:26:7b:02:ff:
         62:bd:c5:b2:94:bd:9b:52:6e:f2:0b:4a:6f:10:1b:47:0d:7b:
         0f:99:47:14:d1:90:c9:92:59:e6:92:df:f2:b6:0e:e4:59:63:
         d7:18:ae:f0:73:f5:32:21:c5:9b:1b:b7:ec:f3:7e:8f:41:b1:
         2a:c7:f0:4d:a7:53:a2:32:40:07:5f:67:53:97:17:a8:4d:c4:
         1f:c3:16:5b:a6:97:ed:0e:27:4b:a0:1e:ac:34:ec:54:4e:6f:
         a7:8c:ce:dc:20:42:00:e8:b0:b9:a2:85:8f:78:ea:1a:41:66:
         08:c1:6c:76:db:e4:7f:ad:84:5e:27:71:2e:c7:72:7d:02:58:
         4b:6f:77:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:46 2026 by rpki-client