Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft
File:                     C05947A00A72638CD4BE67C4BF53224357777E0A.mft (raw, json)
Hash identifier:          NBGk0ZIK3aaRwPuwez9aSLU/+QPDogxcMxrwHB8mTb8=
Subject key identifier:   D0:49:9A:5C:A3:68:FE:2F:67:17:C8:C7:AC:22:D8:D3:6A:55:EF:12
Authority key identifier: C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A
Certificate issuer:       /CN=C05947A00A72638CD4BE67C4BF53224357777E0A
Certificate serial:       0C75DD9E6F6EA92E8FE7A199EF646FB32E9A89CF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft
Manifest number:          5A
Signing time:             Tue 14 Jul 2026 02:35:13 +0000
Manifest this update:     Tue 14 Jul 2026 02:30:13 +0000
Manifest next update:     Wed 15 Jul 2026 04:43:13 +0000
Files and hashes:         1: C05947A00A72638CD4BE67C4BF53224357777E0A.crl (hash: qtI6pwkDK9xUyQdEGkva0R/ygFCrD8GJWAUDuFco5lw=)
                          2: 3130332e3231322e3130392e302f32342d3234203d3e2034383136.roa (hash: KKCqpde6Dhe4+7RyJYUAxN7mjehJt+BZVg2xReVpvv0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 04:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:75:dd:9e:6f:6e:a9:2e:8f:e7:a1:99:ef:64:6f:b3:2e:9a:89:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C05947A00A72638CD4BE67C4BF53224357777E0A
        Validity
            Not Before: Jul 14 02:30:13 2026 GMT
            Not After : Jul 15 04:43:13 2026 GMT
        Subject: CN=D0499A5CA368FE2F6717C8C7AC22D8D36A55EF12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:09:4b:b3:d0:92:d8:92:51:f8:f7:40:a3:bf:
                    81:71:2b:82:0d:a8:d5:76:b5:1d:d9:22:cc:cd:2b:
                    c2:01:28:69:47:2d:ba:c3:6b:c4:fc:1f:c2:51:d4:
                    fd:c0:ef:b8:83:89:ef:d7:1f:f0:70:29:ca:cc:62:
                    d0:0a:13:ef:9c:06:70:01:08:bb:7c:9a:8b:47:52:
                    33:61:74:5d:ee:c7:fb:cb:e9:f6:89:bc:6b:8d:af:
                    37:95:c9:70:37:f0:68:cd:ef:7b:d5:9d:4e:cc:98:
                    51:d9:93:c0:30:a2:66:e4:46:a3:5e:3a:4b:06:e0:
                    e8:b8:88:d1:9f:d7:d8:4b:9b:44:a3:d4:be:59:91:
                    2d:0b:99:8b:4b:b5:cd:f5:94:75:d8:87:24:c7:76:
                    79:a8:46:d0:2b:7c:94:b7:28:cf:c7:c9:81:80:8e:
                    20:0a:36:bb:2b:57:39:7d:6a:3e:19:73:5a:2d:3c:
                    83:44:2c:f2:b7:d0:4f:0a:09:d0:86:50:17:78:de:
                    61:ac:f0:2b:6d:53:5c:40:6b:dd:c7:06:c1:69:dc:
                    4a:63:46:63:e3:dd:ac:ad:9f:7f:ad:f9:db:6b:34:
                    3e:65:19:8c:df:05:70:03:08:95:0a:7b:70:3d:e7:
                    65:82:a3:de:e6:e6:16:78:f3:ef:b2:3b:7b:d4:26:
                    e6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:49:9A:5C:A3:68:FE:2F:67:17:C8:C7:AC:22:D8:D3:6A:55:EF:12
            X509v3 Authority Key Identifier:
                keyid:C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a5:e2:b0:bd:42:d3:81:32:04:f2:e4:6f:93:a4:b3:be:98:
         a4:0a:f0:0e:35:a4:ae:29:de:dd:45:9f:53:f4:07:4b:50:61:
         77:93:06:9f:7c:65:a4:af:96:3a:e4:a5:8f:f8:52:98:5d:b0:
         9f:20:03:31:a1:6e:92:7a:b7:35:95:6c:1c:a2:20:72:e0:bf:
         95:ad:94:e3:5b:bd:0a:ff:b2:fc:73:bd:28:69:4d:b9:09:05:
         8a:86:18:a7:a1:ff:5c:86:32:57:b9:6d:4e:55:04:11:cb:d2:
         bf:64:dd:ce:8c:cb:1d:c1:fb:bf:18:9f:4b:40:9e:a8:a6:d0:
         97:85:cc:80:59:f1:b3:a0:39:9c:80:8e:2c:51:64:4b:e3:bd:
         3b:6b:08:29:e4:df:00:33:af:0a:51:56:ce:00:11:35:ab:a1:
         3b:4b:a8:65:70:1b:7e:1c:88:65:24:c9:54:80:22:94:a7:58:
         9e:26:86:3a:10:e3:cb:f3:a4:26:67:6b:39:bb:43:49:54:07:
         8e:85:02:97:91:81:04:40:00:48:89:cd:91:3f:2f:db:6f:db:
         a3:62:b6:8f:3d:c4:21:f8:a3:c6:5f:a7:18:bd:12:0a:c2:39:
         46:c1:fc:d7:06:50:0d:9d:de:71:6e:76:04:d4:47:57:ed:1c:
         83:39:7c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:14:37 2026 by rpki-client