Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
File:                     30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft (raw, json)
Hash identifier:          D6VO7uiz8Tt8UxzeWvT6FsEFqjN4D7s8AEKyoKlP0Lc=
Subject key identifier:   B9:A7:E2:64:F5:5A:D0:B1:01:B1:F0:79:E5:A7:9E:23:45:C6:49:D5
Authority key identifier: 30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07
Certificate issuer:       /CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
Certificate serial:       454BD89B0F1D359D4F2ADEC62E8B4383A1A0F0B3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
Manifest number:          14
Signing time:             Fri 22 May 2026 18:37:27 +0000
Manifest this update:     Fri 22 May 2026 18:32:27 +0000
Manifest next update:     Sat 23 May 2026 20:46:27 +0000
Files and hashes:         1: 3130332e3235342e37302e302f32342d3234203d3e2034383437.roa (hash: FNZmyanxz07Qqhgjs5JxEU8wVZNOlunehBdVCp6eaeg=)
                          2: 34332e3235342e32352e302f32342d3234203d3e2034383437.roa (hash: Ovzt74NkNXMJ6/m3biB7d43E0CMu7+X75tSS41U+dss=)
                          3: 3130332e3235342e36382e302f32332d3233203d3e2034383437.roa (hash: b1EVn7R7/USI6UFqMLTUH9674Mh9xwEDoREczBT6nZM=)
                          4: 34332e3235342e32362e302f32342d3234203d3e2034383437.roa (hash: leQK+grHmHX+nKo+1gHEIEc2DgIqJnwwWJjDTD+bBIk=)
                          5: 3130332e3235342e36382e302f32322d3232203d3e2034383437.roa (hash: aZ/0G1bg8whxvsp31vQsWHhAvgkdQ5XTg3GUqH++CNM=)
                          6: 34332e3235342e32362e302f32332d3233203d3e2034383437.roa (hash: jeJkLvIYDEf7KsBjTjP0Muz7wutFiTENkO7VbCNpnp4=)
                          7: 3130332e3235342e36392e302f32342d3234203d3e2034383437.roa (hash: 7F88lFm6DD6Qmur/MExkO+X2jVnHVUUR5x0VicHrQgE=)
                          8: 3130332e3235342e36382e302f32342d3234203d3e2034383437.roa (hash: zPWgyyF1Mrz5OFEF3JqQzSab+M9J8QVcEpUZrn16NyU=)
                          9: 323430333a346138303a3a2f33322d3332203d3e2030.roa (hash: E+y7ZP4/IkfHf0gPRAUW7GMFf81wT+enHmqcRbcYENg=)
                          10: 34332e3235342e32372e302f32342d3234203d3e2034383437.roa (hash: TE4NaF/eF/qrYTsjwyjQmQNGwcNtHiBiLxwFl1yleq0=)
                          11: 34332e3232392e3138342e302f32342d3234203d3e2034383437.roa (hash: BIKbDGmrj7dmztRm9eLK7stBUpN/RIDdxkIj1Z0oloc=)
                          12: 3130332e3235342e37312e302f32342d3234203d3e2034383437.roa (hash: Z9Cz6Wun0YZVCea+g+TAm8panVnYO6AEROUy+XcBmjo=)
                          13: 30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl (hash: W6P+M7xUIdE6+7apUUAZld111FkFNHErzSNgFiJ0cK0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 20:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4b:d8:9b:0f:1d:35:9d:4f:2a:de:c6:2e:8b:43:83:a1:a0:f0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
        Validity
            Not Before: May 22 18:32:27 2026 GMT
            Not After : May 23 20:46:27 2026 GMT
        Subject: CN=B9A7E264F55AD0B101B1F079E5A79E2345C649D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:e8:72:fe:e9:ff:62:48:47:8c:45:fc:16:
                    40:d5:92:52:20:72:40:41:57:3a:f6:cb:3e:03:ac:
                    13:40:08:6e:55:f1:c0:7e:f0:23:05:cd:a6:7a:16:
                    d7:5d:54:39:cc:92:9c:61:8d:82:9d:5d:de:47:c8:
                    f7:8b:ad:4b:46:bb:29:63:a1:42:35:4a:17:08:1d:
                    3c:4e:ed:bb:05:ec:f2:08:2f:94:f2:38:1d:e0:b2:
                    d2:e9:08:f3:6b:fc:b5:b3:56:d8:ef:88:9b:df:05:
                    e0:c5:7c:90:58:14:e2:4c:b6:cc:ee:98:a5:62:3a:
                    cc:c6:a0:23:86:03:4a:dd:93:2b:01:9a:43:f0:51:
                    2a:02:25:ef:0e:30:dc:53:21:5a:dc:58:5f:7f:ce:
                    bf:4c:c0:fe:3e:68:aa:2a:4c:bd:b5:bb:67:16:e9:
                    5b:0a:c4:d1:cc:95:71:3e:25:85:f3:0c:cf:d0:f1:
                    2b:4f:79:43:27:cc:fa:71:90:65:b5:0c:b2:f4:ff:
                    e0:05:03:f7:d4:21:b5:1d:1d:3f:f1:f4:2b:87:85:
                    db:06:8e:61:0f:79:06:00:62:a0:5b:c1:cb:77:12:
                    e9:85:bc:37:59:81:20:9c:4d:bf:4a:ce:f5:06:ef:
                    a4:a0:18:0e:91:7a:7d:50:b6:49:31:dc:09:30:3f:
                    f3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A7:E2:64:F5:5A:D0:B1:01:B1:F0:79:E5:A7:9E:23:45:C6:49:D5
            X509v3 Authority Key Identifier:
                keyid:30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:4a:84:a7:f2:18:fd:02:00:ef:f9:04:de:fb:47:60:1c:25:
         9e:4b:cb:76:16:59:27:ef:df:36:79:5d:3a:00:0c:61:c8:50:
         d1:42:a6:c8:4a:a6:d8:fe:5b:87:bf:8c:c3:f2:60:6e:ac:6c:
         b7:9e:ba:2e:92:58:92:76:e6:44:d1:42:58:4e:fd:0b:ce:80:
         fb:88:e5:b0:4b:b1:6b:b0:7a:e4:35:06:5e:a3:af:8c:f7:80:
         ef:42:95:c3:d5:13:21:6a:c5:29:80:81:7d:de:f3:35:fb:ef:
         99:60:04:51:be:82:f4:05:94:37:60:2c:ae:97:c9:48:d3:85:
         cc:26:a2:b5:47:b8:65:16:dd:84:eb:12:e8:ce:8d:85:70:24:
         98:2f:88:2c:f9:13:c1:f2:92:9a:dd:8d:71:0f:26:19:ea:c0:
         fc:c0:4d:0e:39:56:d8:ed:73:19:24:a6:8c:d6:40:60:4a:a3:
         bf:ca:d9:e6:b3:fa:82:c4:40:73:ac:b5:1d:78:25:4b:dc:bb:
         15:1e:d1:57:66:3b:83:cb:d0:12:9d:e0:fa:67:4e:6b:b2:17:
         d7:53:ed:ab:30:d6:59:97:29:6f:a5:72:89:08:59:7c:1b:2b:
         5e:69:12:86:cf:cf:fc:fe:3d:8b:d8:20:14:a2:00:64:97:89:
         bb:a4:51:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:45:30 2026 by rpki-client