Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
File:                     30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft (raw, json)
Hash identifier:          HJoJCLjoaS/aFjnRxmViYUsg3HcMWHQBbdvFkgIkpB8=
Subject key identifier:   27:88:FB:87:88:F3:54:DF:23:EF:17:34:91:00:C5:F2:F2:2B:F5:C0
Authority key identifier: 30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07
Certificate issuer:       /CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
Certificate serial:       6B4FC967A0178B09ACB4CB42A3605B4372BE72C3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
Manifest number:          8C
Signing time:             Fri 21 Aug 2026 16:00:03 +0000
Manifest this update:     Fri 21 Aug 2026 15:55:03 +0000
Manifest next update:     Sat 22 Aug 2026 18:17:03 +0000
Files and hashes:         1: 323430333a346138303a3a2f33322d3332203d3e2030.roa (hash: E+y7ZP4/IkfHf0gPRAUW7GMFf81wT+enHmqcRbcYENg=)
                          2: 30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl (hash: 9evtjevicIYvVhqBB+O1811Z3JyNfLWrFrPoaVFwjRs=)
                          3: 3130332e3235342e36382e302f32322d3232203d3e2034383437.roa (hash: aZ/0G1bg8whxvsp31vQsWHhAvgkdQ5XTg3GUqH++CNM=)
                          4: 34332e3235342e32362e302f32342d3234203d3e2034383437.roa (hash: leQK+grHmHX+nKo+1gHEIEc2DgIqJnwwWJjDTD+bBIk=)
                          5: 34332e3235342e32362e302f32332d3233203d3e2034383437.roa (hash: jeJkLvIYDEf7KsBjTjP0Muz7wutFiTENkO7VbCNpnp4=)
                          6: 3130332e3235342e37312e302f32342d3234203d3e2034383437.roa (hash: Z9Cz6Wun0YZVCea+g+TAm8panVnYO6AEROUy+XcBmjo=)
                          7: 34332e3235342e32352e302f32342d3234203d3e2034383437.roa (hash: Ovzt74NkNXMJ6/m3biB7d43E0CMu7+X75tSS41U+dss=)
                          8: 3130332e3235342e36382e302f32332d3233203d3e2034383437.roa (hash: b1EVn7R7/USI6UFqMLTUH9674Mh9xwEDoREczBT6nZM=)
                          9: 3130332e3235342e37302e302f32342d3234203d3e2034383437.roa (hash: FNZmyanxz07Qqhgjs5JxEU8wVZNOlunehBdVCp6eaeg=)
                          10: 3130332e3235342e36392e302f32342d3234203d3e2034383437.roa (hash: 7F88lFm6DD6Qmur/MExkO+X2jVnHVUUR5x0VicHrQgE=)
                          11: 34332e3235342e32372e302f32342d3234203d3e2034383437.roa (hash: TE4NaF/eF/qrYTsjwyjQmQNGwcNtHiBiLxwFl1yleq0=)
                          12: 3130332e3235342e36382e302f32342d3234203d3e2034383437.roa (hash: zPWgyyF1Mrz5OFEF3JqQzSab+M9J8QVcEpUZrn16NyU=)
                          13: 34332e3232392e3138342e302f32342d3234203d3e2034383437.roa (hash: BIKbDGmrj7dmztRm9eLK7stBUpN/RIDdxkIj1Z0oloc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Aug 2026 15:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4f:c9:67:a0:17:8b:09:ac:b4:cb:42:a3:60:5b:43:72:be:72:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
        Validity
            Not Before: Aug 21 15:55:03 2026 GMT
            Not After : Aug 22 18:17:03 2026 GMT
        Subject: CN=2788FB8788F354DF23EF17349100C5F2F22BF5C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:3b:b1:ac:be:31:8e:8f:ac:b0:29:4e:ed:
                    f6:79:82:ea:7f:31:68:e1:8d:45:0b:e1:d4:d9:09:
                    f2:f2:6b:23:65:2d:0f:c9:6d:bd:f0:37:4a:c8:8c:
                    a0:8a:0d:cd:9e:e3:3b:e7:48:f8:56:7a:9b:d7:f2:
                    4d:c9:30:e8:cf:f3:b7:9b:18:90:1d:e3:b0:ea:0f:
                    fc:1c:c2:d8:78:de:a6:a3:67:61:08:a8:24:b8:97:
                    86:57:5a:c4:61:8a:22:bb:f7:af:19:33:d9:21:10:
                    25:39:86:94:e2:f1:39:4f:2b:79:23:16:4d:23:85:
                    11:f0:8e:7c:2e:87:a6:1b:14:f8:01:75:f3:7c:a1:
                    71:d7:a0:a3:5a:61:4e:65:52:ff:6d:75:87:ef:13:
                    8d:18:7b:b1:a6:22:ed:82:c5:8e:c0:04:49:45:fd:
                    cf:fc:ae:5b:e4:53:b7:11:44:c5:87:4b:72:37:b9:
                    6b:a5:af:33:72:5f:7b:5b:4a:f2:12:69:9d:9f:03:
                    09:36:21:cd:90:9a:26:cd:d0:6c:20:4d:99:10:85:
                    c2:35:1b:5e:85:44:32:bb:88:d8:4b:f6:74:eb:ca:
                    ef:50:17:5d:3d:2a:d4:6b:ec:99:06:a5:a3:23:91:
                    9f:84:1a:75:f8:01:78:3c:b8:3e:43:cf:de:a0:1b:
                    5c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:88:FB:87:88:F3:54:DF:23:EF:17:34:91:00:C5:F2:F2:2B:F5:C0
            X509v3 Authority Key Identifier:
                keyid:30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:d5:4c:31:c8:f3:16:e8:d1:9b:db:5f:0b:0e:35:2b:b9:4d:
         7c:b0:fb:44:26:52:60:bb:05:e4:2e:6b:cc:fa:7a:e3:cd:5f:
         0f:07:ea:ac:83:55:c7:f3:a6:86:2f:30:fe:d8:2c:71:8f:83:
         37:6a:47:88:58:aa:4b:af:1f:1a:b7:8b:c0:cd:1f:86:89:a6:
         c6:a4:2a:31:dc:38:44:df:a5:52:f9:2e:c4:8a:53:f4:cb:c8:
         b4:ee:c1:e4:c3:36:a4:52:5c:1b:91:a6:8d:20:f1:8e:a3:59:
         e9:41:45:af:5f:84:7a:39:9a:77:ba:6b:b1:7f:0b:d0:0e:2a:
         74:32:c9:94:bd:22:ca:76:5a:4d:88:64:61:d6:c0:a1:d3:e3:
         ae:cf:5d:0e:1f:a5:5f:70:65:98:28:48:bc:d4:52:b5:a3:99:
         1b:75:ba:5e:f8:54:69:5b:f6:65:50:c2:b2:31:6a:02:9b:f9:
         65:42:ad:9a:09:7a:01:92:fc:31:20:58:97:9d:84:62:35:a0:
         b3:bf:b7:cc:61:3c:06:06:a5:18:31:a6:b4:d9:08:61:e9:dd:
         5c:54:8a:ca:47:47:d8:7b:46:d4:12:b7:f2:f4:48:91:17:e7:
         c9:26:b3:23:8c:70:dc:79:d8:11:cf:2f:b5:ca:bb:dd:4e:90:
         e0:76:a8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:10:58 2026 by rpki-client