Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft
File:                     4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft (raw, json)
Hash identifier:          MtLdUwNw/JYOZZmRz8I0j51WJF3/DB10qSB3xcrUvbk=
Subject key identifier:   06:CD:EA:CF:50:5A:1E:0C:60:18:E3:9C:F1:25:9C:2D:CC:A4:D0:00
Authority key identifier: 44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08
Certificate issuer:       /CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08
Certificate serial:       707B5FF486475E42DA6C09E5F360A74F2234F0E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft
Manifest number:          50
Signing time:             Mon 06 Jul 2026 18:57:34 +0000
Manifest this update:     Mon 06 Jul 2026 18:52:34 +0000
Manifest next update:     Tue 07 Jul 2026 19:15:34 +0000
Files and hashes:         1: 3130332e3235342e36342e302f32322d3232203d3e2030.roa (hash: hjS7BW3zHSAnRNi4pQrZlUCqq+EbaE99J+UKmBpx3Ac=)
                          2: 4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl (hash: Aym/WfXOc0UH/DXBsuP0jEWT3Fn4bDxwScxUMV6+NXA=)
                          3: 34332e3235342e37322e302f32322d3232203d3e2030.roa (hash: cep0HVK9o9xoJvoKawVGqM636X04cBC5ijqfkFDqawk=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 Jul 2026 19:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7b:5f:f4:86:47:5e:42:da:6c:09:e5:f3:60:a7:4f:22:34:f0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08
        Validity
            Not Before: Jul  6 18:52:34 2026 GMT
            Not After : Jul  7 19:15:34 2026 GMT
        Subject: CN=06CDEACF505A1E0C6018E39CF1259C2DCCA4D000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:77:58:a3:94:54:15:b9:58:5c:31:5d:e4:09:
                    35:64:3f:10:75:dc:a8:8f:96:b0:23:9b:c1:bf:7d:
                    c8:6d:84:a5:d5:5c:44:e9:ae:8b:b7:75:02:03:98:
                    59:be:eb:46:85:d5:94:41:75:d5:f8:15:c9:93:6e:
                    30:86:cf:11:66:76:d0:46:e0:c3:a7:5b:c4:7c:89:
                    1f:af:0c:05:83:4a:b9:39:32:36:da:ff:a5:45:7e:
                    82:10:1b:52:1e:7d:57:79:6b:92:46:c9:31:0b:7a:
                    1e:cf:d6:fb:e8:08:90:ac:4d:d0:b5:e5:18:36:52:
                    24:31:85:83:c9:ae:c0:fa:2b:4a:37:5c:f6:5d:4a:
                    ee:20:3f:96:73:3a:81:24:4d:7a:85:cc:40:33:1c:
                    c8:b7:41:46:df:ab:df:fc:ec:b6:c0:d9:d8:09:07:
                    66:67:ed:3a:6e:ce:c3:20:99:2e:b7:f1:e9:35:bb:
                    d0:15:98:0b:f2:ae:bd:2b:0f:9b:1b:a3:3f:81:4b:
                    54:d0:89:85:b6:a3:1b:6e:be:28:14:11:eb:6a:1b:
                    0a:00:c0:a5:63:3b:fd:22:23:31:8d:dd:bd:85:1b:
                    ee:4d:52:9c:cb:ca:5b:30:33:44:60:70:61:f9:16:
                    01:d1:6e:6a:9b:01:ca:bb:7c:3c:18:fb:46:35:db:
                    e6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CD:EA:CF:50:5A:1E:0C:60:18:E3:9C:F1:25:9C:2D:CC:A4:D0:00
            X509v3 Authority Key Identifier:
                keyid:44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:42:32:51:b7:1e:e6:71:8c:7f:01:91:46:52:55:4d:24:61:
         b8:0f:e5:a6:f6:90:28:71:a9:49:8b:53:b0:aa:e4:29:70:ca:
         4b:da:44:52:08:97:6a:d1:f8:66:62:27:aa:c9:09:db:f9:8c:
         74:93:32:87:23:fe:3d:b0:eb:31:1f:e3:ab:6f:90:89:3a:35:
         f9:39:87:ff:83:43:ba:4c:98:47:8e:db:d0:49:1c:9d:0f:fe:
         32:cc:b8:50:ca:fb:e4:59:ca:4c:4f:21:cf:b3:8b:6b:dc:ed:
         72:4b:85:0c:84:60:d2:be:7b:b8:3b:4d:c0:af:90:b7:ce:83:
         79:62:6a:df:62:94:3e:6a:7a:d6:39:e6:f1:06:3e:ed:2e:48:
         11:22:f6:fc:a4:c5:25:1a:14:16:e5:96:65:03:af:e7:bc:c6:
         cf:e8:00:d7:d4:96:a7:20:cb:12:c7:d4:9f:f9:38:57:81:59:
         27:0f:f5:48:d1:97:f1:8c:f5:6f:3a:6e:c4:ea:da:79:bd:d7:
         19:9d:35:90:9b:07:5d:09:32:f7:e3:fa:30:09:19:d5:fb:44:
         1e:ff:cd:79:6d:33:72:d1:0a:69:7f:31:22:2a:42:52:e3:a1:
         ed:ad:8a:c9:b5:bf:9d:57:e5:47:f1:86:c4:de:ea:f2:90:af:
         fe:eb:35:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:44:30 2026 by rpki-client