Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
File:                     4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft (raw, json)
Hash identifier:          FdLZ6ypDioe5cW9mJDgXSiiz5aUPf0I/WcAQVFsInGU=
Subject key identifier:   E8:7C:0A:92:7A:7C:B2:58:F6:0A:E9:F8:D5:E8:E2:50:6A:28:BF:30
Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
Certificate issuer:       /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Certificate serial:       5CF1AF22F6EF35A96F50C38FCB686DA58FDFAA6B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
Manifest number:          58
Signing time:             Tue 14 Jul 2026 16:41:41 +0000
Manifest this update:     Tue 14 Jul 2026 16:36:41 +0000
Manifest next update:     Wed 15 Jul 2026 20:09:41 +0000
Files and hashes:         1: 3230332e3139322e342e302f32342d3234203d3e2034363131.roa (hash: 17kgFGc3cSe7uHyaAKqp7oAC5dXyj9elPuMYbCDiwxE=)
                          2: 3130332e36362e33322e302f32342d3234203d3e2034363131.roa (hash: pGPnNL8I17M9sBQn6scU0wF53hsmAZju26aVp9ckSkQ=)
                          3: 3130332e3232382e3133372e302f32342d3234203d3e2034363131.roa (hash: QQ4ATBeNE3ml6YUNfv/6tpe2Kv/BmFijIHp4Rv9IGTo=)
                          4: 3130332e36362e33332e302f32342d3234203d3e2034363131.roa (hash: n5yRgo6J2D5FtGrXkvOOKqNrGph1QpbzvpT/k6W4Gyg=)
                          5: 3230332e3139322e372e302f32342d3234203d3e2034363131.roa (hash: SDHyN9XXrw0odzkF0QeNY9cKYZ9QdH1ieH7qxu1iHl8=)
                          6: 3130332e3232382e3133362e302f32342d3234203d3e2034363131.roa (hash: gi5/C7Ig+PLVimVU9eNIn1aKpNA5wgBO2EvkhiKLFtQ=)
                          7: 3230322e3132332e3131302e302f32342d3234203d3e2034363131.roa (hash: 155iifkZEs6RHAaqhrEQCAQN53twEduDtnNVPAqFrTI=)
                          8: 323430323a616663303a3a2f33322d3332203d3e2034363131.roa (hash: f3GHixVb1HwjhyVU8K4swaXzIGI0Hioddav5kM0XXUw=)
                          9: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl (hash: j75LOXTfFixNMmjy2146aUrq8JKMGyWE+OEbmyFWNbc=)
                          10: 3230332e3139322e322e302f32342d3234203d3e2034363131.roa (hash: 5kRdUKU+ZXXchqJyoqf+wUpdIG1fnufxQH0iQlauhG0=)
                          11: 3130332e3232382e3133382e302f32342d3234203d3e2034363131.roa (hash: yTCamlVpkLTaQtiao0McbVEofmqZPgYyOVfZcUXNIMg=)
                          12: 3230332e3139322e312e302f32342d3234203d3e2034363131.roa (hash: 0KdLEVUiybk5V4n+f+0dKRmU6UVh7v523bGbqNGXd8I=)
                          13: 3130332e36362e33342e302f32342d3234203d3e2034363131.roa (hash: tjZDTuEgQlRXpFbbaG0NArZJgDuaiVOSE05Z7p9qiAI=)
                          14: 3230332e3139322e382e302f32342d3234203d3e2034363131.roa (hash: ExwddNKPU24UIMMf46gIGo0/55R/RolIT8ID+4HvTfo=)
                          15: 3230322e3132332e3130372e302f32342d3234203d3e2034363131.roa (hash: 3tbE64n/dii7GNRtLZg5K6aHAbP1egLJB2VvyhZEfFU=)
                          16: 3230332e3139322e392e302f32342d3234203d3e2034363131.roa (hash: Uy+BapU0I48WC0bWQ2ZydXi48JznYrjW62PXNe53HUM=)
                          17: 3230332e3139322e31302e302f32342d3234203d3e2034363131.roa (hash: B5g+2JRh5TgR/UTOSPrdbR+qCyH6GJDVipqqxDIoaCk=)
                          18: 3230332e3139322e362e302f32342d3234203d3e2034363131.roa (hash: CRUJkzzmVRsaFDZOKPvn/CRKcvAx+oeYntLvx9WwCyk=)
                          19: 3130332e3232382e3133392e302f32342d3234203d3e2034363131.roa (hash: QdeAkUPnqLpZiSPqBIxzU0fpw+Eqvq8f9jvgOeoo9mg=)
                          20: 3130332e36362e33352e302f32342d3234203d3e2034363131.roa (hash: gY+qMgWgJvHs6SDZmlGFp+AAc3uGBrjBkD6f9uzt130=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f1:af:22:f6:ef:35:a9:6f:50:c3:8f:cb:68:6d:a5:8f:df:aa:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
        Validity
            Not Before: Jul 14 16:36:41 2026 GMT
            Not After : Jul 15 20:09:41 2026 GMT
        Subject: CN=E87C0A927A7CB258F60AE9F8D5E8E2506A28BF30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ff:20:c3:4b:7d:16:a0:04:82:8e:62:65:ef:
                    e9:e0:14:60:4b:38:88:a5:16:ee:b4:8c:16:59:16:
                    77:30:15:b7:e1:b0:01:89:2f:06:7e:af:9c:a2:ed:
                    c5:fb:f2:0f:a1:a0:7e:45:31:76:2a:e2:2b:e5:c5:
                    fb:de:84:03:69:31:f4:68:58:03:84:92:98:aa:00:
                    95:7d:09:77:cf:50:3c:db:2c:76:e2:54:a9:f3:fe:
                    ab:fe:ca:ca:26:6e:0b:57:6a:64:29:55:3f:53:a8:
                    e7:5a:3a:38:b4:68:39:fe:21:c8:bd:4c:f9:96:99:
                    bc:62:f9:bc:d8:95:29:84:25:46:96:40:c1:b3:8c:
                    11:75:67:4b:01:9c:1d:62:5c:58:26:1a:2d:07:a1:
                    65:86:51:76:5b:46:ac:34:cc:65:dd:32:c7:8b:94:
                    4d:e1:6f:6c:cd:2e:06:50:86:fa:26:4a:db:5d:36:
                    bc:c3:8c:e1:2d:45:de:7a:2d:8d:5b:69:5d:bf:7b:
                    29:b1:75:69:91:9c:ff:ba:93:31:d3:6e:45:09:76:
                    5a:9a:19:20:da:73:0a:3e:13:66:09:39:f9:5f:25:
                    c2:7d:af:99:9d:b7:46:54:2c:e6:59:e3:3b:22:c7:
                    9a:94:eb:f3:ef:bc:98:d8:7e:2f:21:e9:30:19:6b:
                    71:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7C:0A:92:7A:7C:B2:58:F6:0A:E9:F8:D5:E8:E2:50:6A:28:BF:30
            X509v3 Authority Key Identifier:
                keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ba:96:28:f6:78:34:33:3b:32:64:8c:c9:72:ec:31:9e:98:
         41:50:ea:26:54:d6:e4:06:07:c8:b1:30:1e:5f:39:07:2d:d0:
         92:bc:f9:80:5a:1c:94:bc:61:2d:61:ff:bd:5d:89:b2:2f:18:
         92:47:dc:46:97:25:c4:2a:bf:a8:8d:33:4f:68:a7:65:24:f2:
         72:43:f7:2b:8f:d4:94:2e:84:24:b5:00:e9:ed:bb:1d:0f:90:
         f1:bd:9d:bb:9a:3b:43:a4:20:c3:fb:3a:2c:d5:99:90:8e:8b:
         d5:cb:57:4b:4c:41:7d:74:d7:24:b4:11:cc:c6:01:ff:07:a2:
         63:80:e7:ce:94:b8:f6:be:5a:1f:e0:f5:2a:e9:f0:eb:52:0e:
         36:0b:e2:b1:17:03:d3:93:15:b6:c7:71:17:99:2c:bb:fc:11:
         95:9b:a2:3b:56:11:39:8a:7a:ea:1a:f8:42:d7:19:a6:9a:ca:
         54:b5:1f:69:71:fa:1e:d6:2b:5c:c5:60:a8:b6:62:01:f8:fb:
         59:e6:f6:cf:24:9b:56:1a:76:12:fa:f3:59:77:f8:89:0e:06:
         cc:b2:88:e4:b1:e3:22:f2:90:d8:31:4e:49:65:5e:65:6a:b0:
         52:87:fb:96:de:da:18:0f:56:26:77:a8:a8:6e:a4:11:ca:32:
         33:3d:fa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:00:40 2026 by rpki-client