Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
File:                     BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft (raw, json)
Hash identifier:          smjx5dzcvh7fH+0Omj+B6gz86ER/nCJL3ueeMnzpa2c=
Subject key identifier:   E5:4A:C8:16:3E:34:07:9E:60:73:C3:24:09:92:E2:FF:40:EB:EC:DA
Authority key identifier: BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
Certificate issuer:       /CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Certificate serial:       249980B53341CD3F1D3291BCC7198087E99F0150
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
Manifest number:          19
Signing time:             Fri 29 May 2026 14:42:57 +0000
Manifest this update:     Fri 29 May 2026 14:37:57 +0000
Manifest next update:     Sat 30 May 2026 17:24:57 +0000
Files and hashes:         1: 3130332e35342e35302e302f32332d3233203d3e203536323832.roa (hash: kteh+/dH58X8lyJpG5LrKUJ5HrTXpY5jYizwIbecsQs=)
                          2: 3131342e3131352e302e302f31372d3137203d3e203233373234.roa (hash: GfJl+8k+x926XIyhzeOnyi2P7nB+2KG8yC4nA0cG9PA=)
                          3: 3130332e35342e34382e302f32332d3233203d3e203536323832.roa (hash: rrQA6aw3fS76sFYorViQean0YInZIxQAAm7IiL1pGlM=)
                          4: 3132322e3131352e3232342e302f32302d3230203d3e203233373234.roa (hash: Ye+DTXHIkz3eHMSsk/ucrcfrIgGZEAsakJtm/xjeJpg=)
                          5: 3132322e3131352e3233322e302f32312d3231203d3e203233373234.roa (hash: yvHJeUNbBLjIA1uCIwuozmaBxyAk+8Qro/Cz4RL6dn8=)
                          6: 3230332e3130302e3139322e302f32302d3230203d3e203233373234.roa (hash: yhcpFafa82ZZ8Sh+p1t4DMLfsG6wt8pshLb8NPzO9wA=)
                          7: 3130332e35342e34382e302f32322d3232203d3e203536323832.roa (hash: njKoSaWfi1fkQuUrNF9621tCcCYx26fOri8fTHRgZt0=)
                          8: BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl (hash: 4PtpgPEZxe1/XV1jOhcRHwK7KSJ5EhncZzFq/PMzpyw=)
                          9: 34352e3131342e39362e302f32322d3232203d3e203333363738.roa (hash: t0MWhrASdQRMLyBv3kSVEOD5luNKKNMMpjuRAyutYn4=)
                          10: 3130362e332e31362e302f32302d3230203d3e203233373234.roa (hash: lvmeZtZf9nsEoRffragC1Fgvf+5zk0SVEPBQog6hscM=)
                          11: 3131302e3137332e33322e302f32302d3230203d3e203233373234.roa (hash: zqjN713mX9h2lmV5neJpe1TEpqF+no7deYXjv5XjMXk=)
                          12: 3132322e3131352e3232342e302f32312d3231203d3e203233373234.roa (hash: XKCCKHOJXdoTfyJSt90L9RE9US1lrhykFNrY4HPiUNA=)
                          13: 3130362e332e3139322e302f32302d3230203d3e203233373234.roa (hash: VwFeq3QNx8C1znAV513FBBjmORwGRi/MbWfhasR7FLc=)
                          14: 3132322e3131352e302e302f32302d3230203d3e203233373234.roa (hash: DI1kyNXEr04OL+sHpbhHy+X6wizP6k5iogstAkRv4Ro=)
                          15: 3132322e3131322e33322e302f31392d3139203d3e203233373234.roa (hash: J1t6jrr9/Dx/y+pREjqwUAfEYU0QsXL8mABzjmSsKUE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:99:80:b5:33:41:cd:3f:1d:32:91:bc:c7:19:80:87:e9:9f:01:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
        Validity
            Not Before: May 29 14:37:57 2026 GMT
            Not After : May 30 17:24:57 2026 GMT
        Subject: CN=E54AC8163E34079E6073C3240992E2FF40EBECDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a5:af:c0:9d:2a:b8:d7:0b:2a:a1:c3:49:6d:
                    43:63:b8:69:de:e5:1a:86:11:68:8b:8d:f5:97:64:
                    43:1d:9c:0b:04:46:d5:6f:6d:30:2e:d0:ec:85:cd:
                    d9:63:49:02:e4:64:7c:6a:6b:42:db:2e:03:bd:5d:
                    95:0f:ba:7b:d5:dd:92:a2:00:4e:c3:35:9f:f5:26:
                    4d:c7:6d:37:eb:e4:94:bb:ef:36:9d:ac:f5:ca:69:
                    a2:51:f4:98:1a:ce:e4:73:b5:d9:23:34:2a:c0:31:
                    34:1a:73:af:1e:ba:9f:57:ec:c9:2a:b9:5f:35:b5:
                    61:dc:ad:9d:0a:13:ff:2e:ea:8c:22:eb:44:de:a2:
                    5c:3f:f9:9d:a6:1d:6a:2b:e0:9e:01:57:ed:01:47:
                    74:c6:b0:b3:30:0c:0c:c4:f4:a0:a0:2d:61:d7:32:
                    37:a5:a3:9e:8e:59:85:90:91:d3:e2:e8:31:3b:f3:
                    cf:46:f4:0e:57:73:04:32:1f:23:9a:a9:bd:07:5d:
                    e5:c5:f2:1c:aa:b7:69:2a:92:f7:cf:76:9e:5e:52:
                    1a:67:8a:ef:e3:ea:fb:a0:03:83:a5:ce:c5:74:86:
                    df:4c:cb:6e:ca:d8:d8:63:b1:db:27:d6:79:f6:33:
                    3c:9c:f8:aa:9a:2f:f3:6f:1a:c8:51:8c:56:ef:79:
                    42:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4A:C8:16:3E:34:07:9E:60:73:C3:24:09:92:E2:FF:40:EB:EC:DA
            X509v3 Authority Key Identifier:
                keyid:BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d7:1d:b2:13:f3:8c:c5:31:bf:51:6e:fb:00:e2:94:98:f0:
         a7:6d:86:3a:10:ad:d6:b2:c6:cf:dd:94:15:26:e5:8e:41:d2:
         3b:65:e7:af:7a:59:59:7b:a4:09:f1:24:94:27:a2:08:b3:43:
         d1:d8:d2:89:9b:44:9f:4e:a3:af:66:9d:fd:ad:c2:e6:d1:09:
         83:b5:ee:bf:ea:51:64:51:16:25:33:90:44:8a:eb:84:d6:06:
         64:ec:e3:5f:f9:fd:ff:48:bd:e8:e1:92:e6:7f:98:8d:b0:de:
         df:a0:9f:9e:55:67:dd:48:95:75:8c:f6:50:b4:d3:7b:12:0a:
         26:c1:3c:54:05:ee:b7:23:48:85:f0:a2:45:b5:c6:c9:42:9b:
         d8:81:0c:d7:1c:4e:2b:22:4d:03:ad:73:6b:34:e8:a3:4a:e8:
         56:20:ea:15:be:88:d9:e0:b7:cc:db:28:ba:46:ce:40:8c:21:
         d0:e2:20:47:d3:71:7a:f7:64:b9:b2:1a:1e:87:f1:7a:9a:6f:
         c0:c5:6e:16:87:9d:d3:a1:00:cb:0a:78:56:de:91:38:b9:ad:
         1f:93:bb:c7:f3:ba:f1:2a:95:a8:40:40:db:5d:68:8f:12:e4:
         29:31:ed:d1:c7:4f:ea:31:53:ac:f6:33:d5:3c:cd:eb:44:9c:
         2a:0a:af:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:03:32 2026 by rpki-client