Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft
File:                     D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft (raw, json)
Hash identifier:          RM7iv71WwctjWQfvqqDCHM7fK1e9y3PMnLuUshY8LQ8=
Subject key identifier:   10:C9:05:EE:BF:C5:6D:E5:FC:C2:59:86:C3:2F:F1:F8:90:56:15:6A
Authority key identifier: D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E
Certificate issuer:       /CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E
Certificate serial:       606C74E119F9D85B62C9978CAD2945681694A1AE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft
Manifest number:          54
Signing time:             Tue 14 Jul 2026 08:45:53 +0000
Manifest this update:     Tue 14 Jul 2026 08:40:53 +0000
Manifest next update:     Wed 15 Jul 2026 11:21:53 +0000
Files and hashes:         1: 3130332e3233322e3136362e302f32332d3233203d3e2039383038.roa (hash: wZgCkdZF56vtDndZBJDFwSUyJO2LVVtO+dAGyXmN1DQ=)
                          2: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl (hash: tUoTaNSFQZX/o6BBE3E7BPy+92ZT9rHPfGumEoZlghw=)
                          3: 323430313a313332303a3a2f33322d3332203d3e2039383038.roa (hash: gkXLtfsm57+1SLQOnZmPCOz2Uc/ydhDt+i+LwC+ujFg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 11:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6c:74:e1:19:f9:d8:5b:62:c9:97:8c:ad:29:45:68:16:94:a1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E
        Validity
            Not Before: Jul 14 08:40:53 2026 GMT
            Not After : Jul 15 11:21:53 2026 GMT
        Subject: CN=10C905EEBFC56DE5FCC25986C32FF1F89056156A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:66:c1:ee:84:fa:36:af:eb:54:81:ef:36:d9:
                    54:39:5e:74:36:54:67:d2:47:a6:5f:de:4b:bc:04:
                    99:60:e8:67:f7:fe:77:74:f9:52:f0:80:13:b8:64:
                    e3:4f:89:d2:33:df:17:de:c9:82:e3:18:c5:40:ea:
                    0b:5e:49:e6:e0:ea:c6:40:db:f6:a8:5d:f8:22:7a:
                    b1:9b:17:c6:bb:05:0f:f0:d1:71:6e:67:4b:13:71:
                    93:2d:b1:d7:c9:e0:e1:bd:e7:ee:c8:54:fb:4f:62:
                    01:bd:37:df:cc:dd:93:32:b7:ca:a6:21:63:1f:db:
                    30:be:42:a9:77:38:a5:68:02:f9:98:92:01:63:6a:
                    a6:b2:9a:00:d8:f9:53:78:12:93:0c:ad:06:89:f1:
                    ac:af:5b:c8:20:7a:fb:1c:5f:ee:69:c8:84:dc:f8:
                    a4:e2:1d:b9:5e:65:6d:09:7d:a1:a9:a1:2d:41:7f:
                    f8:12:b9:dd:ba:10:b4:98:1a:21:e3:27:9c:20:15:
                    d9:0b:14:b8:d0:6b:0b:28:1d:f3:95:63:e3:46:f9:
                    8d:10:a2:d6:18:b5:d4:78:75:f6:94:8f:81:4d:83:
                    65:46:8e:24:37:2b:54:1c:01:05:83:bc:d4:3f:65:
                    e7:a7:9f:d0:38:98:19:86:b8:f3:7c:f3:5a:2d:58:
                    60:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C9:05:EE:BF:C5:6D:E5:FC:C2:59:86:C3:2F:F1:F8:90:56:15:6A
            X509v3 Authority Key Identifier:
                keyid:D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:92:1d:39:74:bd:22:0f:18:a4:4a:54:e4:cc:d1:23:b3:58:
         2c:8c:60:62:08:9b:6a:04:40:d5:6b:59:0a:aa:1e:78:fc:66:
         89:72:ae:60:8d:2e:be:e8:03:c8:2b:a6:cf:58:cc:b3:d8:99:
         cd:21:6b:a3:02:b4:09:c6:fa:4a:b3:20:f0:94:89:19:a5:94:
         74:f2:2b:ee:ba:52:3b:c0:7a:e2:cd:dc:7e:1a:00:8b:c8:e6:
         3f:b4:ee:e6:33:66:ea:ee:f3:de:d0:1d:52:f5:fc:04:8f:d2:
         41:67:83:04:89:ca:0e:05:d5:c3:1d:a7:99:35:f8:85:07:df:
         c1:60:ed:91:51:77:19:39:69:c9:33:ae:d3:66:75:8b:b2:be:
         6e:09:91:40:df:3e:e6:3e:92:54:e8:90:45:5a:2a:35:96:bb:
         9a:1b:1e:b0:fe:4f:11:e4:6a:c3:50:96:6a:ea:b2:28:3f:bd:
         10:82:cc:5e:8a:cf:94:e7:2c:9f:5f:58:0a:fa:8a:c2:05:93:
         26:c5:a0:b0:2b:63:d8:3c:9a:0e:db:d1:88:3c:82:74:9c:3f:
         f5:95:85:a9:f8:c7:57:a7:36:66:1f:bf:3d:f1:d6:79:33:8c:
         0c:2c:fc:c7:40:15:99:56:c2:fc:78:5f:f8:67:83:7b:17:5b:
         eb:5d:ad:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:08:07 2026 by rpki-client