Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft
File:                     D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft (raw, json)
Hash identifier:          OhmV9HCDZf9WOf8hx/lhgk4T9jQcWRtFsNWNWBrzW10=
Subject key identifier:   C7:86:DF:42:75:B8:04:D3:40:32:8B:8F:99:A4:2C:A1:AE:C4:46:75
Authority key identifier: D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E
Certificate issuer:       /CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E
Certificate serial:       7BAD434B0748BC09F534A1CFC333E26F26289FF1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft
Manifest number:          16
Signing time:             Fri 29 May 2026 04:32:34 +0000
Manifest this update:     Fri 29 May 2026 04:27:34 +0000
Manifest next update:     Sat 30 May 2026 04:54:34 +0000
Files and hashes:         1: 323430313a313332303a3a2f33322d3332203d3e2039383038.roa (hash: gkXLtfsm57+1SLQOnZmPCOz2Uc/ydhDt+i+LwC+ujFg=)
                          2: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl (hash: DwAhhgVKZ+tMZ5l0M0J5WADluccsqpqYc2ej2Tkcyu8=)
                          3: 3130332e3233322e3136362e302f32332d3233203d3e2039383038.roa (hash: wZgCkdZF56vtDndZBJDFwSUyJO2LVVtO+dAGyXmN1DQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 04:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ad:43:4b:07:48:bc:09:f5:34:a1:cf:c3:33:e2:6f:26:28:9f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E
        Validity
            Not Before: May 29 04:27:34 2026 GMT
            Not After : May 30 04:54:34 2026 GMT
        Subject: CN=C786DF4275B804D340328B8F99A42CA1AEC44675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:73:58:31:c3:07:89:39:79:3c:89:15:d3:f9:
                    1f:d9:88:30:38:45:fb:3f:f1:e9:2c:2a:80:f4:6a:
                    31:77:3d:45:3b:1b:ba:80:78:f1:00:7b:b5:ec:ab:
                    da:a3:5c:39:42:ca:54:24:b4:d6:6a:87:0b:f9:f6:
                    dc:f5:3f:0c:c9:4a:15:e5:9e:19:7a:df:2d:04:1a:
                    7f:4f:38:cd:dd:17:f6:99:c1:c5:50:0b:70:f4:94:
                    fe:a8:4a:ed:10:40:53:00:f6:52:7c:f5:50:58:7a:
                    86:8b:60:b9:a3:0c:e8:67:b2:bd:78:aa:fc:f4:76:
                    73:9f:3d:6d:5e:62:5f:7a:04:67:52:b1:d6:02:c6:
                    d3:27:d9:9e:b7:35:fe:2b:e8:8b:c5:fb:ea:15:f0:
                    58:52:96:1d:2e:1c:46:3d:2a:c3:c1:6f:81:67:dd:
                    83:6f:27:d1:ce:bd:65:92:3f:2e:ac:87:6f:35:cd:
                    73:e6:33:9b:d6:79:33:9a:a2:d4:9d:90:2d:af:b0:
                    43:2c:ef:a9:6a:2e:32:7d:81:be:06:fc:92:c8:e1:
                    40:e7:0c:20:76:5e:53:f3:e8:90:f5:6a:5c:ab:a9:
                    89:06:b1:f3:d0:63:2f:8f:ab:c7:3f:81:8e:ad:2d:
                    65:68:10:1f:37:a3:59:45:f0:24:7b:aa:de:6e:7e:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:86:DF:42:75:B8:04:D3:40:32:8B:8F:99:A4:2C:A1:AE:C4:46:75
            X509v3 Authority Key Identifier:
                keyid:D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:23:71:f6:fe:a6:af:f7:38:bc:54:5c:9d:b0:9e:dc:a6:72:
         06:a7:29:be:a3:ae:9e:a4:38:34:32:bf:22:22:0d:47:49:18:
         83:dd:ff:9d:dd:79:dc:55:98:5b:ac:eb:3e:e1:aa:ca:8e:a6:
         16:fc:f7:a5:3f:0d:74:91:83:ab:00:87:a5:43:1f:ff:0a:6f:
         74:82:8f:31:dd:69:2d:59:24:16:9e:36:07:b5:c1:ab:4a:2f:
         8d:3a:43:a4:eb:91:80:d0:cf:ac:22:ec:aa:d9:0b:5e:13:c7:
         7d:30:2c:93:b4:4e:79:9f:75:7f:fa:eb:d1:76:94:44:96:74:
         04:3b:4f:e2:53:65:8b:2b:12:2b:b9:e5:fa:d6:68:5b:2f:f9:
         22:53:b3:0c:d5:75:b7:7e:f1:40:59:82:23:20:8a:07:10:21:
         77:bf:94:ff:c2:5a:59:06:f4:a7:65:29:56:a1:24:d4:34:d4:
         f9:ea:1a:2e:d0:ed:70:2f:0a:15:b2:d2:22:0b:78:36:21:e0:
         e1:84:98:45:04:0a:a5:34:72:a1:d2:ef:9e:25:a9:93:06:60:
         c7:f4:e1:ce:93:a6:ad:ab:0c:a0:29:9c:d1:69:62:02:07:98:
         39:4c:87:3e:c5:bb:a3:d7:99:ab:f8:6d:29:74:07:ed:8f:5f:
         3b:23:5b:62
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUe61DSwdIvAn1NKHPwzPibyYon/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgy
NzZFOUQwRTAeFw0yNjA1MjkwNDI3MzRaFw0yNjA1MzAwNDU0MzRaMDMxMTAvBgNV
BAMTKEM3ODZERjQyNzVCODA0RDM0MDMyOEI4Rjk5QTQyQ0ExQUVDNDQ2NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSc1gxwweJOXk8iRXT+R/ZiDA4
Rfs/8eksKoD0ajF3PUU7G7qAePEAe7Xsq9qjXDlCylQktNZqhwv59tz1PwzJShXl
nhl63y0EGn9POM3dF/aZwcVQC3D0lP6oSu0QQFMA9lJ89VBYeoaLYLmjDOhnsr14
qvz0dnOfPW1eYl96BGdSsdYCxtMn2Z63Nf4r6IvF++oV8FhSlh0uHEY9KsPBb4Fn
3YNvJ9HOvWWSPy6sh281zXPmM5vWeTOaotSdkC2vsEMs76lqLjJ9gb4G/JLI4UDn
DCB2XlPz6JD1alyrqYkGsfPQYy+Pq8c/gY6tLWVoEB83o1lF8CR7qt5ufjaJAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUx4bfQnW4BNNAMouPmaQsoa7ERnUwHwYDVR0j
BBgwFoAU0w+QifnqWDYAC4rkvghaiCdunQ4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzEwNjI1NDQ3MzM5NjI0MS8wL0QzMEY5MDg5RjlFQTU4MzYwMDBCOEFFNEJFMDg1
QTg4Mjc2RTlEMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgyNzZFOUQwRS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDcxMDYyNTQ0NzMzOTYyNDEvMC9EMzBGOTA4OUY5RUE1
ODM2MDAwQjhBRTRCRTA4NUE4ODI3NkU5RDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2iNx9v6mr/c4
vFRcnbCe3KZyBqcpvqOunqQ4NDK/IiINR0kYg93/nd153FWYW6zrPuGqyo6mFvz3
pT8NdJGDqwCHpUMf/wpvdIKPMd1pLVkkFp42B7XBq0ovjTpDpOuRgNDPrCLsqtkL
XhPHfTAsk7ROeZ91f/rr0XaURJZ0BDtP4lNliysSK7nl+tZoWy/5IlOzDNV1t37x
QFmCIyCKBxAhd7+U/8JaWQb0p2UpVqEk1DTU+eoaLtDtcC8KFbLSIgt4NiHg4YSY
RQQKpTRyodLvniWpkwZgx/ThzpOmrasMoCmc0WliAgeYOUyHPsW7o9eZq/htKXQH
7Y9fOyNbYg==
-----END CERTIFICATE-----
Generated at Fri May 29 22:02:53 2026 by rpki-client