Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft
File:                     C178E89AC582AE71D7881FC86E201466F09D849B.mft (raw, json)
Hash identifier:          F52sVV0W1yza16z6VqvzH7+Vg3H2t5WEJfmLKAomlKk=
Subject key identifier:   5C:4B:DF:7A:2A:15:E0:34:FB:5F:EB:10:4F:44:3D:A5:AB:B1:EE:47
Authority key identifier: C1:78:E8:9A:C5:82:AE:71:D7:88:1F:C8:6E:20:14:66:F0:9D:84:9B
Certificate issuer:       /CN=C178E89AC582AE71D7881FC86E201466F09D849B
Certificate serial:       15FE414684FD6459C2AAB05F20EB78B39EA40954
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft
Manifest number:          15
Signing time:             Fri 29 May 2026 11:37:49 +0000
Manifest this update:     Fri 29 May 2026 11:32:49 +0000
Manifest next update:     Sat 30 May 2026 14:34:49 +0000
Files and hashes:         1: C178E89AC582AE71D7881FC86E201466F09D849B.crl (hash: eaIlEH7Ab6VOhEDn3j3m90YosyaAqaBQAObSQfga94I=)
                          2: 3130332e35332e3230382e302f32342d3234203d3e2034383038.roa (hash: enYv3abbVKOktfEN/FTcAdZ8EmguoNf0izTnKUsvjeY=)
                          3: 3130332e35332e3231312e302f32342d3234203d3e2034383038.roa (hash: 9USapACXMKvdBF3g3pPaZVE/MEDexYhYCH1QWormaIc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 14:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:fe:41:46:84:fd:64:59:c2:aa:b0:5f:20:eb:78:b3:9e:a4:09:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C178E89AC582AE71D7881FC86E201466F09D849B
        Validity
            Not Before: May 29 11:32:49 2026 GMT
            Not After : May 30 14:34:49 2026 GMT
        Subject: CN=5C4BDF7A2A15E034FB5FEB104F443DA5ABB1EE47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d2:55:a8:80:ca:bc:16:b6:3f:b4:ea:11:d0:
                    2a:c6:dc:ec:cf:35:82:7e:bc:b2:60:40:bd:aa:04:
                    98:de:99:9b:d1:8d:54:7a:c5:2a:68:e7:e0:9e:c1:
                    ec:ed:22:a6:b2:00:43:3a:cb:c1:69:7a:fa:15:d3:
                    7f:fa:bb:95:88:00:82:6d:b8:09:28:72:29:5a:72:
                    5a:99:01:22:fd:cb:d2:a0:51:79:c7:5d:a4:5a:dc:
                    a5:85:f0:be:74:bd:94:b8:87:d5:e0:93:b0:b3:a0:
                    39:37:8c:7e:99:e3:b3:4b:91:28:fd:90:9d:02:eb:
                    21:85:d6:c0:ac:12:de:04:1a:38:0f:9d:ab:d0:06:
                    aa:d9:07:77:68:85:4d:b0:a3:b5:b9:20:e8:ac:9f:
                    66:9a:a2:c0:60:12:f9:3e:39:a7:18:16:b5:81:46:
                    b5:a9:5c:3b:1d:fb:e0:1f:61:c8:a4:b7:92:f9:6b:
                    9a:c4:2c:74:50:6a:05:0a:7a:c6:80:8d:03:29:30:
                    b8:b8:5c:65:92:6f:79:b8:f0:42:45:8b:e4:b7:da:
                    eb:d4:c8:c2:d9:42:f9:8f:44:50:b2:3b:08:f4:2e:
                    a0:44:0b:30:68:82:15:ca:80:69:80:36:2c:77:b8:
                    27:21:c6:aa:cf:d1:24:2e:8f:fa:a2:0b:24:5d:b3:
                    9a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4B:DF:7A:2A:15:E0:34:FB:5F:EB:10:4F:44:3D:A5:AB:B1:EE:47
            X509v3 Authority Key Identifier:
                keyid:C1:78:E8:9A:C5:82:AE:71:D7:88:1F:C8:6E:20:14:66:F0:9D:84:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:b6:40:4c:30:15:61:75:59:7e:45:56:af:69:66:a5:19:01:
         65:33:33:02:4f:24:fa:56:f1:25:9b:d5:62:0b:6c:c4:bd:f8:
         85:70:4d:02:f1:6a:e5:a8:50:21:71:f8:c3:fc:62:4f:f3:2c:
         ca:40:bc:33:89:10:39:48:01:cf:26:69:bc:00:59:7f:b0:bb:
         74:d7:2c:98:74:ef:65:65:84:fa:33:ae:74:a0:93:5a:b2:8c:
         71:2b:8f:79:88:40:2d:a2:58:f9:dc:6c:9e:45:3b:9b:c5:b1:
         9a:5c:42:f0:d7:8f:30:32:3f:c4:d4:81:ee:93:6d:23:fb:92:
         c8:cb:d8:72:30:72:9b:cc:b2:43:67:c7:94:db:8e:54:74:a0:
         cb:6b:b5:7f:9c:de:a9:9f:6a:9c:0b:d4:71:2e:4d:58:9d:3a:
         2b:34:9e:7c:66:13:56:93:c7:a2:ed:4b:bf:e4:60:8c:69:75:
         89:2b:83:98:0e:dd:75:57:ca:35:a8:fb:a7:34:5e:67:d1:6a:
         09:bc:05:b8:87:93:51:32:0d:bd:aa:24:43:b8:0e:59:00:14:
         2d:c0:67:c7:fc:ee:f6:5d:e6:13:31:90:02:57:f0:44:96:c4:
         0c:a8:54:54:17:f3:d5:e4:ec:68:7e:ab:64:5b:9e:eb:04:5c:
         c0:80:19:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:55 2026 by rpki-client