Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
File:                     34792F5FA94D005EB8C9704B96BE16835CB06819.mft (raw, json)
Hash identifier:          0PUykqXF3lAEXJnsFJK8tdD6NBqO5Gsnik0ja8eoQjI=
Subject key identifier:   E5:C4:E8:3D:06:29:CB:C7:FE:3A:F6:9F:50:B1:23:7D:89:0D:7A:84
Authority key identifier: 34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19
Certificate issuer:       /CN=34792F5FA94D005EB8C9704B96BE16835CB06819
Certificate serial:       236D90895429BFEB19EC6679F1C572D7195C5C8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
Manifest number:          0D
Signing time:             Fri 29 May 2026 17:33:03 +0000
Manifest this update:     Fri 29 May 2026 17:28:03 +0000
Manifest next update:     Sat 30 May 2026 19:34:03 +0000
Files and hashes:         1: 34792F5FA94D005EB8C9704B96BE16835CB06819.crl (hash: cuJisORu2a5z96vySWQAb2hExjcWg9KgW7R1z6Qd85M=)
                          2: 323430323a313861303a3a2f33322d3332203d3e20313531323239.roa (hash: c8WNPZIvhrZeBjLe5wY9CC8paBg1j9yN7x/SJKYbClQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:6d:90:89:54:29:bf:eb:19:ec:66:79:f1:c5:72:d7:19:5c:5c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34792F5FA94D005EB8C9704B96BE16835CB06819
        Validity
            Not Before: May 29 17:28:03 2026 GMT
            Not After : May 30 19:34:03 2026 GMT
        Subject: CN=E5C4E83D0629CBC7FE3AF69F50B1237D890D7A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:85:5c:d1:fc:68:86:d8:72:25:63:e0:b9:
                    c0:39:94:3e:7a:b6:ae:3f:03:3c:5a:2f:5e:de:d8:
                    70:d4:2c:8a:e7:b2:f6:48:c8:16:fd:6b:58:27:af:
                    bb:93:8a:dd:77:3f:70:47:11:5c:38:cb:1c:2b:55:
                    ef:b4:47:66:0c:2f:15:66:c8:77:89:aa:4a:9b:88:
                    ac:97:a6:c3:01:0b:e7:8e:3f:bf:b5:15:de:ee:14:
                    da:d6:6a:00:e3:bc:26:51:62:c6:01:d3:aa:e8:b3:
                    ff:d9:07:b0:72:95:6c:22:13:db:2b:2d:f2:86:e4:
                    c0:8f:3c:83:0c:68:4b:54:88:5b:59:2f:0f:04:9c:
                    c4:c7:20:b2:ab:da:f5:3f:f1:e7:80:bb:66:6e:88:
                    3e:84:0b:88:5a:a7:ac:22:71:11:1c:fd:3e:21:2b:
                    2d:b2:19:9b:a2:20:c6:de:d9:14:82:a1:93:cd:e6:
                    8b:55:ef:24:11:a0:d1:87:60:a3:2b:3e:42:08:bb:
                    8b:7d:39:f0:2e:a0:a4:3a:ee:7b:1e:9b:eb:34:d6:
                    1c:40:1a:a6:4d:e2:7d:c9:44:55:c8:5b:19:79:07:
                    3f:b4:76:c0:17:75:27:08:28:3d:d6:cb:68:d8:c4:
                    b3:a8:83:73:51:b3:fc:90:1a:c3:c7:c8:8d:24:bf:
                    90:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C4:E8:3D:06:29:CB:C7:FE:3A:F6:9F:50:B1:23:7D:89:0D:7A:84
            X509v3 Authority Key Identifier:
                keyid:34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7e:82:b8:92:fa:01:ec:ea:ef:4d:39:89:96:f9:77:b6:48:
         83:e8:64:ee:97:bb:2b:6b:80:cb:12:5e:6c:21:b2:e2:58:c3:
         ee:cd:c0:34:3a:ec:e9:c4:fb:34:f0:b7:c7:0f:3a:3b:03:ed:
         d4:80:64:a2:77:ce:cb:23:d8:29:ad:7d:53:94:cd:ba:4e:aa:
         02:62:ff:2e:ff:62:d3:7e:b6:76:56:da:f8:5c:b0:6e:1b:6e:
         f6:c4:40:5c:a9:d4:fe:9c:08:ff:38:6f:d8:4f:ab:6b:c5:08:
         d8:9a:ad:e5:f3:04:ed:1a:0f:f3:7a:f1:f2:de:3e:fb:ac:0a:
         50:80:29:82:d5:5e:72:f2:59:49:23:46:e1:62:7a:25:85:8c:
         52:7e:0f:f8:29:ff:16:98:64:12:50:1a:c7:c6:4b:57:38:de:
         a3:8d:e9:14:8b:88:ad:3b:e0:f6:c6:b5:aa:e6:90:c7:ee:8e:
         2b:8e:a1:d0:c5:76:68:ca:0d:0d:48:e5:75:60:60:24:d9:94:
         fd:a9:54:01:42:c5:9d:4d:38:f0:8e:6b:fe:5c:b9:55:f2:f8:
         e4:c6:a9:e9:96:45:51:0e:b3:ea:72:bb:59:2e:09:31:3a:1c:
         e6:d7:4a:fb:3a:d0:1e:bf:63:8f:cf:3a:b7:3e:dc:80:7e:85:
         0d:e4:5f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:56 2026 by rpki-client