Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
File:                     305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft (raw, json)
Hash identifier:          EdP1ydYexSW4bM0dhwPCDXXa4U4f9/pFklRVgyYsqlA=
Subject key identifier:   91:B3:85:89:2F:72:DC:B6:EA:32:82:59:1C:4D:E1:A4:46:5A:D9:D1
Authority key identifier: 30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C
Certificate issuer:       /CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
Certificate serial:       2DC51AEF024266E8021CDA458031FBCB95121972
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
Manifest number:          84
Signing time:             Fri 28 Aug 2026 06:47:37 +0000
Manifest this update:     Fri 28 Aug 2026 06:42:37 +0000
Manifest next update:     Mon 31 Aug 2026 07:06:37 +0000
Files and hashes:         1: 305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl (hash: LqdC1nuLE3K449vvOt5HqqpgRrLZoL6lIY84bY9RjBA=)
                          2: 34332e3232342e38302e302f32322d3232203d3e2034383337.roa (hash: bXqT1q3Xi8uEtR2DeZe8yD99M07BG3eez7vSwEaf0iI=)
                          3: 3130332e3231342e34382e302f32322d3232203d3e2034383337.roa (hash: wpwMVqYTLbP68yao2fYoXKN2+eMRU0R4Vc9UHj1IA7A=)
                          4: 3134342e34382e36342e302f32322d3232203d3e2034383337.roa (hash: vQ0CAaPQV+i3w/GJOaVXDBBSQcmTSIVf3fh4Hxu2or0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 07:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c5:1a:ef:02:42:66:e8:02:1c:da:45:80:31:fb:cb:95:12:19:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
        Validity
            Not Before: Aug 28 06:42:37 2026 GMT
            Not After : Aug 31 07:06:37 2026 GMT
        Subject: CN=91B385892F72DCB6EA3282591C4DE1A4465AD9D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2d:c9:77:ec:58:2d:b9:f8:0f:6b:16:ce:9f:
                    33:57:93:8f:4c:46:97:84:b7:12:9e:a4:a5:18:17:
                    90:70:67:1a:9b:1f:d8:6a:dd:17:b1:51:5a:3e:d5:
                    d8:f2:d3:4c:1b:d6:b3:1f:a2:c4:f2:ae:4f:7a:86:
                    78:ba:c8:7f:67:6c:f9:e8:f6:dc:0c:9e:50:5e:8a:
                    3e:cf:ab:bb:9b:c5:74:41:6c:1a:0f:8d:00:1e:17:
                    54:46:45:05:7f:9e:21:cd:3c:85:7b:50:ab:e1:10:
                    da:fb:c0:a8:4b:a1:eb:f0:66:32:d3:f0:ec:10:0c:
                    cf:82:a4:8e:d0:5a:56:db:22:42:0c:ff:c0:03:c8:
                    ad:9e:e0:c0:2e:3e:0a:4d:16:23:cb:88:af:87:eb:
                    2a:08:80:22:b1:81:5b:08:f8:85:24:b9:e6:bb:0b:
                    66:03:2a:3c:e5:1a:f3:41:fd:1b:a1:b5:b1:6c:4a:
                    ce:59:8b:51:d6:04:c1:b1:08:df:14:31:f6:51:7e:
                    4f:52:e4:78:3d:05:17:c3:96:13:1c:5a:19:f8:71:
                    8d:10:29:dd:2f:71:4f:51:12:36:34:91:d2:15:c5:
                    75:1b:1f:c8:9b:44:90:2c:61:e2:c2:2b:66:5f:02:
                    9e:36:95:93:00:47:4f:1f:b4:dc:4e:86:96:00:a2:
                    3c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B3:85:89:2F:72:DC:B6:EA:32:82:59:1C:4D:E1:A4:46:5A:D9:D1
            X509v3 Authority Key Identifier:
                keyid:30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:59:e6:f1:ad:f1:ba:c7:22:cc:4d:be:63:67:7f:9b:f2:42:
         5c:0e:5a:83:92:7a:39:ad:0f:73:33:df:5e:fe:37:3d:3b:66:
         2f:1b:43:b5:97:9e:89:a6:f9:42:50:a2:b2:85:80:4e:32:5b:
         41:79:73:50:11:97:8f:7c:c7:52:1b:25:92:f8:30:1f:62:10:
         b7:62:07:a0:37:e8:31:3d:e3:49:2d:93:4e:d9:47:b9:4d:80:
         3d:42:46:b3:8e:99:0a:84:98:f9:a7:67:e4:1f:6e:43:e4:04:
         36:89:9b:09:b8:b9:a7:22:36:39:6e:91:b0:1f:ba:01:35:63:
         58:20:b8:ad:55:3e:50:fc:f5:e9:2f:14:54:ed:44:f3:83:30:
         d9:9c:be:1a:05:02:4c:4e:f9:5f:ec:5e:52:e6:19:e0:08:48:
         e2:8b:19:c4:06:19:e1:8a:ed:d4:e3:53:dd:f1:4d:fb:c5:1d:
         e9:44:db:da:7e:7d:1d:47:f8:fb:1e:d2:ba:b5:1b:0e:c4:4e:
         2d:0a:ff:85:64:01:a4:ed:a8:94:76:14:b7:dc:be:5e:79:09:
         71:6f:c1:54:d1:89:02:ba:eb:e7:18:1f:7d:2d:0a:b5:e2:68:
         59:c9:49:3a:bc:a5:1e:56:71:bc:bd:62:04:c3:ab:4e:f1:2f:
         40:2a:53:e5
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIULcUa7wJCZugCHNpFgDH7y5USGXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA1Q0Y5QTQxRENDNkUwNkNFOUNBNzMzNTIzMjVFRkM0
RDM0MzMxQzAeFw0yNjA4MjgwNjQyMzdaFw0yNjA4MzEwNzA2MzdaMDMxMTAvBgNV
BAMTKDkxQjM4NTg5MkY3MkRDQjZFQTMyODI1OTFDNERFMUE0NDY1QUQ5RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Lcl37FgtufgPaxbOnzNXk49M
RpeEtxKepKUYF5BwZxqbH9hq3RexUVo+1djy00wb1rMfosTyrk96hni6yH9nbPno
9twMnlBeij7Pq7ubxXRBbBoPjQAeF1RGRQV/niHNPIV7UKvhENr7wKhLoevwZjLT
8OwQDM+CpI7QWlbbIkIM/8ADyK2e4MAuPgpNFiPLiK+H6yoIgCKxgVsI+IUkuea7
C2YDKjzlGvNB/RuhtbFsSs5Zi1HWBMGxCN8UMfZRfk9S5Hg9BRfDlhMcWhn4cY0Q
Kd0vcU9REjY0kdIVxXUbH8ibRJAsYeLCK2ZfAp42lZMAR08ftNxOhpYAojyFAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUkbOFiS9y3LbqMoJZHE3hpEZa2dEwHwYDVR0j
BBgwFoAUMFz5pB3MbgbOnKczUjJe/E00MxwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MTg1Nzg0NDk3NTU2Njg2Ny8wLzMwNUNGOUE0MURDQzZFMDZDRTlDQTczMzUyMzI1
RUZDNEQzNDMzMUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzA1Q0Y5QTQxRENDNkUwNkNFOUNBNzMzNTIzMjVFRkM0RDM0MzMxQy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTE4NTc4NDQ5NzU1NjY4NjcvMC8zMDVDRjlBNDFEQ0M2
RTA2Q0U5Q0E3MzM1MjMyNUVGQzREMzQzMzFDLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1nm8a3xusci
zE2+Y2d/m/JCXA5ag5J6Oa0PczPfXv43PTtmLxtDtZeeiab5QlCisoWATjJbQXlz
UBGXj3zHUhslkvgwH2IQt2IHoDfoMT3jSS2TTtlHuU2APUJGs46ZCoSY+adn5B9u
Q+QENombCbi5pyI2OW6RsB+6ATVjWCC4rVU+UPz16S8UVO1E84Mw2Zy+GgUCTE75
X+xeUuYZ4AhI4osZxAYZ4Yrt1ONT3fFN+8Ud6UTb2n59HUf4+x7SurUbDsROLQr/
hWQBpO2olHYUt9y+XnkJcW/BVNGJArrr5xgffS0KteJoWclJOrylHlZxvL1iBMOr
TvEvQCpT5Q==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:06:51 2026 by rpki-client