Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
File:                     53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft (raw, json)
Hash identifier:          +0LiSPjDj84YMb7m3YvoqApCtzzun6bmhVfgYWZDQoo=
Subject key identifier:   F7:22:CB:77:DD:35:3E:68:AD:F0:C4:B2:3C:8A:AA:43:D2:6D:C8:BD
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Certificate issuer:       /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial:       2D944D0ED9284A6337AD06D5CDC8386726119325
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
Manifest number:          12
Signing time:             Fri 29 May 2026 13:07:50 +0000
Manifest this update:     Fri 29 May 2026 13:02:50 +0000
Manifest next update:     Sat 30 May 2026 15:14:50 +0000
Files and hashes:         1: 34322e3135372e3136302e302f32312d3231203d3e20313430323932.roa (hash: I6BbUJ66Qc6tj7iFfRUD7HXuUY1w1bM8H+RNddeIDw4=)
                          2: 3231312e39392e39392e302f32342d3234203d3e20313334353433.roa (hash: uIOjhlOQfgYg2S8c2ujA+r40985b5SnTcIxwybdUlQw=)
                          3: 34322e3135372e3137362e302f32302d3230203d3e20313430323932.roa (hash: Y3HHoy0e/WurCL8+ctFP3iT+3Bnt3LHSR/aegK9KpWw=)
                          4: 3231312e39392e3130332e302f32342d3234203d3e20313334353433.roa (hash: 5xH+InlwvodA98YnzFatvi0IvwFQLw6bAWrZvWNh4FA=)
                          5: 34322e3135372e3139332e302f32342d3234203d3e20313334353433.roa (hash: mCU7Exxii69FTMMzIV/A/w5+JjoXMeXOq0ARw2cMzCw=)
                          6: 3231312e39392e3131342e302f32342d3234203d3e20313334353433.roa (hash: VDhEkG4rAzjDnGYl/ETV10Tu7BB9j1m/O1+aGVDt19o=)
                          7: 34322e3135372e3139362e302f32342d3234203d3e20313334353433.roa (hash: zhOttaUrV8X4Lg2Sj2dkmX5CA9NwRiyWT3Rgrcpj+aM=)
                          8: 34322e3135372e3139382e302f32342d3234203d3e20313334373633.roa (hash: Ve48GrY3Wv8G2G+gsrHOBlkaF8THgv997I/EYwJ44Vc=)
                          9: 53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl (hash: eeQjArJBBjANK+ixZJsIGwuNStpbAEcs6GDGZ6We+H4=)
                          10: 3231312e39392e39372e302f32342d3234203d3e20313334353433.roa (hash: Txhj55bvp+hIGH3hFsyr9OHDHwnG7sTt02jalayiNrA=)
                          11: 34322e3135372e3139372e302f32342d3234203d3e20313334353433.roa (hash: aXZcbzMyLuJO6Wp1fjBARWrF1NeqeBFOz48NCQJ/u8o=)
                          12: 3231312e39392e3132322e302f32342d3234203d3e20313334353433.roa (hash: 77oO1zO1pMqBewhABseQq1/y60XN/ndzH2YeRUE1InU=)
                          13: 3231312e39392e3130302e302f32342d3234203d3e20313334353433.roa (hash: bbLPhv7qm44WGkjf+8yOKAqrffp8ucWBx8H1aKTgkcc=)
                          14: 34322e3135372e3136382e302f32312d3231203d3e20313430323932.roa (hash: MWudgipqSrlTHzFjDQmH+fNeplumbIfKaQJVSedxOL8=)
                          15: 3231312e39392e3131322e302f32342d3234203d3e20313334353433.roa (hash: I5hWhrD8yY0G+4O/ougalM2mZwQU54zpSWyWe7k4efQ=)
                          16: 3231312e39392e3131362e302f32342d3234203d3e20313334353433.roa (hash: pOqHpF9F0KOnTuAw/lB3hNfE8p/RJ3WxOHY/AeOPsZs=)
                          17: 34322e3135372e3139322e302f32342d3234203d3e20313334353433.roa (hash: /Aw2t/1v//jR49wqCyB9OMlsYgHW4FM74iHxyPt74bc=)
                          18: 34322e3135372e3132382e302f32342d3234203d3e20313334373633.roa (hash: 8FRvlGkAltOgiF+DcClCWEsvhW3kRLyIKnWJXyMSHwg=)
                          19: 3231312e39392e3130322e302f32342d3234203d3e20313334353433.roa (hash: RisX+CgKBULHLpBU3anXXBG6UKrReObMRsgwM1c9L38=)
                          20: 3231312e39392e3131352e302f32342d3234203d3e20313334353433.roa (hash: WKKau4bFwduVuMkM97n1tM+bdWJiLhiu2gAbu9lLJKo=)
                          21: 34322e3135372e3132392e302f32342d3234203d3e20313334373633.roa (hash: VgFywuz9SYL3DpMZhrTf0ZTtc/zOKMZ4Lm9BvgcijWI=)
                          22: 34322e3135372e3139342e302f32342d3234203d3e20313334353433.roa (hash: vvXDFWmXbdkDiFIJFybfVN4n5COk1eXskzgf0ZrHMqM=)
                          23: 3231312e39392e3130312e302f32342d3234203d3e20313334353433.roa (hash: 0hRUwN4aKRJdV+/94bpV1Y2VWSh2CWPq9l1XqmdIMIU=)
                          24: 3231312e39392e3131332e302f32342d3234203d3e20313334353433.roa (hash: gjuWL4Ku708MNgRPf1PYsmGDyL8Oj7ZaJK5anGzD9X8=)
                          25: 3231312e39392e39382e302f32342d3234203d3e20313334353433.roa (hash: 7VhTfPOm+jxv+vmVV1vxBUYnxhl3vj62WSmZh8+GpOs=)
                          26: 34322e3135372e3139352e302f32342d3234203d3e20313334353433.roa (hash: TCGxK2DtS6oGRAf75zYXX36e/mJU2AgOR/+95B7nF4Y=)
                          27: 3231312e39392e39362e302f32342d3234203d3e20313334353433.roa (hash: MdPvPYD+6zi0JmKfTNOLoaX73MobQOi/GaSfIasKe3k=)
                          28: 34322e3135372e3139392e302f32342d3234203d3e20313334373633.roa (hash: opof8c69zmgftC2wSblAoO7guG5XvwOyNO7KZtbrRrc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:94:4d:0e:d9:28:4a:63:37:ad:06:d5:cd:c8:38:67:26:11:93:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
        Validity
            Not Before: May 29 13:02:50 2026 GMT
            Not After : May 30 15:14:50 2026 GMT
        Subject: CN=F722CB77DD353E68ADF0C4B23C8AAA43D26DC8BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f2:35:00:04:9b:aa:a0:31:0e:b7:76:01:73:
                    d6:6d:64:2e:02:52:eb:ad:dd:98:86:9b:ac:1f:e2:
                    5f:f6:c5:e6:d6:8e:22:2e:f0:66:8e:6e:15:8f:73:
                    92:0b:3a:43:0d:2b:c2:21:35:ed:18:1c:c5:c0:d1:
                    1c:2b:75:ef:cc:06:f4:aa:a0:a7:fc:f0:66:fe:6e:
                    da:6c:68:af:3c:b9:3b:10:a4:8a:17:40:29:cf:23:
                    f7:6f:de:13:0e:ec:42:08:83:a9:08:cc:da:20:fd:
                    a4:c4:c6:9a:8f:f4:84:dd:24:3a:b1:10:42:ae:d2:
                    08:ab:07:95:cb:22:d7:6f:4f:81:95:e7:a9:4a:f7:
                    90:8a:6f:c6:df:27:84:88:ba:25:a3:ed:de:19:e0:
                    9c:c5:fd:62:91:27:9c:79:ac:f8:63:30:cc:d4:b8:
                    65:41:80:46:41:9f:c4:6c:51:6d:54:9b:5b:80:0f:
                    93:38:75:69:93:cf:61:4b:41:94:48:b3:c2:9e:34:
                    cd:30:7a:9a:99:e7:bb:14:a1:92:8b:87:4c:10:b8:
                    bb:7c:38:42:f5:a3:5b:5b:de:1a:86:58:1a:80:ff:
                    70:e4:ff:97:89:e7:f1:c3:f8:62:fa:b1:81:06:3d:
                    e5:62:39:aa:cc:d8:5f:0a:99:5d:56:1f:ad:9b:b5:
                    5c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:22:CB:77:DD:35:3E:68:AD:F0:C4:B2:3C:8A:AA:43:D2:6D:C8:BD
            X509v3 Authority Key Identifier:
                keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ba:74:a2:be:62:d1:cb:4d:d0:3d:ea:25:fe:3c:5d:1b:a2:
         43:63:b9:ab:f2:89:93:14:9f:f5:e7:16:35:bb:ad:a4:7c:ba:
         81:ef:ac:c8:f2:e6:eb:12:0b:9e:78:ef:a6:cf:79:b2:78:71:
         20:74:4f:5e:f2:39:45:92:3e:c2:b3:c2:85:f1:f5:dd:14:a8:
         01:92:5a:69:cf:eb:04:af:d1:33:06:53:4c:b2:97:a3:41:ae:
         e6:07:e2:80:33:74:5c:26:a0:0a:e3:be:0c:24:c7:a7:3f:0a:
         5b:7d:ea:30:e4:56:db:35:d2:7d:cf:ff:a7:83:05:ba:1b:b0:
         cd:c5:91:c4:9d:23:3f:f1:c9:2f:03:d2:b8:e1:b1:36:86:59:
         ed:4e:71:e4:29:8d:ed:8e:d0:b2:03:26:3d:2e:d8:7a:e1:60:
         b2:7e:dd:fa:6e:ad:60:84:4e:7c:43:52:0e:82:05:43:00:b7:
         9a:dc:49:cc:77:a6:6a:ce:7a:04:1c:34:12:dc:2b:9e:ca:97:
         43:00:d6:73:80:9c:d0:2b:fc:22:c3:fa:84:59:05:aa:28:12:
         12:28:8c:d0:4b:2c:fd:a2:03:2c:73:ff:db:20:d5:11:d6:bc:
         90:56:8c:33:03:f2:84:bd:cf:2d:7d:c2:c3:fd:09:6a:0f:39:
         d5:86:b9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:56 2026 by rpki-client