Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft
File:                     5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft (raw, json)
Hash identifier:          DdAKFyszQj2Cf0L2rcR/36b7r5rQ9YtH9fRdF6vhGJU=
Subject key identifier:   45:DB:F7:21:D7:6F:E8:3B:79:10:B9:60:5A:4B:F2:D0:F9:37:25:28
Authority key identifier: 5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9
Certificate issuer:       /CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9
Certificate serial:       417322B9ED01253A03AF347AF4FC8CBD374C4E9C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft
Manifest number:          40
Signing time:             Tue 14 Jul 2026 14:06:27 +0000
Manifest this update:     Tue 14 Jul 2026 14:01:27 +0000
Manifest next update:     Wed 15 Jul 2026 15:46:27 +0000
Files and hashes:         1: 323430343a363530303a646362333a3a2f34382d3438203d3e2034383337.roa (hash: tHPg+UAtakOXb2bI4+bicsHKTUKZvXIfQ1aMjcpe3+E=)
                          2: 5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl (hash: RurzkbJHobrd2AQ5e+z5pL7ve3BsE8e4u8B9MYSNw18=)
                          3: 3130332e382e33342e302f32332d3233203d3e2034383337.roa (hash: JWCpOL58jnfjNneX9gL3amLDhbCleye0c+pPylUKcKI=)
                          4: 3130332e382e33322e302f32342d3234203d3e2034313334.roa (hash: wNOnwlciSCkgqRaqEPPKB6JorJz54eTYd07doS61EyM=)
                          5: 3130332e382e33332e302f32342d3234203d3e2034383337.roa (hash: YN2Z3o5Y7Gs1S7UHATzST6JGQAtD++MguSN4QeeZ6+Q=)
                          6: 3130332e382e33342e302f32342d3234203d3e20313430373236.roa (hash: JCGd1C1Wf1E9+GLgPxZv3lXwNa0mqdnQIY/nBaByWFc=)
                          7: 3130332e382e33352e302f32342d3234203d3e2034383337.roa (hash: GF8R9y/TBmc5cxAi05epTBCcdlrps0l6xAqDYhmKV9Q=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 15:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:73:22:b9:ed:01:25:3a:03:af:34:7a:f4:fc:8c:bd:37:4c:4e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9
        Validity
            Not Before: Jul 14 14:01:27 2026 GMT
            Not After : Jul 15 15:46:27 2026 GMT
        Subject: CN=45DBF721D76FE83B7910B9605A4BF2D0F9372528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:17:7e:8e:44:53:16:1c:3b:ed:97:34:70:cf:
                    03:01:60:64:87:38:2e:7a:08:69:eb:17:b9:c8:23:
                    a3:3e:77:b5:b9:e7:18:b9:38:5e:4d:55:69:44:30:
                    cb:e6:ba:44:74:59:ff:e1:39:1f:25:b5:cd:17:21:
                    82:d2:f6:76:a5:42:75:a1:b1:cf:cc:54:2f:0c:f6:
                    f6:e8:6f:56:57:ef:38:5b:fd:35:37:22:d2:0e:7c:
                    ec:48:80:68:77:3d:9e:5f:1f:c5:4c:2b:79:15:c3:
                    ee:63:a7:cb:86:0b:30:bc:d0:63:dc:2e:c0:c3:a0:
                    93:10:54:ec:8a:0c:5d:6b:ed:4b:75:b6:eb:e4:40:
                    10:db:11:1d:c4:1a:06:52:9a:bb:70:02:07:52:cf:
                    6a:23:7e:b6:ab:7f:f5:c0:7a:7a:56:57:fc:a0:d0:
                    a5:4d:bc:40:61:62:6c:35:0d:94:07:4b:50:b5:64:
                    91:b6:ef:92:d7:78:73:8b:b8:38:c0:ba:c1:9c:3d:
                    43:eb:0a:1f:cc:bd:72:a3:5a:2a:54:0e:a9:e0:98:
                    a9:95:3c:04:9d:ec:b3:39:43:1b:10:ab:84:93:4b:
                    fd:01:46:fd:93:83:45:21:c3:29:01:ee:31:7e:85:
                    e7:da:a4:29:97:25:42:e5:6a:13:39:23:03:12:b0:
                    0c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DB:F7:21:D7:6F:E8:3B:79:10:B9:60:5A:4B:F2:D0:F9:37:25:28
            X509v3 Authority Key Identifier:
                keyid:5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:fd:c3:d8:fa:6e:4f:95:2d:c0:37:70:88:9b:e6:7a:20:b4:
         96:29:aa:b2:df:f7:60:e0:38:9f:8d:c8:72:a9:64:5e:21:db:
         86:8c:2b:6e:b6:ff:8c:73:15:0a:3c:bb:b9:f6:d5:3f:74:61:
         fc:94:21:7a:d3:28:89:58:b6:f0:23:20:34:59:ab:b2:b2:27:
         9b:02:3a:48:54:13:b3:2c:a6:c7:cb:7e:88:d9:cb:c4:74:85:
         dc:fb:fb:e6:09:08:00:c2:bb:08:2b:9b:06:90:69:15:02:e6:
         96:06:44:cc:03:37:86:d7:78:69:90:e6:0a:c6:2a:ae:49:fd:
         b6:fb:d5:f7:c3:5f:e1:b4:79:91:08:9b:1f:ba:34:39:da:9a:
         49:bb:0b:bd:30:29:aa:89:00:69:c7:41:f3:77:33:b9:f1:b1:
         21:11:bc:55:d4:93:d0:21:4f:7f:57:77:ce:9a:9c:9b:09:5b:
         0e:df:44:c1:22:ae:43:3c:b1:3b:6b:68:4e:65:8b:98:c2:0a:
         25:50:25:b0:87:7d:77:f0:03:bc:a5:00:0f:63:d4:84:e9:9c:
         fa:79:6f:86:91:12:f4:b7:31:40:c3:da:22:5c:50:90:a1:75:
         b1:1a:eb:ef:d2:ae:0d:24:d0:65:a7:12:86:e7:21:94:1d:6c:
         30:4d:05:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:19:04 2026 by rpki-client