Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
File:                     320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft (raw, json)
Hash identifier:          3icvVpzNpo1Hp+725Bg4xOA6Zrrb7P+pKG7HregVruE=
Subject key identifier:   13:9F:0C:29:EC:9D:58:1E:64:75:C1:96:20:9C:1B:C2:46:44:F9:78
Authority key identifier: 32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0
Certificate issuer:       /CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
Certificate serial:       1919EDC256F4D52A3CC04F271A4388310C8D0AA9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
Manifest number:          04
Signing time:             Fri 29 May 2026 10:05:31 +0000
Manifest this update:     Fri 29 May 2026 10:00:31 +0000
Manifest next update:     Sat 30 May 2026 10:53:31 +0000
Files and hashes:         1: 34352e3235332e36322e302f32342d3332203d3e203633363231.roa (hash: 64gxrmcWCGFymrozTJAeOwyiWTaSxZbZumF/VaNZJYI=)
                          2: 3130332e3232322e3138372e302f32342d3332203d3e203633363231.roa (hash: 8GaWSl43Qpue+7ZTkbGQznI3QmjX7Lprf+JiaJRvV/0=)
                          3: 3130332e3232322e3138362e302f32332d3332203d3e203633363231.roa (hash: A+X12ByBnMNbYJRrUln06JHqkJEv5VrpyvFetym2zKg=)
                          4: 3130332e3232322e3138342e302f32322d3332203d3e203633363231.roa (hash: O9/JkVq+SIpY3CsunCQKAcbLCiSaDSApyBzaza9kfxM=)
                          5: 3130332e3232322e3138352e302f32342d3332203d3e203633363231.roa (hash: kdMSI7H2ZF0ixCXxfO8yDt/xWXxAZNZYRzbfktETBsw=)
                          6: 34352e3235332e36332e302f32342d3332203d3e203633363231.roa (hash: +7m1BnZptZUg/QhAPe0cILC/7xXigqbsV9uaAgUDjYA=)
                          7: 34352e3235332e36302e302f32322d3332203d3e203633363231.roa (hash: +fbxY8iiE8AQWuXBe7wdxmr5PPKCPDw/AoBvpF8JiIo=)
                          8: 320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl (hash: PBkHpJ4riRhlrKBIqRyx05XrO88k24Z6lZCpxkkmJ8A=)
                          9: 3130332e3232322e3138342e302f32332d3332203d3e203633363231.roa (hash: 3gphk5x3j2J0BJiGenAxNyQuiTgJ7Y3umxZHzII5mxo=)
                          10: 3130332e3232322e3138362e302f32342d3332203d3e203633363231.roa (hash: 47a7IJaOeTG/MD5floMnBR+xcSqSZ4e0r4PHdOoALC4=)
                          11: 34352e3235332e36312e302f32342d3332203d3e203633363231.roa (hash: qYBYEZUVHi8jTmon2gq0esFjgyId1GgmFugHwTmdmSY=)
                          12: 34352e3235332e36302e302f32332d3332203d3e203633363231.roa (hash: h3hgYMM6wscWMHWADwo0yl9qLdr18NnGzf8c0YA7qFo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:19:ed:c2:56:f4:d5:2a:3c:c0:4f:27:1a:43:88:31:0c:8d:0a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
        Validity
            Not Before: May 29 10:00:31 2026 GMT
            Not After : May 30 10:53:31 2026 GMT
        Subject: CN=139F0C29EC9D581E6475C196209C1BC24644F978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3e:30:2c:27:00:20:c0:c2:ee:3d:3e:b9:17:
                    bd:84:d9:dd:6f:dc:84:87:69:ed:e3:68:38:26:02:
                    51:86:df:fa:98:f0:3f:2d:1f:51:8f:48:ca:0a:2f:
                    a4:5d:04:1c:52:42:b3:17:a0:65:e8:6b:b1:b3:a8:
                    40:e4:20:ac:76:8f:fd:fc:f1:18:00:e9:83:0d:eb:
                    74:8c:d7:61:04:e5:b6:e4:24:ea:da:5d:6b:de:d5:
                    81:17:51:14:ec:01:fa:91:71:f1:44:f3:96:0d:22:
                    7c:dd:a1:cc:7e:33:16:73:9e:5e:03:2c:bf:d7:df:
                    39:ef:d2:ad:a4:3b:82:6b:02:ef:ea:d0:ac:34:3f:
                    f1:52:23:9c:dc:55:89:e9:8b:ac:d9:c5:2f:0f:16:
                    66:52:33:0e:30:c8:ae:ce:d0:a9:28:88:83:9a:6e:
                    44:82:f1:7f:ff:9b:76:ac:d0:94:97:7b:98:10:4c:
                    4d:2d:22:8a:ff:7d:ba:a6:f7:d8:54:f5:72:07:e7:
                    7b:01:28:91:ac:19:1e:3f:53:99:89:7c:00:27:0a:
                    26:da:84:38:0d:8e:08:c1:eb:13:01:76:16:3a:4f:
                    52:b3:b2:d9:0d:e0:cc:5a:48:cd:1c:02:1f:2d:90:
                    f4:e4:e8:27:2e:14:7e:48:97:1a:d9:d2:81:f0:ce:
                    b0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9F:0C:29:EC:9D:58:1E:64:75:C1:96:20:9C:1B:C2:46:44:F9:78
            X509v3 Authority Key Identifier:
                keyid:32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:76:12:9c:66:2c:ef:3b:44:0e:f9:f8:d5:88:92:10:1d:08:
         7a:cf:b0:24:48:4c:bf:6c:52:7a:71:64:ec:63:df:2d:ce:21:
         fa:bf:ea:7b:22:c6:28:ba:c1:2e:eb:79:4b:eb:d7:96:b0:8e:
         a8:5c:91:e9:6b:ce:62:27:7f:42:e7:9a:73:b2:16:85:42:fc:
         e8:d9:54:7e:b1:96:c8:10:1e:2c:48:99:bd:f9:3c:15:f9:2e:
         e9:7a:e4:8c:b1:5d:51:a0:72:cf:32:88:bf:ce:10:91:96:34:
         ea:df:0b:42:ec:08:79:c2:1c:fd:aa:fc:4a:16:2e:8d:ca:19:
         df:69:b2:5b:4b:df:53:64:0f:8a:87:fb:b6:b7:ae:6e:50:df:
         72:ce:b9:cf:7d:44:73:1f:60:3d:9c:13:34:d0:cd:5b:6c:46:
         44:46:65:a7:c6:71:fc:2a:7e:8a:b2:e4:35:4b:07:ea:4b:89:
         a7:8f:9f:77:85:a2:8a:66:63:71:05:65:eb:5f:8b:2f:7f:44:
         51:09:93:eb:e9:5d:2d:0a:8f:14:0b:4e:6f:3c:88:3f:01:43:
         2c:cb:4a:5e:29:92:3e:03:eb:66:84:78:ec:59:2b:40:5b:07:
         be:62:09:d3:65:1c:aa:16:b0:3e:f9:b4:f4:95:6b:4e:d9:a7:
         62:a5:b7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:45 2026 by rpki-client