Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
File:                     0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft (raw, json)
Hash identifier:          LSzxhnnnkk75azLfcFr6ElpCHpYOoaKXLHfJdXEn4uA=
Subject key identifier:   CC:D6:18:F1:2B:71:50:C9:CC:51:BC:51:E8:A6:A9:F2:93:78:92:76
Authority key identifier: 0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63
Certificate issuer:       /CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63
Certificate serial:       70390BA03E93C5CEFA93A66330453C2BE3162B7C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
Manifest number:          99
Signing time:             Wed 13 May 2026 04:05:55 +0000
Manifest this update:     Wed 13 May 2026 04:00:55 +0000
Manifest next update:     Thu 14 May 2026 04:16:55 +0000
Files and hashes:         1: 323430313a333830303a3a2f33322d3438203d3e203234343234.roa (hash: 92kDeGUBf68EI8CdYM+85AShVPJsE8p6evpx0zxAuAg=)
                          2: 0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl (hash: 5Yka3Elv/SIZQpWLNqwJ/Q7XzMgiSpLQdMvuTehKAqw=)
                          3: 3230332e3230382e33322e302f31392d3234203d3e203234343234.roa (hash: N2nkDTssJapb5MQQw+tYmzqkzQ0KoXd8OohRafzcbkM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:39:0b:a0:3e:93:c5:ce:fa:93:a6:63:30:45:3c:2b:e3:16:2b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63
        Validity
            Not Before: May 13 04:00:55 2026 GMT
            Not After : May 14 04:16:55 2026 GMT
        Subject: CN=CCD618F12B7150C9CC51BC51E8A6A9F293789276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:b3:a6:7f:fe:be:a3:20:76:6b:ad:63:eb:
                    3e:64:94:8a:c1:8f:a2:13:fe:6b:d6:58:e0:d2:1b:
                    9d:fa:49:47:76:fe:69:ce:04:97:3d:01:1d:88:ad:
                    58:70:77:69:16:0c:6f:b8:34:6e:ad:89:75:1b:9b:
                    c9:d9:3c:77:0e:f5:81:a8:d3:a0:81:dc:e8:f7:69:
                    5a:5f:44:a7:a1:57:60:df:3f:ce:61:f8:ff:8f:81:
                    33:d1:3a:de:34:65:8b:f1:02:0f:1d:8c:6d:ba:9d:
                    86:80:dc:61:62:e0:97:d4:18:c0:41:9e:45:8d:b4:
                    2f:86:a8:f3:8b:a2:f6:5f:24:ea:12:a6:75:8f:fb:
                    74:74:a4:8d:ed:54:15:d9:ed:7e:94:8b:5d:aa:bb:
                    b8:a5:c2:88:1a:25:e2:5a:5b:80:30:23:d0:ac:0a:
                    d9:8a:7c:ba:83:1a:fb:22:cf:f3:96:e6:51:36:40:
                    f0:f5:d4:be:88:9a:8b:f1:c5:d7:00:59:47:e9:cb:
                    3c:4b:18:90:37:e1:af:7e:0c:a6:13:be:7d:2e:76:
                    0d:2c:bf:b1:0f:f4:dc:d3:72:f5:39:0f:32:91:1d:
                    d3:6a:d0:a7:a6:db:f6:74:4a:c9:3a:8a:12:45:97:
                    6b:3d:f9:dc:90:43:a5:d5:3f:04:22:9d:fc:a8:08:
                    d2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D6:18:F1:2B:71:50:C9:CC:51:BC:51:E8:A6:A9:F2:93:78:92:76
            X509v3 Authority Key Identifier:
                keyid:0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:5c:b8:f0:29:fc:71:7b:31:b0:d9:90:29:16:50:df:7a:6a:
         76:34:44:c3:09:39:68:99:f7:29:f2:f1:11:ae:06:a0:87:df:
         1b:05:d7:b2:10:aa:5a:1d:b5:63:44:6b:2e:01:8a:fa:3a:a9:
         42:18:11:61:a6:d6:aa:e4:93:7e:48:0f:67:dc:f5:72:fe:ee:
         eb:7f:89:55:fa:65:b6:62:0b:4b:d6:ce:45:0b:db:36:af:56:
         8d:9d:4e:31:d8:64:d8:3a:62:db:16:3e:3a:5a:77:44:80:b3:
         98:c5:02:e1:33:40:cc:7e:1c:9a:be:8b:a9:e7:40:6e:7d:d1:
         5c:3e:b7:93:30:98:64:26:08:1b:7b:49:51:ac:58:7d:0e:f4:
         6f:8b:81:80:e8:2f:d8:1d:1d:7d:85:01:41:c6:06:4c:53:4b:
         ac:49:c9:d2:33:d3:2b:55:71:12:6c:9a:46:03:67:4b:46:1b:
         e3:2f:90:11:a3:8e:91:1b:43:c8:53:39:d1:7b:9d:bb:93:58:
         2d:14:a2:d5:d0:dd:ca:b6:47:fa:34:f4:c3:23:a0:1d:81:5f:
         7d:e6:90:d5:b7:41:4c:83:77:be:57:f0:8c:7f:0f:20:48:71:
         80:c7:86:0c:ec:ce:fb:6a:07:b6:cb:22:61:69:21:31:44:ff:
         a3:d3:77:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:24 2026 by rpki-client