Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
File:                     79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft (raw, json)
Hash identifier:          evjrrzhyFftXpAXw1toktczlNbvJZahiQ+sU2E3U1p4=
Subject key identifier:   46:E3:BF:EF:D4:A4:33:23:6A:CE:D5:B3:2E:87:1D:5A:49:8A:85:E5
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Certificate issuer:       /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial:       3C7D356BD570D3F68DDD2830367AA913E2BD7D55
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
Manifest number:          A4
Signing time:             Wed 13 May 2026 14:41:05 +0000
Manifest this update:     Wed 13 May 2026 14:36:05 +0000
Manifest next update:     Thu 14 May 2026 14:54:05 +0000
Files and hashes:         1: 3138302e3231302e3231352e302f32342d3234203d3e20313531323936.roa (hash: MzfDml4PqPQJ0/ptTbSE1GmPtQY9+lQxHmlpHCDwjlQ=)
                          2: 3138302e3231302e3231342e302f32342d3234203d3e20313531323936.roa (hash: G3Fj6cauJg8SJxIqxWjSGGbh00wiyR3jukfiw++d+Jg=)
                          3: 3130332e37312e37302e302f32342d3234203d3e20313531323936.roa (hash: HhwCFDNCWuwBRPXnrmz8lxbiscoLe884ROhfF0UchqY=)
                          4: 3138302e3231302e3231322e302f32342d3234203d3e20313531323936.roa (hash: WXBy7PYl+0tZAAd5uZFc08h2pkIGftVU2VXMO2BUPZA=)
                          5: 3138302e3231302e3231322e302f32322d3232203d3e20313531323936.roa (hash: LcT6ji4n5le6EwNrdut4qkUvWOWYyD5Xceg1g5j20sU=)
                          6: 3130332e37312e36392e302f32342d3234203d3e20313531323936.roa (hash: kTouZy1gjaR90O2aS4hnEHJrUX16MGxFTmED8/3zLaY=)
                          7: 3130332e37312e36382e302f32342d3234203d3e20313531323936.roa (hash: dM03n1V3wFLUQUW85D+oQAH0VrRiu7aigFAwGGt0A3Q=)
                          8: 323430363a383838303a3a2f33322d3332203d3e20313531323936.roa (hash: VM1qHITDY0vlR5ts4U5Mlsvp4cbzTSQCBviUKQgtlBQ=)
                          9: 3130332e392e32342e302f32322d3232203d3e20313531323936.roa (hash: pcCIdHW+Wr27+f4tlmgbNg3rAcusLNN5epai2nB9kY4=)
                          10: 3130332e37312e37312e302f32342d3234203d3e20313531323936.roa (hash: J8ODmN8Qi0L+Nv1SOHSEtxGSOvswd3ISDX4Y3WI+yYc=)
                          11: 3130332e392e3130382e302f32322d3232203d3e20313531323936.roa (hash: BQkj9JY42h/4Ktqm5PZu183HmciBKbXBVRuupkHRF58=)
                          12: 3138302e3231302e3231332e302f32342d3234203d3e20313531323936.roa (hash: C0d3z/h2xZArU3nIXTv17UgDFlRUkyUCv/MWm5pTpOs=)
                          13: 323430363a383838303a3a2f34382d3438203d3e20313531323936.roa (hash: 2rEfRZGA1EAeckbEG0PTZGNkMZ/YcjvJUN2WIG7ZIvU=)
                          14: 3130332e37312e36382e302f32322d3232203d3e20313531323936.roa (hash: r/IDS7Iz5LYv/Jd7YSBUHW70Me/1R2X9UxvKyLsfnTc=)
                          15: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl (hash: IVX34SAGULF4PPVb4/rJpQKuO3GR9JARIgEPi8CwpgQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7d:35:6b:d5:70:d3:f6:8d:dd:28:30:36:7a:a9:13:e2:bd:7d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
        Validity
            Not Before: May 13 14:36:05 2026 GMT
            Not After : May 14 14:54:05 2026 GMT
        Subject: CN=46E3BFEFD4A433236ACED5B32E871D5A498A85E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9e:1d:fb:b8:ee:f1:42:a0:1b:bb:1a:4a:1f:
                    01:39:9d:6d:b5:6f:02:bc:4b:0d:84:a4:8c:5e:07:
                    06:cd:54:87:9e:e9:33:33:34:d0:d6:41:91:cf:2c:
                    97:ef:b6:e0:15:25:b5:2b:76:41:35:b6:b6:b5:d3:
                    d2:e0:6f:3e:66:49:99:cc:08:ab:60:a2:e6:de:98:
                    59:18:50:01:b0:03:64:1c:df:c7:26:19:cc:e9:cd:
                    60:40:64:e4:c0:e4:be:fd:e8:5d:63:15:33:54:2f:
                    c4:27:fa:e0:d5:37:3d:9e:9a:68:cc:94:8e:35:ff:
                    85:c7:bd:85:10:d0:5f:4f:de:7e:8a:f1:f0:5e:83:
                    2f:8e:d0:3e:9b:e2:55:2c:82:23:81:d8:e6:dc:8c:
                    1f:61:98:84:bd:f7:a2:91:a5:45:9e:4c:00:55:07:
                    88:9e:71:e1:68:5e:b0:3e:35:5b:0c:ab:cd:53:80:
                    82:d7:d8:52:65:82:46:64:d3:29:c5:a1:74:5e:23:
                    ec:83:3f:ec:49:5d:3f:5c:16:b0:c4:61:fa:85:4e:
                    3c:85:f9:c9:25:4d:51:82:cf:7f:38:be:0b:1d:84:
                    b5:42:ab:4f:b7:4a:2e:76:4d:53:d4:79:93:0e:59:
                    60:6c:57:a0:9f:0b:a9:8f:ca:24:53:9d:3a:cb:b0:
                    38:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E3:BF:EF:D4:A4:33:23:6A:CE:D5:B3:2E:87:1D:5A:49:8A:85:E5
            X509v3 Authority Key Identifier:
                keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:1b:7c:1d:0f:d3:87:2a:92:ff:9e:73:81:3c:24:fa:bb:9e:
         24:98:66:87:6d:f5:1f:60:d3:02:0f:56:18:f3:97:a4:8d:2c:
         8e:34:a0:1c:9b:4d:b5:c7:02:c2:3f:61:0f:e2:03:95:84:0c:
         49:66:66:e5:3e:a7:ea:36:0f:fd:ea:c5:23:3f:36:0e:52:94:
         e7:a7:95:a0:ff:e8:46:79:61:9d:41:12:23:c8:2a:6e:16:a4:
         ba:1d:65:ff:c2:51:06:e3:1f:af:50:29:a9:40:89:4f:18:61:
         a7:4b:1d:1b:57:d9:74:6d:7a:d1:ec:a1:7e:93:2e:7d:be:c2:
         46:36:4a:e9:f4:db:a7:8d:4d:5f:db:7b:f2:1d:8e:81:aa:f3:
         75:0f:97:53:ca:54:fd:6a:88:ec:51:c4:41:90:85:07:90:d4:
         97:25:7b:f3:e6:16:d0:b3:b5:66:3f:cd:cc:d9:9b:25:5e:55:
         74:81:57:d7:44:7c:3a:7c:10:75:01:7f:5e:dd:61:71:fa:09:
         e8:b1:97:2b:d1:a1:3f:75:b8:9a:84:63:60:eb:2b:6a:4d:c3:
         24:d5:87:4f:28:59:9d:6b:1b:cf:88:9b:f0:21:b5:66:a7:fb:
         10:09:d6:6b:3e:29:62:f1:52:1b:3f:63:f4:3d:f2:5c:53:aa:
         ad:4a:0d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:42:32 2026 by rpki-client