Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
File:                     E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft (raw, json)
Hash identifier:          jlelff+UOPblVSlkwn/uIVpIJb2u37NFMWvGHQXYRsg=
Subject key identifier:   07:B9:9D:2D:36:BE:8E:B7:77:75:E1:D6:08:22:8F:A0:57:AC:91:E9
Authority key identifier: E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5
Certificate issuer:       /CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5
Certificate serial:       262B13E1DB498CB1CA272AA3188E4CA5AE6EBBAB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
Manifest number:          FA
Signing time:             Fri 24 Jul 2026 06:45:33 +0000
Manifest this update:     Fri 24 Jul 2026 06:40:33 +0000
Manifest next update:     Sat 25 Jul 2026 08:24:33 +0000
Files and hashes:         1: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl (hash: +wYH+qpLPXsu8JTwUKicE+dWZRtHLXlZE22XmL1ZGMI=)
                          2: 323430313a373065303a3a2f33322d313238203d3e203633353338.roa (hash: xsErhEAOwjB/ZA5qSkY2qGpN9u/QeP5cfqWvkHIhTTo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2b:13:e1:db:49:8c:b1:ca:27:2a:a3:18:8e:4c:a5:ae:6e:bb:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5
        Validity
            Not Before: Jul 24 06:40:33 2026 GMT
            Not After : Jul 25 08:24:33 2026 GMT
        Subject: CN=07B99D2D36BE8EB77775E1D608228FA057AC91E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:23:32:af:e6:80:3a:09:af:d9:52:02:24:
                    80:85:4d:8e:1f:7f:fe:a5:d9:2f:93:53:67:44:f0:
                    72:43:d1:48:4e:a5:ac:c2:63:bc:fa:56:ef:7c:91:
                    d2:58:00:7e:0b:4e:be:f1:77:2b:eb:f3:6e:cc:8b:
                    f6:cb:59:d4:33:a2:e9:b0:0f:e8:b5:0e:e8:13:fa:
                    80:97:21:2a:d4:38:ef:50:f6:38:4d:2a:7c:29:ef:
                    fa:5b:f8:ff:68:e3:0f:0e:e8:82:70:d8:39:b5:52:
                    8a:97:56:ff:d6:3c:ba:06:b7:47:41:01:03:9b:d3:
                    37:ab:46:2b:6b:1c:6a:fd:19:6f:ed:8e:17:5e:f7:
                    27:ff:1a:12:a0:c3:3c:d3:14:e0:83:9f:3c:b0:ad:
                    6a:21:e0:47:6e:26:3e:b5:e1:e4:53:e6:82:e9:3c:
                    cd:f4:e5:a9:d4:1a:62:77:f2:5e:46:b4:f4:dc:69:
                    0a:f8:58:b9:e5:ff:7e:10:23:ad:9b:bb:1f:29:a7:
                    6a:19:7f:94:b0:b7:e8:4c:69:bb:4a:7e:50:b8:96:
                    e2:ce:1e:64:44:0d:7b:7e:2a:ea:78:1a:81:90:6c:
                    26:c0:e1:c7:74:0d:59:b2:dd:91:8f:61:22:8a:ab:
                    02:ca:2f:9e:c5:fc:05:0f:7d:ef:b0:aa:a1:50:ca:
                    30:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B9:9D:2D:36:BE:8E:B7:77:75:E1:D6:08:22:8F:A0:57:AC:91:E9
            X509v3 Authority Key Identifier:
                keyid:E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0a:19:a2:95:f7:43:2f:70:4a:32:14:68:72:11:4d:da:3a:
         0e:77:f3:c0:02:fc:f7:d9:34:1c:b1:fc:2a:d6:e4:32:e8:d2:
         79:df:0c:69:b8:a7:9d:de:8e:95:3b:35:18:b6:ba:7a:7c:cb:
         3f:75:67:bb:62:97:aa:84:5e:7b:a7:cf:4f:57:48:6b:73:30:
         e0:47:54:52:d9:f2:4b:a8:d2:ae:55:1f:07:80:c9:56:81:c4:
         41:a7:5d:8e:73:fe:35:16:0b:d5:86:c7:09:6d:33:0c:5a:ca:
         02:0d:5f:e8:b5:0f:33:3b:6f:05:93:10:8a:b7:27:a5:d1:61:
         de:b8:1a:dd:76:22:08:38:67:e4:8e:c6:2d:e3:9f:88:1a:29:
         bf:31:83:ac:8a:6e:a0:27:24:7a:f9:01:72:be:23:29:a2:dc:
         a7:45:de:22:4c:dc:40:dd:a1:7d:df:81:37:28:b6:a7:13:e2:
         28:14:3e:d6:b9:6c:76:30:2f:8f:12:84:b5:42:6a:61:fa:c3:
         8b:65:d4:49:ab:21:63:51:77:f0:99:7b:58:63:0f:7b:b7:7e:
         7e:99:a3:e8:30:d6:54:b0:b7:90:4d:18:10:0f:55:15:56:d1:
         6e:76:9a:a5:2a:5b:fb:ad:3a:63:f3:1c:f4:41:31:fc:0f:56:
         11:8b:6e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:15:12 2026 by rpki-client