Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
File:                     4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft (raw, json)
Hash identifier:          9wJ3NGw73CAF+3rRRWQDI4ftYbE70+futk7x9NImVo8=
Subject key identifier:   DA:B3:D4:36:06:35:84:95:2A:67:A4:61:58:2D:3A:88:67:E3:1E:CE
Authority key identifier: 4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5
Certificate issuer:       /CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
Certificate serial:       156437E0FABEABA30EE5C0B2A4B0E593177AA31C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
Manifest number:          9A
Signing time:             Wed 13 May 2026 03:50:55 +0000
Manifest this update:     Wed 13 May 2026 03:45:55 +0000
Manifest next update:     Thu 14 May 2026 04:10:55 +0000
Files and hashes:         1: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl (hash: iuqEKhe8Det/pZhSVintsWrE+fs5hCKNU7VsikqMpNE=)
                          2: 3136302e3235302e38342e302f32332d3234203d3e2034383136.roa (hash: M0wfTR/OAJBje8n+/3S62Tlg2BVD3Kl2zCHWBs3Dqbo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:64:37:e0:fa:be:ab:a3:0e:e5:c0:b2:a4:b0:e5:93:17:7a:a3:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
        Validity
            Not Before: May 13 03:45:55 2026 GMT
            Not After : May 14 04:10:55 2026 GMT
        Subject: CN=DAB3D436063584952A67A461582D3A8867E31ECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:14:55:89:91:90:87:d0:2c:b9:c9:87:9d:
                    0d:f3:23:73:b5:31:0e:23:e6:2f:18:ee:0e:79:bd:
                    84:c2:53:66:ee:51:03:b2:fc:94:e2:33:c6:47:9b:
                    8f:fe:c5:70:55:5f:ae:d8:63:76:e5:c5:e3:0e:2d:
                    e7:6e:fb:b3:96:91:44:a3:4a:23:4c:3f:97:16:4f:
                    80:d9:c9:88:18:08:b4:06:56:76:d8:5e:f1:72:d2:
                    70:16:33:41:a6:98:f6:dd:80:75:0c:96:0a:83:29:
                    b4:93:e7:be:96:75:df:68:b6:48:89:a3:07:ef:17:
                    5f:8e:63:39:ee:18:a1:c1:9c:a7:a3:fa:17:3d:ba:
                    2b:8f:7f:55:ff:6c:00:61:5d:56:d0:46:2d:1f:2b:
                    e1:42:d4:a7:c3:35:77:73:c5:9f:22:16:67:9a:97:
                    09:25:58:5a:71:14:c8:0e:6d:7d:8a:a6:e2:3f:63:
                    68:7c:8c:48:e6:84:ec:67:ac:20:dc:3b:d9:c5:1b:
                    b5:88:ab:bf:3d:ee:8e:da:bb:a3:d1:d2:ab:3e:35:
                    88:cc:4e:51:b5:13:04:7f:c1:16:a7:d9:4b:e0:fc:
                    e5:9f:c7:39:94:7c:20:e1:f7:04:b0:1b:35:90:1e:
                    9c:a5:35:44:ce:39:5b:18:70:03:b8:31:4a:fc:fd:
                    a1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B3:D4:36:06:35:84:95:2A:67:A4:61:58:2D:3A:88:67:E3:1E:CE
            X509v3 Authority Key Identifier:
                keyid:4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:94:29:38:e7:45:6b:2c:b7:d9:6c:a7:f6:78:f1:e7:57:04:
         a1:3a:a7:c0:2e:93:8f:77:5b:a4:08:5f:46:6d:27:c2:a3:88:
         08:4e:1d:b8:7c:47:99:79:e7:3c:c9:6d:82:61:0f:49:e5:e7:
         ba:f8:e0:c3:65:6b:95:27:54:a1:8e:be:98:f7:77:f5:22:6e:
         ee:1a:10:8e:e9:6d:3d:6c:81:33:19:eb:b7:dc:f4:04:56:fc:
         7b:55:76:86:61:d9:fd:b7:f2:0a:b2:09:0a:e5:fc:ef:50:0c:
         a6:cb:c6:76:7c:97:ed:49:17:ac:56:8b:5a:62:cf:c3:f8:b6:
         a8:4c:c9:76:48:29:ee:6f:8e:44:83:15:19:a8:f1:01:1a:76:
         5e:cf:0e:76:c7:5b:af:6c:e3:77:a6:d6:70:69:2b:9c:cd:0e:
         65:cd:6f:91:d3:22:6b:a6:88:c5:62:2e:02:56:b8:80:e6:0d:
         f7:b2:9a:89:b3:14:28:ad:b3:c8:aa:cc:9f:ab:1c:a2:85:57:
         b8:e7:7a:76:e5:35:94:3b:8a:80:77:e1:c7:ee:c0:28:ea:ff:
         e5:16:3f:b6:a7:a0:66:bc:75:ed:48:9f:6d:63:38:b2:50:18:
         88:5b:32:1a:64:4f:40:1d:b5:b7:54:f4:bb:a7:29:59:bf:a0:
         e5:e9:0a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:28:34 2026 by rpki-client