Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
File:                     19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft (raw, json)
Hash identifier:          cXpNJuh6w0YwX9WpF+P+kLh59y2nNP67anTZ9trYSTk=
Subject key identifier:   B3:6B:ED:A5:C2:A1:8C:EA:0F:32:B3:5D:B5:2B:8C:5E:B5:1E:30:63
Authority key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD
Certificate issuer:       /CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
Certificate serial:       2D68D4CD5EF7BCE4EB26F26C8B46B364B137FE9A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
Manifest number:          F9
Signing time:             Fri 24 Jul 2026 19:57:00 +0000
Manifest this update:     Fri 24 Jul 2026 19:52:00 +0000
Manifest next update:     Sat 25 Jul 2026 20:45:00 +0000
Files and hashes:         1: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl (hash: HgQ+4F4zKBhcPmpqL0WsF4KLVzw48f/XFazbM/ZY6Wo=)
                          2: 3134342e37392e31302e302f32332d3234203d3e20313531323531.roa (hash: WjMCSVc2nZ6LHlmIFS3fh2fKf0RsOi1ahfbmP+aZL0U=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 20:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:68:d4:cd:5e:f7:bc:e4:eb:26:f2:6c:8b:46:b3:64:b1:37:fe:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
        Validity
            Not Before: Jul 24 19:52:00 2026 GMT
            Not After : Jul 25 20:45:00 2026 GMT
        Subject: CN=B36BEDA5C2A18CEA0F32B35DB52B8C5EB51E3063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:19:44:49:e4:8c:a1:1a:29:c8:e9:06:81:6d:
                    07:4e:8e:07:b6:08:7a:76:79:eb:f5:be:b6:ec:ed:
                    ee:7f:61:5b:a3:65:c6:8e:6c:eb:ae:29:7e:3f:31:
                    be:e9:48:f5:0d:5b:34:1d:f7:5f:5c:bf:a8:d3:23:
                    50:4c:f3:d0:87:9d:e6:29:97:06:82:0c:5e:f2:74:
                    5a:fd:b9:0d:b1:b9:11:03:27:26:5c:d8:ff:58:4c:
                    36:d9:0d:72:8a:f9:30:c7:4f:af:3a:41:f4:0a:f6:
                    83:ff:d9:a1:c8:9b:2b:93:64:bf:11:e3:dd:a3:6e:
                    fc:cf:f4:81:91:dd:05:f5:cd:d7:8b:b9:06:07:7f:
                    52:96:56:43:a6:d3:09:72:6c:5e:d4:c7:1a:08:9d:
                    38:a8:19:41:fe:44:24:0f:bd:78:c7:82:30:df:f2:
                    47:ac:51:b0:0c:ee:ff:44:6b:1f:0d:ea:3a:3b:83:
                    dd:bd:29:c7:d6:b5:4d:3f:aa:01:b0:42:bd:be:63:
                    c4:81:f6:87:1b:bb:be:0a:5c:e7:7b:87:e2:88:4f:
                    a0:6e:34:2a:a1:74:0a:03:36:a4:fa:97:68:8d:0c:
                    5f:c6:f7:1a:a8:26:a1:79:2d:d3:04:78:3b:64:11:
                    2e:05:99:b8:f1:2f:39:06:80:bf:32:b2:eb:17:a0:
                    73:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6B:ED:A5:C2:A1:8C:EA:0F:32:B3:5D:B5:2B:8C:5E:B5:1E:30:63
            X509v3 Authority Key Identifier:
                keyid:19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c5:dc:cb:15:5e:4e:60:e2:86:14:96:db:10:ce:b5:ec:ab:
         12:c9:8b:6e:4b:fc:1f:05:26:4c:e7:c4:9e:12:81:aa:30:82:
         38:10:08:13:a3:b9:12:ac:b5:44:40:0b:22:24:b3:64:98:51:
         16:f2:ad:30:6c:04:1c:d9:ad:25:64:17:ef:d3:a0:98:30:5f:
         e3:73:7e:4b:36:d9:e1:1e:63:40:f3:08:0e:ac:dc:a4:4c:f8:
         aa:ee:ce:3f:3e:6a:a0:27:73:dc:93:c2:c4:37:5d:e1:37:7a:
         dd:74:a0:bb:24:ed:0e:04:99:90:f1:35:86:83:c5:73:dd:cf:
         b0:5d:62:ff:00:a0:b6:29:b5:99:00:90:14:1d:f0:64:54:b7:
         30:73:40:21:86:39:8c:ce:1d:e7:e7:f9:eb:2f:b5:de:0f:1b:
         b5:e0:29:93:16:80:c2:ce:90:8c:79:a6:63:89:66:bb:8e:e0:
         88:c6:d5:db:f1:fa:5b:df:c9:30:b6:a6:8e:33:3b:46:73:a5:
         62:16:f7:dd:b4:5f:9c:31:e4:84:e8:ec:8c:86:ac:0d:de:92:
         67:33:6e:7d:db:5f:41:3b:86:75:ee:1d:0e:e5:c8:bd:68:c2:
         4b:28:19:06:eb:da:ca:1c:11:40:83:0e:03:95:13:5a:74:e4:
         82:ae:24:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:38:53 2026 by rpki-client