Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
File:                     19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft (raw, json)
Hash identifier:          MfTPHAFQVA2nwDi/RWw/N9JkF84UZLCBvBtlcXjPR4A=
Subject key identifier:   77:5B:9D:98:C4:3E:B5:CC:C0:23:12:67:14:77:83:45:6E:A8:2D:42
Authority key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD
Certificate issuer:       /CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
Certificate serial:       19A1B908BF88CA41016D0D40453B53AEBFF25CE5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
Manifest number:          98
Signing time:             Tue 12 May 2026 22:15:48 +0000
Manifest this update:     Tue 12 May 2026 22:10:48 +0000
Manifest next update:     Thu 14 May 2026 00:11:48 +0000
Files and hashes:         1: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl (hash: ldKK8TsR5ohybzAQas+gXy3lvE6uXTTE8kmwuQlb+CA=)
                          2: 3134342e37392e31302e302f32332d3234203d3e20313531323531.roa (hash: WjMCSVc2nZ6LHlmIFS3fh2fKf0RsOi1ahfbmP+aZL0U=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a1:b9:08:bf:88:ca:41:01:6d:0d:40:45:3b:53:ae:bf:f2:5c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD
        Validity
            Not Before: May 12 22:10:48 2026 GMT
            Not After : May 14 00:11:48 2026 GMT
        Subject: CN=775B9D98C43EB5CCC0231267147783456EA82D42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:74:d0:5b:cf:b7:80:d1:4f:1a:85:f6:19:4d:
                    e6:fe:ae:22:48:75:0e:4b:3f:91:f2:5f:53:df:3d:
                    fa:47:39:e0:44:de:8f:c7:e6:0a:b7:0e:85:20:21:
                    7e:c6:7c:9d:69:f8:21:36:ae:d3:77:46:8c:25:56:
                    ff:02:df:8c:c4:63:66:ed:73:1b:19:44:01:93:e7:
                    41:4b:7f:e3:b2:0c:4c:c4:54:f0:31:96:d5:dd:5e:
                    9c:ee:f1:43:5d:62:9a:e2:58:54:82:62:e8:05:62:
                    eb:8a:da:00:62:37:76:ab:41:55:37:88:a8:9c:e9:
                    a0:16:65:df:9e:59:c7:39:96:a5:dd:d1:56:41:99:
                    2e:99:95:8a:8a:4b:37:58:b1:b9:49:24:10:03:ea:
                    5d:c0:c0:80:c0:ad:15:93:62:ac:f0:5e:8d:2d:73:
                    eb:72:a9:01:30:54:de:b3:91:3c:6e:8c:0a:cc:be:
                    a0:df:e5:66:11:88:79:e9:57:85:ce:0a:03:27:52:
                    3e:a8:f3:72:54:92:d0:bd:6c:7a:94:08:04:ca:a1:
                    b5:3c:c9:ab:cc:32:29:ee:d4:7b:aa:5c:1c:46:e2:
                    3f:10:99:9d:be:66:28:61:26:94:44:ac:ae:24:fa:
                    2b:6a:08:fd:4d:59:16:c1:2f:0c:bf:31:d8:9a:9f:
                    1d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5B:9D:98:C4:3E:B5:CC:C0:23:12:67:14:77:83:45:6E:A8:2D:42
            X509v3 Authority Key Identifier:
                keyid:19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:80:db:c3:6f:b0:e0:6f:53:8c:4b:c8:4a:0f:59:0b:ae:46:
         e7:09:33:ed:92:a0:83:5e:ab:0b:bd:48:91:27:f1:96:98:82:
         99:0f:92:a2:ed:c8:06:e6:ea:96:b6:28:64:c8:80:36:ec:5d:
         23:19:53:c0:37:03:0f:5b:5d:15:08:c8:50:8a:c4:a7:0d:80:
         22:2b:8d:91:7e:99:4f:8b:39:66:e0:c1:9a:9b:31:b8:e1:95:
         68:9f:88:f2:7a:7a:a3:f6:bd:c0:c8:dd:0c:4d:ab:b1:0a:f6:
         85:eb:25:00:d5:ef:1e:ea:5d:e1:c6:46:07:b7:e0:fa:9b:5f:
         cf:0f:1d:63:4e:dd:43:02:c7:9c:25:c9:d3:77:27:e6:56:2e:
         82:d0:71:ee:7b:3b:f0:25:1c:2f:9e:2d:61:40:0b:d9:9c:1e:
         33:9b:c3:74:2d:fd:75:b5:3f:73:05:cc:ab:8b:f1:09:61:52:
         45:e9:0e:01:33:8b:ac:f1:54:82:16:54:85:ce:49:f1:2f:73:
         fb:cc:28:b7:65:45:b2:d3:88:5d:58:3c:d5:fe:46:d5:b0:fb:
         96:a8:26:e4:6a:9e:dd:ec:53:a9:32:92:25:a9:a5:00:37:6f:
         c3:0f:ce:88:de:73:fc:be:a3:9c:73:6b:cc:20:a2:f0:e2:41:
         8b:77:91:63
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUGaG5CL+IykEBbQ1ARTtTrr/yXOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2
NUJDNzdBRDAeFw0yNjA1MTIyMjEwNDhaFw0yNjA1MTQwMDExNDhaMDMxMTAvBgNV
BAMTKDc3NUI5RDk4QzQzRUI1Q0NDMDIzMTI2NzE0Nzc4MzQ1NkVBODJENDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOdNBbz7eA0U8ahfYZTeb+riJI
dQ5LP5HyX1PfPfpHOeBE3o/H5gq3DoUgIX7GfJ1p+CE2rtN3RowlVv8C34zEY2bt
cxsZRAGT50FLf+OyDEzEVPAxltXdXpzu8UNdYpriWFSCYugFYuuK2gBiN3arQVU3
iKic6aAWZd+eWcc5lqXd0VZBmS6ZlYqKSzdYsblJJBAD6l3AwIDArRWTYqzwXo0t
c+tyqQEwVN6zkTxujArMvqDf5WYRiHnpV4XOCgMnUj6o83JUktC9bHqUCATKobU8
yavMMinu1HuqXBxG4j8QmZ2+ZihhJpRErK4k+itqCP1NWRbBLwy/Mdianx35AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUd1udmMQ+tczAIxJnFHeDRW6oLUIwHwYDVR0j
BBgwFoAUGa5VZr+D0Ucv2dm65cxwEmW8d60wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTM5NDE3OS8xLzE5QUU1NTY2QkY4M0QxNDcyRkQ5RDlCQUU1Q0M3
MDEyNjVCQzc3QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2NUJDNzdBRC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMS8xOUFFNTU2NkJGODNE
MTQ3MkZEOUQ5QkFFNUNDNzAxMjY1QkM3N0FELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioDbw2+w4G9T
jEvISg9ZC65G5wkz7ZKgg16rC71IkSfxlpiCmQ+Sou3IBubqlrYoZMiANuxdIxlT
wDcDD1tdFQjIUIrEpw2AIiuNkX6ZT4s5ZuDBmpsxuOGVaJ+I8np6o/a9wMjdDE2r
sQr2heslANXvHupd4cZGB7fg+ptfzw8dY07dQwLHnCXJ03cn5lYugtBx7ns78CUc
L54tYUAL2ZweM5vDdC39dbU/cwXMq4vxCWFSRekOATOLrPFUghZUhc5J8S9z+8wo
t2VFstOIXVg81f5G1bD7lqgm5Gqe3exTqTKSJamlADdvww/OiN5z/L6jnHNrzCCi
8OJBi3eRYw==
-----END CERTIFICATE-----
Generated at Wed May 13 16:48:41 2026 by rpki-client