Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft
File:                     452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft (raw, json)
Hash identifier:          5Bw45obPd/AKcHl4LaLEln2k5ap8o9nmN2JoR83YmTQ=
Subject key identifier:   DA:8B:13:A6:2A:37:7C:27:D1:94:15:8D:91:7B:75:BC:0E:AD:CE:46
Authority key identifier: 45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10
Certificate issuer:       /CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10
Certificate serial:       06AE8DF7CD140B597A50C08DA1AACE0126910AB6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft
Manifest number:          98
Signing time:             Wed 13 May 2026 06:51:01 +0000
Manifest this update:     Wed 13 May 2026 06:46:01 +0000
Manifest next update:     Thu 14 May 2026 07:02:01 +0000
Files and hashes:         1: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl (hash: HzgOl4fkKYJQXVP1J76WAn1jSoOUg4OTlzs41WepGkA=)
                          2: 3136332e36312e36322e302f32342d3234203d3e203138343634.roa (hash: Y/GbqiSHk47nm9kfLmWEQmvyAU1qdTdaRuJrF/5i1gE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ae:8d:f7:cd:14:0b:59:7a:50:c0:8d:a1:aa:ce:01:26:91:0a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10
        Validity
            Not Before: May 13 06:46:01 2026 GMT
            Not After : May 14 07:02:01 2026 GMT
        Subject: CN=DA8B13A62A377C27D194158D917B75BC0EADCE46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dd:66:95:f7:33:32:b3:cd:8d:25:3c:fb:7a:
                    bf:27:de:a4:f8:3d:7b:65:82:88:63:55:30:6e:23:
                    5f:39:ab:72:9c:8f:f6:58:dd:24:15:9f:3a:3e:48:
                    5f:95:76:72:6d:85:28:9f:a2:01:a3:bc:d6:68:77:
                    aa:0c:29:1e:a2:94:91:9a:8a:4e:85:01:19:ae:f1:
                    27:39:33:66:89:3d:36:a3:69:64:17:2a:64:5f:8a:
                    62:a9:de:7c:32:fc:a3:dd:a4:9d:cf:21:c6:74:24:
                    e0:a5:1f:36:4f:0a:0c:08:db:20:8b:0f:2c:4b:a9:
                    00:bc:92:5a:6a:e5:fd:20:9f:6e:b5:b7:a2:75:1d:
                    56:eb:dc:e9:18:51:bb:8e:ba:f3:d8:71:a2:7b:b6:
                    2d:8b:9a:aa:3a:ed:ab:3a:02:e5:36:52:47:9e:79:
                    61:1a:3a:2d:e7:f2:22:2c:7c:af:0e:56:f1:87:53:
                    70:41:03:4d:96:da:76:da:c9:6d:71:22:79:14:b0:
                    fa:29:3d:7a:86:93:dd:10:d4:7d:b7:8d:2e:c5:d9:
                    5a:db:b9:71:57:cd:d3:87:e2:56:44:5d:4b:fc:4e:
                    d7:4b:80:8c:6f:80:77:3e:0e:ef:cd:57:93:de:57:
                    d0:d9:f2:bc:8f:e4:20:ba:15:e3:77:0d:71:cd:e7:
                    0b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8B:13:A6:2A:37:7C:27:D1:94:15:8D:91:7B:75:BC:0E:AD:CE:46
            X509v3 Authority Key Identifier:
                keyid:45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:79:f9:b3:86:d0:78:e1:23:53:6d:75:45:69:56:0c:5e:09:
         76:aa:e4:eb:82:2c:10:57:17:b1:39:cc:6d:20:3a:67:86:66:
         26:dd:6e:90:ae:9d:aa:9b:9a:87:d8:11:c5:d0:d4:b2:96:1a:
         e3:42:4e:c2:21:cc:2d:a0:fc:b3:fa:1f:60:da:05:84:40:45:
         38:54:a7:f3:af:a6:8b:6b:84:a4:95:42:5a:06:9f:da:5e:fd:
         9a:77:c9:94:c0:d3:0f:ba:66:00:16:5f:5b:cc:b2:43:02:fe:
         c7:52:28:37:67:d8:b0:28:f6:33:2e:59:c7:00:32:c0:f1:34:
         5f:4e:72:53:36:93:9c:a4:b7:68:a2:03:2e:0c:2f:4c:2f:5d:
         72:97:65:5e:c6:b9:de:2f:2c:27:fc:22:a1:ba:76:2c:42:bf:
         86:1a:21:f5:9d:2c:1b:cb:a4:1b:1b:29:9a:4c:64:99:fc:39:
         cb:3b:a7:db:3a:64:9f:24:10:a9:c9:e4:da:95:b6:6f:7e:1c:
         af:87:4f:b9:bd:06:2e:0e:64:5c:20:72:f9:11:5b:60:29:ac:
         71:86:53:48:bd:ad:d4:3e:2f:31:07:19:e2:91:a7:4f:3e:fa:
         fd:48:c8:51:09:e2:72:6f:dd:20:f4:37:f2:e1:37:1e:65:f2:
         17:01:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:46:26 2026 by rpki-client