Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft
File:                     4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft (raw, json)
Hash identifier:          Fr9jaXQCZJLYM8IygCelNICwCdnJj2e40oEdVNQF+1c=
Subject key identifier:   F5:35:CA:5C:76:57:BF:4E:38:F3:1D:22:37:74:E7:48:48:AD:80:4D
Authority key identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5
Certificate issuer:       /CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5
Certificate serial:       1937602D0FB9B5C89AD42AB6EABA1F35BFDA6011
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft
Manifest number:          97
Signing time:             Wed 13 May 2026 05:15:57 +0000
Manifest this update:     Wed 13 May 2026 05:10:57 +0000
Manifest next update:     Thu 14 May 2026 08:56:57 +0000
Files and hashes:         1: 3130332e3135302e3133302e302f32332d3234203d3e20313331343832.roa (hash: MVsUDZl3GgWRFvEnX6kV839tXO39pYXZBP9CEBaBJ30=)
                          2: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl (hash: jQ5dDaNa10eIoJczfGl3DbVSBri8FEclrGocTddFAKk=)
                          3: 3130332e3135302e3133302e302f32332d3234203d3e20333938373034.roa (hash: hdeNM6SZLBGxeR3CeiKy7jXN48yMDvfEKuvQ/eq47bE=)
                          4: 3130332e3135302e3133302e302f32332d3234203d3e20313331353330.roa (hash: KbpTkJkA7rPJjA6zPO2PXZ17GVAIcObqfuRiur//LIg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:37:60:2d:0f:b9:b5:c8:9a:d4:2a:b6:ea:ba:1f:35:bf:da:60:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5
        Validity
            Not Before: May 13 05:10:57 2026 GMT
            Not After : May 14 08:56:57 2026 GMT
        Subject: CN=F535CA5C7657BF4E38F31D223774E74848AD804D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:34:ed:e0:1a:10:c2:0b:66:b0:15:9e:ff:
                    bb:a0:56:f2:fd:7d:db:61:02:5c:14:b6:d9:a1:79:
                    df:6c:47:38:19:9e:d1:fb:d0:1c:df:cf:e3:7c:e0:
                    69:d4:e1:6d:6e:74:97:f0:8b:b6:48:fb:65:7c:83:
                    84:97:d2:d9:b4:93:57:db:7a:9e:59:e6:e1:da:cd:
                    a7:6b:f7:da:a7:24:0b:6f:04:5c:aa:2e:0f:9d:cc:
                    b7:96:b2:ff:20:b5:37:37:af:17:22:65:74:fb:d8:
                    01:b3:23:58:40:1e:3e:61:56:4d:0d:12:56:0f:4a:
                    68:fc:0b:57:98:b1:76:88:08:32:ae:c0:ad:7d:57:
                    3b:cd:15:ce:66:96:45:7f:26:fb:1c:64:47:93:15:
                    ce:b6:2f:34:d1:90:aa:62:bf:2c:27:93:8e:8e:96:
                    c9:51:83:ca:4c:5c:98:9c:2b:7a:81:9f:ce:6f:04:
                    a9:ee:d0:04:8a:9a:a3:e2:6f:fa:ce:ff:4e:3c:f9:
                    b6:fe:f9:cd:81:8f:4c:95:24:31:67:3f:3b:44:e9:
                    a7:82:3a:9c:3d:ab:04:96:30:84:51:f7:67:c0:8b:
                    5a:a4:17:5d:fc:77:9a:78:2f:12:b2:37:3f:db:33:
                    12:30:d9:9b:02:29:24:8c:a8:bd:3a:34:2d:e7:26:
                    66:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:35:CA:5C:76:57:BF:4E:38:F3:1D:22:37:74:E7:48:48:AD:80:4D
            X509v3 Authority Key Identifier:
                keyid:4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:75:ce:81:80:f5:16:c0:72:00:4c:6f:cf:7e:19:c6:88:96:
         80:b7:52:c5:6d:0b:f3:04:b7:1e:e5:af:7c:6a:6b:54:69:6c:
         2e:37:c1:5b:f5:e3:13:c8:9e:31:b2:c8:21:e5:14:a5:f3:5b:
         22:09:aa:dc:2e:8d:51:6e:35:08:aa:ae:ec:b1:66:4d:75:20:
         c1:e8:ee:47:d6:33:3b:bf:6a:78:f2:92:06:70:59:64:c8:db:
         4f:a8:3f:45:1f:ce:49:2c:88:74:58:15:cb:9d:96:eb:cf:54:
         8c:89:2a:70:52:79:41:16:0c:d3:c1:f6:02:48:6d:11:89:b5:
         49:dd:f9:45:c9:d3:93:5c:d4:93:53:5c:3c:72:98:8f:de:8b:
         1f:5b:eb:f7:97:2b:48:74:02:96:62:bd:fa:74:6d:94:63:84:
         5c:1f:f4:06:2e:48:61:8b:1e:da:69:69:65:16:d5:49:97:53:
         75:03:61:fa:5e:1a:3b:63:3d:1f:a5:64:d0:09:30:4a:f0:df:
         19:67:08:55:8a:e3:e6:a6:76:c6:d5:52:91:13:3b:b0:7e:d5:
         64:f4:fe:72:6b:a8:f7:3e:58:9f:6d:cf:60:1e:81:26:ff:dc:
         9e:23:b9:a0:da:2b:a1:c9:b9:25:2f:bd:50:2f:a1:7f:e1:19:
         2c:80:b8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:53:15 2026 by rpki-client