Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft
File:                     9B5519650F0653145F5D42879890BE1251C8F463.mft (raw, json)
Hash identifier:          eXRHuTavRK7xafSjakxP+zVHkVUIe25/VxeGlW9v0C4=
Subject key identifier:   A4:5F:7F:59:FB:A8:05:B3:40:CC:CF:E9:97:C1:90:F8:B4:B3:73:6C
Authority key identifier: 9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63
Certificate issuer:       /CN=9B5519650F0653145F5D42879890BE1251C8F463
Certificate serial:       6A0D03FDC0C7128D3FD0ADB9A0C7D8F7D99780F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft
Manifest number:          3E
Signing time:             Wed 13 May 2026 01:05:50 +0000
Manifest this update:     Wed 13 May 2026 01:00:50 +0000
Manifest next update:     Thu 14 May 2026 04:59:50 +0000
Files and hashes:         1: 9B5519650F0653145F5D42879890BE1251C8F463.crl (hash: vI4J2LoxrhPiHO+AtG3JuLHBzj6VtrEXC9c+jPFglWM=)
                          2: 3130332e3136362e35332e302f32342d3234203d3e20313532333230.roa (hash: Gf1xZTaiFs2sYarVKh+0+XtExjMUBVsVOE19dnVKZUs=)
                          3: 3130332e3136362e35322e302f32342d3234203d3e20313532333230.roa (hash: E7QlYHDSttb4N2W5AMGTOJwqynTI9lm4x0smn+C1yF4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0d:03:fd:c0:c7:12:8d:3f:d0:ad:b9:a0:c7:d8:f7:d9:97:80:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B5519650F0653145F5D42879890BE1251C8F463
        Validity
            Not Before: May 13 01:00:50 2026 GMT
            Not After : May 14 04:59:50 2026 GMT
        Subject: CN=A45F7F59FBA805B340CCCFE997C190F8B4B3736C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:28:13:41:67:c8:f4:db:0f:1d:88:4f:29:
                    95:54:e0:41:89:ef:5a:2f:39:14:00:99:df:2c:ea:
                    75:45:77:55:78:c6:47:ee:1e:39:96:45:99:00:3b:
                    08:17:39:00:aa:bd:f6:56:fe:ed:44:12:47:aa:03:
                    c9:a3:4a:8e:00:2e:e4:57:b0:13:c7:2c:cb:08:41:
                    2c:5e:53:95:1c:4c:54:ee:89:b4:34:ba:38:33:97:
                    1c:30:37:d9:e5:06:67:6b:d7:15:64:6d:ad:f4:88:
                    2e:9d:10:4a:62:ea:ba:5f:b4:fe:f9:75:d0:f4:e8:
                    b0:c8:5f:51:66:95:84:5b:a8:0d:b8:f4:88:7d:ea:
                    f4:6d:af:1d:5d:52:fd:d4:62:e7:8a:c8:0e:fe:e0:
                    05:3e:f1:5d:0c:ff:30:be:0c:cc:b6:3c:4e:3c:ca:
                    33:81:64:a9:65:55:da:14:e9:5b:a5:9e:18:42:bd:
                    a6:80:04:b0:e2:02:50:59:e6:9a:26:0c:10:ff:f0:
                    ec:91:4d:8c:3e:0e:78:7f:10:18:50:73:1e:86:6a:
                    9d:27:48:3b:7d:d8:b0:d0:ee:f2:aa:88:cd:f9:e1:
                    7e:d0:cc:3c:7f:92:29:a9:64:38:aa:df:50:82:1b:
                    36:da:f4:2a:3c:58:97:06:da:8f:23:47:43:46:cc:
                    52:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5F:7F:59:FB:A8:05:B3:40:CC:CF:E9:97:C1:90:F8:B4:B3:73:6C
            X509v3 Authority Key Identifier:
                keyid:9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:34:d1:48:e8:39:2e:b0:82:9d:f7:0e:54:1c:1a:75:29:63:
         72:eb:9d:51:6f:35:ab:a1:03:a2:1c:a9:b6:9e:7a:7d:e5:84:
         32:f4:77:9b:cf:0e:a4:81:54:c5:b7:4e:8b:45:6e:fb:35:68:
         2c:4a:43:ae:33:f4:37:54:09:ef:4b:9a:be:12:28:d4:dc:58:
         11:93:e8:d3:d1:25:f9:64:1e:bd:1c:4f:f1:f3:4f:58:2b:54:
         85:16:d2:4a:dd:7a:1c:5f:0c:5f:23:00:c5:35:8c:fc:81:4a:
         25:a0:e3:cc:85:32:46:8d:f7:a5:8a:6c:9b:34:33:e6:c0:26:
         d3:3a:bb:fb:79:67:e9:bc:8a:4b:06:e1:96:53:96:69:2c:bf:
         59:71:ac:b0:19:3d:47:55:2c:ec:f5:24:13:f9:6e:9b:98:59:
         48:89:a9:2c:49:43:22:11:a6:2f:01:5c:a3:3d:38:41:86:8c:
         ce:c9:10:93:92:c6:b1:08:85:9d:f3:68:a6:42:5b:f5:05:07:
         3e:58:8a:c7:50:b9:5e:15:f0:c4:fb:f7:b9:95:f0:64:9a:25:
         71:75:35:ad:5e:af:16:3f:bd:43:08:b1:2d:4a:83:1d:d0:c4:
         fe:98:f3:f5:53:34:6c:af:09:c9:df:da:c6:74:5a:6b:67:bf:
         2b:91:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:56:24 2026 by rpki-client