Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft
File:                     98AA7A42F1AD88F64241535778555B0FE42637EA.mft (raw, json)
Hash identifier:          sL4MsclA8sJ01u4pYB9L4hS8NnO73/PFYeWKZI5/miQ=
Subject key identifier:   27:73:7E:A5:A9:56:E9:D2:54:F1:A9:6B:67:9D:72:19:EB:03:FD:35
Authority key identifier: 98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA
Certificate issuer:       /CN=98AA7A42F1AD88F64241535778555B0FE42637EA
Certificate serial:       667D40CD46D1E8E7C10123322C6FC8F3904807BC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft
Manifest number:          93
Signing time:             Fri 24 Jul 2026 03:10:13 +0000
Manifest this update:     Fri 24 Jul 2026 03:05:13 +0000
Manifest next update:     Sat 25 Jul 2026 04:35:13 +0000
Files and hashes:         1: 3130332e36302e3233302e302f32332d3233203d3e2030.roa (hash: Ue8/vIfgsSnN4LW/5kCPAbghCplvny1P0iX59/D578Q=)
                          2: 98AA7A42F1AD88F64241535778555B0FE42637EA.crl (hash: js+j01F2SkX4QLKJdaPqxqz1BPoneeaU5XR1buFPKwk=)
                          3: 3130332e36302e3232382e302f32332d3233203d3e2034383131.roa (hash: 7yZqchq5RQPFP43vKaHRYkjM76ohU/66SRSv6GUC4k0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7d:40:cd:46:d1:e8:e7:c1:01:23:32:2c:6f:c8:f3:90:48:07:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98AA7A42F1AD88F64241535778555B0FE42637EA
        Validity
            Not Before: Jul 24 03:05:13 2026 GMT
            Not After : Jul 25 04:35:13 2026 GMT
        Subject: CN=27737EA5A956E9D254F1A96B679D7219EB03FD35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f2:1b:cc:e3:5f:e8:be:64:23:b6:cb:78:b9:
                    b5:4c:6e:2e:9b:7a:c5:1c:78:79:de:79:00:27:c8:
                    f2:73:eb:0e:4c:8e:92:9d:f3:fa:c4:05:ee:5f:67:
                    d3:f1:11:e3:01:06:76:8f:45:07:2b:5a:73:5e:71:
                    8d:4e:e6:0b:e0:d9:1a:d8:37:1b:9c:22:ec:47:b5:
                    76:e0:c1:45:11:64:86:c9:48:d6:ac:83:c6:e2:9d:
                    f1:92:db:81:fc:c3:62:d0:af:df:ea:47:a7:66:3e:
                    27:f9:a7:50:6a:3c:ed:13:87:5e:2c:c6:55:3f:7d:
                    e0:04:5b:9b:4d:77:b5:56:70:da:1b:71:34:bb:49:
                    df:52:fe:f6:6e:53:e3:5d:d0:77:52:ee:b3:27:f3:
                    e6:03:a8:3a:2b:e6:ea:7a:e7:ea:de:39:71:7c:38:
                    d0:47:37:e5:37:b8:59:f9:81:d2:a9:89:05:05:1a:
                    54:a5:3b:1c:c5:eb:f2:b4:9a:3c:49:33:cd:32:1b:
                    c8:1e:67:0c:f1:62:14:0c:ca:31:79:68:f0:68:14:
                    47:eb:eb:08:9c:ab:8e:42:53:68:76:4f:6f:15:80:
                    43:44:25:9b:71:a5:7f:5a:fc:80:1f:6d:45:3c:6d:
                    00:07:05:14:9e:2c:34:f4:54:0d:c9:e1:b1:96:d8:
                    2f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:73:7E:A5:A9:56:E9:D2:54:F1:A9:6B:67:9D:72:19:EB:03:FD:35
            X509v3 Authority Key Identifier:
                keyid:98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:5c:7b:06:ba:d0:32:72:69:19:18:b7:b9:4a:ef:4c:1e:02:
         bf:63:bd:b2:b2:4f:17:36:72:73:3c:1e:ca:44:4e:e3:df:28:
         10:31:af:c8:a7:e6:fb:2f:e1:86:28:13:52:e2:ee:65:13:a3:
         c2:23:92:25:2c:10:67:10:fb:81:9e:78:17:13:25:1d:0a:7b:
         74:31:c1:50:72:46:8c:b7:48:91:d4:2b:0e:75:83:b6:35:d5:
         58:40:3f:43:2f:1b:04:5d:6b:28:c8:31:84:ed:ba:4b:96:91:
         27:f2:de:bf:25:d2:f7:3a:74:a4:91:98:a3:55:7f:66:d6:f1:
         69:11:6c:85:81:2d:06:44:f9:b0:b3:98:92:2e:22:7c:ff:63:
         c4:08:12:66:75:69:c1:0f:b5:d2:0e:dc:cc:22:56:b4:35:66:
         ab:ba:36:68:b8:96:d3:60:2c:0c:32:24:81:86:71:fe:0e:79:
         d9:bc:63:55:22:64:1a:56:32:bc:4c:35:60:1c:47:0f:01:73:
         d8:98:b0:cd:82:e4:8e:a1:76:e4:d7:bc:7b:b6:cd:b7:9a:16:
         f3:eb:1a:f4:57:5f:86:77:5d:a5:9d:00:5a:b0:17:8f:49:f9:
         cd:fc:1d:81:6b:4c:3b:63:c6:4b:a8:40:32:cc:f4:2a:b5:9a:
         a5:1d:0b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:56:21 2026 by rpki-client