Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft
File:                     5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft (raw, json)
Hash identifier:          C6Hl0rk3ywy7EmQUEyOlwDlLyVg0cHVk531b6szLlww=
Subject key identifier:   72:7D:E9:2F:B9:B3:4F:33:B2:72:BD:EE:A2:A2:DF:22:3B:5A:8A:D0
Authority key identifier: 5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93
Certificate issuer:       /CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93
Certificate serial:       6FC6F47ACD2B7FDD244201FE07AFEEB21897325E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft
Manifest number:          90
Signing time:             Fri 24 Jul 2026 19:36:58 +0000
Manifest this update:     Fri 24 Jul 2026 19:31:58 +0000
Manifest next update:     Sat 25 Jul 2026 21:06:58 +0000
Files and hashes:         1: 5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl (hash: tC0ThMD8aTihmEl2WG0EQlleldjHrGw+xuNQRcFNR5M=)
                          2: 3130332e3232382e3230382e302f32322d3232203d3e203633353831.roa (hash: WBrX/HFk3yWwGFq1SUduc3MgL8gsNnc9qwlO7cLpdow=)
                          3: 3231392e3233322e36342e302f31392d3234203d3e203633353831.roa (hash: k4/pmiksQ82Ul8TupUzMm7WCgnyDzMOAMQ9dmic57bI=)
                          4: 323430313a636238303a3a2f33322d3332203d3e203633353831.roa (hash: dDeDR4e70AWOAUZvLS+xyFAYDyo4SmrjiX9iKV4mFSk=)
                          5: 34332e3235352e36382e302f32322d3232203d3e203633353831.roa (hash: vUyKbSrm/jlpu3TklPx1U6F0V6/+jpkyBlDOC/rJv1k=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c6:f4:7a:cd:2b:7f:dd:24:42:01:fe:07:af:ee:b2:18:97:32:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93
        Validity
            Not Before: Jul 24 19:31:58 2026 GMT
            Not After : Jul 25 21:06:58 2026 GMT
        Subject: CN=727DE92FB9B34F33B272BDEEA2A2DF223B5A8AD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:06:22:76:dc:26:72:93:ad:90:b9:21:24:d2:
                    d9:ab:a9:fe:a0:38:c8:a1:3a:b3:ac:3c:bf:fe:4f:
                    b3:30:d7:3e:db:69:d2:b7:59:8c:6f:d8:4c:09:54:
                    47:7a:55:d6:1d:71:5a:f9:db:e7:b1:f0:1a:c7:a8:
                    29:16:c0:af:6e:98:d2:3f:93:72:bd:39:0f:27:51:
                    50:c4:38:24:d5:c1:bd:ad:4c:27:19:8e:b0:b5:d2:
                    2f:d1:e1:5e:32:20:2a:cd:0f:29:4d:f1:27:24:9e:
                    88:7a:56:c1:84:53:81:29:8c:cf:ce:ef:dd:b7:96:
                    da:ad:56:db:0c:0d:d5:87:e0:d6:34:2e:de:71:d8:
                    82:ed:75:2b:ec:e1:56:b1:24:74:f5:50:5a:98:75:
                    8e:04:34:21:6d:ca:98:b1:6f:8c:d1:ab:ed:6a:5d:
                    b2:18:91:73:7e:e9:4a:bb:57:ce:85:1a:e2:64:ce:
                    f9:49:0b:70:cb:68:71:2e:37:10:f1:28:28:1a:10:
                    76:01:d5:62:35:c3:1a:cf:60:2e:c8:97:4b:15:cc:
                    c2:9e:44:36:03:97:7b:af:0a:84:6a:45:bb:e7:08:
                    bf:be:20:24:a8:5d:68:88:46:ec:30:ba:b4:18:dc:
                    a1:85:b6:99:66:ab:8b:a1:44:7f:7d:f4:69:f8:21:
                    87:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7D:E9:2F:B9:B3:4F:33:B2:72:BD:EE:A2:A2:DF:22:3B:5A:8A:D0
            X509v3 Authority Key Identifier:
                keyid:5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:73:60:11:f9:8e:9b:01:6e:13:f9:f2:d7:a6:32:8f:e7:c4:
         69:39:37:2d:e5:f7:11:19:46:94:f4:ed:38:c5:9a:2f:9b:e9:
         49:1c:e9:22:7d:0e:71:db:46:f9:3c:e5:a1:90:f2:ee:c6:ef:
         c5:6f:72:0e:64:bc:48:86:f6:f3:4d:14:fa:3b:5b:48:25:49:
         34:33:50:18:78:14:33:fd:39:68:a1:cb:44:b6:d2:d1:09:bf:
         9d:c9:53:41:fa:6f:78:6d:2c:ed:c6:30:40:98:37:ec:df:65:
         5a:49:08:9a:a8:c3:87:8c:bd:d6:79:02:81:d6:8e:a3:59:89:
         99:b0:5e:b6:6c:11:ba:53:6e:a6:78:b4:20:22:3e:95:3c:48:
         54:b6:12:21:3f:dc:e7:34:16:7c:69:94:52:b2:e1:0e:e1:ef:
         35:18:c3:74:43:cd:6b:08:c9:22:4d:0b:82:b4:42:e1:d0:67:
         27:1a:7a:e9:73:d8:68:20:d2:46:ae:99:1a:b6:d5:0b:dd:c9:
         32:72:29:2c:5f:60:d2:cd:0a:00:93:50:1e:06:15:21:a5:f8:
         f9:75:e2:99:13:57:fd:f9:6e:47:cb:3c:9d:72:4e:13:87:da:
         4c:6d:c9:b0:92:3a:c1:40:46:d9:dd:50:d7:c9:15:71:35:97:
         44:6b:41:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:28:49 2026 by rpki-client