Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft
File:                     5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft (raw, json)
Hash identifier:          VYGpJ2n5ltT64IKGp3zpFyUmQcnXOzdAlOr/TYeIW4Y=
Subject key identifier:   29:BC:36:B7:4B:BC:0D:3C:03:64:21:20:22:03:10:48:2F:49:08:13
Authority key identifier: 5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93
Certificate issuer:       /CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93
Certificate serial:       0DD4894511A3E773756DAD9D12AF781B8A1F4BBB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft
Manifest number:          2F
Signing time:             Wed 13 May 2026 11:56:04 +0000
Manifest this update:     Wed 13 May 2026 11:51:04 +0000
Manifest next update:     Thu 14 May 2026 15:33:04 +0000
Files and hashes:         1: 5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl (hash: XQTErNb5DB1cPrzn0nUas/sks1cIJfFze8PzbPXd8Qw=)
                          2: 323430313a636238303a3a2f33322d3332203d3e203633353831.roa (hash: dDeDR4e70AWOAUZvLS+xyFAYDyo4SmrjiX9iKV4mFSk=)
                          3: 34332e3235352e36382e302f32322d3232203d3e203633353831.roa (hash: vUyKbSrm/jlpu3TklPx1U6F0V6/+jpkyBlDOC/rJv1k=)
                          4: 3130332e3232382e3230382e302f32322d3232203d3e203633353831.roa (hash: WBrX/HFk3yWwGFq1SUduc3MgL8gsNnc9qwlO7cLpdow=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d4:89:45:11:a3:e7:73:75:6d:ad:9d:12:af:78:1b:8a:1f:4b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93
        Validity
            Not Before: May 13 11:51:04 2026 GMT
            Not After : May 14 15:33:04 2026 GMT
        Subject: CN=29BC36B74BBC0D3C03642120220310482F490813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c5:ee:16:64:0c:26:b3:9a:71:ef:53:10:7e:
                    5d:93:bc:e4:08:e6:10:11:46:bb:75:91:b2:ee:75:
                    be:a2:8a:59:17:ba:1e:07:76:8e:4a:97:a4:ef:28:
                    f7:1a:47:a9:c9:2f:57:8e:6f:28:18:7e:6d:18:64:
                    59:d9:ff:09:ae:cb:65:70:01:11:73:5f:34:58:ac:
                    70:98:ec:23:54:98:79:4e:ff:5b:2f:74:a5:ee:1f:
                    fa:8c:a9:d0:21:55:eb:30:4b:41:b3:05:2b:c4:0c:
                    09:fa:07:c6:a2:50:f9:03:3e:c9:2c:52:02:b2:7b:
                    11:d4:09:87:70:6e:3c:46:a8:78:8f:cf:f8:c5:1e:
                    1a:83:35:e7:00:ac:46:e0:95:33:1a:44:5b:74:10:
                    ac:bc:0a:94:10:43:45:0e:94:f3:1e:18:d4:64:07:
                    6f:aa:da:8c:66:40:f9:69:16:4f:73:7a:43:51:dd:
                    63:32:9d:4e:52:ff:a6:5f:a7:9e:4b:ca:04:26:41:
                    77:60:b9:3e:1c:5b:74:25:33:66:03:d3:9a:e4:f0:
                    cc:64:b7:15:2f:90:1f:47:30:e7:b2:b9:8f:ca:5f:
                    8b:7a:d6:38:c8:27:6e:1c:c0:a8:46:c5:4b:8c:5a:
                    86:88:5e:19:00:fa:2e:60:1a:15:fb:80:6b:59:e6:
                    dd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BC:36:B7:4B:BC:0D:3C:03:64:21:20:22:03:10:48:2F:49:08:13
            X509v3 Authority Key Identifier:
                keyid:5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e1:93:30:c4:e2:c8:fe:76:a7:e8:6f:e7:0d:09:bb:a0:bb:
         9d:09:2d:93:f3:4e:85:63:d1:1a:33:a4:51:d2:b2:d9:b8:db:
         4b:cd:3f:aa:20:4c:05:6a:d1:b0:4e:e2:a6:c5:f6:ba:79:1d:
         07:ba:94:0b:77:56:f2:55:1b:63:2d:1e:24:41:c3:c1:be:82:
         09:4e:1e:02:06:69:2b:30:22:c8:90:27:88:29:4c:bc:b4:a6:
         55:9c:18:7b:49:19:fb:21:a0:29:d2:0f:ec:c0:5c:c5:1c:35:
         5a:db:eb:40:41:22:3b:17:2a:a2:21:7e:fa:f3:0f:44:d1:bb:
         f6:b4:a4:9b:05:a3:bf:c9:1d:db:ac:67:0d:41:39:5a:b5:a3:
         15:51:87:45:a4:27:14:77:31:28:ff:0a:d6:14:73:cf:d5:e0:
         d9:bd:68:6e:5d:46:ee:51:f2:e4:69:85:92:9d:5d:03:9b:86:
         be:63:9a:4f:52:61:6d:e7:ca:23:a2:2a:37:fb:99:a4:92:19:
         c8:fe:10:9b:aa:e7:ca:58:9c:97:0c:3d:71:a1:d1:89:fd:8e:
         00:da:4c:b6:77:e0:0a:4e:87:47:74:b3:84:77:d6:68:e8:13:
         24:3b:f3:67:0f:22:7f:17:f2:db:12:a1:aa:dc:3e:ec:c5:3f:
         29:0d:39:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:54:59 2026 by rpki-client