Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft
File:                     727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft (raw, json)
Hash identifier:          /8mEH9/wktT3M2SoHZgnUSlHW32Bdx6YcJCZjv/KF6M=
Subject key identifier:   E5:1B:48:89:F4:26:26:26:54:E6:7F:E3:49:D3:AE:F2:72:FD:0D:34
Authority key identifier: 72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D
Certificate issuer:       /CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D
Certificate serial:       5D8DA1B59DDBCFCB3DBE25BB126D26D0E8BA0E20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft
Manifest number:          6A
Signing time:             Wed 13 May 2026 13:56:05 +0000
Manifest this update:     Wed 13 May 2026 13:51:05 +0000
Manifest next update:     Thu 14 May 2026 17:09:05 +0000
Files and hashes:         1: 727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl (hash: 6hFh23/6PS7gwixY5wP3hGpyquI/I7LgUZkU8DXG7yE=)
                          2: 3133392e3137362e302e302f31362d3136203d3e2039383033.roa (hash: rprXfo+mQWYwe2oVBzgwFN7TztyCOZlqUd+lE3fdHj0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 12:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8d:a1:b5:9d:db:cf:cb:3d:be:25:bb:12:6d:26:d0:e8:ba:0e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D
        Validity
            Not Before: May 13 13:51:05 2026 GMT
            Not After : May 14 17:09:05 2026 GMT
        Subject: CN=E51B4889F426262654E67FE349D3AEF272FD0D34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cd:92:f3:e9:f3:d8:0e:55:2b:7c:12:26:2e:
                    54:05:85:2f:70:4a:9a:b0:68:66:8f:10:29:e1:51:
                    6f:ff:3f:67:e8:b6:da:66:90:49:a7:1a:b2:07:d9:
                    8e:02:e9:96:63:8e:12:a1:f4:28:79:d6:1a:3d:e8:
                    2b:ed:a5:1a:4a:3c:29:82:b9:ed:9b:c1:04:0c:dd:
                    50:a7:5d:b8:7e:b7:48:b1:3c:3c:2b:91:f7:b3:70:
                    84:a0:b4:51:5e:25:c5:05:4a:59:99:07:5d:87:02:
                    3d:83:ca:d3:83:9a:e3:6c:db:6c:13:df:34:7a:0f:
                    0b:b3:74:f5:dc:40:71:65:f5:26:7f:b1:b4:ab:aa:
                    c2:54:ce:76:ec:c9:70:d6:16:90:41:fa:71:a4:b3:
                    46:4e:df:ba:ee:02:85:8c:33:99:ca:21:ed:71:1b:
                    4b:d6:69:56:44:9f:46:50:bd:fe:3f:40:20:42:c3:
                    c0:fc:c9:c1:5c:80:57:e2:03:ce:7a:c8:72:62:80:
                    01:85:76:51:f6:cd:9d:ee:69:cd:80:03:9c:c2:98:
                    17:a6:43:1a:71:9f:41:15:a1:02:b8:84:40:8b:7c:
                    b8:43:f6:ec:17:e9:72:93:c8:9e:59:1a:fa:d3:86:
                    c9:e3:d0:e1:f1:c1:c0:d4:c3:a9:17:30:70:5a:2a:
                    80:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1B:48:89:F4:26:26:26:54:E6:7F:E3:49:D3:AE:F2:72:FD:0D:34
            X509v3 Authority Key Identifier:
                keyid:72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b4:40:9d:ad:41:bd:9a:b0:8b:73:ec:71:c5:b3:94:53:42:
         51:b8:45:af:ff:fb:85:31:4e:62:a2:d2:32:0e:75:c6:c7:76:
         b0:d8:a2:2e:f9:a8:d3:83:37:52:30:63:30:8f:8d:87:f9:7b:
         9b:66:ba:7e:67:78:a2:a8:82:38:9c:c6:c0:8b:8e:49:47:0d:
         09:d1:89:4b:d5:21:f8:54:1f:ec:b7:f4:ce:be:3e:9d:e0:40:
         6a:6c:32:58:9c:ea:17:d6:8b:3d:69:00:35:f4:4e:fd:c1:ca:
         88:be:c3:47:8f:76:7f:d8:42:da:8f:d7:6c:d0:b4:af:01:88:
         86:1c:fc:cf:03:72:5b:75:2e:3b:ea:7d:b2:0f:6e:05:a1:ce:
         0d:6f:d4:45:0b:98:a3:77:c5:f3:b5:fc:fb:59:ba:25:8d:df:
         82:ce:36:55:91:eb:92:66:96:d6:8a:65:08:c5:7f:83:d7:bd:
         57:0a:0f:58:5a:0e:81:95:bc:e1:83:d5:e5:5a:b5:05:7e:0d:
         16:16:01:f0:18:49:64:53:b3:bb:0c:d9:9d:25:8e:a2:43:f6:
         8e:6c:09:3e:a9:b5:cd:f2:7e:46:15:98:93:d4:03:21:cb:b5:
         bb:81:dd:2d:8e:02:62:1c:28:67:64:93:d6:54:8a:de:30:4d:
         31:c5:c5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:52:24 2026 by rpki-client