Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
File:                     4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft (raw, json)
Hash identifier:          eABQLf2j3AbLOMPaJby2gpx0J3nRlQTzfk/XrxMdu8g=
Subject key identifier:   8D:0B:E1:2B:9B:A6:C3:CD:F6:1D:40:CE:82:F6:7A:20:36:68:8F:9D
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Certificate issuer:       /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial:       7C680D97B1BB555686354C6A6431378A2D727F26
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
Manifest number:          35
Signing time:             Tue 12 May 2026 22:10:48 +0000
Manifest this update:     Tue 12 May 2026 22:05:48 +0000
Manifest next update:     Thu 14 May 2026 02:05:48 +0000
Files and hashes:         1: 3130332e38392e3131322e302f32342d3234203d3e203633353939.roa (hash: qeNecZYzzDOdHNQ7OI1FGeTPwXb6OHSlmtGAyhOcfnc=)
                          2: 3130332e3232322e3137372e302f32342d3234203d3e203538343636.roa (hash: sH7OowcFHJCcPwvZJv25D4lUlZf+T7s/iYMS2TGzZjc=)
                          3: 3130332e38342e31382e302f32342d3234203d3e203633353939.roa (hash: 3DmQOstdoBvJ2hoZgDbRJT6QPLY4tMgVKWUBkWPRlxo=)
                          4: 3130332e3231352e34372e302f32342d3234203d3e203633353939.roa (hash: u/vlygKRp4uqaQ1eQKS9c4Kf1g9VgGjmp1fspJX/cVs=)
                          5: 3130332e3232322e3137382e302f32342d3234203d3e203538343636.roa (hash: F41StT+x2rlWXOQVNKcm+wNnMgPZjhcz7G5e31rQ98c=)
                          6: 3130332e3232322e3138312e302f32342d3234203d3e203538343636.roa (hash: uKysvU2wPaXdqx5np2DX47AZPrvFjLAnDA6TLyNZjPM=)
                          7: 34352e3235312e35342e302f32342d3234203d3e203633353939.roa (hash: cTOAofuVrZB6PvajehxRqJi1HOjgKdwuykVDBV6ic3Y=)
                          8: 3130332e3231352e34352e302f32342d3234203d3e203633353939.roa (hash: 8mVkqtHAsXXoQdq7QTFwXAv0F2qADSnLhXnxk2xo7+M=)
                          9: 3130332e3232322e3138322e302f32342d3234203d3e203538343636.roa (hash: HWtDjdcXqq3zhzr+mpXlFH5pOBwY2xagFmHw0HxdMcA=)
                          10: 3130332e38392e3131342e302f32342d3234203d3e203633353939.roa (hash: HWzCIK0J3kj61jM4RJKLtXp5PntrD5IoFA2l+KWrNdg=)
                          11: 34352e3235312e35322e302f32342d3234203d3e203633353939.roa (hash: J5ttVDSRteWIi4hwKsChc1z51WL7/hz22Kunm15KqPk=)
                          12: 3130332e3232322e3137362e302f32322d3232203d3e203538343636.roa (hash: UpPEAYdcHSdgSDgWM1Xgq+oFeYVQGymiRyGhcR0Lp6Y=)
                          13: 34352e3235312e35352e302f32342d3234203d3e203633353939.roa (hash: Jeg+X5mimydK7xcUiFtmKKbOa2PTH3bkxmXeoztyTKI=)
                          14: 4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl (hash: 11MZloNPH+YkYQroWKCl/kln91i989wXCoWJYeeozMM=)
                          15: 3130332e38342e31362e302f32342d3234203d3e203633353939.roa (hash: b4swGTnagQiiHyws9QCt7f/EiuwxqkWDoYa89SJ+Pro=)
                          16: 3130332e3231352e34362e302f32342d3234203d3e203633353939.roa (hash: lCKeTzCngwtaI2otW+3pf3dT4E8FfBmqb7nBEm4iEO0=)
                          17: 3130332e38392e3131352e302f32342d3234203d3e203633353939.roa (hash: B4R2Xn+gXDVx1b+C8xHqcnF6Dc+KqwoBc8mdRqmz84g=)
                          18: 3130332e38392e3131332e302f32342d3234203d3e203633353939.roa (hash: hQKB7wKD7sK/SrxmBN5jMLs19OSDy2v58Jdv0HOGrB4=)
                          19: 3130332e3232322e3137362e302f32342d3234203d3e203538343636.roa (hash: XB81JUcmyZM4a4Aj4m+xpC4HUoBeeoNN9kOjOp5xSlU=)
                          20: 3130332e3232322e3137392e302f32342d3234203d3e203538343636.roa (hash: G/oPdJHLin19eoCFgMmdJT+rkoQwoDBkC0Q90Pre/iY=)
                          21: 3130332e38342e31372e302f32342d3234203d3e203633353939.roa (hash: 08vQYNuWTP9OAw5cshG0cE68oQpzGq6+3rF8HhD3PJY=)
                          22: 3130332e38342e31392e302f32342d3234203d3e203633353939.roa (hash: G7UdhBTuk//TBOjHKhN/OeEw0aA18CQ1k+SEI8xy8bc=)
                          23: 34352e3235312e35332e302f32342d3234203d3e203633353939.roa (hash: gpdB2M4QzC5+FVSJ96SLxf+q0nMlU6vsNa1+V19UGpU=)
                          24: 3130332e3232322e3138302e302f32322d3232203d3e203538343636.roa (hash: KJ8ndn4BgQmtgW+vFewhPUiCUx0OF8yJqc/FF4/GVvA=)
                          25: 3130332e3232322e3138332e302f32342d3234203d3e203538343636.roa (hash: trWDmxj/bNtvLXn0EQ5qDElMfvX977EfQlgVuGKjWOk=)
                          26: 3130332e3231352e34352e302f32342d3234203d3e203538343636.roa (hash: XkU0YtFgShSzOo20rJdwEEfkrJVTk7yy7dqNfbR4/fo=)
                          27: 3130332e3231352e34342e302f32342d3234203d3e203538343636.roa (hash: aTIutstV7nnOrlPVa9rL0oVDFBjtwfzvlvl2eoyD1/8=)
                          28: 3130332e3232322e3138302e302f32342d3234203d3e203538343636.roa (hash: 0JGuJhToHH0L5OQLMRNBtLB9WwPftj52WrM4HHFq/M8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:68:0d:97:b1:bb:55:56:86:35:4c:6a:64:31:37:8a:2d:72:7f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
        Validity
            Not Before: May 12 22:05:48 2026 GMT
            Not After : May 14 02:05:48 2026 GMT
        Subject: CN=8D0BE12B9BA6C3CDF61D40CE82F67A2036688F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e0:d0:e3:82:1d:f9:d0:02:3a:22:cb:fd:d2:
                    f6:a8:0a:96:e4:e4:f8:b2:57:f3:1f:02:23:cb:ff:
                    5e:73:17:e0:65:1a:1f:58:70:95:fb:8d:c4:62:a1:
                    e0:c3:d4:66:55:31:ff:92:86:6c:04:bf:51:b2:ab:
                    b0:da:93:ad:95:85:ac:73:90:84:19:37:2a:4b:cb:
                    91:0b:18:80:f2:83:18:b0:54:cf:33:f5:2b:bd:2f:
                    35:cd:09:a2:19:0a:f3:5c:64:0e:9e:76:29:d4:15:
                    fb:40:5d:3f:33:62:65:7b:b2:9a:af:a3:02:eb:db:
                    1c:41:cb:30:5c:f6:73:c9:01:1d:c1:64:c4:56:31:
                    7e:7e:26:69:0f:3a:3a:4a:a4:ba:57:66:af:76:c3:
                    0a:eb:4e:c5:91:07:4a:30:f2:32:fa:3e:69:c9:97:
                    5d:5a:30:3e:3c:c8:43:d3:5a:a7:9f:ec:fd:2d:40:
                    d8:38:30:67:89:b6:dc:01:02:99:c8:d7:82:40:eb:
                    22:44:8f:20:e5:ad:6d:1b:9c:09:19:2b:b6:d7:eb:
                    06:60:89:09:de:67:b8:06:c8:0a:31:3e:7c:99:13:
                    77:aa:a0:84:31:61:4b:c0:95:63:a0:29:a5:c8:7b:
                    2c:d0:c0:04:98:06:e4:f3:52:83:eb:b2:ce:f7:60:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0B:E1:2B:9B:A6:C3:CD:F6:1D:40:CE:82:F6:7A:20:36:68:8F:9D
            X509v3 Authority Key Identifier:
                keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:9c:30:52:ec:01:2a:bf:6e:1b:84:24:20:11:66:a9:40:21:
         63:db:1b:d7:34:d1:38:7f:23:a2:42:0f:8f:97:c0:54:3d:99:
         f4:bb:94:23:d3:2b:ac:91:93:c4:89:21:dc:02:f3:82:fe:d1:
         ef:74:78:38:90:0c:1e:71:39:7f:ee:e2:98:d8:5c:36:06:5b:
         51:e5:8e:b8:96:e1:59:22:50:ac:02:d1:5c:3a:88:73:3f:21:
         48:33:6e:21:fa:7b:66:f7:51:b7:7e:2e:79:0d:57:bc:9c:e3:
         5b:b2:bc:20:7c:e9:e9:83:1d:8e:82:f1:60:c5:f7:c0:c2:11:
         40:62:c2:7b:6f:46:c6:39:5c:de:aa:3b:02:cf:f4:3c:6b:35:
         78:15:a1:09:e4:64:51:40:f3:09:61:f9:d9:42:bf:1c:77:63:
         f3:4f:f0:dc:de:aa:11:e7:f4:24:ec:57:c7:95:33:de:df:45:
         db:8c:e0:83:4a:e4:16:bb:c0:52:c1:6c:78:db:a2:28:77:cc:
         5e:22:ba:5a:0e:ce:9b:7a:01:79:28:b0:8b:31:78:24:61:59:
         16:0d:bb:51:1b:ae:0a:47:4c:2e:63:c9:4b:35:09:99:e8:8c:
         0f:b7:60:50:af:40:7e:c9:0f:25:bf:5a:e2:8b:b5:b1:47:f2:
         8c:54:c9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:41:08 2026 by rpki-client