Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
File:                     4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft (raw, json)
Hash identifier:          CKsD3Je/Uy4V34jv98osDHha/RnOYKRjujjtKzTSZqU=
Subject key identifier:   3A:C5:F5:93:73:98:2C:99:D2:CD:41:F1:0F:DF:C0:B1:D9:14:D5:8C
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Certificate issuer:       /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial:       166920884345AF083788DFD75813B7C6468850E2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
Manifest number:          95
Signing time:             Fri 24 Jul 2026 13:46:20 +0000
Manifest this update:     Fri 24 Jul 2026 13:41:20 +0000
Manifest next update:     Sat 25 Jul 2026 16:07:20 +0000
Files and hashes:         1: 3130332e38392e3131342e302f32342d3234203d3e203633353939.roa (hash: HWzCIK0J3kj61jM4RJKLtXp5PntrD5IoFA2l+KWrNdg=)
                          2: 34352e3235312e35342e302f32342d3234203d3e203633353939.roa (hash: cTOAofuVrZB6PvajehxRqJi1HOjgKdwuykVDBV6ic3Y=)
                          3: 3130332e3232322e3138332e302f32342d3234203d3e203538343636.roa (hash: trWDmxj/bNtvLXn0EQ5qDElMfvX977EfQlgVuGKjWOk=)
                          4: 3130332e3232322e3138302e302f32322d3232203d3e203538343636.roa (hash: KJ8ndn4BgQmtgW+vFewhPUiCUx0OF8yJqc/FF4/GVvA=)
                          5: 3130332e3232322e3137392e302f32342d3234203d3e203538343636.roa (hash: G/oPdJHLin19eoCFgMmdJT+rkoQwoDBkC0Q90Pre/iY=)
                          6: 3130332e3231352e34352e302f32342d3234203d3e203538343636.roa (hash: XkU0YtFgShSzOo20rJdwEEfkrJVTk7yy7dqNfbR4/fo=)
                          7: 3130332e3232322e3138312e302f32342d3234203d3e203538343636.roa (hash: uKysvU2wPaXdqx5np2DX47AZPrvFjLAnDA6TLyNZjPM=)
                          8: 3130332e3232322e3138302e302f32342d3234203d3e203538343636.roa (hash: 0JGuJhToHH0L5OQLMRNBtLB9WwPftj52WrM4HHFq/M8=)
                          9: 3130332e3231352e34352e302f32342d3234203d3e203633353939.roa (hash: 8mVkqtHAsXXoQdq7QTFwXAv0F2qADSnLhXnxk2xo7+M=)
                          10: 3130332e3232322e3138322e302f32342d3234203d3e203538343636.roa (hash: HWtDjdcXqq3zhzr+mpXlFH5pOBwY2xagFmHw0HxdMcA=)
                          11: 3130332e38342e31392e302f32342d3234203d3e203633353939.roa (hash: G7UdhBTuk//TBOjHKhN/OeEw0aA18CQ1k+SEI8xy8bc=)
                          12: 3130332e38392e3131352e302f32342d3234203d3e203633353939.roa (hash: B4R2Xn+gXDVx1b+C8xHqcnF6Dc+KqwoBc8mdRqmz84g=)
                          13: 3130332e3232322e3137382e302f32342d3234203d3e203538343636.roa (hash: F41StT+x2rlWXOQVNKcm+wNnMgPZjhcz7G5e31rQ98c=)
                          14: 3130332e3231352e34342e302f32342d3234203d3e203538343636.roa (hash: aTIutstV7nnOrlPVa9rL0oVDFBjtwfzvlvl2eoyD1/8=)
                          15: 34352e3235312e35322e302f32342d3234203d3e203633353939.roa (hash: J5ttVDSRteWIi4hwKsChc1z51WL7/hz22Kunm15KqPk=)
                          16: 3130332e3232322e3137362e302f32322d3232203d3e203538343636.roa (hash: UpPEAYdcHSdgSDgWM1Xgq+oFeYVQGymiRyGhcR0Lp6Y=)
                          17: 3130332e3231352e34362e302f32342d3234203d3e203633353939.roa (hash: lCKeTzCngwtaI2otW+3pf3dT4E8FfBmqb7nBEm4iEO0=)
                          18: 3130332e38342e31362e302f32342d3234203d3e203633353939.roa (hash: b4swGTnagQiiHyws9QCt7f/EiuwxqkWDoYa89SJ+Pro=)
                          19: 34352e3235312e35332e302f32342d3234203d3e203633353939.roa (hash: gpdB2M4QzC5+FVSJ96SLxf+q0nMlU6vsNa1+V19UGpU=)
                          20: 3130332e3232322e3137372e302f32342d3234203d3e203538343636.roa (hash: sH7OowcFHJCcPwvZJv25D4lUlZf+T7s/iYMS2TGzZjc=)
                          21: 3130332e38342e31382e302f32342d3234203d3e203633353939.roa (hash: 3DmQOstdoBvJ2hoZgDbRJT6QPLY4tMgVKWUBkWPRlxo=)
                          22: 3130332e38342e31372e302f32342d3234203d3e203633353939.roa (hash: 08vQYNuWTP9OAw5cshG0cE68oQpzGq6+3rF8HhD3PJY=)
                          23: 3130332e3232322e3137362e302f32342d3234203d3e203538343636.roa (hash: XB81JUcmyZM4a4Aj4m+xpC4HUoBeeoNN9kOjOp5xSlU=)
                          24: 3130332e38392e3131332e302f32342d3234203d3e203633353939.roa (hash: hQKB7wKD7sK/SrxmBN5jMLs19OSDy2v58Jdv0HOGrB4=)
                          25: 4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl (hash: Ci7k7tcLGmXeNZMIuRF65Cx11wPWzYWqJGQntzS+44E=)
                          26: 3130332e3231352e34372e302f32342d3234203d3e203633353939.roa (hash: u/vlygKRp4uqaQ1eQKS9c4Kf1g9VgGjmp1fspJX/cVs=)
                          27: 3130332e38392e3131322e302f32342d3234203d3e203633353939.roa (hash: qeNecZYzzDOdHNQ7OI1FGeTPwXb6OHSlmtGAyhOcfnc=)
                          28: 34352e3235312e35352e302f32342d3234203d3e203633353939.roa (hash: Jeg+X5mimydK7xcUiFtmKKbOa2PTH3bkxmXeoztyTKI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 16:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:69:20:88:43:45:af:08:37:88:df:d7:58:13:b7:c6:46:88:50:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
        Validity
            Not Before: Jul 24 13:41:20 2026 GMT
            Not After : Jul 25 16:07:20 2026 GMT
        Subject: CN=3AC5F59373982C99D2CD41F10FDFC0B1D914D58C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f4:3e:64:d4:cf:cf:23:b0:4e:b4:6c:a3:96:
                    5d:ce:d9:de:d9:68:fb:d4:0b:61:e6:76:e1:c1:a6:
                    83:b1:32:90:2a:0e:d0:11:38:a9:a5:9f:68:18:9c:
                    ae:20:a4:c6:f1:05:7d:3f:76:c6:cc:12:8f:2f:50:
                    c4:77:98:50:42:5b:64:7a:e5:c5:7d:da:e1:bd:23:
                    1c:20:50:c5:11:9e:76:21:bf:ff:4c:53:c8:58:55:
                    e6:e3:05:b9:46:8f:b5:6f:1d:fb:7e:9d:56:e5:c5:
                    f1:76:06:b8:59:69:79:05:ed:2e:e6:ba:4b:da:7b:
                    c4:c8:4f:b2:bc:c8:33:c4:e7:4e:f2:56:7b:cb:7b:
                    b7:90:68:3d:4a:9a:ff:71:62:4f:d2:01:e6:17:47:
                    b7:81:e3:2b:f7:bf:20:dc:1b:62:3d:91:9a:0b:00:
                    79:de:66:fa:74:d4:ad:fb:a3:7f:4b:c9:d0:5b:b3:
                    28:82:01:14:4f:67:dc:78:33:36:44:03:47:4a:56:
                    39:8f:ab:14:a6:1d:fe:25:4e:bb:5b:a6:05:6a:4c:
                    22:8f:33:03:7a:db:aa:c6:af:64:e4:75:81:b4:80:
                    be:e3:2c:66:d5:f9:d7:ac:d6:63:63:8c:e1:86:c4:
                    34:6f:29:f2:b5:c2:94:29:53:38:e7:3d:af:fc:48:
                    ad:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C5:F5:93:73:98:2C:99:D2:CD:41:F1:0F:DF:C0:B1:D9:14:D5:8C
            X509v3 Authority Key Identifier:
                keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:48:da:04:ee:41:9d:0c:0a:a6:1a:e4:d9:cb:98:29:d8:c6:
         43:43:63:44:94:b0:c5:16:37:d1:53:e8:54:66:2e:96:95:93:
         16:cc:52:f2:27:d4:26:b1:8b:1b:2a:14:59:ed:bb:ed:72:66:
         43:0f:ca:e3:c5:8b:58:0a:2b:08:3d:ad:bd:51:2c:1e:a5:c9:
         d1:6b:b9:0c:da:f1:4a:ca:04:9f:73:fa:b3:0c:ef:4f:64:64:
         57:ee:4a:75:f4:ed:f9:a3:37:39:6f:5d:5e:da:2a:02:65:1a:
         ca:17:35:29:41:99:da:8c:8e:c1:9f:36:f1:2b:9f:9c:b9:9e:
         67:ef:3a:a5:21:10:b0:80:77:40:3b:44:44:2d:33:39:c3:9b:
         fd:4c:94:93:d8:1c:95:e6:75:b5:7a:00:f4:bc:bb:91:ad:a4:
         f6:c3:84:d6:24:5b:e7:4e:39:b0:ac:06:10:5e:a6:07:a1:9e:
         d6:55:b3:bc:c9:1f:0c:94:9c:59:e8:af:0d:e0:7e:68:b1:a2:
         a8:b8:ab:e6:a9:32:76:75:e1:45:35:0c:e5:68:0e:f4:e4:02:
         dd:f4:23:f0:19:4e:38:9c:bb:62:29:25:bc:eb:4d:3e:fe:42:
         13:7d:ee:b9:31:f7:e5:f1:4a:3d:2d:4c:84:61:fc:87:e4:80:
         23:ed:00:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:27:45 2026 by rpki-client