Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft
File:                     E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft (raw, json)
Hash identifier:          PZ1MwWaVn4ZuBfqrv1ZIn5TQkRuFGPGvEjv8yZnXT68=
Subject key identifier:   34:4C:38:D1:09:9D:33:30:96:CD:DD:FC:8F:B4:61:08:EF:02:51:7C
Authority key identifier: E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7
Certificate issuer:       /CN=E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7
Certificate serial:       7290D74539CCD760162B6FDAB08E67945B36FB80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft
Manifest number:          27
Signing time:             Wed 13 May 2026 08:21:02 +0000
Manifest this update:     Wed 13 May 2026 08:16:02 +0000
Manifest next update:     Thu 14 May 2026 11:13:02 +0000
Files and hashes:         1: 3130332e3137312e3136362e302f32342d3332203d3e20313333313135.roa (hash: 9haZlqw9n325weK408mIds9agQ45PHZJ+Cb9a2drg54=)
                          2: E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl (hash: MbglUZWC0Q2Oex7wapgdRQbjItLBr/QoAbeboLYusns=)
                          3: 3130332e3137312e3136372e302f32342d3332203d3e20313333313135.roa (hash: eL6eXD6DpEFCAEoVCkipZcpj+NAT0Z6XGY3UwdJgJzM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:90:d7:45:39:cc:d7:60:16:2b:6f:da:b0:8e:67:94:5b:36:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7
        Validity
            Not Before: May 13 08:16:02 2026 GMT
            Not After : May 14 11:13:02 2026 GMT
        Subject: CN=344C38D1099D333096CDDDFC8FB46108EF02517C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cb:d6:b9:c3:e4:08:25:4c:bd:16:7f:09:99:
                    38:f6:7b:29:c2:a6:86:77:01:81:90:61:13:1e:9e:
                    12:55:a3:99:6c:75:1f:2f:e9:49:1e:1d:d8:ef:28:
                    98:01:4c:29:46:dc:02:0d:8c:49:24:eb:dc:1d:85:
                    41:ac:3b:38:5e:b0:89:5e:eb:47:22:45:d5:a5:13:
                    ec:9b:29:6c:c1:55:de:1e:5b:15:ea:c3:11:b4:ee:
                    42:32:86:e5:25:46:c3:21:44:d6:b1:d1:10:5a:84:
                    48:3f:ad:b6:ec:28:4f:73:78:25:f1:15:5d:8f:00:
                    85:19:ed:0c:13:16:63:6f:cb:8d:22:67:0e:df:5e:
                    36:d6:56:42:a1:0d:65:a3:6b:73:e9:78:a9:f0:30:
                    d9:d8:08:61:fc:21:14:9b:5d:3e:96:6f:40:85:76:
                    fd:5d:5a:08:39:69:20:74:0b:51:f5:6a:23:11:67:
                    8a:3c:88:d1:40:9b:40:39:8f:7d:96:5c:47:4b:5a:
                    a5:63:4e:66:92:3f:38:c0:b1:8f:de:00:c4:1a:c2:
                    fa:66:fc:7a:3b:91:6a:28:80:97:7f:21:10:10:30:
                    83:c1:49:2c:5f:af:ed:3b:64:34:9d:fc:76:23:f4:
                    2f:1e:b0:4a:3a:42:81:9d:9a:a2:5a:ae:97:17:5e:
                    b1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4C:38:D1:09:9D:33:30:96:CD:DD:FC:8F:B4:61:08:EF:02:51:7C
            X509v3 Authority Key Identifier:
                keyid:E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b3:16:d8:c2:b4:4b:aa:9e:f4:a1:f1:f9:2a:3f:6d:cf:43:
         ef:90:c1:f1:8e:1d:b2:f6:a6:14:21:43:67:a4:2f:ea:d3:0a:
         85:82:74:a0:82:59:ac:2a:f9:b4:06:bf:6e:21:45:de:66:d7:
         54:30:bb:c2:65:1e:31:cb:ab:9e:17:b0:f7:71:8a:51:91:f1:
         0b:08:21:ec:b7:1c:b2:30:28:d0:56:3f:6d:39:7e:59:ef:f1:
         21:e4:5d:68:39:30:b7:4f:0c:3d:40:d3:38:fa:91:24:3d:b4:
         a3:d5:a5:df:6b:cc:a5:ed:84:d6:27:f3:96:d4:02:29:64:a1:
         89:9c:35:b6:7b:12:f8:8e:65:0c:69:17:22:62:00:b2:af:b0:
         46:82:61:ec:0e:60:b8:e3:af:ff:1e:49:8a:fd:72:b8:74:34:
         44:8a:8d:21:a1:78:f6:61:12:20:09:45:cc:ec:05:fc:4a:12:
         49:3d:cf:a4:c4:18:7b:68:a3:e6:82:0c:cd:df:84:ee:a6:f1:
         91:bf:7a:15:53:3b:cd:bd:fa:fc:3d:55:b2:59:ef:37:42:a7:
         98:f7:cc:c0:dd:fd:8e:7d:6a:6c:8a:11:e9:e9:2d:97:0a:b8:
         e7:65:e5:c3:7a:7d:44:0e:77:ea:b7:64:37:4f:5c:c8:52:bb:
         11:62:b6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:09:24 2026 by rpki-client