Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
File:                     1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft (raw, json)
Hash identifier:          l9/T09z1FliQTc9U9z65OfOOsESgYgazbTwtjuu8ZNA=
Subject key identifier:   BE:93:71:4E:4A:66:D5:64:57:D3:FC:5F:9B:C9:EB:5E:2F:80:C8:82
Authority key identifier: 1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1
Certificate issuer:       /CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1
Certificate serial:       25F66FDE61CEDEAA96C8011B4E82C5442E4E9F96
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
Manifest number:          25
Signing time:             Wed 13 May 2026 08:51:03 +0000
Manifest this update:     Wed 13 May 2026 08:46:03 +0000
Manifest next update:     Thu 14 May 2026 09:12:03 +0000
Files and hashes:         1: 34332e3234322e39362e302f32322d3332203d3e20313339313138.roa (hash: VDMcp5l8FistRmUvRq8PMpiAPTDY6t5oa9rYeoWoY2o=)
                          2: 1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl (hash: 1NHjK9ggAvNbz9FoYGFhNGmjIny/xTd1jfBTPQVHJu0=)
                          3: 3130332e3135362e36382e302f32332d3332203d3e20313339313138.roa (hash: JJeH7/e0S+vcP9rIL80aRLn8d98yMXZivh1TWBvd1eg=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f6:6f:de:61:ce:de:aa:96:c8:01:1b:4e:82:c5:44:2e:4e:9f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1
        Validity
            Not Before: May 13 08:46:03 2026 GMT
            Not After : May 14 09:12:03 2026 GMT
        Subject: CN=BE93714E4A66D56457D3FC5F9BC9EB5E2F80C882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:57:db:15:61:b1:96:61:4d:4f:23:99:38:d2:
                    21:78:5b:f0:7c:47:70:40:4f:dd:33:7d:dd:b1:ea:
                    98:d7:0a:65:f6:6a:02:f9:9e:a9:83:5c:75:f5:30:
                    d9:ed:e4:08:e9:0a:97:d5:4a:8e:21:b1:b2:9c:35:
                    9e:9a:c0:ed:a9:9e:e4:3d:4c:e7:c3:d2:78:57:f5:
                    66:0b:9b:cf:9a:d1:14:9a:ed:0d:b8:87:69:7e:61:
                    1f:cd:04:82:0e:46:eb:51:85:77:58:a4:e3:a3:7a:
                    d6:c6:43:8a:37:28:15:62:23:e7:c4:04:d6:e7:74:
                    54:36:fe:d3:45:d5:c8:3d:7b:d0:90:74:d9:d4:ea:
                    b1:96:d6:af:50:a4:42:1b:44:a2:cd:ec:c1:92:2e:
                    82:01:79:6c:7d:43:7e:10:20:23:ba:2b:c0:fe:f1:
                    74:7b:f9:0d:3f:8b:73:e8:35:05:50:a1:42:8b:e3:
                    21:0e:51:9c:81:7c:69:80:01:c6:6d:99:13:33:57:
                    6a:56:eb:62:97:78:a0:0a:09:77:2c:73:7f:01:b9:
                    a1:ef:df:87:f6:27:03:08:f8:65:3e:7d:f5:1d:b8:
                    57:28:25:40:c6:28:30:e7:f7:b8:ad:9c:4c:7c:db:
                    fa:64:8d:ce:65:88:30:de:20:56:f5:13:fc:76:f8:
                    d3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:93:71:4E:4A:66:D5:64:57:D3:FC:5F:9B:C9:EB:5E:2F:80:C8:82
            X509v3 Authority Key Identifier:
                keyid:1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ae:e3:24:cb:b5:34:8e:3f:64:ef:95:b8:9f:5f:92:7c:90:
         5e:69:21:ff:75:78:84:82:72:9e:6f:c7:04:b9:ed:83:86:17:
         28:f4:d0:57:25:b6:40:c9:1b:f3:ce:d4:7f:d0:f9:f9:bf:a3:
         61:11:2a:05:d6:b9:09:5b:a3:69:1a:9b:65:53:bf:cf:31:f9:
         1c:99:31:ff:55:f9:f5:39:89:43:c7:36:1b:90:3d:c5:85:7e:
         1c:2a:c7:57:33:b2:4a:45:cd:20:a2:93:03:35:b3:af:33:92:
         fa:91:2d:7b:be:7c:f1:e9:21:76:99:8a:c9:f5:8c:d7:3e:a7:
         62:2e:4e:de:cd:f4:6c:04:28:4c:a3:d6:0c:12:a8:1b:34:a7:
         53:de:19:87:8e:9e:3b:31:38:5f:41:58:c9:1e:9f:de:6d:cb:
         2b:d7:f8:29:89:d2:f2:2c:8d:63:58:ce:d3:a6:90:2d:a2:24:
         4a:c7:20:6f:fe:8b:d9:a6:77:9b:cf:1b:cb:26:6e:57:c0:7f:
         80:ae:1a:12:bb:93:38:5c:a0:eb:a8:21:59:cf:ee:cf:e5:9e:
         2e:0a:a1:a6:59:60:b6:89:31:61:17:64:f9:23:48:db:3e:47:
         96:a3:2e:f2:38:42:eb:be:23:63:35:53:8c:2c:e7:8f:fa:ea:
         08:e5:57:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:07 2026 by rpki-client