Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft
File:                     C99930256B2681B676C3F969B9E070208697E59E.mft (raw, json)
Hash identifier:          asquKp1RPqSX97KdGwSYZRLx99Pzv1b1MTwnVPGVKCU=
Subject key identifier:   8D:3D:ED:DE:6E:7E:E4:76:48:62:4D:D8:97:3F:89:1C:E7:78:E1:69
Authority key identifier: C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E
Certificate issuer:       /CN=C99930256B2681B676C3F969B9E070208697E59E
Certificate serial:       06183D57049C4052B7094EDFFAA624717005D643
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft
Manifest number:          82
Signing time:             Fri 24 Jul 2026 11:06:03 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:03 +0000
Manifest next update:     Sat 25 Jul 2026 12:56:03 +0000
Files and hashes:         1: 34352e3235342e32302e302f32322d3232203d3e20313333373734.roa (hash: ZJloOk6sDE753o+7/mUwoLrIvMNMTCjFQ6yK9+8AJEo=)
                          2: C99930256B2681B676C3F969B9E070208697E59E.crl (hash: OHvq5h7j8Kb5BiF5CA7Wxwq4daQPjfGQYIRtl5uSkaA=)
                          3: 3130332e3232332e3133322e302f32322d3232203d3e20313333373734.roa (hash: vN8yHwI46fYA/l1ygz8W/PzYzDVLVvVRqEe7rahUo3g=)
                          4: 3130332e3232332e3133322e302f32342d3234203d3e20313333373734.roa (hash: zyZSIrZQJV+xvNXDp3BEVkPjoRuBompddy6z7lE4MrA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:18:3d:57:04:9c:40:52:b7:09:4e:df:fa:a6:24:71:70:05:d6:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C99930256B2681B676C3F969B9E070208697E59E
        Validity
            Not Before: Jul 24 11:01:03 2026 GMT
            Not After : Jul 25 12:56:03 2026 GMT
        Subject: CN=8D3DEDDE6E7EE47648624DD8973F891CE778E169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:ee:b1:f1:ef:77:81:fa:1a:22:a5:5a:14:
                    d2:c9:78:4b:6b:68:02:09:a5:43:a8:e6:89:aa:60:
                    31:a8:1c:a9:3f:29:07:b0:89:1c:e0:ee:d2:b8:c4:
                    ba:5e:6a:93:b2:97:20:ee:e9:3b:db:be:c8:da:7d:
                    92:13:e0:48:b9:20:67:64:59:36:d4:3b:83:67:43:
                    a6:e7:ac:46:62:fd:d3:90:27:8c:95:7d:a0:d5:0e:
                    e2:37:15:e7:34:78:a3:88:4f:ce:79:51:36:b7:34:
                    ad:f9:2c:4d:6f:9f:51:a3:44:db:da:74:95:64:19:
                    4a:1d:09:b8:ab:0f:c8:fd:e7:ce:87:1b:60:e3:f5:
                    06:1f:83:30:31:15:ff:76:7b:81:0a:4c:76:9c:99:
                    eb:6a:20:40:23:29:a3:e6:2a:f3:cf:cc:bd:22:9f:
                    e2:b3:75:0a:96:e9:60:f7:59:35:83:4b:44:47:4a:
                    e4:0c:7b:b3:ca:af:81:46:d1:ed:97:1c:e3:15:f3:
                    10:3a:24:9c:2c:24:9b:16:ee:81:57:74:09:11:85:
                    01:35:35:df:06:5d:f6:72:bd:26:f1:8b:9f:69:0e:
                    be:4f:a8:ad:3a:87:ee:9b:bd:7b:0b:19:ed:99:c7:
                    ff:07:ae:ee:09:52:16:00:5d:2f:54:fb:b3:37:67:
                    20:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3D:ED:DE:6E:7E:E4:76:48:62:4D:D8:97:3F:89:1C:E7:78:E1:69
            X509v3 Authority Key Identifier:
                keyid:C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:99:41:8b:4f:57:1d:80:51:6e:d5:d1:c0:94:de:27:72:e1:
         f6:65:6e:a1:c4:7b:b4:14:52:f4:6e:db:36:d4:64:43:52:6e:
         6b:dd:09:e0:f5:a7:5d:b3:ad:9f:b6:9a:c2:dd:78:60:f8:52:
         f8:4d:c2:8f:1e:b3:d8:ad:c4:26:fe:ac:8c:95:76:d2:b7:a9:
         3f:3d:61:44:57:16:c8:a7:0a:e6:fe:2d:e2:db:38:19:3d:9e:
         81:53:3e:ad:f8:16:96:c4:f4:42:49:3f:bb:b0:38:5e:71:4f:
         3b:21:c4:c9:84:51:92:36:98:ae:cb:5b:19:cf:47:02:2c:0a:
         8f:08:d5:8b:65:9b:85:ef:15:37:10:74:73:40:a3:58:9c:f4:
         ec:c3:1d:2f:70:a7:ee:3e:a2:38:ba:1b:7a:8c:65:80:da:ba:
         45:9d:1c:7a:e4:ba:6f:49:45:67:31:f5:04:db:9e:a7:46:c1:
         0a:51:bf:0b:76:90:a0:47:82:3e:6e:23:ce:c7:d0:d6:00:89:
         cc:77:f2:66:4b:a7:b5:a7:a3:be:46:f5:6c:b3:4b:94:12:ae:
         49:4f:64:4d:8e:70:bf:49:15:d2:9e:0a:f5:24:47:fe:12:65:
         b6:a5:aa:1d:e3:f1:38:45:91:87:47:40:c9:5f:62:a9:f1:d4:
         da:27:77:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:38:15 2026 by rpki-client