Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft
File:                     44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft (raw, json)
Hash identifier:          Ja7ecG6G6T3vcyVeQFuJe4NW83mDBtl4NkTayhNEwQw=
Subject key identifier:   4E:8D:90:B0:71:9F:91:39:02:B6:D7:D5:D8:5B:86:B8:6A:DD:B9:A3
Authority key identifier: 44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98
Certificate issuer:       /CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098
Certificate serial:       7A5C681035992BD31E3C703BC65105569126A61B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft
Manifest number:          83
Signing time:             Fri 24 Jul 2026 07:25:36 +0000
Manifest this update:     Fri 24 Jul 2026 07:20:36 +0000
Manifest next update:     Sat 25 Jul 2026 08:42:36 +0000
Files and hashes:         1: 3232332e32372e3138342e302f32322d3234203d3e203137363232.roa (hash: EZct4Zms1fr5Cv5AHLRYsjjpW0LFyhDM8Nq7/BMcOeA=)
                          2: 44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl (hash: xBxCkiLaXtkrP+GfVDFiY0I8Kyw2v6aqGxSOQ3XFucM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5c:68:10:35:99:2b:d3:1e:3c:70:3b:c6:51:05:56:91:26:a6:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098
        Validity
            Not Before: Jul 24 07:20:36 2026 GMT
            Not After : Jul 25 08:42:36 2026 GMT
        Subject: CN=4E8D90B0719F913902B6D7D5D85B86B86ADDB9A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fd:ef:68:01:28:6d:05:47:fb:78:aa:86:a0:
                    96:da:46:3c:9e:d1:92:1b:26:6e:6c:60:21:cb:a5:
                    ff:ef:2f:9e:fe:1f:48:27:dd:f0:e8:62:7d:8e:d0:
                    aa:3d:75:02:28:6d:62:8f:e9:cc:8f:0f:c9:96:bd:
                    4c:6d:c5:fe:6e:dd:4a:b4:62:d2:45:08:d7:73:93:
                    03:d9:31:88:8b:ef:3f:35:44:2d:c9:b5:6d:c4:d1:
                    33:38:28:f2:7b:e1:51:bb:1f:1d:db:00:68:b8:4c:
                    b4:32:d7:38:8c:10:e5:1b:8a:08:ec:6f:78:b5:0c:
                    d9:02:7f:8a:21:a9:b0:8a:6f:be:e7:ca:9b:f5:26:
                    3f:1e:c8:5f:8e:72:86:70:61:5b:3c:c5:25:5b:ef:
                    f4:0c:81:06:60:40:da:65:ce:c7:ac:81:fb:5f:9b:
                    97:1c:4d:cf:7b:d5:ee:2c:2f:4a:97:50:13:29:79:
                    2e:18:e0:d2:1d:bb:19:18:7e:a6:e9:c6:ea:c3:28:
                    eb:77:2f:96:1a:ea:09:c3:3e:c7:95:24:1c:75:a8:
                    0e:e8:a5:8e:24:17:74:fa:98:44:d0:32:d3:10:03:
                    a5:98:05:1c:86:62:3b:9c:84:92:f0:4f:08:7d:0e:
                    d1:d8:c6:29:0e:4a:66:7c:84:f6:c7:97:90:54:0f:
                    e7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8D:90:B0:71:9F:91:39:02:B6:D7:D5:D8:5B:86:B8:6A:DD:B9:A3
            X509v3 Authority Key Identifier:
                keyid:44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:df:5b:9e:e1:08:2d:d5:2a:ee:97:98:8c:16:0c:bf:b5:51:
         4f:32:d2:1a:6a:cc:ed:7d:4b:a6:f3:45:e9:0b:ef:a4:1b:2e:
         fd:6c:40:ea:d9:3f:5d:49:c1:30:1a:a9:12:70:b1:9e:e2:e2:
         9c:a9:41:12:99:d3:1d:d8:60:8c:27:17:e7:03:59:63:5b:c2:
         12:2e:ab:cf:a4:3c:d4:81:8b:eb:c5:4e:98:37:6d:e3:8f:f7:
         56:09:75:37:02:c7:b3:60:3e:71:e5:38:3f:70:66:92:02:5a:
         f5:a5:d7:cf:2b:08:3d:88:5a:26:66:b6:6a:f7:96:0d:f3:ae:
         c7:24:6d:57:a8:b2:48:57:a2:93:08:ee:f6:f4:42:b6:32:80:
         80:af:70:63:eb:79:a2:be:81:b2:76:8f:ea:71:43:4b:7e:7c:
         a6:ae:d7:c8:77:8a:69:cb:5e:36:2b:0c:f1:16:93:48:ec:d7:
         87:ba:be:f2:b8:3c:09:b0:90:53:25:df:89:20:b6:25:aa:de:
         ff:a5:03:52:39:bc:a1:7e:dd:20:d7:e6:34:ec:5f:e7:67:04:
         c7:68:98:28:bc:06:e5:e2:2f:ad:ee:9a:fd:30:23:fe:2b:f6:
         42:54:9f:0b:3d:66:08:4d:f8:bb:59:bd:65:d2:2f:a5:31:39:
         3e:e7:9f:9e
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUelxoEDWZK9MePHA7xlEFVpEmphswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQwOTQ5NDhDNkUzRDMyQTFBNTlCRTY3OTVDRDhBMkEz
QTUyODA5ODAeFw0yNjA3MjQwNzIwMzZaFw0yNjA3MjUwODQyMzZaMDMxMTAvBgNV
BAMTKDRFOEQ5MEIwNzE5RjkxMzkwMkI2RDdENUQ4NUI4NkI4NkFEREI5QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn/e9oAShtBUf7eKqGoJbaRjye
0ZIbJm5sYCHLpf/vL57+H0gn3fDoYn2O0Ko9dQIobWKP6cyPD8mWvUxtxf5u3Uq0
YtJFCNdzkwPZMYiL7z81RC3JtW3E0TM4KPJ74VG7Hx3bAGi4TLQy1ziMEOUbigjs
b3i1DNkCf4ohqbCKb77nypv1Jj8eyF+OcoZwYVs8xSVb7/QMgQZgQNplzsesgftf
m5ccTc971e4sL0qXUBMpeS4Y4NIduxkYfqbpxurDKOt3L5Ya6gnDPseVJBx1qA7o
pY4kF3T6mETQMtMQA6WYBRyGYjuchJLwTwh9DtHYxikOSmZ8hPbHl5BUD+c9AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUTo2QsHGfkTkCttfV2FuGuGrduaMwHwYDVR0j
BBgwFoAURAlJSMbj0yoaWb5nlc2KKjpSgJgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTg5MjA3NTE3Mzc3MzMxNS8wLzQ0MDk0OTQ4QzZFM0QzMkExQTU5QkU2Nzk1Q0Q4
QTJBM0E1MjgwOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDQwOTQ5NDhDNkUzRDMyQTFBNTlCRTY3OTVDRDhBMkEzQTUyODA5OC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTk4OTIwNzUxNzM3NzMzMTUvMC80NDA5NDk0OEM2RTNE
MzJBMUE1OUJFNjc5NUNEOEEyQTNBNTI4MDk4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMd9bnuEILdUq
7peYjBYMv7VRTzLSGmrM7X1LpvNF6QvvpBsu/WxA6tk/XUnBMBqpEnCxnuLinKlB
EpnTHdhgjCcX5wNZY1vCEi6rz6Q81IGL68VOmDdt44/3Vgl1NwLHs2A+ceU4P3Bm
kgJa9aXXzysIPYhaJma2aveWDfOuxyRtV6iySFeikwju9vRCtjKAgK9wY+t5or6B
snaP6nFDS358pq7XyHeKacteNisM8RaTSOzXh7q+8rg8CbCQUyXfiSC2Jare/6UD
Ujm8oX7dINfmNOxf52cEx2iYKLwG5eIvre6a/TAj/iv2QlSfCz1mCE34u1m9ZdIv
pTE5Puefng==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:08:15 2026 by rpki-client